last executing test programs: 15.135957243s ago: executing program 0 (id=402): syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f00000012c0), &(0x7f00000005c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) getxattr(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYRES32, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40004840) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0x5}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040)=0xbd, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 13.470633936s ago: executing program 1 (id=405): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000700), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x104) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0xc) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) accept(r2, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x198, 0x10, 0x713, 0x70bd27, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x2f}, {@in=@multicast1, 0x1, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x8727e}, {0x0, 0xffffdffff7fffffb, 0x6, 0x5}, {0x1, 0x9, 0x8}, 0x80000000, 0x3506, 0xa, 0x4, 0x0, 0x21}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x80}}, @algo_auth={0x5c, 0x1, {{'wp384\x00'}, 0xa0, "01132e2e98c0a0204fcdb80c6c9a425fac0ee241"}}]}, 0x198}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000e00)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.469316816s ago: executing program 0 (id=406): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3a, 0xfe, 0x6, 0x20, 0x4e6, 0xb, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x2, 0xa0, 0x24, 0x26, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) 12.0418713s ago: executing program 3 (id=412): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0xffff, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcfe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x10]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c692401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x20000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x4756, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c6b, 0x0, 0x1000000]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x3, 0x6, 0x80000000, 0x4, {0x5, 0x0, 0x8, 0x1, 0x7, 0x1f9}, {0x5, 0x0, 0x6, 0x800, 0xf0, 0x4}, 0x6, 0x82e, 0x9}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc3a00000000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f00000001c0)={0x1d, r6}, 0x10) recvmmsg(r5, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1}, 0x8}], 0x2, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, '\n\b\x00'}, 0x10}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000f00)={'wlan0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x1e, "4372071e845c1497c855383000000002000000352a72ee4d37968b266800"}}) lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v2={0x2000000, [{0x2, 0x2}, {0x5, 0x1}]}, 0x14, 0x2) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000440)={r8}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000c00)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="f700000000000100000000002a7acd5859e7fb8d6c728bdfb33707dbca012b30ea410c4046cac3c24690ea7f0ee35630dddfb4847e347d", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r3, r10, 0x2f, 0x0, 0x4, @void, @value=r9}, 0x20) r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4048aecb, &(0x7f0000000400)=ANY=[@ANYBLOB="050000000000000003"]) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r13}, 0x10) 11.608225496s ago: executing program 3 (id=415): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioperm(0x0, 