last executing test programs: 3m30.137946779s ago: executing program 4 (id=453): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/75, 0x0}) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r3}) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x2000c000) 2m57.683334294s ago: executing program 4 (id=453): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/75, 0x0}) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r3}) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x2000c000) 2m19.372908418s ago: executing program 4 (id=453): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/75, 0x0}) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r3}) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x2000c000) 1m40.571372904s ago: executing program 4 (id=453): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/75, 0x0}) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r3}) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x2000c000) 1m5.176128884s ago: executing program 4 (id=453): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/75, 0x0}) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r3}) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x2000c000) 10.230372871s ago: executing program 1 (id=926): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000180), 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d12, &(0x7f0000000240)=0x58) r5 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/667, 0xe) fallocate(r5, 0x0, 0x0, 0x400001) fcntl$addseals(r5, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) pselect6(0x40, &(0x7f0000000080)={0x8, 0x3, 0x8, 0x2, 0x6, 0x0, 0x3, 0x400}, 0x0, 0x0, 0x0, 0x0) 9.131269647s ago: executing program 2 (id=928): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_io_uring_setup(0x2ff5, &(0x7f0000000080)={0x0, 0x188f, 0x10100, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000080)={0x3, 0x8}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280200001900010000000000fbdbdf251d0109005000108049002100c9a7befe6f6d645a1a11b81b2c4b10fb4f5fdaf9331c7510e19feecb90ee6bb49fdb1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fde58b000000c4010680c097"], 0x228}, 0x1, 0x0, 0x0, 0x5}, 0x0) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x80}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_SET_TIME(r9, 0x4024700a, &(0x7f0000000000)={0x3a, 0x20, 0x14, 0x18, 0x9, 0x63, 0x4, 0xf5, 0x1}) 9.057597644s ago: executing program 1 (id=929): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa4000000", @ANYRES32], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000000700)=ANY=[@ANYBLOB="0180c200000000000000000086dd60f2a40000442f00fe800000000000000000000000000000fe8000000000000000000000000000aa04206558"], 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000300)=""/132, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r6, &(0x7f0000001000)={&(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)="cf5a6c3a", 0x4}], 0x1, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x18}, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) r7 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, 0x0) 8.296103764s ago: executing program 4 (id=453): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/75, 0x0}) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r3}) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x2000c000) 8.150115958s ago: executing program 2 (id=933): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x800, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_vhci(0x0, 0x24) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) ioprio_set$uid(0x3, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000194c0)='numa_maps\x00') pread64(r5, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) 7.145573275s ago: executing program 1 (id=935): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000021000010000000003b810000850000006d000000850000005000000095", @ANYRESDEC=0x0, @ANYRES8, @ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='jbd2_handle_stats\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1c0000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000002, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) openat$cgroup_ro(r1, &(0x7f0000000340)='blkio.bfq.idle_time\x00', 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffc, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) time(0xfffffffffffffffc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000706010300000000000000000000000005000100a5ca9177"], 0x1c}}, 0x0) 7.138614098s ago: executing program 3 (id=936): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100187979b41f53901e753832a17688898abbbbbbbbbbbb"]) ioctl$FIONCLEX(r0, 0x5450) 7.008561393s ago: executing program 2 (id=937): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800"], 0x2c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000280)={'lo\x00'}) 5.548687387s ago: executing program 1 (id=938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000280)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') socket$igmp(0x2, 0x3, 0x2) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000000)=[{r7}], 0x1, 0x0, 0x0, 0x0) close(r6) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x11) socket$kcm(0x10, 0x2, 0x4) fchdir(r4) sendmmsg$unix(r3, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xe03f0300}}], 0x1, 0x0) 5.095536392s ago: executing program 3 (id=940): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x80) r0 = gettid() tkill(r0, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x8}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000005c0)="bd91b3c39406088f409066a5d963af690d41f265188745cb97c2d39d8e435b084d215c8a5ffb0d560b891a7103f7dcf97593afda7dbc6b0fdce560f4928ec4eca5c7c84bdccd5d1258a84db86dc60963ab6a9c63d8d829a5da94b3e25169a08580fbb0bcbc817aa102daa69fcc0e9c03f87c27daf0e13f837095eeab8d58adb06db2b0307e860404995b5e629a69b8d3c8efe299e70e5f11a9074e30c6badc8f99fdf1e22c05a6ff42e3ca83883fb8286f43352f0d5da9be80060e154d2eef135e78ac153921487bb3d7", 0xca}], 0x40}, 0x4000000) socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x7}, {0x3, 0x8}, {0xd, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xa3cc}, 'p'}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x54}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000480)=[{{&(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @local}, 0x1, 0x3, 0x3}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="e4feb8479a184a231b900ff058702a5bdc5310527405db2fabfd192c18d06da2fd7e020a019dc9531238d23bc5bdbb7cee3d2defa930f431a892000ae8a133c6f7d66d84859e037d39117d4519026df6c86445aeacd8cea4eceedd206cee7a1d5caae7548e0123627ba386509db7aad9f61104ba3dbdd5cdd09e3c1ad90f26ce2d1d9803bbe456f6a9ecaeeaf5ab887e67b0187fe64741aa596d9c26b70c8e171b636d7fc4057265ea0341f544297f", 0xaf}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x5a8}}], 0x1, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x32600) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200) 4.317237526s ago: executing program 0 (id=941): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000180), 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d12, &(0x7f0000000240)=0x58) r5 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/667, 0xe) fallocate(r5, 0x0, 0x0, 0x400001) fcntl$addseals(r5, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) pselect6(0x40, &(0x7f0000000080)={0x8, 0x3, 0x8, 0x2, 0x6, 0x0, 0x3, 0x400}, 0x0, 0x0, 0x0, 0x0) 4.031210845s ago: executing program 1 (id=942): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x4694, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x4668, 0x2, [@TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x73d8}]}, @TCA_FW_POLICE={0x450, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x6, 0x8000, 0x8, 0x8, 0xfffffff7, 0x40, 0x0, 0x1, 0x2, 0x9, 0x8, 0x24000, 0x9, 0x1, 0x1, 0x7, 0xfffffffa, 0x6, 0x0, 0x1, 0x47, 0xfffffffa, 0x7dc, 0xb29b, 0xb, 0xb8, 0x0, 0x9, 0x6f, 0x6, 0xece, 0x3, 0x4, 0x3ff, 0x6, 0x9, 0x8, 0x80000001, 0x5, 0x1, 0x0, 0x3, 0x1, 0x227e, 0x9c3, 0x7180, 0x7, 0x2, 0x9, 0x0, 0xf, 0x2, 0x3, 0x0, 0x8, 0x0, 0x5, 0x7ebe21e5, 0x7, 0xf, 0x6, 0x70, 0x6, 0x5, 0x2, 0x0, 0xa, 0x1, 0x1, 0x10001, 0x5, 0x4, 0x9, 0xc000000, 0x4, 0x27, 0xe28, 0x2, 0x200, 0x7fffffff, 0x0, 0xff, 0x8, 0xd, 0x0, 0x72f5, 0x16, 0x71, 0x1, 0x2, 0x1, 0xe0c, 0x80000001, 0xfffffff9, 0x1000, 0x8001, 0x8, 0x100, 0x2, 0xfffffff8, 0x3, 0x0, 0x6, 0x2, 0x400, 0x7, 0x80, 0x2, 0x8, 0xfffffffd, 0x7, 0x1ff, 0x0, 0x1ff, 0x1, 0x1, 0x9c4, 0x5, 0x100, 0x2, 0x8, 0x2c, 0x10000, 0x19, 0x8000, 0x8, 0x2, 0xc, 0x7, 0x7, 0x40, 0x914, 0x3, 0x4d09, 0x1b6, 0x8faf, 0x6, 0xff80, 0xffff, 0x5, 0x1, 0xa0, 0x87, 0x2, 0x0, 0x5, 0x7fff, 0x800, 0x8, 0x6, 0x80000001, 0x80000001, 0x0, 0x6, 0x800, 0x8001, 0x1, 0xf47d, 0x67092e0a, 0x81, 0x7, 0x1, 0xc9, 0x9, 0x5, 0x2, 0x8, 0x3, 0x8, 0x1, 0x2, 0xfffff001, 0x100, 0x1, 0xdd8b, 0x68, 0x5, 0x45, 0xc, 0x1, 0x5, 0x80000000, 0xffffffff, 0x7fff, 0xf2, 0x401, 0x5, 0x8, 0x3, 0x38, 0x1, 0x3, 0x13e, 0x30, 0x1, 0x8000, 0x8, 0x1, 0x655, 0x1, 0x7, 0x62c9, 0x8, 0x0, 0x1a9c, 0x101, 0x4, 0x23f, 0x6, 0x7, 0xbe7, 0x10000, 0x3, 0xe92, 0x5, 0x2, 0x800, 0x6, 0x10001, 0x3, 0x8, 0x7, 0x400, 0x8, 0x400, 0x3, 0x8, 0x7fff, 0xffffffff, 0x9, 0x5, 0xfffffff8, 0xffff0000, 0x6, 0x5, 0x0, 0x7fffffff, 0x16, 0xd, 0x2b, 0x3, 0x8, 0x1e76, 0x20000000, 0x10001, 0x80, 0x303e0856, 0x6, 0xdcb, 0x800, 0x5, 0x3, 0x40, 0x6, 0x7fffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc, 0x7, 0x5, 0x8, 0x10001, {0xb, 0x0, 0x4, 0x0, 0xf}, {0x7, 0x2, 0x3, 0x4, 0x0, 0x80000000}, 0x9, 0xfffffffd, 0x2}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xb}]}, @TCA_FW_MASK={0x8, 0x5, 0x430}, @TCA_FW_ACT={0x274, 0x4, [@m_xt={0xa0, 0xc, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x52, 0x6, "736dfa437582f6a761ac6630f621dfb7207ec3fb9dbcf2e1596496bdff56d094d04cab2218a5bd9d73711522e40dab33e077fdb9a09be524920ff38f9d8151c7491e7beed60fce0b4f0eb554bb77"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_xt={0x1d0, 0x0, 0x0, 0x0, {{0x7}, {0x15c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x3e, 0x6, {0xd, 'mangle\x00', 0xb, 0x9, "22ae535e2ffe71048d3eb3b881ab8e659bdf0540"}}, @TCA_IPT_TARG={0xb0, 0x6, {0x3, 'nat\x00', 0x1, 0x4, "5fd6611969946aa7316580d675854ab9dda12cadb3ed10603f6f350ff5556ccdbe2e5af04b2d6c59f0d17680da4a00f7aab7dd3d62e6a0566d7c4a08ac4be5625e95b6d50f0e09e32a7b5611f8730cc171a96a7729d9f02064cd2410822fe43e49ba8967a7090c0318cbe6320e4137967cbb0242557701a204656f44f45d8b15346fdf67b941"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x10001}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x50, 0x6, "eef67aca165d487ac27a6d5745af1c4a15e0ae1cdc8198e3197db624a37100ea25d9f794363d4b7704a1fe7a668dcd38edd54c02bc700530f33e301fe01b6d42c59082d2907484ab6b814039"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x7}, @TCA_FW_POLICE={0x818, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffff8, 0x9, 0x1, 0x9186, 0xa, 0x7fff, 0xffffff4f, 0xee01, 0x9, 0x80000001, 0xc02, 0x4, 0x7, 0x6, 0x6, 0x7fffffff, 0x0, 0x2, 0x4, 0xfffffff9, 0x80000000, 0x7, 0xffffffff, 0x9, 0x6, 0x3f, 0x5, 0x61648803, 0x8, 0x10, 0x8, 0x3, 0x3f37, 0x200, 0x1000, 0x9, 0x5, 0x4, 0xd, 0x9, 0x10000, 0x0, 0xfffffffb, 0x8, 0x7dd7, 0x6, 0x4, 0x0, 0x6ffe, 0x4, 0x2, 0x3, 0x6, 0x5, 0x8, 0xbdc, 0x7, 0xfffff2b8, 0xae9, 0x7, 0x1, 0x4, 0xb7f, 0x8, 0x9c000000, 0x80000000, 0x80000000, 0x5, 0x9, 0xacb, 0x3, 0x401, 0x5, 0x8001, 0x1, 0x5, 0x1, 0xfffffff7, 0x1, 0x80000001, 0x7f, 0x6, 0x9, 0x5, 0x8, 0x9, 0x9, 0x570, 0x7, 0xec, 0x200, 0x0, 0x0, 0x3, 0x0, 0x40, 0x9, 0xe1, 0x101, 0x2, 0xe, 0x80, 0x9, 0x7ff, 0x81, 0xabc, 0x7, 0x4, 0x409f, 0x3, 0x0, 0x28, 0x50, 0xe, 0x0, 0x8001, 0x2, 0x8, 0x8, 0xfffffffe, 0x0, 0xd3b4, 0x7fff, 0x3, 0x3, 0x10000, 0x1, 0xfffffff9, 0x52, 0x2, 0x0, 0xffffca88, 0x1, 0x84, 0x0, 0x4, 0xc52b, 0xa, 0x9, 0x4, 0xfffffff8, 0x1000, 0xace3, 0x0, 0xa, 0x7, 0x8, 0x7, 0xf, 0xfffff1d9, 0x5, 0x800, 0x9, 0x2, 0xa0, 0x55, 0x7, 0x120000, 0x1, 0x7, 0x4, 0x1, 0xd, 0x2, 0x8, 0x3, 0x5fb, 0x4, 0x1, 0x9, 0x8, 0x4b5, 0x3, 0x7, 0x4, 0x0, 0x3, 0x3, 0x4, 0x8, 0x6, 0x1, 0xadd, 0x5, 0x8, 0x3, 0x1, 0x0, 0x0, 0xfffffff2, 0x100, 0x0, 0x80000001, 0x0, 0x4, 0xffffffff, 0xfff, 0xd0000000, 0xb, 0x489, 0x400, 0x401, 0x6, 0x0, 0x7, 0x9, 0x4, 0x1, 0x8, 0xfc86, 0x1, 0x6, 0x101, 0xb, 0x5e, 0x6, 0x4, 0x4, 0x2, 0x7, 0x0, 0x1, 0x9, 0x5, 0x4, 0x5, 0x6ef903f8, 0x8, 0x81, 0x7, 0x8, 0x5, 0x5, 0x5, 0x9, 0x0, 0x9, 0xffffffff, 0x3, 0x9f5, 0xa, 0xf0, 0x6, 0xf003, 0xcc, 0x575, 0x8001, 0x9, 0x3, 0x400, 0x4, 0x5, 0x9, 0x5, 0xfc7f7800, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x7, 0x0, 0x4, 0x2, 0x2, 0x0, 0xd, 0x7f, 0x57b, 0x9, 0xb20f, 0x5, 0x4, 0x8, 0x6, 0x6, 0x7, 0x3, 0x5, 0x3, 0x1, 0x140000, 0x7, 0x1, 0x6, 0x401, 0x6, 0x0, 0x3ff, 0x6, 0x3, 0x8, 0x4, 0x3, 0xa, 0x56d5783d, 0x6, 0xdab, 0x7ff, 0x0, 0x1400, 0x7, 0x0, 0x401, 0x6, 0x5, 0xfffffffa, 0x80000000, 0x4, 0x5, 0x2, 0x6, 0x90f, 0x8000, 0x6, 0xa, 0x2, 0x3, 0x2, 0x1, 0x6, 0x9, 0x200, 0x2, 0x6, 0x7f9, 0x6, 0x5, 0x7b, 0x8, 0x40, 0x1, 0x2, 0x7, 0x4, 0x5, 0x1, 0x22, 0x3, 0x10001, 0x2, 0x1, 0x0, 0x4, 0x0, 0x6, 0x6, 0x0, 0x6, 0x4474, 0x3, 0x910c, 0x10001, 0xffff, 0x1351, 0x4, 0x0, 0x4, 0xb0e0, 0x7, 0x7f, 0x4, 0x9, 0x3, 0x10001, 0x80, 0x7, 0x1, 0x744, 0x0, 0x18000000, 0x7, 0xc, 0x81, 0x2, 0xa2, 0x6, 0xd8b8, 0xfffffffb, 0x0, 0x10000, 0xfffffffb, 0x159, 0x8, 0x3, 0x9, 0x40000, 0x8000, 0x1, 0x1, 0xd948, 0x6, 0xfffffffb, 0x81, 0xe1a0, 0xe55d, 0x8, 0xc, 0x1, 0xbd, 0x7, 0x1, 0xf8c, 0x418c9b4, 0xfffffff9, 0xfffffffc, 0x8000000, 0x8, 0x3, 0x7, 0x5, 0x1, 0xb, 0x8, 0x1, 0xe26, 0x7f, 0x5, 0x8, 0xb, 0x4, 0x9, 0x8, 0x10, 0x3, 0x1, 0x0, 0x49044382, 0x9, 0xff, 0x8, 0xc97, 0x2, 0x6, 0x4, 0x1, 0x3f680, 0x0, 0x8, 0x5, 0x10000, 0x5, 0x80000000, 0x3, 0xd, 0x6, 0x7fff, 0x1000, 0x8, 0x5, 0x26, 0x0, 0x599c, 0x0, 0x9, 0x80000000, 0x2, 0x7fffffff, 0x510e, 0x3, 0x7, 0x10001, 0x7ff, 0xcee, 0x10001, 0x7fffffff, 0x7, 0x6, 0xffff8001, 0x3, 0x3, 0x6, 0x7, 0x8, 0x3, 0x4, 0x2, 0x6, 0x1, 0xfffffff2, 0x4, 0x9, 0xffffffff, 0x4, 0x3, 0x7fffffff, 0x8, 0x6, 0xb, 0x9, 0x8, 0x800, 0x8, 0x3, 0x7, 0x5, 0x1, 0x6, 0x10, 0x4, 0x7, 0x3a, 0xa, 0x816, 0x2, 0xbabd, 0x30b, 0xe, 0x4, 0x43, 0x293, 0x4, 0xfe, 0x1, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}]}, @TCA_FW_INDEV={0x14, 0x3, 'wlan1\x00'}, @TCA_FW_ACT={0x2320, 0x4, [@m_skbedit={0x108, 0x11, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xfff6}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xffe0}}]}, {0xbc, 0x6, "73e2100e9da8fcbf18b053e741d6c4d6a4d876bcc7f99541a767d40670c07f6c570ab8550d161b7a2d653e9922706c30c0e4e0757e2ed63ddb77cc48bdc03c62f7c18c7af82098d36ec1e9d8944a57c3816273b67d0295ecaf40fde5e9718b091e87966ba64d832159bd205783446bb715160dec83395a24fdc6a0e884f7f1ad1619e7ee624368af90c32848be89233bdd70c120150b1041f93d95f4f1e348bd8bec93dfd4f6fa875b6bb4957ebd0de08a3fb231a38be6df"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_pedit={0xf60, 0x14, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x8, 0x7fff, 0x10000000, 0xfffffffe}, 0x0, 0x6, [{0x1a, 0x0, 0x80000001, 0x400, 0x2, 0x1}]}, [{0xffffffff, 0x40, 0xffc0000, 0x9, 0x3, 0x5}, {0x2, 0xffff, 0x1, 0xf, 0xfffff85c, 0x8000}, {0x5, 0x9, 0x80000001, 0x3, 0x9, 0x6}, {0x3eac, 0x849, 0x5, 0x6, 0xd76, 0x50}, {0x2, 0x6, 0x598, 0xfffffffd, 0x800, 0xf}, {0x9, 0x400, 0x7, 0x7, 0xf9, 0x6}, {0xe, 0x9, 0x101, 0x66ca238a, 0x7fffffff, 0x7}, {0xfffffff8, 0x0, 0x3, 0x81, 0x6, 0x6}, {0x8, 0x7, 0x7, 0xfffffffb, 0x0, 0x10001}, {0xfffffffb, 0xbdf9, 0x71, 0xe9, 0x9, 0x7fffffff}, {0x9, 0x6, 0x6b682f, 0x9, 0xb2, 0xffff8000}, {0xd7a, 0xfffff583, 0x5, 0x7, 0x1, 0x8001}, {0xffffffbf, 0xb, 0xd0a800, 0x1, 0x9, 0x8}, {0x6, 0x7f, 0x0, 0x1, 0x6ef, 0x2b14}, {0x8, 0x9, 0x0, 0x67c, 0x4f}, {0x1, 0x2, 0x6e738cba, 0xfff, 0x40, 0x9}, {0x2, 0x0, 0x9, 0x0, 0xfffffc01, 0x1e0000}, {0xfffffff9, 0x0, 0x3, 0x4, 0x20, 0x4}, {0x10001, 0x3, 0x5, 0x5, 0x4, 0x4}, {0x100, 0x9, 0x69, 0x1, 0x2, 0x3}, {0xffff, 0x7, 0x80, 0x9, 0x0, 0x40}, {0x9, 0x0, 0x8, 0x5, 0x81, 0x8}, {0x6, 0x7ff, 0x4, 0x8, 0x80000, 0x9}, {0x6, 0x6, 0x40, 0x1, 0x4, 0x3}, {0x9, 0x81, 0x1000, 0x381f, 0x7, 0x1}, {0x1, 0x60, 0x3, 0x4, 0x7, 0x2}, {0x3, 0x2, 0x10, 0x3, 0x0, 0x101}, {0x401, 0x9, 0xe, 0xfff, 0x0, 0x6}, {0x8, 0x6, 0x7, 0x9ca, 0x2c91, 0x3}, {0x5d7, 0xb66e, 0x2, 0x200, 0x6, 0x7}, {0x370a, 0x0, 0xe1b5, 0x1, 0x8, 0x473}, {0x0, 0x9, 0x253f, 0x3, 0x3, 0xe}, {0x5, 0x1, 0x5, 0x4, 0x401, 0x1}, {0x38, 0x81, 0x80000001, 0x3800000, 0xec, 0xfff}, {0x1, 0x1, 0x2, 0x9, 0x7, 0x8}, {0x2a, 0x401, 0x0, 0x1, 0x2, 0x5acc}, {0x8, 0x5, 0x7fffffff, 0x2, 0x4}, {0xda9a, 0x12, 0x1, 0x80000001, 0x9, 0x4}, {0xf5caa9b4, 0xf, 0x8, 0xfffffffc, 0xf, 0x3}, {0x4, 0x2, 0x2, 0x40, 0x6, 0x7}, {0xffb, 0x200, 0x2, 0x68c, 0x101, 0x912f}, {0x6, 0x2, 0xa0000000, 0x4, 0xfffffffb, 0x586}, {0x9, 0x7, 0x6, 0x2, 0x3}, {0xfffff800, 0x1ddc, 0x1, 0x80000000, 0x7}, {0x43, 0x3, 0x121, 0x1, 0x0, 0x1}, {0x10000000, 0x8, 0x2, 0x9, 0x9948, 0xfffffff7}, {0x87e7, 0x9, 0x7, 0x7ff, 0x0, 0x6}, {0x6, 0xb, 0x0, 0x3ff, 0x6}, {0x40, 0x3, 0x36b, 0x0, 0x3, 0x8}, {0xe0d8, 0x4, 0x6, 0x101, 0xd0e8, 0x5}, {0x3, 0x62825565, 0x8, 0x0, 0x9f9d}, {0x2, 0x0, 0x4, 0x0, 0x8ec, 0x3}, {0x3, 0x8000, 0x6, 0x5, 0x40, 0x66d}, {0x4, 0xe, 0x5, 0xffff7fff, 0xd12, 0x9}, {0xab0e, 0x0, 0x6, 0xffff, 0x6, 0x9}, {0x2000, 0x8, 0x8, 0x2, 0x1, 0x6}, {0x81, 0x1, 0x4, 0x5, 0x23d, 0x7}, {0x80, 0x3, 0x26983d5b, 0xd, 0x2, 0x3}, {0xbcb8, 0x3, 0x5, 0x59f5, 0x6, 0x9}, {0x38a40a51, 0x9, 0x80000000, 0xfffffffb, 0x75f4, 0xffffffff}, {0xb0000000, 0x3, 0x2, 0x80000001, 0x4, 0x8}, {0x1ff, 0x3, 0x776f, 0x2, 0x9, 0x3}, {0x1fd21802, 0x9, 0x5ef, 0x81, 0x4, 0xff}, {0x8519, 0x8, 0x3, 0x9a2e, 0x7, 0x9}, {0x2, 0x9, 0x7f, 0x1, 0x2, 0x4}, {0x8, 0x1000, 0x2, 0x2796, 0x3, 0x5}, {0x2f, 0x10, 0x6, 0x6, 0xd52, 0x200}, {0xffff, 0x7, 0x1, 0x7, 0x3, 0x3}, {0x0, 0x2, 0x5, 0x3, 0xfffff000, 0x8000}, {0x3ff, 0x3, 0x6, 0x5, 0x4, 0xb8}, {0x7, 0x0, 0x8, 0x5a41, 0x8, 0x3}, {0x4, 0x21d8563f, 0x0, 0x5, 0x800}, {0x4, 0x8, 0x9, 0x1, 0x81, 0x5}, {0x1c9, 0x5, 0xfff80000, 0x10, 0xfffffffc, 0x3}, {0x480, 0x1, 0x1, 0x3, 0xfc70, 0xfffffffc}, {0x8000, 0x7fffffff, 0x6, 0xffffffff, 0x1}, {0x7, 0x9, 0xf, 0x2, 0x4}, {0xc, 0x7, 0x0, 0x3ff, 0x42, 0x1000}, {0xffffffff, 0xb, 0x9, 0x4, 0x5, 0xffffffff}, {0xc, 0x8, 0x9, 0x9, 0x3, 0x8}, {0x5, 0x7fffffff, 0x986, 0xd10, 0x40, 0x632}, {0x7ff, 0x6, 0xffff, 0x0, 0x7, 0x8000}, {0x800, 0x4, 0x9, 0x1, 0x9, 0x81b6}, {0x6, 0x7fff, 0xc15, 0x1000, 0x10001}, {0x7, 0x7, 0xff, 0x6, 0x7, 0xc00}, {0x0, 0xa73, 0xdf4b, 0x10000000, 0x5, 0x7}, {0x4, 0x4, 0x2, 0x0, 0x3, 0x3}, {0x8, 0x2, 0x8, 0x8, 0xfffffffe, 0x8}, {0x40, 0x6, 0x8, 0x8, 0x26a11091, 0x2f}, {0x4db5, 0x2, 0x40, 0x1, 0x0, 0x7}, {0x3, 0x2, 0x10, 0x7fffffff, 0x6, 0x8}, {0x2, 0x400, 0x40005, 0x7fffffff, 0x5, 0x1000}, {0xb, 0x3, 0x3b977c5d, 0x1, 0x4, 0xfffffff7}, {0x7, 0x1, 0x4, 0x6, 0xffff, 0x400}, {0x5, 0xdf6, 0x4, 0x8, 0x3, 0xfff}, {0x80000000, 0xf, 0x0, 0x7, 0x2, 0x6}, {0xdef, 0x6, 0x8000, 0x7, 0x5, 0x9}, {0xff, 0xf, 0x1, 0x8, 0x10000, 0xbec}, {0x6, 0xfd2d, 0xffffffff, 0xfffffffe, 0x2, 0x1}, {0x4, 0x0, 0x7fff, 0x5, 0xffff, 0xffffc619}, {0x7, 0x5, 0x1, 0x80000000, 0x800, 0x3}, {0x5, 0x4, 0x5, 0x7, 0xffff, 0x8}, {0x5, 0x75a, 0x0, 0x3, 0xff, 0x371c1d28}, {0xc7c, 0x80000001, 0x400, 0xffffff6e, 0x7fff, 0x3}, {0x9, 0x1, 0x7, 0x0, 0x5, 0xffffff27}, {0x5, 0x5, 0x8, 0x1, 0x8, 0x6}, {0x0, 0x9000, 0xdc65, 0x8, 0x7, 0x5}, {0xfffff30f, 0x400, 0x0, 0x1, 0x242, 0x2}, {0x10000, 0x4, 0x1, 0xb5, 0x4, 0xcc72}, {0x2, 0x6, 0xffffffff, 0x1800000, 0x6, 0x3}, {0x2, 0x0, 0x0, 0x0, 0x80000000, 0x2}, {0x9, 0x4, 0x7, 0x0, 0x1f, 0x59e7}, {0x200, 0xd, 0x0, 0xd9bc, 0x9, 0xff}, {0x7fffffff, 0x81, 0x101, 0x0, 0xc, 0x5}, {0x64e0, 0x6, 0x2, 0xa, 0x5, 0x5}, {0x9f, 0x9, 0x2, 0x1000, 0x7, 0x6}, {0x3494c1f3, 0x3, 0x8, 0xbb, 0x8, 0x101}, {0x2, 0x7fff, 0x3, 0xffffffff, 0x7499, 0x3}, {0x54, 0xffffffff, 0x5, 0x1, 0x7, 0xffff}, {0x4, 0x4, 0x6, 0x7, 0x80, 0x1}, {0x41, 0x5, 0x94b5, 0x1, 0x1}, {0x7, 0x9, 0x0, 0x10}, {0x1, 0xb, 0x3, 0x2, 0x7, 0x9}, {0x2, 0x63, 0xf, 0x8, 0x3, 0x2}, {0x743, 0x0, 0x1, 0x1, 0x6, 0x2}, {0x3, 0x8, 0x4, 0x1, 0x4982, 0x81}, {0x6, 0x9, 0x8, 0x9, 0xcbdc, 0x1}, {0x3, 0x7ff, 0x3, 0x2, 0x1, 0x7}], [{}, {0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x3}, {0x2}, {0x4, 0x1}, {0x3}, {0x3}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x2}, {0x3}, {0x3}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0xa09f96eb17787c98, 0x1}, {}, {}, {0x2}, {0x2}, {}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0xfa18e5f380f0ab61, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x2}, {0x1}]}}]}, {0xfb, 0x6, "093de01020329a91a4a9b53ed764faef073bea387aebd80457ca56e61ca0721085fb3011049b6dddfd9ebb220b46cdcb031513c196c855dc3b9ae41ea6f378019378d1074553e510d41d7c8c86426271c787c1b0358d7ddd04ccabfb7844a6a4691e4e22dfd3e8a29ffed41d7c7026451b55300355db5a14f8115ce88f0796ad65a0571b72d4c447db7388b431b684af258c62757678b2cd03efd116aeb0672c4b5fb452e7a998fe6fd931283b3fc1723a900fd4574af313d5147e59c2c8e541148997bbf2de71ec3e75ccc70d549eceb1976e5212f9c4943ed34c6e62acbb3a96f328d01376dcf565cb50f9c57d78ad4fc0b75c900310"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x128, 0x2, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_TTL={0x5, 0x7, 0x5a}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6acd, 0x9, 0x8, 0x2, 0x400}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x7f, 0x0, 0x4, 0x81}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xca272}]}, {0x9c, 0x6, "25f36fae7e6075438f786657b2450a27a96ce5304ad2fb4ddebd708195cb4feb5e29415c83a97eda54bbe4fca976d0b312e8b15296ee56b4b551b51788d1e7c67e2e7edf78887d84650ccb81d26740063b85764fbd373cea4f4afce9a38a7e5291679c2d17a64ada11cd525ffb46ac68605db1d02deb0702392846fc70241a40f84154c3fe3875ee4873ae70ff10fa859c49adb81a79ab3f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0x118, 0x1a, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '/dev/audio\x00'}, @TCA_DEF_DATA={0x12, 0x3, '/]@--]-#\'&}&.