0x2, 0x7e) modify_ldt$write2(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x88}]}}}]}, 0x3c}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TCSETSW2(r4, 0x5437, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 11.490291131s ago: executing program 4 (id=416): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioperm(0x0, 0x2, 0x7e) modify_ldt$write2(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x88}]}}}]}, 0x3c}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TCSETSW2(r4, 0x5437, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 11.285148906s ago: executing program 0 (id=418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x2000009c) 9.782138418s ago: executing program 0 (id=420): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) socket$key(0xf, 0x3, 0x2) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000400)="022ae892c0d000070000a3de19830d09cbef139c02f6cb9df0deef9db97f339111fdcd4548999d433b109672aff7feb6fc3ed885c8ee35fd381ca4e022ba19565b7368648160a7944e8c753216231e3db0586c6ebfb78f4e864e4b7e230f0d417e9b62c05581efc398d0866f7f0cdaa23b12ed0bff7bd55d066e97a395b87c768294ff698c5f638dadbd063b7466ffc11f7a520b23ac49985435aa488c90ea2b90593f6da7f057e1341e184b4a9cd646b895e862c6960331", 0xb8}, {0x0}, {&(0x7f0000000000)="5cddb84d01607dd0891e562d53fe201014ce0e3d32cfaa079f91f472642320df4256a85e39c16684d5201f736e5d", 0x2e}, {&(0x7f0000000040)="b2859fd4d883aa0b98653a77f6aa0edaeebb2608c6b6215fb5e092a765771de2f44e81a15859383166e59717845268b48148f8d21a9c96", 0x37}, {&(0x7f0000000140)="2beead382c4498fdcf70c0105e96620eb89f992c2917c241be90db200e2294889f84f67f238fcc499b4031186452252f739626129a23a225ae6b6b5147d6b0615b3048c1a2474b361f4d930625437dc6ca73a4f189a3703e1c81dc5f2e52e64e7aecb953926828a260167a6346721d426aee788247455b25da7fe1308383270e2a38f58167acb0ef3185b663738e3a2a9fe545dabf696d15f1a4ce3b2d", 0x9d}, {&(0x7f0000000200)="e9aea0864539a3641a78da926f986477d386fb19206afb8d8e050de508824036a9ee364f56c3aac52dfcfc5c737e7f4683351c07467291545d000ef644c6c9feb685a8f6846370be3e2767f446cf7e759154b17d53317f16b3a5387eed11ff47ab1a67b5", 0x64}, {&(0x7f0000000640)="9ee35c63e1c2a3071715e8ebda0bde1bacbeca5df48ce141b841bc4838a0f62143650400bc1148ba4cd122775af2372c989d9565355775f8436320abab1117add81c66371877b97a8373cc035872bac1be82702ca9cdc735da84a2ef96f24362f4e187dc729e33871644b844324d1dbadf411e4d8670d5cd1b87d8c1e0360ae4038840ef90fc2a22b55c11897319789d2fa519f7ed91784afbbeae29a814c916c1d18774492aac743838d31e535405038bc069f69998e569bc5d17c148fd7001c2021ab062305343c525f8", 0xcb}, {&(0x7f0000000280)="b7b6400070c4399f9099aca963bccd01be9548f5fbee2b2ba040c6475a62d652611bbdbf9fa5377d6425abc89075c292213fbc498350401e7e0672abce3a46f8", 0x40}], 0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$packet(r1, &(0x7f0000000100)="8f0480a084b81b70532cfbee6ac08e2f", 0x10, 0x4000081, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c080}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'gretap0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x80, 0x10, 0x8, 0x5, {{0xa, 0x4, 0x0, 0x9, 0x28, 0x65, 0x0, 0x5, 0x29, 0x0, @multicast1, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x14, 0x68, 0x1, 0x8, [{@empty, 0x5}, {@local}]}]}}}}}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000006940)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}], 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0x4401b, 0xffffffffffffffff, 0x2b73a000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000000c0)={[{@dyn}]}) fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3dc6e48aa31086b870030000000ff000000160af365040014000d0002008bc3a0e640e51753cd60bc24eab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6.487495859s ago: executing program 1 (id=421): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.657371515s ago: executing program 3 (id=423): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_GETXATTR(r0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r4, 0x75e7f000) write$FUSE_INIT(r4, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1282, 0x400c6001, 0x5, 0x8, 0x10, 0xc40b, 0x0, 0x0, 0x40, 0x6}}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 5.599928116s ago: executing program 4 (id=424): bind$ax25(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x363002, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4607032005000000000000000002003e0000000000012a000038000000"], 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000680)=ANY=[@ANYRESDEC=r0, @ANYBLOB="cd5884d7f15b4b2cb5fe5ea8bc82c6d6accb317f36884f9367b3ade25a570da0a0afea03203924610c707d3f1579ca1b10063a4e4d5b7f48b7df09a457b0fe5364cc51a282048cf204bed1f1141960afefa15c45c159c4b49b6b2a830c43ca8f76f13cbfc165930e4ae384b0ab601e5a2de36d725dcb7bcb5d75c0aae80f90ec0e1878bea6c61a85479ab0bdbe23be6fca430717e0662e742e9e22da4c7738550aad1575bad5a44722c3000a2549636fcef885f37aded643563f6202528764397978aa8452c0dba51a3d325fa59ce7972163d91cb8c32860550e7f49659e9d37a00c222648dfcb2fb9cd9c7851e20428711574b74d961e5ef2ca4b746007516fe3128c4cec56cf85ecf7f9234d53265f3149dc7f7835ef940fe7008dc4b83132e0d4a89cad20d434bc8b2fbf6ba465920966e5bedd8e5acac6e9853a8a73e07ba7818efcec596cc85033639b57fc879a45ae13deb6fb8d66fe87c8273be75600ff2fc72e9798dfcfc7a94437bc126044f666d5a76d3a830879d2399a9d877d519018acc9df234550a9b07c9aa0964b7da7ddb317273cb8ab18c8118fa88e8fbacb5d95e371d1f09957712b1c2e11d4cf585d246517caf38d7e9fd7f66b8af0f2c7e6aca68d80074409e08f8f4821005d648108aa9424968b75a593d4eec78aaae8cc07b3d80d9aafeb1700767ceaf7d9c6e60e0593f15752f704ec08482b8ec897c210e9762b1b155b7fabb8bd0c1694c6c337629155db331de6d2dffe613719f7128100ccae23425eb5ee7d05c5e2ebe7aa44f9a647aaa59b5db5d4a0cdf453fd9492e81a8d880ef0207dfa70a4daaf0f58164e6089e488fb85fdfbfc945f55f2ca860439012843655c2f85a901be02cb31aefdb7e72b4682748b9f8ecab301f3e06af5e1929b9078f7114e1468a28d57ca66fa255f6bfd30b354d44a9feab049f87f361bb42ebc6aeaba25a9083d7e5b28a2563c36858c0581f43760f9a14bc0951de6caaad83e70024f83578ae51ed635590972084b64bac98b789fd80d0e75dc3fae70aeaadd25266352f7ac3754eef0e3e71a0682c84d0ef24ceeb43f0286db5cc8da37387a15f70e1252ab9a5cc11cb68ac84c6f7254be82fe3f2246900c71488a236cfaf6715045787be6f8597cd02f3ac4f40f7950ddff531ba3fd83f709d18cd87176647237d607b6a5f66668724be07e39ec7bd93c94de02c213bdc29ba503a52f0fd07ff4a94b4f23f4919ecf4afe3a2995382a66eaf33ddb349fd774ce5c1d8b1be7d2b234f744f45dbd67d99f47843b5c627afe329cc2f4e34a0ee6c753549128bc30934eacd1d239305f5dd73531a91a2d433311f50cff083dae23563aee1c054d354ab9b14ac03e97b1963c8a214eb25210a99ded0bd4db753683ff382db859f51437632c0fea55b5eb29f466ea2859c2a636b60be0866602b183d354b80a9fda3a782a215ec2849860ab407393cec5b71aedee7a9d429e62436dc3430acf917852e44eca1f407faa11141bdcaeb9f7709c042434400691e125838407475ea4fb9151547b3e137cc369050e657d2fc36d685f3f1e32456e8d28785cc10c9a4e48fb84f451ea1856da81fafe375881632db652d4a8ad873ceba420cf16ad5e6bf3ed18e4efb920c61b491b6d74a3c831b6448886d5c438475a51fac2b9d50c4a4c83f7f9a2409ca4f2a3253527dd391a23422d8f4a4031272cfbe56210365aec808a72b8baf7cb02d46f5d210d21196388c2c1e9477cfec131771b8b1e1cbddf2b4922f8b155ae6133409c7e249798b589a8680baecbfa9a9fae6b5f101b19e5c3ac605b5f141e05c22b54d9108a3e96a55c2fb08a1a000d442d7d920b1e6c0d36ba