\x00'}, @TCA_DEF_DATA={0xf, 0x3, '/dev/audio\x00'}]}, {0xb7, 0x6, "feaf424bcd0f9ab1f951f23ac4f143cbfad19c89aace975a0820653ca17e4118d9d992fb445dc79c08a014333a9cca11b45f02897a48467220ef838116d78369459fbee001b16a696f7a7fc5ed07af07b3c83ff79f9cdb552ab134191099f4a980ff222c63d493a59568ef3fcfdc69f425fbe8a9c365c0b20d4071fc9f31fd3e9097c23ccf1b6fcd839bf7365d0ca5bcc4b6ee9b983466cd8f140af1c08cf63f99756b9397629aff7100777942e855c1e7a046"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_pedit={0x1074, 0x1e, 0x0, 0x0, {{0xa}, {0x48, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x44, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FW_ACT={0x1434, 0x4, [@m_connmark={0x15c, 0x1d, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x7fffffff, 0xffffffffffffffff, 0x7c3, 0x7}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x0, 0x20000000, 0x10000, 0x10}, 0x400}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc, 0x7, 0x20000000, 0x3, 0x2}}}]}, {0xd5, 0x6, "1a0754d393d681b1bf479b82de53de5c9044a5cd61c65ab986487b869b2bdf664a71268ecc3740b013f3b3c929a45757c888d44629a43ef5c1b60c5b0d35a3d6ef788affc854e7cfd9100b2423e1d47241adb5481fbfb725dbab47f9b1bb6ec8412729ab545c2331c52b735a9c6380d30fdcdacdc528c24e8637ac44ceb946fcc4e25f268a63c482b1a1d42718da1faebb3638772a96e119be1207080a2c06d119aedbd5dcf22dd317e6713fd5149d36dd92ab7e5896541a8f001f6f489ed5f2afced820ef1252e3ac2b6e98c895b5a10d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0xf8, 0x9, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0xfffffffe, 0x20000000, 0xaf1a, 0x5}, @rand_addr=0x64010102, @multicast1, 0xff}}]}, {0xa5, 0x6, "6c4a63f135c6317a0ddd7ec803a7e3efefb48539666849a973a21c52a166bc08169d368993ccff698411bd95f9a0ea76cbe7722086a4ad525dfe84af50dd39fa331f50ae83570411c51b465a71491c0426c34b42cfb456a69e3a613a2235be28519ec787a7fc1e6d3adb0d63084ddeaa08c9e812dff4e5cf56329638a006a4966d714b3364268b05bf001b41c8a5da312fbce735dc9a1d8ba3136d3b3c6f2a3c74"}, {0xc}, {0xc}}}, @m_skbedit={0x114, 0x1b, 0x0, 0x0, {{0xc}, {0x4}, {0xe5, 0x6, "fea8f37c84698049e2b6d8c3defe56325bb09e040f1b90e58f6fe5b233cb1f3f556416207c2de1efbeb7f29a9ff89b424a384c62bda765141e64f997618b0dccca4caad7e5a0def04dadbb54b9844f3a12de2b4338a0eef0c28b4d46f1c26d1dd8b1b64987a72e243f5c0ada03a1d95d5ce19b8d9b482ba9081c386461916023508ec7aaa4baa2219ff592bf32d9ab58b7b2291d90a78406341f2f28acde823dc5ebf498d4f283c3aec098442213eb52dd8b4b72560869bebd27bedd9d35448a39f61d925c9860cdde0a3a05eda76de0ea4578ed24d1077c4faef94b7d835dd1e1"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x58, 0xf, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x20000006}]}, {0x20, 0x6, "9c097dc0e5421cbd681b33fd4f90a3c0be1b15577162ae2197e44ffc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x1070, 0x3, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x6, 0x8, 0xada6, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9e}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x4694}}, 0x200400d4) 4.030195856s ago: executing program 2 (id=943): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) write$dsp(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x9) 3.161204137s ago: executing program 2 (id=944): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa4, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_PRATE64={0xc, 0x5, 0xb7f126806328d24a}]}}]}, 0x6c}}, 0x44080) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 3.150703093s ago: executing program 0 (id=945): syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118b000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d12, &(0x7f0000000240)=0x58) r2 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/667, 0xe) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) pselect6(0x40, &(0x7f0000000080)={0x8, 0x3, 0x8, 0x2, 0x6, 0x0, 0x3, 0x400}, 0x0, 0x0, 0x0, 0x0) 2.631823994s ago: executing program 0 (id=946): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 2.516948098s ago: executing program 3 (id=947): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000100)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=t']) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) 2.382287677s ago: executing program 3 (id=948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) close(r1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) read$FUSE(0xffffffffffffffff, &(0x7f0000004280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x40000, 0x40210221, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x1, 0x0, 0x1, 0x0, 0x0, 0x4, {0x0, 0x0, 0x0, 0xdffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0xfffffffd, r3, r4, 0x0, 0x6e8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) getuid() openat$autofs(0xffffffffffffff9c, &(0x7f0000002ac0), 0x1c0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x7, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) 1.723915269s ago: executing program 3 (id=949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000640), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) shutdown(r3, 0x1) close(0xffffffffffffffff) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x202, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x3c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 702.142802ms ago: executing program 3 (id=950): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000008800), 0x0, 0x4004) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r1, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 676.502643ms ago: executing program 2 (id=951): syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118b000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000180), 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d12, &(0x7f0000000240)=0x58) r4 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/667, 0xe) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) pselect6(0x40, &(0x7f0000000080)={0x8, 0x3, 0x8, 0x2, 0x6, 0x0, 0x3, 0x400}, 0x0, 0x0, 0x0, 0x0) 660.619174ms ago: executing program 0 (id=952): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) ioctl$FIONCLEX(r0, 0x5450) 438.115328ms ago: executing program 1 (id=953): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800"], 0x2c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000280)={'lo\x00'}) 185.766845ms ago: executing program 0 (id=954): sendmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="a097b1c27211f591a2656a71b6c9e4aa73ec14670df0e93dd34c9a29af9a232a3c86e315d3a09690ba3691f238c98ee00a10a485edbc5f37941a96e99812ea2d75a4a2ae4261e2db372708de6a8c9d64c8f2a3331993d5fbc906d177719a870bec243858fb1b20cb9179ff565a1c259d14d7cb2926c982382e591108ea7bdfa160b89f1ed36cfe4f66ca1a53fc661129ce5f07439f8e7548fb0751570fdc56018a831429d861b7153e19f5d6e138ad1572175ce1abed046650a348115f7dfcb9d9b914932bdb3271c7e2db4045ca7a25431ab74143a1a8f81564279a77d2092c397e45a46fc6226d697cf0741d986314a1f327eef82b64ea0064f9d4fad0", 0xfe}], 0x1, &(0x7f0000000500)=[{0x50, 0x10d, 0x810, "f6c087a27cfa1a6d300ce27a6f799fbd8a9b3097b96fd6462a666cb0fddc7527d6ee5c44f5e4a46d3be297a0cd4cd10eab763599141f7e4124822ef3ccae"}, {0xd0, 0x115, 0x7ab89c41, "7c64b7076a1c26bc31119c0bf6f1712ed3b261ea9fac8ea54341093601ce2487c3281b8ea9b9686af9db4476dfe479b423dd49b60babac5136758bd4335a0d320d3bffb44f147c242429a1254eabd020c4add4bb73a350027f919355ebb9f9e681a6bc52d0743e9fa22f022e957d1bf0e3c6c0df8961546e0ccc3a7b437b6a5786d9f672f69bac527caa150d8eb4be4b7150a7fc15b7f2af2255ce6cb6ba0999c99f79164064ca63da12aa36e637aa34090a6ed6c0e6385b119032fe1638"}, {0x50, 0x11, 0xfffffff9, "b71e28bf2d03d2d691e456f16c26b8990fd619f0466fd28048072f092fb3f4334016380916b460ece26727be3d733cfc6f7e6bd73ebae7120ce54dcef5ed41f3"}, {0x40, 0x10d, 0x3, "9bb2dd093b233e028548ca3d0c57834c8414dc3272ba16e2a0c6bb04b679fbf2aa6eb3c90df0e797a3ad73fe10"}, {0x88, 0x10f, 0x1, "d66eaf6b82151177c79d1917061f573ebd772018b2a29836475bc65fc7895b7badb3217c32f93ddcc3e2efe54b0ac8c8f98466c3d72cf8cd41a081e919f38de03839cba94685aa823f079bc5fab4961c398b5589bc0fa3802dfdfea03a07d8fbb78681f5d3fe6faad8262cb27b26448500ae9d37daf34668"}, {0x78, 0x112, 0x1, "6fde1a24c0fd4230cbeb6472ea8358c720d5922b6d4d63ed822aea6c5c08d5f9875ac260469de16a44aa23dae22b6b7b23097bae34e6b2bc1eb4acfb17298301628cab8c4b834bdb0e5697693c0eb58bc0fb0c869ecff1b836e375c3aafa852debb57b3a"}, {0x70, 0x10a, 0x7, "841d825d5bd2024b099d21a44ddd2d6f28bc26db67cbbf818d458a74b22498bfffc6206929ff79c87f32ba40d43831f34ab36891468654f920e70754040aca64b1ae824603f521586a6c9b574f45e50c3ed868e077fb0942844d4b2e3b5068"}], 0x320}}, {{&(0x7f0000000240)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x4, 0x2}}, 0x80, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000940)=[{0x30, 0x107, 0x1, "6465402c7db0eb4c67f115b8f97769cf9a7d3cc83f8764d715ededcb884850a7"}, {0xc8, 0x1, 0xe, "04d2020068d8fe364720721e73741832680eec8ee7751be54fca1b5904e4208bfba7c9fbe5d7958d51628458265fe0233cbe0bfec62dd4fd568be67038eec484a911481ae07db20878b2f680878e6336d9e6e0d449355283ee3cff8a8dc185ec410d4c0b42a3fefbf7ae987753cfcd604532f5df8a3cea5a7a2257494cf03b317b6fa80c0fcaf817a87a9bd036bccd996459405f7701487fd4e9ba98afe5f22e6726907d8790f774d0ad3d8ca66c0efd2380ddb2d1e1f3"}, {0x38, 0x118, 0x7, "609b16858726f2fc606448f8e0866ab4c4f2a6e3621e1ea6ca87d5c55affc8fbb0247d"}], 0x130}}, {{0x0, 0x0, &(0x7f0000000c00)=[{0x0}, {0x0}, {0x0}], 0x3}}, {{&(0x7f0000000c80)=@pppoe={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'gretap0\x00'}}, 0x80, 0x0, 0x0, &(0x7f0000001180)=[{0xc8, 0x84, 0x7, "654c1017b4cb06ad7e34a09b7571e53fcce31620ba624658726baefc9973e7f3e993812c438e4e2d4ab912dab009e859583ac931608510913203a73739eecb867e2ff94f460a27e6ba56890a1ae0607d0988dc7d3dbfbcc6e14ddb8da88a201f1c54f8912fea3c1ba34e04e2a89769945b081f2a510040110535ce59071ca1d54c4210f5de0f496ca4db2374b7ce9146452755e8639654363c30ee053f34ca3552d6c7c7a9b34190cf94271609200b0398"}, {0xb8, 0x115, 0xd, "3a788a4564322bace7155421142f60a29c9f7df209052203638d5f369e665eb10be140303319de09af257ec7715ef1be27dd4c701666870f827a307896d8f5b9fe24808b98804ca743d40c1ed7af6769a4a519c2f78d1755e375f15f997612e1a81c743ba4cb988a823bfc3c4012f0bbf0697b0cb28aa2470ffe4603aed9753ad5d6db4fc2ea3524527f7df99931371f564cf824a7693b2a84c44d2f385db28c0d"}, {0x88, 0x10b, 0x3b, "862cd279951a8947e2acbc28f3936f5d85ec79c710af40363954668e4588eddd96d6ea907a6420ad683e92e60ecab1c6d7f2415045c20c3ef984012735ae02a7d92c917f9b0c5a7b64762ab970f35fde132cbf27537874e0af77e09319af24ee18dc3ba5ca02db86065ce985c9b7ae4e1c"}, {0x58, 0x10f, 0x8, "d0290240bca981f16cf611a3ffb988269507037655626c0488e9929bc8624f4ff6b065e0cef87276f93a72d90de031e8db868c855d52d5041300c5bf0dc10f6ed0"}, {0xc08, 0x109, 0x80000001, "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"}, {0xe0, 0x11, 0xa3, "c07c3da7cd8a5ff38d730caeec7944cb1ea138489c276e7d0459fff205cdedc4f1e01a191fb4e652cf702f229298701e6549878dc56060a6752064d6ad2a5a5f872b38252ae547059dca12be78b9a3dfce9b5434aa1fa941bd5ddefb215e5581ea4c95b0775451f3551b1a876a1081da3dceaedbdce417d9bcdc3a85ff1ac87def5e1547815b372a5755db8eb8229baef16a263aef13e4b140a6a0efa45cc36f792034ce23e95e02cdf96929fa4e5872b2d7654330f0b55e62de01a825d25f7eaca2e3a54145441bc1"}], 0xf48}}], 0x4, 0x20000015) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 0s ago: executing program 0 (id=955): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000180), 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d12, &(0x7f0000000240)=0x58) r5 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/667, 0xe) fallocate(r5, 0x0, 0x0, 0x400001) fcntl$addseals(r5, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) pselect6(0x40, &(0x7f0000000080)={0x8, 0x3, 0x8, 0x2, 0x6, 0x0, 0x3, 0x400}, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0007fbc721b5fa0 RCX: 00007fbc71f8e969 [ 238.190390][ T7674] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 238.190402][ T7674] RBP: 00007fbc72dbb090 R08: 0000000000000000 R09: 0000000000000000 [ 238.190415][ T7674] R10: 000000002000c000 R11: 0000000000000246 R12: 0000000000000001 [ 238.190428][ T7674] R13: 0000000000000000 R14: 00007fbc721b5fa0 R15: 00007ffd8618f468 [ 238.190460][ T7674] [ 238.193249][ T7676] FAULT_INJECTION: forcing a failure. [ 238.193249][ T7676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.412721][ T7676] CPU: 1 UID: 0 PID: 7676 Comm: syz.3.457 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 238.412750][ T7676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 238.412762][ T7676] Call Trace: [ 238.412771][ T7676] [ 238.412779][ T7676] dump_stack_lvl+0x189/0x250 [ 238.412810][ T7676] ? __lock_acquire+0xaac/0xd20 [ 238.412840][ T7676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.412867][ T7676] ? __pfx__printk+0x10/0x10 [ 238.412898][ T7676] ? __might_fault+0xb0/0x130 [ 238.412940][ T7676] should_fail_ex+0x414/0x560 [ 238.412977][ T7676] _copy_from_user+0x2d/0xb0 [ 238.413004][ T7676] netlink_setsockopt+0x1af/0x770 [ 238.413044][ T7676] ? __pfx_netlink_setsockopt+0x10/0x10 [ 238.413075][ T7676] ? __pfx_vfs_write+0x10/0x10 [ 238.413103][ T7676] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 238.413126][ T7676] ? __pfx_netlink_setsockopt+0x10/0x10 [ 238.413159][ T7676] do_sock_setsockopt+0x257/0x3e0 [ 238.413183][ T7676] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 238.413212][ T7676] ? ksys_write+0x1e1/0x250 [ 238.413246][ T7676] __x64_sys_setsockopt+0x18b/0x220 [ 238.413274][ T7676] do_syscall_64+0xf6/0x210 [ 238.413296][ T7676] ? clear_bhb_loop+0x45/0xa0 [ 238.413320][ T7676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.413352][ T7676] RIP: 0033:0x7f3035b8e969 [ 238.413369][ T7676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.413386][ T7676] RSP: 002b:00007f3036984038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 238.413407][ T7676] RAX: ffffffffffffffda RBX: 00007f3035db5fa0 RCX: 00007f3035b8e969 [ 238.413420][ T7676] RDX: 0000000000000001 RSI: 000000000000010e RDI: 0000000000000003 [ 238.413432][ T7676] RBP: 00007f3036984090 R08: 0000000000000004 R09: 0000000000000000 [ 238.413443][ T7676] R10: 00002000000026c0 R11: 0000000000000246 R12: 0000000000000001 [ 238.413455][ T7676] R13: 0000000000000000 R14: 00007f3035db5fa0 R15: 00007ffdfc79ce58 [ 238.413485][ T7676] [ 238.618344][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.892502][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.902516][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.911012][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.921689][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.929342][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.412807][ T7694] Invalid ELF header magic: != ELF [ 240.113510][ T7698] FAULT_INJECTION: forcing a failure. [ 240.113510][ T7698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.129613][ T7698] CPU: 0 UID: 0 PID: 7698 Comm: syz.3.464 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 240.129655][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 240.129681][ T7698] Call Trace: [ 240.129690][ T7698] [ 240.129699][ T7698] dump_stack_lvl+0x189/0x250 [ 240.129730][ T7698] ? __lock_acquire+0xaac/0xd20 [ 240.129759][ T7698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.129785][ T7698] ? __pfx__printk+0x10/0x10 [ 240.129817][ T7698] ? __might_fault+0xb0/0x130 [ 240.129859][ T7698] should_fail_ex+0x414/0x560 [ 240.129896][ T7698] _copy_from_user+0x2d/0xb0 [ 240.129923][ T7698] __sys_bpf+0x1ed/0x860 [ 240.129948][ T7698] ? __pfx___sys_bpf+0x10/0x10 [ 240.129985][ T7698] ? ksys_write+0x1e1/0x250 [ 240.130010][ T7698] ? rcu_is_watching+0x15/0xb0 [ 240.130054][ T7698] __x64_sys_bpf+0x7c/0x90 [ 240.130075][ T7698] do_syscall_64+0xf6/0x210 [ 240.130097][ T7698] ? clear_bhb_loop+0x45/0xa0 [ 240.130123][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.130142][ T7698] RIP: 0033:0x7f3035b8e969 [ 240.130160][ T7698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.130178][ T7698] RSP: 002b:00007f3036984038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.130199][ T7698] RAX: ffffffffffffffda RBX: 00007f3035db5fa0 RCX: 00007f3035b8e969 [ 240.130215][ T7698] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000001 [ 240.130228][ T7698] RBP: 00007f3036984090 R08: 0000000000000000 R09: 0000000000000000 [ 240.130241][ T7698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.130252][ T7698] R13: 0000000000000000 R14: 00007f3035db5fa0 R15: 00007ffdfc79ce58 [ 240.130285][ T7698] [ 240.415581][ T7679] chnl_net:caif_netlink_parms(): no params data found [ 240.513927][ T7704] program syz.3.466 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.735556][ T7679] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.772976][ T7679] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.788727][ T7679] bridge_slave_0: entered allmulticast mode [ 240.882786][ T7679] bridge_slave_0: entered promiscuous mode [ 240.897494][ T7679] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.905530][ T7679] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.924048][ T7679] bridge_slave_1: entered allmulticast