6a704504826074979d76354c56344b42dd5ceda32d4ef58751c38c8a58971d96ff571ce0775a7fd2086b9e0eca26f109849e42307e15039fc5cee99db6aad865767191cacca230a9de02240d7b0ca3067d83347430a8634bc98421a35278d47dfccb508fa6e0b8bcd45a940bbdd8bcd1ec6cff93b7a3be251ba846e5192ca3ed1b8f3c7bbb9eb0cd9cdb40f3c188238817d6fb64545a668e4828db56ec099918ec79de6d34c3c6fb45e49c3acb9217e67466f6962b6ad9483db93e993c00363af6b82d3bd9bb290a166310597920592a7bbebaa638f9701a07efd3b6bf55e51cf615dd81052bf9fc85a091b9354628f7be55685f1c5cb4e5818fc72c908bccef15e1fb4b5997bfda6a07b35ad1be1ee057577b19dff896f897d5a3eda54c4882a6096bd7f8e33a1f7bb7adb5e41b3d534c0a38a3477a0c02a55d23a9aea4616a33a5fd05b41675aedf3962b8626ec4c653f00ed4682ee59d6d220df49ff45e875447a274f3dbba7766a632db9bc214d9a2310b562088063c41dca2f2b0b86a0e2668aa130f7a0dc434802676a98795032d3ac181e948c728295ee7db420983a87d69c114bb2edb608d80815cba19c0ecec952665a91f67e6cb5c92fba6bf7f30ca641f165d47b4f5b6b15d07caf345bec0cc7d6583340c24ccd0381da4c6a351231efe574a2b9c964f2fcc0cd0e39713ab41550ea93226df5e96d6eba6b5d19baf794d3361f1cb11068fb0e18f184e8dd85c5df90d8a0edb6688247039fd0840d809ac2a7b13393376bb6d3ca22ff4b18e55d566729891a57f8bd2c79aa8c89daeac1f56a809a561dcb6e862405300901bbec0fd13f944f241eb57cec598282e3698f49135ddc68214a26e6428ea373ce441ead0c3e8620b3af3308b72b8591330be1283b0a05a0fa7e0ea6d19a1c2eeac68982828121ad3921e1ddc2082ec0b75be048d2319f2a52b4e6c63e7e510002bb1ddf2bc1e79a5e4af23d4d48e97bdb83c24cd4662dc3c41606850d463916c9ccaf7d6ba1b6dcf9dfc9776346ee0614dfd4738043301a8ff0dc3faa5c74fba271f8353b2b1bae5bf2a86b9166afc848c8aae89d16f2e6bc4fbd0a27dbe9c4501a60f789d3b3a09cb4529ede1c5524546059837b43795253e76e29e90922784ff93b0e523ec2d412349712d92884bebc66bd6da916b9417451045080ec39f86f3170b3bb35def27f0a4e278ed0c421571160a1994d2d4aefaf445298de4788086b2b2d489ccd55e58b89014b0716ddd465019e3b4fd07dec3e8a814a7af0ca51e696159fdbca2006ccb8998117a0cf694a96d4d3f9dc1f90cf4d6804ae54840fc83936dbc09b75fc839420b57466d6548ce25d1cd7796e04b178abf96e8683aeec39344554c9e1d18e45218093e71b7d447dd0651c8dfa150c37340fec9710d9b0e7f3180cb5b2a07e7e805042870cc24e9333e818d114765408740d3d656e919b3f058a93956f9c756f67662fdee67a921bd6cc05130f0bb284df3e027841311c36b1b6bc15b61f67794866433e44ba2feebfb10c0827d70f0554111299bf72c1c7a7f0db74bf3ad1cfcebbedf5e4fff404a6d2d7f6ef5b7a08572913c9a1b72cf0f17a4a3ae3a371f647f269624518a32dd2de8c2ff4b19c6f43343a423fc321bb68b7b46a3876996b042bc6f4dbb513dc00a62a31e7fb6552dc9ec120b27b455a68046839002e564c39c1873147fd8f115c84a838ccb02379e6bf58e8351a7339fe8ba3083d1d37ca3fc78effc99f8004743e4b05c46fd03516cb9cb2d1d206c6f06196b9b72c06ea093c2ead5e7cc9f9ca34b73718778734ad0eb15299b7e02dbf05dfb33f6f689145bcf6b940e263d8036ba8575985a2fa6cbd9f4698b32a0f878882e21cded529f8261c088d11158fb6f4e6c695a6fba72394eb4ee0c6a25519daccaa541a8f6a96bac0ead2882daa54bef3b230fee7dbf7aaa5b2560f50fb9e8a867883a3be08d6738e481e0200a06c44e39c9ecb119bdf5114d1a24e43a180019150422958bf487bb8f90ea6709f647f7105de997af9fbf055cf641d25d79736752ca0e2499cd1bd62e277c3dbf6f3b531a328af62a8d518091f39a328bc69f941fe1e583924b4edd636cc9a1c11753e6c10e46ba7b914aac84951a025a5a440087b0c812879b62e6c6c1c2c78eb9aea4da65a86796eeeb790b2ad26a5f0d59ac02d239c1bb7ea217587b7269a3d3a867f3db7f0e8048ab4437a582d2b982d68359a38d7cac47af094bac3dd210a74a4067d0719161939d4bd3ce23e090897c3baa96714158bf7762be8013f59d64d32bbe120b822f377c4202f7c6db72334e844635ea66e5f4217798c2ce82b37b7a3ad858436289d36e8fbcf792a48c267185a99bbf6445a02229f698bd22cf3529c09c937413ebcd06b05687bc06e18903ff43030a05949b5d9f64abf6811ccaa6f2d64781aeaa0b5e5770499a4b4dd613de015569a95ba9b3e7a5e27ecd0fb8ae62946bfbac78c58ff3005f9fe5574c9399894978dd6abe4ebaf93fe758c265bde81e07671d3f508875f1ee76176e0f003234dc4a0c2b33065e8d8a03c3802857dd39cdd5705f2774309aa922a5088c8dd9eac5affbb27dc19b40d09e8319fc6786df9fa190cd18017b3768ccaa4216c0b5dbda90df31f4568721ba9bc37c33d5efac310fe48c29ab8c8b5afe15d08dc1ce5eb50894968a06e7d6111d045ca8edd4fade8f1a0db0ce16e124f46f7a2b03a85ba64596010b352e178d08eb9ffc74ddef040b79d67fefd6170203e3746ce2f466dd3b6bbc5779145e7f0997ab2d793e2252f288c40f45b8c4c5a1053b05730d7a1183613c114342d9516aa55211254da7ee07836751bb0102c9c7b8e50fd2c466b70187a0ff811f83ebc7a8db9f44a3f673e0277c2ac4aab13a1144d235cc0fb32c2b00eb5b27b69d6e2b3587a9621a64bed3759a7cb4985227bc8e891fbd76be1f5167bcae05d79d634ae4bd5c734fe7317f2b8cfc2945305bd2f8de5efdef37a8b1282c30ffc83df9305a64f1ba9b1b834127ce1c6d61b2f325fad0d5e0d7c2e6f2cb632e400307fdc3a2e979f5b5aaddc389dd42cf3d8d59e4d686332c4678875a3b62bdba19c21ff70517c56b6b78cd37a62a9f5709fd3b6d99751c371f74604663394ee1ae562bf7a0474797a00671606aa2399a7c0b255a7bcafab2bf740cb9d77ce687de7b93475481b53f4b65be730c35aaa0003a6bf5f7cbc396cfe867524d24897ab29ac0ec97ee0ed06e57dacaec54a7b0d7a640f1a932df9e87a7017875c3d9c92855a7bc2e0f7927a35734dbd50c4ab2970037ba790c9a886470cd682f1f4e64597ad0f4cc47388151e2bacbca2d4ca206373c48a23050f5fd985f0eeae9dab7238518b4955e9b461cf69fc6f179b4a5f1b6b4119e696423ee7866906c5ad47bfbecb6b7a52328b21aa5975752f3d75fdbac2aa3cc2f7752df7a59d875069edd100e2bddfed3eeb90be6191827546438f1828eca391bd77b474608ad689b802778c398ffeacd4a0ce4518444d28ce4da6c085540c82d0915f6550e05f6f5a821708e2829b724b7cfac9d0327c7874afc68027002c280855d9bf2ab5575176bd9b88e435795f340a185d3f3e129cc135f92b49da36004d002364c92468744cebb0e57afd79dd6ab1ec0da99893d8408928dedf7acf7338287a2b4da9618e7508d8be96bdd0c8a31e730527750cf81db4f67234289dadb1afce709e3416cc9ae6b26f1fee5244175f4ec7079878a14ad85685e965d86ca2baaf94922a0b14ca06b425fe2e99848cc7f88ad4cdc2ae90e6dcd22a94440c5e09f7139f6ff1300f8affc3ef70e6028a2c63a11fa84657230e40e6ce124bb5cd0ddf1b398414557542c76eab2e92e2bd67396ca872f7b8509e2d96ce993d0c0ad21ceca44", @ANYBLOB, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRES8=r2, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0x10, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000180)=0xfffffff7) syz_emit_ethernet(0x7a, &(0x7f0000000440)=ANY=[@ANYRES8=r3], 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8) name_to_handle_at(r6, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1000) 4.992222138s ago: executing program 0 (id=425): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r0, 0x3d, &(0x7f0000000080)={0x4, 0x9, 0x5}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0x80000001, 0x0, 0x800000002, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x2, 0x248a, 0x9, 0x0, 0xe69, 0x0, 0x0, 0xf, 0x0, 0x5, 0x5999, 0x20000000, 0xfa, 0x0, 0x2be}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1}, 0x91) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001940)=""/4108, 0x100c}], 0x1}, 0x12060) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000140)={r4, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r5, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x1, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast]}) r7 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x458, 0x500f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x2, 0x80, {0x9, 0x21, 0x4, 0x6, 0x1, {0x22, 0xfe7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x1, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x80, 0x40, 0x2}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x6, 0xe3, 0x0, 0x10, 0x5}, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x1, 