mode [ 240.951511][ T7679] bridge_slave_1: entered promiscuous mode [ 241.060561][ T5828] Bluetooth: hci0: command tx timeout [ 241.111933][ T7718] FAULT_INJECTION: forcing a failure. [ 241.111933][ T7718] name failslab, interval 1, probability 0, space 0, times 0 [ 241.125073][ T7718] CPU: 1 UID: 0 PID: 7718 Comm: syz.3.467 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 241.125103][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 241.125117][ T7718] Call Trace: [ 241.125125][ T7718] [ 241.125133][ T7718] dump_stack_lvl+0x189/0x250 [ 241.125169][ T7718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.125197][ T7718] ? __pfx__printk+0x10/0x10 [ 241.125236][ T7718] ? __pfx___might_resched+0x10/0x10 [ 241.125271][ T7718] should_fail_ex+0x414/0x560 [ 241.125308][ T7718] should_failslab+0xa8/0x100 [ 241.125341][ T7718] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 241.125380][ T7718] ? __alloc_skb+0x112/0x2d0 [ 241.125405][ T7718] __alloc_skb+0x112/0x2d0 [ 241.125429][ T7718] __ip6_append_data+0x2b5a/0x3dc0 [ 241.125449][ T7718] ? preempt_schedule_irq+0xb5/0x150 [ 241.125498][ T7718] ? __lock_acquire+0xaac/0xd20 [ 241.125527][ T7718] ? __pfx_raw6_getfrag+0x10/0x10 [ 241.125574][ T7718] ? __pfx___ip6_append_data+0x10/0x10 [ 241.125608][ T7718] ip6_append_data+0x1c4/0x380 [ 241.125633][ T7718] ? __pfx_raw6_getfrag+0x10/0x10 [ 241.125659][ T7718] rawv6_sendmsg+0x1245/0x17f0 [ 241.125698][ T7718] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 241.125728][ T7718] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 241.125780][ T7718] ? sock_rps_record_flow+0x19/0x400 [ 241.125808][ T7718] ? inet_sendmsg+0x2f4/0x370 [ 241.125830][ T7718] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 241.125856][ T7718] __sock_sendmsg+0x19c/0x270 [ 241.125888][ T7718] sock_write_iter+0x258/0x330 [ 241.125917][ T7718] ? __pfx_sock_write_iter+0x10/0x10 [ 241.125970][ T7718] do_iter_readv_writev+0x56b/0x7f0 [ 241.126003][ T7718] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 241.126038][ T7718] ? bpf_lsm_file_permission+0x9/0x20 [ 241.126060][ T7718] ? security_file_permission+0x75/0x290 [ 241.126084][ T7718] ? rw_verify_area+0x258/0x650 [ 241.126114][ T7718] vfs_writev+0x306/0x9a0 [ 241.126150][ T7718] ? rcu_is_watching+0x15/0xb0 [ 241.126188][ T7718] ? __pfx_vfs_writev+0x10/0x10 [ 241.126234][ T7718] ? __fget_files+0x3a0/0x420 [ 241.126263][ T7718] ? __fget_files+0x2a/0x420 [ 241.126303][ T7718] do_writev+0x14d/0x2d0 [ 241.126326][ T7718] ? __pfx_do_writev+0x10/0x10 [ 241.126351][ T7718] ? do_syscall_64+0xba/0x210 [ 241.126384][ T7718] do_syscall_64+0xf6/0x210 [ 241.126405][ T7718] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 241.126425][ T7718] ? clear_bhb_loop+0x45/0xa0 [ 241.126450][ T7718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.126470][ T7718] RIP: 0033:0x7f3035b8e969 [ 241.126488][ T7718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.126506][ T7718] RSP: 002b:00007f3036942038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 241.126527][ T7718] RAX: ffffffffffffffda RBX: 00007f3035db6160 RCX: 00007f3035b8e969 [ 241.126542][ T7718] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 241.126555][ T7718] RBP: 00007f3036942090 R08: 0000000000000000 R09: 0000000000000000 [ 241.126568][ T7718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.126580][ T7718] R13: 0000000000000000 R14: 00007f3035db6160 R15: 00007ffdfc79ce58 [ 241.126614][ T7718] [ 241.442569][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.626925][ T7679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.766184][ T4745] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.915504][ T7679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.946661][ T7723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.472'. [ 242.069279][ T4745] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.198820][ T7679] team0: Port device team_slave_0 added [ 242.270830][ T4745] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.326914][ T7679] team0: Port device team_slave_1 added [ 242.467632][ T4745] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.100427][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 243.112263][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 243.114669][ T7679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.132992][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.144886][ T5832] Bluetooth: hci0: command tx timeout [ 243.153831][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 243.161009][ T7679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.204109][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.217107][ T7679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.262567][ T7679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.280233][ T7679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.321800][ T7679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.555364][ T7679] hsr_slave_0: entered promiscuous mode [ 243.602876][ T7679] hsr_slave_1: entered promiscuous mode [ 243.609294][ T7679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.617930][ T7679] Cannot create hsr debugfs directory [ 244.898291][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 245.232848][ T5831] Bluetooth: hci0: command tx timeout [ 245.303191][ T5831] Bluetooth: hci1: command tx timeout [ 245.581738][ T4745] bond0 (unregistering): Released all slaves [ 245.623468][ T7793] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 245.632802][ T7793] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 245.885225][ T4745] tipc: Left network mode [ 246.613444][ T7806] netlink: 'syz.0.488': attribute type 5 has an invalid length. [ 246.933247][ T7679] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.219559][ T7743] chnl_net:caif_netlink_parms(): no params data found [ 247.299744][ T5831] Bluetooth: hci0: command tx timeout [ 247.379367][ T7679] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.379670][ T5831] Bluetooth: hci1: command tx timeout [ 247.626118][ T7679] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.697301][ T4745] hsr_slave_0: left promiscuous mode [ 247.713451][ T4745] hsr_slave_1: left promiscuous mode [ 247.756002][ T4745] veth1_macvtap: left promiscuous mode [ 247.766635][ T4745] veth0_macvtap: left promiscuous mode [ 247.775636][ T4745] veth1_vlan: left promiscuous mode [ 248.398411][ T7831] FAULT_INJECTION: forcing a failure. [ 248.398411][ T7831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.416381][ T7831] CPU: 1 UID: 0 PID: 7831 Comm: syz.3.493 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 248.416412][ T7831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 248.416425][ T7831] Call Trace: [ 248.416433][ T7831] [ 248.416442][ T7831] dump_stack_lvl+0x189/0x250 [ 248.416472][ T7831] ? __lock_acquire+0xaac/0xd20 [ 248.416500][ T7831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.416527][ T7831] ? __pfx__printk+0x10/0x10 [ 248.416558][ T7831] ? __might_fault+0xb0/0x130 [ 248.416600][ T7831] should_fail_ex+0x414/0x560 [ 248.416636][ T7831] _copy_from_user+0x2d/0xb0 [ 248.416672][ T7831] do_sock_getsockopt+0x1cd/0x650 [ 248.416698][ T7831] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 248.416718][ T7831] ? do_syscall_64+0x40/0x210 [ 248.416738][ T7831] ? __fget_files+0x2a/0x420 [ 248.416766][ T7831] ? __fget_files+0x3a0/0x420 [ 248.416793][ T7831] ? __fget_files+0x2a/0x420 [ 248.416830][ T7831] __x64_sys_getsockopt+0x1a5/0x250 [ 248.416851][ T7831] ? do_syscall_64+0x40/0x210 [ 248.416873][ T7831] ? do_syscall_64+0x40/0x210 [ 248.416896][ T7831] do_syscall_64+0xf6/0x210 [ 248.416917][ T7831] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 248.416937][ T7831] ? clear_bhb_loop+0x45/0xa0 [ 248.416962][ T7831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.416981][ T7831] RIP: 0033:0x7f3035b8e969 [ 248.416999][ T7831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.417016][ T7831] RSP: 002b:00007f3036984038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 248.417042][ T7831] RAX: ffffffffffffffda RBX: 00007f3035db5fa0 RCX: 00007f3035b8e969 [ 248.417057][ T7831] RDX: 0000000000000007 RSI: 000000000000010c RDI: 0000000000000004 [ 248.417069][ T7831] RBP: 00007f3036984090 R08: 0000200000000000 R09: 0000000000000000 [ 248.417082][ T7831] R10: 0000200000002940 R11: 0000000000000246 R12: 0000000000000001 [ 248.417095][ T7831] R13: 0000000000000000 R14: 00007f3035db5fa0 R15: 00007ffdfc79ce58 [ 248.417127][ T7831] [ 249.459579][ T5831] Bluetooth: hci1: command tx timeout [ 251.416988][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'. [ 251.547279][ T5831] Bluetooth: hci1: command tx timeout [ 252.176710][ T7863] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 252.186333][ T7863] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 252.276344][ T7743] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.311725][ T7743] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.347003][ T7743] bridge_slave_0: entered allmulticast mode [ 252.391644][ T7743] bridge_slave_0: entered promiscuous mode [ 252.441822][ T7679] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.611961][ T7743] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.619994][ T7743] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.628450][ T7743] bridge_slave_1: entered allmulticast mode [ 252.637482][ T7743] bridge_slave_1: entered promiscuous mode [ 252.938334][ T7881] netlink: 180 bytes leftover after parsing attributes in process `syz.3.505'. [ 253.741635][ T7743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.774021][ T7743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.957371][ T7743] team0: Port device team_slave_0 added [ 255.046518][ T7743] team0: Port device team_slave_1 added [ 255.216285][ T7905] FAULT_INJECTION: forcing a failure. [ 255.216285][ T7905] name failslab, interval 1, probability 0, space 0, times 0 [ 255.231610][ T7905] CPU: 0 UID: 0 PID: 7905 Comm: syz.0.510 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 255.231640][ T7905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 255.231654][ T7905] Call Trace: [ 255.231663][ T7905] [ 255.231672][ T7905] dump_stack_lvl+0x189/0x250 [ 255.231708][ T7905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.231736][ T7905] ? __pfx__printk+0x10/0x10 [ 255.231774][ T7905] ? __pfx___might_resched+0x10/0x10 [ 255.231803][ T7905] ? fs_reclaim_acquire+0x7d/0x100 [ 255.231830][ T7905] should_fail_ex+0x414/0x560 [ 255.231867][ T7905] should_failslab+0xa8/0x100 [ 255.231900][ T7905] __kmalloc_noprof+0xcb/0x4f0 [ 255.231927][ T7905] ? kfree+0x4d/0x440 [ 255.231950][ T7905] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 255.231981][ T7905] tomoyo_realpath_from_path+0xe3/0x5d0 [ 255.232009][ T7905] ? tomoyo_domain+0xda/0x130 [ 255.232049][ T7905] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 255.232070][ T7905] tomoyo_path_number_perm+0x1e8/0x5a0 [ 255.232094][ T7905] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 255.232134][ T7905] ? __lock_acquire+0xaac/0xd20 [ 255.232182][ T7905] ? __fget_files+0x2a/0x420 [ 255.232218][ T7905] ? __fget_files+0x3a0/0x420 [ 255.232246][ T7905] ? __fget_files+0x2a/0x420 [ 255.232281][ T7905] security_file_ioctl+0xcb/0x2d0 [ 255.232305][ T7905] __se_sys_ioctl+0x47/0x170 [ 255.232332][ T7905] do_syscall_64+0xf6/0x210 [ 255.232354][ T7905] ? clear_bhb_loop+0x45/0xa0 [ 255.232379][ T7905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.232398][ T7905] RIP: 0033:0x7fcfb298e969 [ 255.232416][ T7905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.232435][ T7905] RSP: 002b:00007fcfb3730038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.232456][ T7905] RAX: ffffffffffffffda RBX: 00007fcfb2bb5fa0 RCX: 00007fcfb298e969 [ 255.232471][ T7905] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 255.232483][ T7905] RBP: 00007fcfb3730090 R08: 0000000000000000 R09: 0000000000000000 [ 255.232495][ T7905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.232507][ T7905] R13: 0000000000000000 R14: 00007fcfb2bb5fa0 R15: 00007fff4e992178 [ 255.232539][ T7905] [ 255.232548][ T7905] ERROR: Out of memory at tomoyo_realpath_from_path. [ 255.252251][ T7743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.749487][ T7743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.289738][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.512'. [ 256.549643][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.556342][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.570004][ T7743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.236182][ T7743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.276394][ T7743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.388361][ T7743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.561370][ T7679] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 257.604764][ T7743] hsr_slave_0: entered promiscuous mode [ 257.617158][ T7743] hsr_slave_1: entered promiscuous mode [ 257.634976][ T7743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.644538][ T7743] Cannot create hsr debugfs directory [ 257.659853][ T7934] IPVS: stopping backup sync thread 7936 ... [ 257.667429][ T7679] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 257.668348][ T7936] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 257.708302][ T7679] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 257.794555][ T7679] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 258.233713][ T7941] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 258.244005][ T7941] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 259.343820][ T7963] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.012120][ T7679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.097548][ T7679] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.141256][ T4494] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.148447][ T4494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.198972][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.203755][ T7971] capability: warning: `syz.3.524' uses deprecated v2 capabilities in a way that may be insecure [ 260.207388][ T4494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.675861][ T7743] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 260.700196][ T7743] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 260.720835][ T7679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.740500][ T7743] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 260.756589][ T7743] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 260.798733][ T7984] netlink: 36 bytes leftover after parsing attributes in process `syz.2.526'. [ 260.837057][ T7984] netlink: 16 bytes leftover after parsing attributes in process `syz.2.526'. [ 260.865545][ T7984] netlink: 36 bytes leftover after parsing attributes in process `syz.2.526'. [ 260.922037][ T7984] netlink: 36 bytes leftover after parsing attributes in process `syz.2.526'. [ 261.239031][ T7992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.570263][ T7994] vti0: entered promiscuous mode [ 262.005827][ T7679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.107312][ T7743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.125024][ T8001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.530'. [ 262.135572][ T8001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.530'. [ 262.261194][ T7743] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.308131][ T6138] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.315525][ T6138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.557830][ T6138] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.565077][ T6138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.648965][ T8015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.531'. [ 264.470077][ T8026] netlink: 'syz.2.533': attribute type 4 has an invalid length. [ 264.528338][ T8028] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.975155][ T7679] veth0_vlan: entered promiscuous mode [ 264.990208][ T7679] veth1_vlan: entered promiscuous mode [ 265.245563][ T7679] veth0_macvtap: entered promiscuous mode [ 265.276511][ T7679] veth1_macvtap: entered promiscuous mode [ 265.326856][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.391019][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.459011][ T7679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.565076][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.597605][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.622165][ T7679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.746493][ T7679] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.768935][ T7679] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.778401][ T7679] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.855658][ T7679] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.037449][ T7743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.832301][ T7743] veth0_vlan: entered promiscuous mode [ 266.884021][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.923517][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.010922][ T7743] veth1_vlan: entered promiscuous mode [ 267.151951][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.170440][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.895054][ T7743] veth0_macvtap: entered promiscuous mode [ 267.922183][ T7743] veth1_macvtap: entered promiscuous mode [ 268.295431][ T7743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.418996][ T7743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.544512][ T7743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.662910][ T7743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.910404][ T7743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.923401][ T7743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.934194][ T7743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.945336][ T7743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.955994][ T7743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.967684][ T7743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.002916][ T7743] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.012219][ T7743] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.029641][ T7743] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.038410][ T7743] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.101955][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.546'. [ 269.657714][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.718015][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.736340][ T8103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.547'. [ 270.341834][ T8106] netlink: 'syz.0.548': attribute type 10 has an invalid length. [ 270.378371][ T6138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.415565][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.548'. [ 270.464607][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.516531][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.590174][ T6138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.791332][ T6138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.141812][ T6138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.589876][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.603037][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.616455][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.626606][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.635694][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.649140][ T6138] bridge_slave_1: left allmulticast mode [ 272.729530][ T6138] bridge_slave_1: left promiscuous mode [ 272.738131][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.829590][ T6138] bridge_slave_0: left allmulticast mode [ 272.837009][ T6138] bridge_slave_0: left promiscuous mode [ 272.872723][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.150422][ T1207] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 273.344450][ T1207] usb 1-1: Using ep0 maxpacket: 32 [ 273.362108][ T1207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.389481][ T1207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.439556][ T1207] usb 1-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 273.476651][ T1207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.520190][ T1207] usb 1-1: config 0 descriptor?? [ 273.712117][ T8167] ALSA: mixer_oss: invalid OSS volume 'µÝ' [ 273.898329][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.555'. [ 273.972964][ T1207] apple 0003:05AC:029C.0003: unbalanced collection at end of report description [ 274.002692][ T1207] apple 0003:05AC:029C.0003: parse failed [ 274.019553][ T1207] apple 0003:05AC:029C.0003: probe with driver apple failed with error -22 [ 274.274429][ T8154] hpfs: Bad magic ... probably not HPFS [ 274.341896][ T6138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.403471][ T47] usb 1-1: USB disconnect, device number 15 [ 274.647898][ T6138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.821614][ T5831] Bluetooth: hci0: command tx timeout [ 274.916682][ T6138] bond0 (unregistering): Released all slaves [ 275.331349][ T8198] FAULT_INJECTION: forcing a failure. [ 275.331349][ T8198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.346561][ T8198] CPU: 0 UID: 0 PID: 8198 Comm: syz.2.559 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 275.346591][ T8198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 275.346603][ T8198] Call Trace: [ 275.346611][ T8198] [ 275.346620][ T8198] dump_stack_lvl+0x189/0x250 [ 275.346651][ T8198] ? __lock_acquire+0xaac/0xd20 [ 275.346693][ T8198] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.346720][ T8198] ? __pfx__printk+0x10/0x10 [ 275.346751][ T8198] ? __might_fault+0xb0/0x130 [ 275.346794][ T8198] should_fail_ex+0x414/0x560 [ 275.346832][ T8198] _copy_to_iter+0x1db/0x15a0 [ 275.346862][ T8198] ? chacha_block_generic+0xad/0xda0 [ 275.346888][ T8198] ? __pfx__copy_to_iter+0x10/0x10 [ 275.346929][ T8198] get_random_bytes_user+0x1a0/0x380 [ 275.346960][ T8198] ? __pfx_get_random_bytes_user+0x10/0x10 [ 275.347002][ T8198] ? bpf_lsm_file_permission+0x9/0x20 [ 275.347024][ T8198] ? security_file_permission+0x75/0x290 [ 275.347048][ T8198] ? rw_verify_area+0x258/0x650 [ 275.347077][ T8198] ? __pfx_urandom_read_iter+0x10/0x10 [ 275.347101][ T8198] __io_read+0x6f6/0x14f0 [ 275.347136][ T8198] ? __lock_acquire+0xaac/0xd20 [ 275.347178][ T8198] ? __pfx___io_read+0x10/0x10 [ 275.347209][ T8198] ? __fget_files+0x2a/0x420 [ 275.347242][ T8198] ? __fget_files+0x2a/0x420 [ 275.347275][ T8198] io_read+0x1c/0x60 [ 275.347303][ T8198] __io_issue_sqe+0x1d3/0x3b0 [ 275.347337][ T8198] io_issue_sqe+0x165/0x1040 [ 275.347375][ T8198] io_submit_sqes+0xa65/0x1d20 [ 275.347441][ T8198] __se_sys_io_uring_enter+0x2df/0x2b20 [ 275.347494][ T8198] ? ksys_write+0x1cb/0x250 [ 275.347524][ T8198] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 275.347552][ T8198] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 275.347573][ T8198] ? __pfx_vfs_write+0x10/0x10 [ 275.347602][ T8198] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 275.347629][ T8198] ? __fget_files+0x3a0/0x420 [ 275.347672][ T8198] ? fput+0xa0/0xd0 [ 275.347693][ T8198] ? ksys_write+0x1f0/0x250 [ 275.347718][ T8198] ? rcu_is_watching+0x15/0xb0 [ 275.347756][ T8198] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 275.347789][ T8198] do_syscall_64+0xf6/0x210 [ 275.347812][ T8198] ? clear_bhb_loop+0x45/0xa0 [ 275.347837][ T8198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.347857][ T8198] RIP: 0033:0x7fbc71f8e969 [ 275.347875][ T8198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.347893][ T8198] RSP: 002b:00007fbc72dbb038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 275.347915][ T8198] RAX: ffffffffffffffda RBX: 00007fbc721b5fa0 RCX: 00007fbc71f8e969 [ 275.347930][ T8198] RDX: 0000000000008daf RSI: 00000000000048e9 RDI: 0000000000000004 [ 275.347942][ T8198] RBP: 00007fbc72dbb090 R08: 0000000000000000 R09: 0000000000000000 [ 275.347955][ T8198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.347966][ T8198] R13: 0000000000000000 R14: 00007fbc721b5fa0 R15: 00007ffd8618f468 [ 275.347999][ T8198] [ 275.851306][ T8202] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 276.111707][ T47] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 276.319567][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 276.468694][ T8232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.566'. [ 276.979722][ T5831] Bluetooth: hci0: command tx timeout [ 277.050784][ T47] usb 2-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 277.130088][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 277.156807][ T47] usb 2-1: Product: syz [ 277.161658][ T47] usb 2-1: Manufacturer: syz [ 277.166351][ T47] usb 2-1: SerialNumber: syz [ 277.232212][ T47] usb 2-1: config 0 descriptor?? [ 277.295930][ T47] usbtest 2-1:0.0: FX2 device [ 277.311255][ T47] usbtest 2-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 277.334917][ T8236] FAULT_INJECTION: forcing a failure. [ 277.334917][ T8236] name failslab, interval 1, probability 0, space 0, times 0 [ 277.370023][ T8236] CPU: 1 UID: 0 PID: 8236 Comm: syz.2.567 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 277.370054][ T8236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 277.370067][ T8236] Call Trace: [ 277.370075][ T8236] [ 277.370084][ T8236] dump_stack_lvl+0x189/0x250 [ 277.370120][ T8236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.370147][ T8236] ? __pfx__printk+0x10/0x10 [ 277.370196][ T8236] ? __pfx___might_resched+0x10/0x10 [ 277.370232][ T8236] should_fail_ex+0x414/0x560 [ 277.370268][ T8236] should_failslab+0xa8/0x100 [ 277.370299][ T8236] kmem_cache_alloc_noprof+0x73/0x3c0 [ 277.370324][ T8236] ? security_file_alloc+0x34/0x330 [ 277.370343][ T8236] security_file_alloc+0x34/0x330 [ 277.370360][ T8236] init_file+0x93/0x2f0 [ 277.370377][ T8236] alloc_empty_file+0x6e/0x1d0 [ 277.370397][ T8236] dentry_open+0x44/0xa0 [ 277.370412][ T8236] ovl_dir_read+0x26/0x570 [ 277.370431][ T8236] ? ovl_path_next+0x23c/0x470 [ 277.370458][ T8236] ovl_dir_read_merged+0x196/0x350 [ 277.370477][ T8236] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 277.370497][ T8236] ? __pfx_ovl_fill_merge+0x10/0x10 [ 277.370521][ T8236] ? __kasan_kmalloc+0x93/0xb0 [ 277.370545][ T8236] ? ovl_iterate+0xce8/0x1f20 [ 277.370564][ T8236] ovl_iterate+0xdaf/0x1f20 [ 277.370580][ T8236] ? check_path+0x21/0x40 [ 277.370600][ T8236] ? check_noncircular+0xe0/0x160 [ 277.370628][ T8236] ? validate_chain+0x897/0x2140 [ 277.370653][ T8236] ? __pfx_ovl_iterate+0x10/0x10 [ 277.370684][ T8236] ? __lock_acquire+0xaac/0xd20 [ 277.370709][ T8236] ? wrap_directory_iterator+0x5a/0xe0 [ 277.370739][ T8236] ? down_write+0x162/0x1f0 [ 277.370755][ T8236] ? __pfx_down_write+0x10/0x10 [ 277.370776][ T8236] ? __pfx_ovl_iterate+0x10/0x10 [ 277.370794][ T8236] wrap_directory_iterator+0x93/0xe0 [ 277.370815][ T8236] iterate_dir+0x5ac/0x770 [ 277.370837][ T8236] __se_sys_getdents64+0xe4/0x260 [ 277.370859][ T8236] ? __pfx___se_sys_getdents64+0x10/0x10 [ 277.370876][ T8236] ? ksys_write+0x1f0/0x250 [ 277.370893][ T8236] ? __pfx_filldir64+0x10/0x10 [ 277.370918][ T8236] ? do_syscall_64+0xba/0x210 [ 277.370936][ T8236] do_syscall_64+0xf6/0x210 [ 277.370952][ T8236] ? clear_bhb_loop+0x45/0xa0 [ 277.370970][ T8236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.370986][ T8236] RIP: 0033:0x7fbc71f8e969 [ 277.371004][ T8236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.371022][ T8236] RSP: 002b:00007fbc72dbb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 277.371043][ T8236] RAX: ffffffffffffffda RBX: 00007fbc721b5fa0 RCX: 00007fbc71f8e969 [ 277.371058][ T8236] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000000003 [ 277.371070][ T8236] RBP: 00007fbc72dbb090 R08: 0000000000000000 R09: 0000000000000000 [ 277.371082][ T8236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.371096][ T8236] R13: 0000000000000000 R14: 00007fbc721b5fa0 R15: 00007ffd8618f468 [ 277.371120][ T8236] [ 277.376222][ T6138] hsr_slave_0: left promiscuous mode [ 277.620479][ T1207] usb 2-1: USB disconnect, device number 9 [ 277.718183][ T6138] hsr_slave_1: left promiscuous mode [ 277.728428][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.793798][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.844774][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.857548][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.896752][ T6138] veth1_macvtap: left promiscuous mode [ 277.902652][ T6138] veth0_macvtap: left promiscuous mode [ 277.910363][ T6138] veth1_vlan: left promiscuous mode [ 277.916157][ T6138] veth0_vlan: left promiscuous mode [ 278.651291][ T8247] netlink: 36 bytes leftover after parsing attributes in process `syz.2.570'. [ 278.666989][ T8247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.570'. [ 278.688137][ T8247] netlink: 36 bytes leftover after parsing attributes in process `syz.2.570'. [ 278.699245][ T8247] netlink: 36 bytes leftover after parsing attributes in process `syz.2.570'. [ 279.060309][ T5831] Bluetooth: hci0: command tx timeout [ 280.120317][ T5873] kernel write not supported for file /adsp1 (pid: 5873 comm: kworker/0:5) [ 280.420734][ T8264] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.149623][ T5831] Bluetooth: hci0: command tx timeout [ 281.404976][ T6138] team0 (unregistering): Port device team_slave_1 removed [ 281.490525][ T6138] team0 (unregistering): Port device team_slave_0 removed [ 283.424366][ T8142] chnl_net:caif_netlink_parms(): no params data found [ 283.785025][ T8304] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 285.250641][ T8142] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.269865][ T8142] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.328985][ T8142] bridge_slave_0: entered allmulticast mode [ 285.448821][ T8142] bridge_slave_0: entered promiscuous mode [ 285.639675][ T8142] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.667324][ T8142] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.727525][ T8142] bridge_slave_1: entered allmulticast mode [ 285.786374][ T8142] bridge_slave_1: entered promiscuous mode [ 286.057291][ T8142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.113519][ T8142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.153852][ T8355] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 286.520015][ T8142] team0: Port device team_slave_0 added [ 286.629968][ T8363] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 287.696595][ T8142] team0: Port device team_slave_1 added [ 288.515192][ T8378] futex_wake_op: syz.0.605 tries to shift op by 32; fix this program [ 288.755763][ T8142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.766564][ T8142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.798459][ T8142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.829228][ T8388] vlan2: entered allmulticast mode [ 288.881234][ T8388] bond0: entered allmulticast mode [ 288.991363][ T8142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.003158][ T8142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.069682][ T8142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.701030][ T8142] hsr_slave_0: entered promiscuous mode [ 289.740440][ T8142] hsr_slave_1: entered promiscuous mode [ 289.763462][ T8142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.786168][ T8142] Cannot create hsr debugfs directory [ 291.183976][ T8430] netlink: 36 bytes leftover after parsing attributes in process `syz.1.612'. [ 291.200405][ T8430] netlink: 16 bytes leftover after parsing attributes in process `syz.1.612'. [ 291.209833][ T8430] netlink: 36 bytes leftover after parsing attributes in process `syz.1.612'. [ 291.219462][ T8430] netlink: 36 bytes leftover after parsing attributes in process `syz.1.612'. [ 291.287599][ T8434] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 294.284849][ T8458] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 294.430241][ T8458] Unknown status report in ack skb [ 294.599670][ T8467] netlink: 36 bytes leftover after parsing attributes in process `syz.3.620'. [ 295.527955][ T8480] netlink: 36 bytes leftover after parsing attributes in process `syz.0.623'. [ 295.575234][ T8480] netlink: 16 bytes leftover after parsing attributes in process `syz.0.623'. [ 295.663257][ T8480] netlink: 36 bytes leftover after parsing attributes in process `syz.0.623'. [ 295.687157][ T8480] netlink: 36 bytes leftover after parsing attributes in process `syz.0.623'. [ 295.725646][ T8142] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 295.772248][ T8142] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 295.821714][ T8142] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 295.869710][ T1207] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 295.888948][ T8142] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 296.082723][ T1207] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 296.098662][ T8142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.105439][ T1207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.105470][ T1207] usb 3-1: Product: syz [ 296.105486][ T1207] usb 3-1: Manufacturer: syz [ 296.105502][ T1207] usb 3-1: SerialNumber: syz [ 296.122124][ T1207] usb 3-1: config 0 descriptor?? [ 296.216323][ T8142] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.266039][ T8082] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.273283][ T8082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.593960][ T1207] int51x1 3-1:0.0: probe with driver int51x1 failed with error -22 [ 297.296983][ T8142] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 297.970567][ T8142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.983262][ T8505] netlink: 'syz.0.629': attribute type 5 has an invalid length. [ 297.991302][ T8506] netlink: 'syz.1.628': attribute type 5 has an invalid length. [ 298.011339][ T6138] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.018551][ T6138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.087389][ T5930] usb 3-1: USB disconnect, device number 16 [ 298.129894][ T47] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 298.140905][ T59] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 298.379692][ T59] usb 1-1: device descriptor read/64, error -71 [ 298.529118][ T47] usb 2-1: config index 0 descriptor too short (expected 3090, got 18) [ 298.776319][ T47] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 298.887790][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.933762][ T59] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 298.972853][ T47] usb 2-1: Product: syz [ 298.989584][ T47] usb 2-1: Manufacturer: syz [ 299.004062][ T47] usb 2-1: SerialNumber: syz [ 299.022449][ T47] usb 2-1: config 0 descriptor?? [ 299.109700][ T59] usb 1-1: device descriptor read/64, error -71 [ 299.125924][ T47] usb 2-1: interface 1 not found [ 299.221828][ T59] usb usb1-port1: attempt power cycle [ 300.240254][ T8535] FAULT_INJECTION: forcing a failure. [ 300.240254][ T8535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.265529][ T8535] CPU: 0 UID: 0 PID: 8535 Comm: syz.0.633 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 300.265561][ T8535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 300.265574][ T8535] Call Trace: [ 300.265581][ T8535] [ 300.265591][ T8535] dump_stack_lvl+0x189/0x250 [ 300.265623][ T8535] ? __lock_acquire+0xaac/0xd20 [ 300.265653][ T8535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.265680][ T8535] ? __pfx__printk+0x10/0x10 [ 300.265711][ T8535] ? __might_fault+0xb0/0x130 [ 300.265754][ T8535] should_fail_ex+0x414/0x560 [ 300.265791][ T8535] _copy_from_user+0x2d/0xb0 [ 300.265819][ T8535] memdup_user+0x5e/0xd0 [ 300.265844][ T8535] strndup_user+0x68/0xd0 [ 300.265870][ T8535] bpf_uprobe_multi_link_attach+0x2af/0xda0 [ 300.265908][ T8535] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 300.265929][ T8535] ? __fget_files+0x2a/0x420 [ 300.265963][ T8535] ? __fget_files+0x2a/0x420 [ 300.265990][ T8535] ? __fget_files+0x3a0/0x420 [ 300.266018][ T8535] ? __fget_files+0x2a/0x420 [ 300.266051][ T8535] ? bpf_prog_attach_check_attach_type+0x453/0x540 [ 300.266084][ T8535] link_create+0x70a/0x8a0 [ 300.266115][ T8535] __sys_bpf+0x599/0x860 [ 300.266141][ T8535] ? __pfx___sys_bpf+0x10/0x10 [ 300.266178][ T8535] ? ksys_write+0x1f0/0x250 [ 300.266202][ T8535] ? rcu_is_watching+0x15/0xb0 [ 300.266248][ T8535] __x64_sys_bpf+0x7c/0x90 [ 300.266270][ T8535] do_syscall_64+0xf6/0x210 [ 300.266292][ T8535] ? clear_bhb_loop+0x45/0xa0 [ 300.266317][ T8535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.266336][ T8535] RIP: 0033:0x7fcfb298e969 [ 300.266355][ T8535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.266373][ T8535] RSP: 002b:00007fcfb3730038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 300.266395][ T8535] RAX: ffffffffffffffda RBX: 00007fcfb2bb5fa0 RCX: 00007fcfb298e969 [ 300.266410][ T8535] RDX: 000000000000003c RSI: 00002000000005c0 RDI: 000000000000001c [ 300.266423][ T8535] RBP: 00007fcfb3730090 R08: 0000000000000000 R09: 0000000000000000 [ 300.266435][ T8535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.266447][ T8535] R13: 0000000000000000 R14: 00007fcfb2bb5fa0 R15: 00007fff4e992178 [ 300.266484][ T8535] [ 300.692382][ T1207] usb 2-1: USB disconnect, device number 10 [ 300.802856][ T8142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.193059][ T8553] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 301.868047][ T8564] input: syz1 as /devices/virtual/input/input10 [ 302.434713][ T1207] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 302.732987][ T1207] usb 2-1: too many configurations: 29, using maximum allowed: 8 [ 303.003458][ T1207] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 303.039598][ T1207] usb 2-1: config 0 has no interface number 0 [ 303.045910][ T1207] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 303.098950][ T8588] netlink: 'syz.0.643': attribute type 30 has an invalid length. [ 303.151848][ T1207] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 303.196895][ T1207] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 303.215648][ T1207] usb 2-1: config 0 has no interface number 0 [ 303.237808][ T1207] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 303.254757][ T8592] netlink: 36 bytes leftover after parsing attributes in process `syz.3.644'. [ 303.264280][ T1207] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 303.428043][ T8142] veth0_vlan: entered promiscuous mode [ 303.445355][ T8142] veth1_vlan: entered promiscuous mode [ 303.477912][ T1207] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 303.504509][ T1207] usb 2-1: config 0 has no interface number 0 [ 303.526933][ T1207] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 303.560421][ T1207] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 303.564735][ T8142] veth0_macvtap: entered promiscuous mode [ 303.591329][ T8142] veth1_macvtap: entered promiscuous mode [ 303.603420][ T1207] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 303.617281][ T1207] usb 2-1: config 0 has no interface number 0 [ 303.630761][ T1207] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 303.667833][ T8142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.672140][ T1207] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 303.685757][ T8142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.704464][ T8142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.715180][ T8142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.746588][ T8142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.774854][ T8142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.789273][ T8142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.806363][ T8142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.818164][ T8142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.836811][ T8142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.877380][ T8142] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.907845][ T8142] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.917352][ T8142] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.926495][ T8142] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.926766][ T1207] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 303.944181][ T1207] usb 2-1: config 0 has no interface number 0 [ 303.944236][ T1207] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 304.659790][ T8602] netlink: 'syz.0.646': attribute type 5 has an invalid length. [ 304.700996][ T1207] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 304.806491][ T1207] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 304.832846][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 304.836962][ T8608] program syz.3.649 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.860443][ T1207] usb 2-1: config 0 has no interface number 0 [ 304.880904][ T1207] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 304.914996][ T1207] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 304.937019][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.953118][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.965005][ T1207] usb 2-1: unable to read config index 6 descriptor/start: -71 [ 304.992261][ T1207] usb 2-1: can't read configurations, error -71 [ 305.028651][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.048293][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.058635][ T9] usb 1-1: config index 0 descriptor too short (expected 3090, got 18) [ 305.083463][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 305.103376][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.149520][ T9] usb 1-1: Product: syz [ 305.185260][ T9] usb 1-1: Manufacturer: syz [ 305.207259][ T9] usb 1-1: SerialNumber: syz [ 305.241147][ T9] usb 1-1: config 0 descriptor?? [ 305.254367][ T9] usb 1-1: interface 1 not found [ 305.322930][ T8623] tipc: Started in network mode [ 305.328001][ T8623] tipc: Node identity 7, cluster identity 4711 [ 305.334302][ T8623] tipc: Node number set to 7 [ 305.802313][ T8627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.652'. [ 306.741408][ T5871] usb 1-1: USB disconnect, device number 19 [ 309.524331][ T6138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.637729][ T8654] netlink: 36 bytes leftover after parsing attributes in process `syz.1.659'. [ 309.778333][ T6138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.820617][ T30] audit: type=1800 audit(1745939640.722:133): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.658" name="/" dev="fuse" ino=1 res=0 errno=0 [ 309.894577][ T6138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.656028][ T8664] program syz.2.662 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.747841][ T6138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.959110][ T8673] FAULT_INJECTION: forcing a failure. [ 310.959110][ T8673] name failslab, interval 1, probability 0, space 0, times 0 [ 311.047599][ T8673] CPU: 1 UID: 0 PID: 8673 Comm: syz.3.665 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 311.047630][ T8673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 311.047647][ T8673] Call Trace: [ 311.047656][ T8673] [ 311.047669][ T8673] dump_stack_lvl+0x189/0x250 [ 311.047705][ T8673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.047733][ T8673] ? __pfx__printk+0x10/0x10 [ 311.047771][ T8673] ? __pfx___might_resched+0x10/0x10 [ 311.047799][ T8673] ? fs_reclaim_acquire+0x7d/0x100 [ 311.047826][ T8673] should_fail_ex+0x414/0x560 [ 311.047862][ T8673] ? xt_alloc_table_info+0x3b/0xa0 [ 311.047882][ T8673] should_failslab+0xa8/0x100 [ 311.047915][ T8673] __kvmalloc_node_noprof+0x168/0x5e0 [ 311.047946][ T8673] ? xt_alloc_table_info+0x3b/0xa0 [ 311.047972][ T8673] xt_alloc_table_info+0x3b/0xa0 [ 311.047993][ T8673] do_ip6t_set_ctl+0x88a/0xce0 [ 311.048021][ T8673] ? rcu_is_watching+0x15/0xb0 [ 311.048050][ T8673] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 311.048091][ T8673] ? __pfx___mutex_lock+0x10/0x10 [ 311.048112][ T8673] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 311.048139][ T8673] ? rcu_read_lock_any_held+0xb3/0x120 [ 311.048170][ T8673] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 311.048204][ T8673] ? vfs_write+0x8d8/0xa90 [ 311.048234][ T8673] nf_setsockopt+0x26c/0x290 [ 311.048261][ T8673] rawv6_setsockopt+0x23b/0x5b0 [ 311.048287][ T8673] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 311.048320][ T8673] ? sock_common_setsockopt+0x36/0xc0 [ 311.048350][ T8673] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 311.048382][ T8673] do_sock_setsockopt+0x257/0x3e0 [ 311.048407][ T8673] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 311.048425][ T8673] ? __fget_files+0x2a/0x420 [ 311.048460][ T8673] ? __fget_files+0x3a0/0x420 [ 311.048489][ T8673] ? __fget_files+0x2a/0x420 [ 311.048527][ T8673] __x64_sys_setsockopt+0x18b/0x220 [ 311.048556][ T8673] do_syscall_64+0xf6/0x210 [ 311.048579][ T8673] ? clear_bhb_loop+0x45/0xa0 [ 311.048604][ T8673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.048624][ T8673] RIP: 0033:0x7f3035b8e969 [ 311.048642][ T8673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.048660][ T8673] RSP: 002b:00007f3036984038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 311.048681][ T8673] RAX: ffffffffffffffda RBX: 00007f3035db5fa0 RCX: 00007f3035b8e969 [ 311.048696][ T8673] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 311.048708][ T8673] RBP: 00007f3036984090 R08: 0000000000000540 R09: 0000000000000000 [ 311.048721][ T8673] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.048734][ T8673] R13: 0000000000000000 R14: 00007f3035db5fa0 R15: 00007ffdfc79ce58 [ 311.048766][ T8673] [ 311.442331][ T8681] netlink: 'syz.0.666': attribute type 5 has an invalid length. [ 311.889709][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 311.985038][ T6138] bridge_slave_1: left allmulticast mode [ 312.022833][ T6138] bridge_slave_1: left promiscuous mode [ 312.047285][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.062485][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 312.082174][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 312.092419][ T6138] bridge_slave_0: left allmulticast mode [ 312.098157][ T6138] bridge_slave_0: left promiscuous mode [ 312.106783][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.128758][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 312.138564][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 312.147207][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 312.172902][ T9] usb 1-1: config index 0 descriptor too short (expected 3090, got 18) [ 312.184714][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 312.202653][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.212157][ T9] usb 1-1: Product: syz [ 312.216365][ T9] usb 1-1: Manufacturer: syz [ 312.226265][ T9] usb 1-1: SerialNumber: syz [ 312.242805][ T9] usb 1-1: config 0 descriptor?? [ 312.337165][ T9] usb 1-1: interface 1 not found [ 313.350368][ T8701] netlink: 48 bytes leftover after parsing attributes in process `syz.1.672'. [ 314.095411][ T1207] usb 1-1: USB disconnect, device number 20 [ 314.179590][ T5831] Bluetooth: hci0: command tx timeout [ 314.214814][ T8705] netlink: 36 bytes leftover after parsing attributes in process `syz.3.673'. [ 314.722138][ T6138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.738170][ T6138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.752605][ T6138] bond0 (unregistering): Released all slaves [ 315.497529][ T8738] Bluetooth: MGMT ver 1.23 [ 316.271984][ T5828] Bluetooth: hci0: command tx timeout [ 317.409724][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.454146][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.339569][ T5828] Bluetooth: hci0: command tx timeout [ 318.541663][ T5872] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 318.584723][ T8760] netlink: 'syz.0.685': attribute type 5 has an invalid length. [ 318.712371][ T5872] usb 1-1: config index 0 descriptor too short (expected 3090, got 18) [ 318.747476][ T5872] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 318.767609][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.790402][ T5872] usb 1-1: Product: syz [ 318.794791][ T5872] usb 1-1: Manufacturer: syz [ 319.789867][ T5872] usb 1-1: SerialNumber: syz [ 320.759096][ T5828] Bluetooth: hci0: command tx timeout [ 320.843161][ T5872] usb 1-1: config 0 descriptor?? [ 320.895722][ T5872] usb 1-1: can't set config #0, error -71 [ 320.989673][ T5872] usb 1-1: USB disconnect, device number 21 [ 321.123739][ T6138] hsr_slave_0: left promiscuous mode [ 321.147764][ T6138] hsr_slave_1: left promiscuous mode [ 321.217686][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.256140][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.445145][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.483345][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.572131][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.864533][ T8793] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 321.894556][ T8793] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 321.942956][ T6138] veth1_macvtap: left promiscuous mode [ 322.351970][ T6138] veth0_macvtap: left promiscuous mode [ 322.357730][ T6138] veth1_vlan: left promiscuous mode [ 322.453014][ T6138] veth0_vlan: left promiscuous mode [ 322.581869][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.337460][ T6138] team0 (unregistering): Port device team_slave_1 removed [ 323.359466][ T5924] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 323.398037][ T6138] team0 (unregistering): Port device team_slave_0 removed [ 323.550496][ T5924] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.561060][ T5924] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 323.576315][ T5924] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 323.587179][ T5924] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 323.596035][ T5924] usb 2-1: Manufacturer: syz [ 323.606774][ T5924] usb 2-1: config 0 descriptor?? [ 323.619814][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.794121][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.094100][ T8687] chnl_net:caif_netlink_parms(): no params data found [ 324.266343][ T8805] netlink: 132 bytes leftover after parsing attributes in process `syz.3.693'. [ 324.683778][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.388939][ T8687] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.470139][ T8687] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.503928][ T8687] bridge_slave_0: entered allmulticast mode [ 325.522779][ T8687] bridge_slave_0: entered promiscuous mode [ 325.542182][ T8687] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.549893][ T8687] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.559764][ T8687] bridge_slave_1: entered allmulticast mode [ 325.567842][ T8687] bridge_slave_1: entered promiscuous mode [ 325.700488][ T5899] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 325.708859][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.806478][ T8687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.855382][ T8687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.899697][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 326.055349][ T5899] usb 3-1: config 0 interface 0 has no altsetting 0 [ 326.263435][ T5899] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 326.439524][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.447681][ T5899] usb 3-1: Product: syz [ 326.453565][ T5899] usb 3-1: Manufacturer: syz [ 326.458374][ T5899] usb 3-1: SerialNumber: syz [ 326.507522][ T59] usb 2-1: USB disconnect, device number 13 [ 326.525102][ T5899] usb 3-1: config 0 descriptor?? [ 326.820134][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.887120][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.901492][ T8687] team0: Port device team_slave_0 added [ 326.911288][ T8687] team0: Port device team_slave_1 added [ 326.980340][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.052077][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 327.668020][ T5899] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 327.730500][ T8851] netlink: 'syz.0.698': attribute type 5 has an invalid length. [ 327.871523][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.887691][ T8687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.915111][ T8687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.954865][ T5924] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 327.961050][ T5899] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 327.977034][ T8687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.075448][ T8687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.086564][ T8687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.116666][ T5899] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 328.204345][ T8687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.318283][ T5924] usb 1-1: config index 0 descriptor too short (expected 3090, got 18) [ 328.413049][ T5924] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 328.424358][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.543196][ T5924] usb 1-1: Product: syz [ 328.586265][ T5924] usb 1-1: Manufacturer: syz [ 328.591564][ T5924] usb 1-1: SerialNumber: syz [ 328.600337][ T5924] usb 1-1: config 0 descriptor?? [ 328.665322][ T5924] usb 1-1: interface 1 not found [ 328.764055][ T8687] hsr_slave_0: entered promiscuous mode [ 328.772169][ T8687] hsr_slave_1: entered promiscuous mode [ 328.778934][ T8687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.789518][ T8687] Cannot create hsr debugfs directory [ 328.902646][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.284314][ T5924] usb 3-1: USB disconnect, device number 17 [ 329.539814][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.945298][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.299166][ T5924] usb 1-1: USB disconnect, device number 22 [ 330.307863][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.316822][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.325848][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.667196][ T8896] sp0: Synchronizing with TNC [ 332.337734][ T8903] bridge_slave_0: left allmulticast mode [ 332.357062][ T8903] bridge_slave_0: left promiscuous mode [ 332.367014][ T8903] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.410193][ T5871] net_ratelimit: 1 callbacks suppressed [ 332.410216][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.471712][ T8903] bridge_slave_1: left allmulticast mode [ 332.491383][ T8903] bridge_slave_1: left promiscuous mode [ 332.534250][ T8903] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.559112][ T8913] netlink: 'syz.1.708': attribute type 10 has an invalid length. [ 332.588732][ T8903] bond0: (slave bond_slave_0): Releasing backup interface [ 332.646029][ T8903] bond0: (slave bond_slave_1): Releasing backup interface [ 332.707131][ T8903] team0: Port device team_slave_0 removed [ 332.721572][ T8903] team0: Port device team_slave_1 removed [ 332.728489][ T8903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.736055][ T8903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.389605][ T5831] Bluetooth: hci0: command 0x0405 tx timeout [ 333.435228][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.444925][ T8903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.525137][ T8903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.903867][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.969725][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.008200][ T8904] team0: Mode changed to "loadbalance" [ 334.068913][ T8907] vlan0: entered promiscuous mode [ 334.192688][ T8907] team0: Port device vlan0 added [ 334.246272][ T8928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 334.414571][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.349862][ T1207] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 335.548983][ T8913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.550008][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.567210][ T8913] team0: Port device bond0 added [ 335.614025][ T1207] usb 4-1: config index 0 descriptor too short (expected 3090, got 18) [ 335.665910][ T1207] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 335.675253][ T8931] netlink: 'syz.3.715': attribute type 5 has an invalid length. [ 335.755696][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.785618][ T1207] usb 4-1: Product: syz [ 335.806615][ T1207] usb 4-1: Manufacturer: syz [ 335.826134][ T1207] usb 4-1: SerialNumber: syz [ 335.861238][ T1207] usb 4-1: config 0 descriptor?? [ 335.898547][ T1207] usb 4-1: interface 1 not found [ 335.978783][ T8687] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 336.870383][ T8687] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 336.889511][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.931576][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.041871][ T8687] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 337.081351][ T8687] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 337.151207][ T8947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.160251][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.315350][ T59] usb 4-1: USB disconnect, device number 12 [ 337.769891][ T8687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.794662][ T8687] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.858194][ T4494] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.865450][ T4494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.879446][ T47] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 337.887242][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.894505][ T4494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.060130][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 338.172896][ T47] usb 3-1: config 1 has an invalid descriptor of length 171, skipping remainder of the config [ 338.308673][ T47] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.441820][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.540102][ T47] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 338.556881][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.623324][ T47] usb 3-1: Product: syz [ 338.677967][ T47] usb 3-1: Manufacturer: syz [ 338.704414][ T47] usb 3-1: SerialNumber: syz [ 338.773666][ T8975] netlink: 28 bytes leftover after parsing attributes in process `syz.1.725'. [ 338.801182][ T8975] netlink: 28 bytes leftover after parsing attributes in process `syz.1.725'. [ 338.858419][ T8975] dummy0: entered promiscuous mode [ 338.886311][ T8975] bond0: entered promiscuous mode [ 338.905034][ T8975] bond0: left promiscuous mode [ 338.923390][ T8975] dummy0: left promiscuous mode [ 338.969298][ T5828] Bluetooth: hci2: unexpected event for opcode 0x0c05 [ 338.986053][ T47] usb 3-1: 0:2 : does not exist [ 339.009335][ T47] usb 3-1: unit 9 not found! [ 339.025522][ T8985] FAULT_INJECTION: forcing a failure. [ 339.025522][ T8985] name failslab, interval 1, probability 0, space 0, times 0 [ 339.094924][ T8985] CPU: 1 UID: 0 PID: 8985 Comm: syz.3.727 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 339.094957][ T8985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 339.094970][ T8985] Call Trace: [ 339.094979][ T8985] [ 339.094989][ T8985] dump_stack_lvl+0x189/0x250 [ 339.095026][ T8985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.095054][ T8985] ? __pfx__printk+0x10/0x10 [ 339.095093][ T8985] ? ref_tracker_alloc+0x318/0x460 [ 339.095117][ T8985] should_fail_ex+0x414/0x560 [ 339.095159][ T8985] should_failslab+0xa8/0x100 [ 339.095193][ T8985] kmem_cache_alloc_noprof+0x73/0x3c0 [ 339.095221][ T8985] ? skb_clone+0x212/0x3a0 [ 339.095249][ T8985] skb_clone+0x212/0x3a0 [ 339.095276][ T8985] __netlink_deliver_tap+0x404/0x850 [ 339.095322][ T8985] ? netlink_deliver_tap+0x2e/0x1b0 [ 339.095354][ T8985] netlink_deliver_tap+0x19c/0x1b0 [ 339.095386][ T8985] netlink_unicast+0x72f/0x8d0 [ 339.095427][ T8985] netlink_sendmsg+0x805/0xb30 [ 339.095468][ T8985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.095508][ T8985] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 339.095529][ T8985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.095560][ T8985] __sock_sendmsg+0x219/0x270 [ 339.095591][ T8985] sock_sendmsg+0x158/0x230 [ 339.095621][ T8985] ? __pfx_sock_sendmsg+0x10/0x10 [ 339.095664][ T8985] ? __asan_memset+0x22/0x50 [ 339.095687][ T8985] ? iov_iter_bvec+0xb8/0x180 [ 339.095714][ T8985] splice_to_socket+0x8ff/0xf10 [ 339.095768][ T8985] ? __pfx_splice_to_socket+0x10/0x10 [ 339.095825][ T8985] ? get_pid_task+0x20/0x1f0 [ 339.095865][ T8985] ? rcu_read_lock_any_held+0xb3/0x120 [ 339.095893][ T8985] ? bpf_lsm_file_permission+0x9/0x20 [ 339.095915][ T8985] ? security_file_permission+0x75/0x290 [ 339.095938][ T8985] ? rw_verify_area+0x258/0x650 [ 339.095966][ T8985] ? __pfx_splice_to_socket+0x10/0x10 [ 339.095992][ T8985] do_splice+0xc76/0x1660 [ 339.096050][ T8985] ? __pfx_do_splice+0x10/0x10 [ 339.096089][ T8985] __se_sys_splice+0x2e1/0x460 [ 339.096125][ T8985] ? __pfx___se_sys_splice+0x10/0x10 [ 339.096170][ T8985] ? __x64_sys_splice+0x21/0xf0 [ 339.096200][ T8985] do_syscall_64+0xf6/0x210 [ 339.096222][ T8985] ? clear_bhb_loop+0x45/0xa0 [ 339.096246][ T8985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.096265][ T8985] RIP: 0033:0x7f3035b8e969 [ 339.096282][ T8985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.096299][ T8985] RSP: 002b:00007f3036963038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 339.096319][ T8985] RAX: ffffffffffffffda RBX: 00007f3035db6080 RCX: 00007f3035b8e969 [ 339.096334][ T8985] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 339.096345][ T8985] RBP: 00007f3036963090 R08: 000000000004ffe2 R09: 0000000000000000 [ 339.096357][ T8985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.096369][ T8985] R13: 0000000000000001 R14: 00007f3035db6080 R15: 00007ffdfc79ce58 [ 339.096400][ T8985] [ 339.396769][ T8985] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.727'. [ 339.406744][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.727'. [ 339.563584][ T8687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.660186][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.298506][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.307018][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.419981][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.431350][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.483951][ T47] usb 3-1: USB disconnect, device number 18 [ 340.533188][ T5980] udevd[5980]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.781803][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.796791][ T9010] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.730'. [ 340.811260][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.730'. [ 340.899549][ T9014] netlink: 'syz.2.731': attribute type 5 has an invalid length. [ 342.004058][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.129614][ T9021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.733'. [ 342.164251][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.733'. [ 342.239459][ T5924] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 342.404699][ T5924] usb 3-1: config index 0 descriptor too short (expected 3090, got 18) [ 342.432757][ T8687] veth0_vlan: entered promiscuous mode [ 342.477710][ T8687] veth1_vlan: entered promiscuous mode [ 342.477905][ T5924] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 343.186960][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.709651][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.712644][ T8687] veth0_macvtap: entered promiscuous mode [ 343.844621][ T8687] veth1_macvtap: entered promiscuous mode [ 343.889784][ T5924] usb 3-1: Product: syz [ 343.894028][ T5924] usb 3-1: Manufacturer: syz [ 343.902964][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.912469][ T5924] usb 3-1: SerialNumber: syz [ 343.933709][ T5924] usb 3-1: config 0 descriptor?? [ 343.937116][ T8687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.960322][ T5924] usb 3-1: can't set config #0, error -71 [ 343.984379][ T5924] usb 3-1: USB disconnect, device number 19 [ 343.997442][ T8687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.019889][ T9040] program syz.1.737 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.027671][ T8687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.087668][ T8687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.110872][ T8687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.199736][ T9043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 344.260632][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.852397][ T8687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.889293][ T8687] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.898784][ T8687] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.907918][ T8687] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.917806][ T8687] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.141524][ T9053] 9pnet_fd: Insufficient options for proto=fd [ 345.148850][ T9054] netlink: 64 bytes leftover after parsing attributes in process `syz.0.741'. [ 345.323276][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.087617][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.151688][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.338691][ T4745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.340123][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.356855][ T4745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.489816][ T5871] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 346.691343][ T5871] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 346.709513][ T5871] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 346.742117][ T5871] usb 1-1: config 220 has no interface number 2 [ 346.748511][ T5871] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 346.820984][ T5871] usb 1-1: config 220 interface 0 has no altsetting 0 [ 346.827930][ T5871] usb 1-1: config 220 interface 76 has no altsetting 0 [ 346.878791][ T5871] usb 1-1: config 220 interface 1 has no altsetting 0 [ 346.916978][ T5871] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 346.926890][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.947673][ T5871] usb 1-1: Product: syz [ 346.963805][ T5871] usb 1-1: Manufacturer: syz [ 346.984431][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.990115][ T5871] usb 1-1: SerialNumber: syz [ 347.126525][ T4494] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.264386][ T5871] usb 1-1: selecting invalid altsetting 0 [ 347.300025][ T5871] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 347.322636][ T5871] usb 1-1: No valid video chain found. [ 347.344163][ T5871] usb 1-1: selecting invalid altsetting 0 [ 347.359768][ T5871] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 347.395239][ T5871] usb 1-1: USB disconnect, device number 23 [ 347.401551][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.443635][ T4494] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.641564][ T4494] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.765125][ T4494] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.076753][ T4494] bridge_slave_1: left allmulticast mode [ 348.086787][ T4494] bridge_slave_1: left promiscuous mode [ 348.115171][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.215871][ T4494] bridge_slave_0: left allmulticast mode [ 348.244642][ T4494] bridge_slave_0: left promiscuous mode [ 348.263064][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.429290][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.348696][ T9120] program syz.1.750 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.459771][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.556286][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 349.578858][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 349.587993][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 349.601691][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 349.621058][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 350.023073][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.031516][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.069528][ T5871] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 350.078033][ T4494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.089565][ T4494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.100449][ T4494] bond0 (unregistering): Released all slaves [ 350.131508][ T9126] tipc: Enabled bearer , priority 0 [ 350.143113][ T9129] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 350.168719][ T9108] netlink: 'syz.2.748': attribute type 5 has an invalid length. [ 350.238336][ T5871] usb 3-1: config index 0 descriptor too short (expected 3090, got 18) [ 350.258897][ T9123] tipc: Disabling bearer [ 350.277417][ T5871] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 350.297042][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.308027][ T5871] usb 3-1: Product: syz [ 350.316710][ T5871] usb 3-1: Manufacturer: syz [ 350.321974][ T5871] usb 3-1: SerialNumber: syz [ 350.338298][ T5871] usb 3-1: config 0 descriptor?? [ 350.586693][ T5871] usb 3-1: interface 1 not found [ 350.637747][ T9139] FAULT_INJECTION: forcing a failure. [ 350.637747][ T9139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.652662][ T9139] CPU: 0 UID: 0 PID: 9139 Comm: syz.3.754 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 350.652691][ T9139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 350.652705][ T9139] Call Trace: [ 350.652712][ T9139] [ 350.652720][ T9139] dump_stack_lvl+0x189/0x250 [ 350.652756][ T9139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.652782][ T9139] ? __pfx__printk+0x10/0x10 [ 350.652824][ T9139] should_fail_ex+0x414/0x560 [ 350.652857][ T9139] _copy_to_user+0x31/0xb0 [ 350.652883][ T9139] simple_read_from_buffer+0xe1/0x170 [ 350.652916][ T9139] proc_fail_nth_read+0x1df/0x250 [ 350.652937][ T9139] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 350.652959][ T9139] ? rw_verify_area+0x258/0x650 [ 350.652982][ T9139] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 350.653002][ T9139] vfs_read+0x1fd/0x980 [ 350.653031][ T9139] ? __pfx___mutex_lock+0x10/0x10 [ 350.653052][ T9139] ? __pfx_vfs_read+0x10/0x10 [ 350.653078][ T9139] ? __fget_files+0x2a/0x420 [ 350.653111][ T9139] ? __fget_files+0x3a0/0x420 [ 350.653138][ T9139] ? __fget_files+0x2a/0x420 [ 350.653189][ T9139] ksys_read+0x145/0x250 [ 350.653211][ T9139] ? __fget_files+0x2a/0x420 [ 350.653240][ T9139] ? __pfx_ksys_read+0x10/0x10 [ 350.653267][ T9139] ? do_syscall_64+0xba/0x210 [ 350.653291][ T9139] do_syscall_64+0xf6/0x210 [ 350.653310][ T9139] ? clear_bhb_loop+0x45/0xa0 [ 350.653335][ T9139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.653353][ T9139] RIP: 0033:0x7f3035b8d37c [ 350.653372][ T9139] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 350.653388][ T9139] RSP: 002b:00007f3036963030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 350.653409][ T9139] RAX: ffffffffffffffda RBX: 00007f3035db6080 RCX: 00007f3035b8d37c [ 350.653424][ T9139] RDX: 000000000000000f RSI: 00007f30369630a0 RDI: 0000000000000006 [ 350.653435][ T9139] RBP: 00007f3036963090 R08: 0000000000000000 R09: 0000000000000000 [ 350.653447][ T9139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.653458][ T9139] R13: 0000000000000000 R14: 00007f3035db6080 R15: 00007ffdfc79ce58 [ 350.653489][ T9139] [ 351.290914][ T9141] vivid-000: kernel_thread() failed [ 351.702351][ T5832] Bluetooth: hci0: command tx timeout [ 352.231093][ T5872] usb 3-1: USB disconnect, device number 20 [ 352.768196][ T4494] hsr_slave_0: left promiscuous mode [ 352.791594][ T4494] hsr_slave_1: left promiscuous mode [ 352.797586][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.039060][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.253499][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.369507][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.488065][ T4494] veth1_macvtap: left promiscuous mode [ 353.494253][ T4494] veth0_macvtap: left promiscuous mode [ 353.507025][ T4494] veth1_vlan: left promiscuous mode [ 353.513104][ T4494] veth0_vlan: left promiscuous mode [ 353.612034][ T9184] program syz.3.763 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 353.782372][ T5832] Bluetooth: hci0: command tx timeout [ 354.603201][ T9202] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 354.954078][ T4494] team0 (unregistering): Port device team_slave_1 removed [ 355.214069][ T4494] team0 (unregistering): Port device team_slave_0 removed [ 355.879460][ T5832] Bluetooth: hci0: command tx timeout [ 356.130230][ T9211] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 357.950085][ T5832] Bluetooth: hci0: command tx timeout [ 358.068681][ T9164] netlink: 56 bytes leftover after parsing attributes in process `syz.1.761'. [ 358.079629][ T9191] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 358.163327][ T9216] can0: slcan on ttyS3. [ 358.267987][ T9218] can0 (unregistered): slcan off ttyS3. [ 359.885076][ T9125] chnl_net:caif_netlink_parms(): no params data found [ 361.266942][ T9125] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.308023][ T9125] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.329214][ T9125] bridge_slave_0: entered allmulticast mode [ 361.437872][ T9125] bridge_slave_0: entered promiscuous mode [ 361.469963][ T5899] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 361.510891][ T9281] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 361.601900][ T9125] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.639800][ T5899] usb 1-1: device descriptor read/64, error -71 [ 361.654134][ T9125] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.722631][ T9125] bridge_slave_1: entered allmulticast mode [ 361.875595][ T9125] bridge_slave_1: entered promiscuous mode [ 361.939723][ T5899] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 362.159761][ T5899] usb 1-1: device descriptor read/64, error -71 [ 362.195551][ T9125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.360318][ T5899] usb usb1-port1: attempt power cycle [ 362.380906][ T9125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.497386][ T9125] team0: Port device team_slave_0 added [ 362.521001][ T9125] team0: Port device team_slave_1 added [ 362.608653][ T9125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.627237][ T9125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.657646][ T9125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.676301][ T9290] team0: No ports can be present during mode change [ 362.688917][ T9125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.709693][ T9125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.719626][ T5899] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 362.755970][ T9293] netlink: 'syz.1.781': attribute type 10 has an invalid length. [ 362.772821][ T9125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.773745][ T5899] usb 1-1: device descriptor read/8, error -71 [ 362.843886][ T9296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'. [ 363.061732][ T5899] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 363.174512][ T5899] usb 1-1: device descriptor read/8, error -71 [ 363.390026][ T5899] usb usb1-port1: unable to enumerate USB device [ 364.460237][ T9296] team0 (unregistering): Port device vlan0 removed [ 364.470495][ T9296] team0 (unregistering): Port device bond0 removed [ 364.480029][ T47] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 364.615531][ T9125] hsr_slave_0: entered promiscuous mode [ 364.626177][ T9125] hsr_slave_1: entered promiscuous mode [ 364.633986][ T9125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.644257][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.647191][ T9125] Cannot create hsr debugfs directory [ 364.667653][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.691681][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 364.707408][ T47] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 364.717200][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.729104][ T47] usb 3-1: config 0 descriptor?? [ 365.876870][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 366.240157][ T9336] netlink: 156 bytes leftover after parsing attributes in process `syz.2.785'. [ 366.307805][ T9336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.323774][ T9336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.667201][ T9335] netlink: 32 bytes leftover after parsing attributes in process `syz.0.789'. [ 367.779632][ T47] usbhid 3-1:0.0: can't add hid device: -71 [ 367.810466][ T47] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 367.854784][ T47] usb 3-1: USB disconnect, device number 21 [ 369.109683][ T9349] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 369.118684][ T9349] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 369.239556][ T5872] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 369.407414][ T9365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.795'. [ 369.424508][ T5872] usb 4-1: Using ep0 maxpacket: 8 [ 369.431387][ T9365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.795'. [ 369.458803][ T5872] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 369.460221][ T9367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.796'. [ 369.491689][ T9367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.796'. [ 369.499822][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.508700][ T5872] usb 4-1: Product: syz [ 369.528984][ T5872] usb 4-1: Manufacturer: syz [ 369.548102][ T5872] usb 4-1: SerialNumber: syz [ 369.573580][ T5872] usb 4-1: config 0 descriptor?? [ 369.621311][ T5872] gspca_main: sq905-2.14.0 probing 2770:9120 [ 369.662743][ T9125] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 369.708224][ T9125] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 369.734883][ T9125] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 370.120365][ T9125] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 370.914021][ T5872] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 370.921546][ T5872] sq905 4-1:0.0: probe with driver sq905 failed with error -110 [ 371.457070][ T47] usb 4-1: USB disconnect, device number 13 [ 371.821928][ T9125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.848887][ T9125] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.111175][ T9401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.801'. [ 373.207915][ T4745] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.215099][ T4745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.245178][ T4745] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.252434][ T4745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.570083][ T9410] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 373.625552][ T9403] netlink: 32 bytes leftover after parsing attributes in process `syz.1.803'. [ 374.678590][ T9125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.777232][ T9437] netlink: 36 bytes leftover after parsing attributes in process `syz.1.808'. [ 374.890666][ T9437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.808'. [ 375.126276][ T9437] netlink: 36 bytes leftover after parsing attributes in process `syz.1.808'. [ 375.272269][ T9437] netlink: 36 bytes leftover after parsing attributes in process `syz.1.808'. [ 375.994286][ T9444] netlink: 28 bytes leftover after parsing attributes in process `syz.3.809'. [ 376.139604][ T9444] netlink: 28 bytes leftover after parsing attributes in process `syz.3.809'. [ 376.181260][ T9449] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 376.190593][ T9449] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 376.469611][ T47] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 376.481374][ T9463] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 376.500256][ T9464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.508996][ T9464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.521455][ T9463] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 376.629557][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 376.710019][ T9469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 376.863751][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 377.638831][ T47] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 377.659738][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.676147][ T9125] veth0_vlan: entered promiscuous mode [ 377.681791][ T47] usb 2-1: Product: syz [ 377.686000][ T47] usb 2-1: Manufacturer: syz [ 377.692347][ T47] usb 2-1: SerialNumber: syz [ 377.709272][ T47] usb 2-1: config 0 descriptor?? [ 378.729572][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 378.825627][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.832412][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.961294][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.986430][ T9125] veth1_vlan: entered promiscuous mode [ 379.001303][ T47] gspca_main: sq905-2.14.0 probing 2770:9120 [ 379.007690][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 379.033754][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 379.817325][ T47] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 379.833864][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 379.848950][ T47] sq905 2-1:0.0: probe with driver sq905 failed with error -110 [ 379.865600][ T9125] veth0_macvtap: entered promiscuous mode [ 379.887217][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 379.920331][ T24] usb 4-1: string descriptor 0 read error: -71 [ 379.934170][ T9125] veth1_macvtap: entered promiscuous mode [ 379.941283][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 379.963966][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 380.006847][ T24] usb 4-1: config 0 descriptor?? [ 380.015814][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.037874][ T24] usb 4-1: can't set config #0, error -71 [ 380.155003][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.167589][ T24] usb 4-1: USB disconnect, device number 14 [ 380.175525][ T9125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.220379][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.357921][ T47] usb 2-1: USB disconnect, device number 14 [ 380.366761][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.380764][ T9125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.393749][ T9125] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.419786][ T9125] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.428628][ T9125] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.469471][ T9125] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.650621][ T9506] netlink: 36 bytes leftover after parsing attributes in process `syz.2.819'. [ 380.729961][ T5872] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 380.807815][ T9508] netlink: 'syz.3.820': attribute type 5 has an invalid length. [ 381.305969][ T5872] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 381.331033][ T5872] usb 1-1: config 0 has no interface number 0 [ 381.358663][ T5872] usb 1-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=98.2a [ 381.368353][ T5924] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 381.385962][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.409868][ T5872] usb 1-1: Product: syz [ 381.414287][ T5872] usb 1-1: Manufacturer: syz [ 381.424822][ T5872] usb 1-1: SerialNumber: syz [ 381.445732][ T5872] usb 1-1: config 0 descriptor?? [ 381.490776][ T4745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.519781][ T4745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.551882][ T5924] usb 4-1: config index 0 descriptor too short (expected 3090, got 18) [ 381.572426][ T5924] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 381.592740][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.610013][ T5924] usb 4-1: Product: syz [ 381.620098][ T5924] usb 4-1: Manufacturer: syz [ 381.632425][ T5924] usb 4-1: SerialNumber: syz [ 381.637242][ T6138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.657510][ T6138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.665329][ T5924] usb 4-1: config 0 descriptor?? [ 381.714815][ T5924] usb 4-1: interface 1 not found [ 381.988658][ T5872] snd_usb_variax 1-1:0.113: Line 6 Variax Workbench found [ 382.019062][ T5872] usb 1-1: selecting invalid altsetting 1 [ 382.047257][ T5872] snd_usb_variax 1-1:0.113: set_interface failed [ 382.072126][ T5872] snd_usb_variax 1-1:0.113: Line 6 Variax Workbench now disconnected [ 382.104277][ T5872] snd_usb_variax 1-1:0.113: probe with driver snd_usb_variax failed with error -22 [ 382.136901][ T5872] usb 1-1: USB disconnect, device number 28 [ 382.412581][ T6137] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.851131][ T6137] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.093007][ T6137] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.232404][ T6137] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.485721][ T9546] netlink: 16 bytes leftover after parsing attributes in process `syz.0.823'. [ 383.613338][ T47] usb 4-1: USB disconnect, device number 15 [ 384.623186][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 384.658432][ T6137] bridge_slave_1: left allmulticast mode [ 384.674804][ T6137] bridge_slave_1: left promiscuous mode [ 384.689805][ T6137] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.833070][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 384.854434][ T6137] bridge_slave_0: left allmulticast mode [ 384.889971][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 384.898731][ T6137] bridge_slave_0: left promiscuous mode [ 384.929167][ T9] usb 1-1: config 0 has no interface number 0 [ 384.940772][ T6137] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.014929][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 385.079695][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.142312][ T9] usb 1-1: Product: syz [ 385.223600][ T9] usb 1-1: Manufacturer: syz [ 385.269751][ T9] usb 1-1: SerialNumber: syz [ 385.300609][ T9] usb 1-1: config 0 descriptor?? [ 385.325925][ T9] smsc95xx v2.0.0 [ 385.455995][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 385.468505][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 385.481729][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 385.504424][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 385.525339][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 385.759646][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 385.808303][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 386.835157][ T6137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.847069][ T6137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.858104][ T6137] bond0 (unregistering): Released all slaves [ 386.877402][ T9573] netlink: 'syz.2.829': attribute type 10 has an invalid length. [ 386.929784][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 386.962987][ T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 387.034955][ T9] usb 1-1: USB disconnect, device number 29 [ 387.680899][ T5828] Bluetooth: hci0: command tx timeout [ 387.989878][ T9601] vivid-000: kernel_thread() failed [ 388.162213][ T9603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.699513][ T5828] Bluetooth: hci0: command tx timeout [ 392.578274][ T5828] Bluetooth: hci0: command tx timeout [ 393.461266][ T9674] qrtr: Invalid version 0 [ 393.627592][ T9699] FAULT_INJECTION: forcing a failure. [ 393.627592][ T9699] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 393.642546][ T9699] CPU: 1 UID: 0 PID: 9699 Comm: syz.2.845 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 393.642576][ T9699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 393.642590][ T9699] Call Trace: [ 393.642599][ T9699] [ 393.642608][ T9699] dump_stack_lvl+0x189/0x250 [ 393.642644][ T9699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.642672][ T9699] ? __pfx__printk+0x10/0x10 [ 393.642705][ T9699] ? fs_reclaim_acquire+0x7d/0x100 [ 393.642736][ T9699] should_fail_ex+0x414/0x560 [ 393.642774][ T9699] prepare_alloc_pages+0x213/0x610 [ 393.642805][ T9699] __alloc_frozen_pages_noprof+0x123/0x370 [ 393.642832][ T9699] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 393.642867][ T9699] ? policy_nodemask+0x27c/0x720 [ 393.642894][ T9699] ? __lock_acquire+0xaac/0xd20 [ 393.642926][ T9699] alloc_pages_mpol+0x232/0x4a0 [ 393.642963][ T9699] alloc_pages_noprof+0xa9/0x190 [ 393.642996][ T9699] get_free_pages_noprof+0xc/0x30 [ 393.643017][ T9699] __pollwait+0x27b/0x460 [ 393.643045][ T9699] ? __pfx___pollwait+0x10/0x10 [ 393.643073][ T9699] snd_seq_oss_readq_poll+0x60/0xc0 [ 393.643099][ T9699] snd_seq_oss_poll+0xa1/0x1d0 [ 393.643128][ T9699] ? __pfx_odev_poll+0x10/0x10 [ 393.643155][ T9699] do_select+0x105b/0x17d0 [ 393.643193][ T9699] ? do_select+0x8c1/0x17d0 [ 393.643244][ T9699] ? __pfx_do_select+0x10/0x10 [ 393.643273][ T9699] ? bpf_bprintf_cleanup+0x9f/0xd0 [ 393.643294][ T9699] ? bpf_trace_printk+0x126/0x190 [ 393.643322][ T9699] ? __pfx___pollwait+0x10/0x10 [ 393.643355][ T9699] ? __pfx_pollwake+0x10/0x10 [ 393.643386][ T9699] ? __pfx_pollwake+0x10/0x10 [ 393.643418][ T9699] ? __pfx_pollwake+0x10/0x10 [ 393.643450][ T9699] ? __pfx_pollwake+0x10/0x10 [ 393.643482][ T9699] ? __pfx_pollwake+0x10/0x10 [ 393.643514][ T9699] ? __pfx_pollwake+0x10/0x10 [ 393.643553][ T9699] ? __pfx_pollwake+0x10/0x10 [ 393.643585][ T9699] ? __pfx_pollwake+0x10/0x10 [ 393.643618][ T9699] ? __pfx_pollwake+0x10/0x10 [ 393.643672][ T9699] core_sys_select+0x700/0x990 [ 393.643713][ T9699] ? __pfx_core_sys_select+0x10/0x10 [ 393.643770][ T9699] ? __pfx_set_user_sigmask+0x10/0x10 [ 393.643813][ T9699] __se_sys_pselect6+0x27a/0x300 [ 393.643848][ T9699] ? __pfx___se_sys_pselect6+0x10/0x10 [ 393.643885][ T9699] ? __x64_sys_pselect6+0x21/0xf0 [ 393.643918][ T9699] do_syscall_64+0xf6/0x210 [ 393.643940][ T9699] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 393.643960][ T9699] ? clear_bhb_loop+0x45/0xa0 [ 393.643985][ T9699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.644005][ T9699] RIP: 0033:0x7fbc71f8e969 [ 393.644024][ T9699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.644042][ T9699] RSP: 002b:00007fbc72d9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 393.644063][ T9699] RAX: ffffffffffffffda RBX: 00007fbc721b6080 RCX: 00007fbc71f8e969 [ 393.644079][ T9699] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000040 [ 393.644092][ T9699] RBP: 00007fbc72d9a090 R08: 0000000000000000 R09: 0000000000000000 [ 393.644104][ T9699] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 393.644117][ T9699] R13: 0000000000000001 R14: 00007fbc721b6080 R15: 00007ffd8618f468 [ 393.644150][ T9699] [ 394.659713][ T5828] Bluetooth: hci0: command tx timeout [ 395.748118][ T6137] hsr_slave_0: left promiscuous mode [ 395.810743][ T5828] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 395.877358][ T6137] hsr_slave_1: left promiscuous mode [ 395.890111][ T6137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.897576][ T6137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.935640][ T6137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.977786][ T6137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.159664][ T6137] veth1_macvtap: left promiscuous mode [ 396.165320][ T6137] veth0_macvtap: left promiscuous mode [ 396.171398][ T6137] veth1_vlan: left promiscuous mode [ 396.177178][ T6137] veth0_vlan: left promiscuous mode [ 404.614673][ T6137] team0 (unregistering): Port device team_slave_1 removed [ 404.720864][ T6137] team0 (unregistering): Port device team_slave_0 removed [ 406.599712][ T9723] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.839255][ T9574] chnl_net:caif_netlink_parms(): no params data found [ 407.146162][ T9777] CUSE: unknown device info "ÿ" [ 407.151402][ T9777] CUSE: zero length info key specified [ 408.745881][ T9780] netlink: 'syz.3.862': attribute type 8 has an invalid length. [ 408.881742][ T5872] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 409.212249][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 409.246697][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.324311][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.345427][ T5872] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 409.355023][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.387481][ T5872] usb 4-1: config 0 descriptor?? [ 409.398114][ T9574] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.583521][ T9574] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.591088][ T9574] bridge_slave_0: entered allmulticast mode [ 409.600353][ T9574] bridge_slave_0: entered promiscuous mode [ 409.610322][ T9574] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.617527][ T9574] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.625343][ T9574] bridge_slave_1: entered allmulticast mode [ 409.642412][ T9574] bridge_slave_1: entered promiscuous mode [ 410.875538][ T5872] usbhid 4-1:0.0: can't add hid device: -71 [ 410.889231][ T5872] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 410.916583][ T5872] usb 4-1: USB disconnect, device number 16 [ 411.315703][ T9574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.471861][ T9574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.486034][ T9843] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 411.731950][ T5899] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 412.114812][ T5899] usb 2-1: config index 0 descriptor too short (expected 36, got 21) [ 412.166428][ T5899] usb 2-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 412.253654][ T5899] usb 2-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 412.317553][ T5899] usb 2-1: config 0 interface 0 has no altsetting 0 [ 412.330966][ T5899] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 412.354099][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.365773][ T5899] usb 2-1: config 0 descriptor?? [ 412.382670][ T5899] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 412.919865][ T9574] team0: Port device team_slave_0 added [ 412.968693][ T9574] team0: Port device team_slave_1 added [ 413.151460][ T9841] netlink: 'syz.1.873': attribute type 21 has an invalid length. [ 413.221848][ T9574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.241601][ T9574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.308345][ T9574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.348033][ T9574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.361448][ T9574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.649898][ T9864] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 413.741849][ T9866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.879'. [ 414.407517][ T9574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.895941][ T9] usb 2-1: USB disconnect, device number 15 [ 415.015503][ T9574] hsr_slave_0: entered promiscuous mode [ 415.038366][ T9574] hsr_slave_1: entered promiscuous mode [ 415.055113][ T9574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.079025][ T9574] Cannot create hsr debugfs directory [ 417.625332][ T9895] slcan: can't register candev [ 417.990010][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 418.200238][ T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 418.223508][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.249399][ T9] usb 3-1: Product: syz [ 418.253877][ T9] usb 3-1: Manufacturer: syz [ 418.258513][ T9] usb 3-1: SerialNumber: syz [ 418.314356][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 419.112713][ T9] r8152-cfgselector 3-1: config 0 descriptor?? [ 420.108502][ T9952] netlink: 36 bytes leftover after parsing attributes in process `syz.0.889'. [ 420.188266][ T9905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.206998][ T9952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.889'. [ 420.230217][ T9905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.309394][ T9952] netlink: 36 bytes leftover after parsing attributes in process `syz.0.889'. [ 420.399631][ T9952] netlink: 36 bytes leftover after parsing attributes in process `syz.0.889'. [ 420.522263][ T9905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.531409][ T9905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.451577][ T9965] /dev/nbd2: Can't open blockdev [ 421.477948][ T9905] /dev/nbd2: Can't open blockdev [ 421.932307][ T9] r8152-cfgselector 3-1: USB disconnect, device number 22 [ 424.645059][ T9995] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 424.913135][ T9997] FAULT_INJECTION: forcing a failure. [ 424.913135][ T9997] name failslab, interval 1, probability 0, space 0, times 0 [ 424.974421][ T9997] CPU: 1 UID: 0 PID: 9997 Comm: syz.3.899 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 424.974452][ T9997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 424.974465][ T9997] Call Trace: [ 424.974473][ T9997] [ 424.974482][ T9997] dump_stack_lvl+0x189/0x250 [ 424.974519][ T9997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.974556][ T9997] ? __pfx__printk+0x10/0x10 [ 424.974595][ T9997] ? __pfx___might_resched+0x10/0x10 [ 424.974623][ T9997] ? fs_reclaim_acquire+0x7d/0x100 [ 424.974650][ T9997] should_fail_ex+0x414/0x560 [ 424.974688][ T9997] should_failslab+0xa8/0x100 [ 424.974721][ T9997] __kmalloc_noprof+0xcb/0x4f0 [ 424.974749][ T9997] ? kfree+0x4d/0x440 [ 424.974772][ T9997] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 424.974804][ T9997] tomoyo_realpath_from_path+0xe3/0x5d0 [ 424.974832][ T9997] ? tomoyo_domain+0xda/0x130 [ 424.974864][ T9997] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 424.974884][ T9997] tomoyo_path_number_perm+0x1e8/0x5a0 [ 424.974908][ T9997] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 424.974949][ T9997] ? __lock_acquire+0xaac/0xd20 [ 424.974996][ T9997] ? __fget_files+0x2a/0x420 [ 424.975032][ T9997] ? __fget_files+0x3a0/0x420 [ 424.975061][ T9997] ? __fget_files+0x2a/0x420 [ 424.975096][ T9997] security_file_ioctl+0xcb/0x2d0 [ 424.975120][ T9997] __se_sys_ioctl+0x47/0x170 [ 424.975148][ T9997] do_syscall_64+0xf6/0x210 [ 424.975170][ T9997] ? clear_bhb_loop+0x45/0xa0 [ 424.975196][ T9997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.975215][ T9997] RIP: 0033:0x7f3035b8e969 [ 424.975233][ T9997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.975250][ T9997] RSP: 002b:00007f3036984038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.975272][ T9997] RAX: ffffffffffffffda RBX: 00007f3035db5fa0 RCX: 00007f3035b8e969 [ 424.975286][ T9997] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 424.975298][ T9997] RBP: 00007f3036984090 R08: 0000000000000000 R09: 0000000000000000 [ 424.975311][ T9997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.975322][ T9997] R13: 0000000000000000 R14: 00007f3035db5fa0 R15: 00007ffdfc79ce58 [ 424.975355][ T9997] [ 424.975365][ T9997] ERROR: Out of memory at tomoyo_realpath_from_path. [ 425.082326][ T9574] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 425.153067][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.232460][ T9574] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 425.266065][ T9574] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 425.582280][ T9574] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 426.109764][T10022] netlink: 'syz.0.903': attribute type 5 has an invalid length. [ 427.294755][T10024] netlink: 'syz.2.905': attribute type 10 has an invalid length. [ 427.304015][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 427.349086][T10024] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 427.366854][ T9574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.429167][ T9574] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.481519][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.488925][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.522798][ T9] usb 1-1: config index 0 descriptor too short (expected 3090, got 18) [ 427.556692][ T9677] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.563999][ T9677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.588926][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 427.617255][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.641157][ T9] usb 1-1: Product: syz [ 427.672297][ T9] usb 1-1: Manufacturer: syz [ 427.678763][ T9] usb 1-1: SerialNumber: syz [ 427.707179][ T9] usb 1-1: config 0 descriptor?? [ 427.748891][ T9] usb 1-1: interface 1 not found [ 428.114897][T10036] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 428.228293][T10008] can0: slcan on ttyS3. [ 428.350603][T10008] can0 (unregistered): slcan off ttyS3. [ 429.177368][ T9] usb 1-1: USB disconnect, device number 30 [ 430.222327][T10063] slcan: can't register candev [ 430.404429][ T9574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.414936][ T9574] veth0_vlan: entered promiscuous mode [ 434.100459][ T9574] veth1_vlan: entered promiscuous mode [ 434.212509][ T9574] veth0_macvtap: entered promiscuous mode [ 434.244490][ T9574] veth1_macvtap: entered promiscuous mode [ 434.271267][ T9574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.271294][ T9574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.272855][ T9574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.284634][ T9574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.284661][ T9574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.287437][ T9574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.318060][ T9574] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.318105][ T9574] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.318135][ T9574] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.318165][ T9574] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.825644][T10128] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 436.208843][ T8082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.221742][ T8082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.436909][ T9672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.148447][ T9672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.586662][T10162] netlink: 36 bytes leftover after parsing attributes in process `syz.3.925'. [ 437.613555][T10162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.925'. [ 438.269631][T10162] netlink: 36 bytes leftover after parsing attributes in process `syz.3.925'. [ 438.338883][T10162] netlink: 36 bytes leftover after parsing attributes in process `syz.3.925'. [ 439.190066][T10183] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 439.235721][ T156] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.721743][ T156] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.269840][ T156] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.272398][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.286931][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.454351][T10199] overlayfs: overlapping lowerdir path [ 442.085911][ T156] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.112027][T10227] slcan: can't register candev [ 444.354496][ T156] bridge_slave_1: left allmulticast mode [ 444.386173][ T156] bridge_slave_1: left promiscuous mode [ 444.411050][ T156] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.427697][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 444.449249][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 444.458519][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 444.468388][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 444.477719][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 444.486454][ T156] bridge_slave_0: left allmulticast mode [ 444.495703][ T156] bridge_slave_0: left promiscuous mode [ 444.501558][ T156] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.887787][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'. [ 445.010478][T10262] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 445.956244][ T156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.967361][ T156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.700607][ T156] bond0 (unregistering): Released all slaves [ 446.837321][ T5832] Bluetooth: hci0: command tx timeout [ 447.333249][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.953'. [ 447.633684][T10292] ------------[ cut here ]------------ [ 447.639538][T10292] WARNING: CPU: 0 PID: 10292 at kernel/kcov.c:872 kcov_remote_start+0x55a/0x7f0 [ 447.648649][T10292] Modules linked in: [ 447.652913][T10292] CPU: 0 UID: 0 PID: 10292 Comm: syz.1.953 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 447.664933][T10292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 447.675027][T10292] RIP: 0010:kcov_remote_start+0x55a/0x7f0 [ 447.680789][T10292] Code: ff 4c 89 ff be 03 00 00 00 e8 f2 76 f1 02 e9 eb fa ff ff e8 58 cb 8e 09 f7 c3 00 02 00 00 0f 84 da fa ff ff e9 5a fc ff ff 90 <0f> 0b 90 e8 3e e5 8e 09 89 c0 48 c7 c7 68 53 72 92 48 03 3c c5 10 [ 447.700438][T10292] RSP: 0018:ffffc9000394f170 EFLAGS: 00010002 [ 447.706533][T10292] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 447.714511][T10292] RDX: 0000000000030000 RSI: ffffffff8d91f838 RDI: ffffffff8bc0fa60 [ 447.722664][T10292] RBP: ffffc9000394f3d0 R08: ffffc9000394ef00 R09: 0000000000000020 [ 447.730655][T10292] R10: 0000000000000000 R11: ffffffff819e7c80 R12: ffff8880b8828368 [ 447.738644][T10292] R13: ffffffff81bfc787 R14: ffff88807cf9da00 R15: 0000000000000000 [ 447.746626][T10292] FS: 00007f0100ff96c0(0000) GS:ffff888126103000(0000) knlGS:0000000000000000 [ 447.755568][T10292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 447.762176][T10292] CR2: 00007f5ef018b5e8 CR3: 0000000068d18000 CR4: 00000000003526f0 [ 447.770175][T10292] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 447.778152][T10292] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 447.786132][T10292] Call Trace: [ 447.789418][T10292] [ 447.792361][T10292] ieee80211_rx_list+0x53a/0x2d80 [ 447.797406][T10292] ? __d_instantiate+0x197/0x740 [ 447.802366][T10292] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 447.807842][T10292] ? __lock_acquire+0xaac/0xd20 [ 447.812712][T10292] ? ieee80211_rx_napi+0xca/0x3d0 [ 447.817742][T10292] ? ieee80211_rx_napi+0xca/0x3d0 [ 447.822778][T10292] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 447.828700][T10292] ? ieee80211_rx_napi+0xca/0x3d0 [ 447.833735][T10292] ieee80211_rx_napi+0x1a8/0x3d0 [ 447.838695][T10292] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 447.844177][T10292] ? skb_dequeue+0x10e/0x150 [ 447.848791][T10292] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 447.854811][T10292] ? ieee80211_stop_device+0x29/0xf0 [ 447.860113][T10292] ieee80211_stop_device+0x3e/0xf0 [ 447.865241][T10292] ieee80211_do_stop+0x17b9/0x1f80 [ 447.870487][T10292] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 447.875876][T10292] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 447.881349][T10292] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 447.887260][T10292] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.892492][T10292] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 447.898847][T10292] ieee80211_stop+0x444/0x4a0 [ 447.903535][T10292] ? dev_deactivate_many+0x258/0xd40 [ 447.908845][T10292] ? __pfx_ieee80211_stop+0x10/0x10 [ 447.914059][T10292] __dev_close_many+0x361/0x6f0 [ 447.918934][T10292] ? __pfx___dev_close_many+0x10/0x10 [ 447.924331][T10292] __dev_change_flags+0x2c7/0x6d0 [ 447.929368][T10292] ? __mutex_lock+0x51b/0xe80 [ 447.934082][T10292] ? __pfx___dev_change_flags+0x10/0x10 [ 447.939649][T10292] ? devinet_ioctl+0x323/0x1b50 [ 447.944539][T10292] ? __pfx___mutex_lock+0x10/0x10 [ 447.949591][T10292] netif_change_flags+0x88/0x1a0 [ 447.954555][T10292] dev_change_flags+0x130/0x260 [ 447.959436][T10292] devinet_ioctl+0xbb4/0x1b50 [ 447.964148][T10292] ? __pfx_devinet_ioctl+0x10/0x10 [ 447.969297][T10292] ? rep_movs_alternative+0x30/0x90 [ 447.974551][T10292] ? get_user_ifreq+0x12c/0x180 [ 447.979421][T10292] inet_ioctl+0x3c0/0x4c0 [ 447.983796][T10292] ? __pfx_inet_ioctl+0x10/0x10 [ 447.988675][T10292] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 447.994319][T10292] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 448.000400][T10292] sock_do_ioctl+0xd9/0x300 [ 448.004922][T10292] ? __pfx_sock_do_ioctl+0x10/0x10 [ 448.010049][T10292] ? __lock_acquire+0xaac/0xd20 [ 448.014920][T10292] ? __asan_memset+0x22/0x50 [ 448.019533][T10292] ? smack_file_ioctl+0x24a/0x340 [ 448.024588][T10292] sock_ioctl+0x576/0x790 [ 448.028940][T10292] ? __pfx_sock_ioctl+0x10/0x10 [ 448.033811][T10292] ? __fget_files+0x3a0/0x420 [ 448.038505][T10292] ? __fget_files+0x2a/0x420 [ 448.043127][T10292] ? bpf_lsm_file_ioctl+0x9/0x20 [ 448.048080][T10292] ? __pfx_sock_ioctl+0x10/0x10 [ 448.052948][T10292] __se_sys_ioctl+0xf9/0x170 [ 448.057561][T10292] do_syscall_64+0xf6/0x210 [ 448.062211][T10292] ? clear_bhb_loop+0x45/0xa0 [ 448.067127][T10292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.073049][T10292] RIP: 0033:0x7f010018e969 [ 448.078150][T10292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.097783][T10292] RSP: 002b:00007f0100ff9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 448.106224][T10292] RAX: ffffffffffffffda RBX: 00007f01003b6160 RCX: 00007f010018e969 [ 448.114222][T10292] RDX: 0000200000000280 RSI: 0000000000008914 RDI: 0000000000000008 [ 448.122200][T10292] RBP: 00007f0100210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 448.130177][T10292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.138152][T10292] R13: 0000000000000000 R14: 00007f01003b6160 R15: 00007ffda4c83c08 [ 448.146173][T10292] [ 448.149218][T10292] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 448.156510][T10292] CPU: 0 UID: 0 PID: 10292 Comm: syz.1.953 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 448.168499][T10292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 448.178572][T10292] Call Trace: [ 448.181859][T10292] [ 448.184885][T10292] dump_stack_lvl+0x99/0x250 [ 448.189495][T10292] ? __asan_memcpy+0x40/0x70 [ 448.194100][T10292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.199315][T10292] ? __pfx__printk+0x10/0x10 [ 448.204411][T10292] panic+0x2db/0x790 [ 448.208456][T10292] ? __pfx_panic+0x10/0x10 [ 448.212932][T10292] __warn+0x31b/0x4b0 [ 448.216947][T10292] ? kcov_remote_start+0x55a/0x7f0 [ 448.222198][T10292] ? kcov_remote_start+0x55a/0x7f0 [ 448.227359][T10292] report_bug+0x2be/0x4f0 [ 448.231735][T10292] ? kcov_remote_start+0x55a/0x7f0 [ 448.236900][T10292] ? kcov_remote_start+0x55a/0x7f0 [ 448.242041][T10292] ? kcov_remote_start+0x55c/0x7f0 [ 448.247169][T10292] handle_bug+0x84/0x160 [ 448.251451][T10292] exc_invalid_op+0x1a/0x50 [ 448.255969][T10292] asm_exc_invalid_op+0x1a/0x20 [ 448.260827][T10292] RIP: 0010:kcov_remote_start+0x55a/0x7f0 [ 448.266762][T10292] Code: ff 4c 89 ff be 03 00 00 00 e8 f2 76 f1 02 e9 eb fa ff ff e8 58 cb 8e 09 f7 c3 00 02 00 00 0f 84 da fa ff ff e9 5a fc ff ff 90 <0f> 0b 90 e8 3e e5 8e 09 89 c0 48 c7 c7 68 53 72 92 48 03 3c c5 10 [ 448.286618][T10292] RSP: 0018:ffffc9000394f170 EFLAGS: 00010002 [ 448.292923][T10292] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 448.301005][T10292] RDX: 0000000000030000 RSI: ffffffff8d91f838 RDI: ffffffff8bc0fa60 [ 448.308987][T10292] RBP: ffffc9000394f3d0 R08: ffffc9000394ef00 R09: 0000000000000020 [ 448.317051][T10292] R10: 0000000000000000 R11: ffffffff819e7c80 R12: ffff8880b8828368 [ 448.325207][T10292] R13: ffffffff81bfc787 R14: ffff88807cf9da00 R15: 0000000000000000 [ 448.333334][T10292] ? kcov_remote_start+0x97/0x7f0 [ 448.338421][T10292] ? __pfx_hlock_conflict+0x10/0x10 [ 448.343664][T10292] ieee80211_rx_list+0x53a/0x2d80 [ 448.348720][T10292] ? __d_instantiate+0x197/0x740 [ 448.353693][T10292] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 448.359167][T10292] ? __lock_acquire+0xaac/0xd20 [ 448.364128][T10292] ? ieee80211_rx_napi+0xca/0x3d0 [ 448.369340][T10292] ? ieee80211_rx_napi+0xca/0x3d0 [ 448.374376][T10292] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 448.380296][T10292] ? ieee80211_rx_napi+0xca/0x3d0 [ 448.385329][T10292] ieee80211_rx_napi+0x1a8/0x3d0 [ 448.390316][T10292] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 448.395930][T10292] ? skb_dequeue+0x10e/0x150 [ 448.400557][T10292] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 448.406566][T10292] ? ieee80211_stop_device+0x29/0xf0 [ 448.411868][T10292] ieee80211_stop_device+0x3e/0xf0 [ 448.417003][T10292] ieee80211_do_stop+0x17b9/0x1f80 [ 448.422145][T10292] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 448.427532][T10292] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 448.433014][T10292] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 448.438923][T10292] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.444160][T10292] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 448.450523][T10292] ieee80211_stop+0x444/0x4a0 [ 448.455217][T10292] ? dev_deactivate_many+0x258/0xd40 [ 448.460543][T10292] ? __pfx_ieee80211_stop+0x10/0x10 [ 448.465758][T10292] __dev_close_many+0x361/0x6f0 [ 448.470638][T10292] ? __pfx___dev_close_many+0x10/0x10 [ 448.476038][T10292] __dev_change_flags+0x2c7/0x6d0 [ 448.481074][T10292] ? __mutex_lock+0x51b/0xe80 [ 448.485764][T10292] ? __pfx___dev_change_flags+0x10/0x10 [ 448.491322][T10292] ? devinet_ioctl+0x323/0x1b50 [ 448.496192][T10292] ? __pfx___mutex_lock+0x10/0x10 [ 448.501230][T10292] netif_change_flags+0x88/0x1a0 [ 448.506184][T10292] dev_change_flags+0x130/0x260 [ 448.511052][T10292] devinet_ioctl+0xbb4/0x1b50 [ 448.515758][T10292] ? __pfx_devinet_ioctl+0x10/0x10 [ 448.520891][T10292] ? rep_movs_alternative+0x30/0x90 [ 448.526139][T10292] ? get_user_ifreq+0x12c/0x180 [ 448.531013][T10292] inet_ioctl+0x3c0/0x4c0 [ 448.535361][T10292] ? __pfx_inet_ioctl+0x10/0x10 [ 448.540251][T10292] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 448.545983][T10292] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 448.551997][T10292] sock_do_ioctl+0xd9/0x300 [ 448.556523][T10292] ? __pfx_sock_do_ioctl+0x10/0x10 [ 448.561654][T10292] ? __lock_acquire+0xaac/0xd20 [ 448.566527][T10292] ? __asan_memset+0x22/0x50 [ 448.571132][T10292] ? smack_file_ioctl+0x24a/0x340 [ 448.576174][T10292] sock_ioctl+0x576/0x790 [ 448.580541][T10292] ? __pfx_sock_ioctl+0x10/0x10 [ 448.585446][T10292] ? __fget_files+0x3a0/0x420 [ 448.590152][T10292] ? __fget_files+0x2a/0x420 [ 448.594771][T10292] ? bpf_lsm_file_ioctl+0x9/0x20 [ 448.599731][T10292] ? __pfx_sock_ioctl+0x10/0x10 [ 448.604608][T10292] __se_sys_ioctl+0xf9/0x170 [ 448.609212][T10292] do_syscall_64+0xf6/0x210 [ 448.613738][T10292] ? clear_bhb_loop+0x45/0xa0 [ 448.618431][T10292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.624330][T10292] RIP: 0033:0x7f010018e969 [ 448.628750][T10292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.648392][T10292] RSP: 002b:00007f0100ff9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 448.656826][T10292] RAX: ffffffffffffffda RBX: 00007f01003b6160 RCX: 00007f010018e969 [ 448.664808][T10292] RDX: 0000200000000280 RSI: 0000000000008914 RDI: 0000000000000008 [ 448.672790][T10292] RBP: 00007f0100210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 448.680775][T10292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.688756][T10292] R13: 0000000000000000 R14: 00007f01003b6160 R15: 00007ffda4c83c08 [ 448.696755][T10292] [ 448.700062][T10292] Kernel Offset: disabled [ 448.704406][T10292] Rebooting in 86400 seconds..