0x7, 0x5717, 0x6}]}, 0x2, [{0xf4, &(0x7f0000001380)=@string={0xf4, 0x3, "3505b31c6af96de78cfa46ecd0118ff24e0fe67b31b8a6836ddb3e6bbfba6711830d3a4797687c8970ddd2f7b78e87e234f7ef6687a6483777364cf8773a1bd21577af30685c6ad24383d94378e72543e262fe3b2f03ab8078f809b5e308196e7ec0cf7f3b081ed59939fec1a6281ff0f59f35575c28cd8b3858d855a5f39c7cc1533963f776c6241fb19879e66a5738842e0aad26db494d8155da08473892104dd472824ec5223fe1f0cfec2f4561239b8303c4d8e934ab0d392007dcb11dbfb54353adb8f55040b64c116078cdc4f8f6a2c8d96b32c3e918884ff55024ec85df8c4f1b0cb845c9ee6add4386ceab1b5f3a"}}, {0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="0a03ee61a45d63840fde"]}]}) syz_usb_control_io$hid(r7, &(0x7f00000015c0)={0x24, &(0x7f0000001480)={0x20, 0xb, 0xa6, {0xa6, 0x22, "a54b6f8a15d963cf47f4e411e61076429f7175ef2690f57f1e8ff4804d9acbac6c4e8bdae002bd1ea3345f08232919d5bfd0695d1e416a8cead248e1d55182071fb6a8963d166077077a8430794549c9859121c21be7aed02bc4725024ade0b15f32bf7e63c5a6ef62fbe2cc604ee2e04df756f4870d14424dee55d3f44697081e9180e75f00568a38a10d5476d4f7b666fd4a4149065706f239ede3151ca63fbcd841f8"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f0000001540)={0x0, 0x22, 0x4, {[@main=@item_012={0x0, 0x0, 0x9}, @main=@item_012={0x2, 0x0, 0xc, "8c44"}]}}, &(0x7f0000001580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x84b, 0x2, 0x1, {0x22, 0xdc6}}}}, &(0x7f0000001880)={0x2c, &(0x7f0000001600)={0x20, 0xb, 0xc5, "5cf28eba091c7809263942872a68e740cd57e5fcf16ec0dea04968fdefeb22c4b3de7248034325321bdca80ba6db82896ffa62c92e24f04bbc36b0215db4113d933ea0f1381a2c5a1ae2e1955d034bf72db701535ba38c3a14d57bafbe86ff59bc1e4e84e84dbd931e900deb2097b80dd2d2138fabfeed724e675442083898d96c0d527bc26b1bab692f310b8bbf64be997a57e6df4e16cd34f3995ae83116d83d5edd9bd0448b7999e6cc0d1018ad7fcdc1e944cad3990d12e4853b9b18d91964397a45f5"}, &(0x7f0000001700)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001740)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001780)={0x20, 0x1, 0x92, "d04630d1a5685777d076b54b74cb5ec3d8c8b4d5f96d1127ec4d98e5f1105683204dbe21c55afe57872435b87c863482c2a6f1c3175ecc6e01c9a29bde4153dd49fe68d8126987e94d046a439230ce319c7cf9ffa725191baea165176197689943f971447c5475cf9ed125524966948d183d799bb286d40de3939d8cae4a5937020896385e69af41786385ce12b27041bc4f"}, &(0x7f0000001840)={0x20, 0x3, 0x1, 0x6}}) dup(0xffffffffffffffff) 4.576479069s ago: executing program 2 (id=426): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400000) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000000c0)={0x4, 0x9, 0x1, 0x1, 0x10}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x9, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000140)={0x0, r1}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f00000001c0)={0x1, 0xffffffff}, 0x0) sendto$phonet(r2, &(0x7f0000000200)="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", 0xfa, 0x10, 0x0, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x7, 0x3, 0x9, 0x484, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x5, 0x3, @void, @value, @void, @value}, 0x50) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) mount(&(0x7f0000000480)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='cgroup\x00', 0x2010, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000540)={0xb12f, 0xffffffff, 0x101}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000600)={0x990000, 0x4, 0x80000000, r2, 0x0, &(0x7f00000005c0)={0x990a94, 0x3, '\x00', @string=&(0x7f0000000580)=0x81}}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000640)) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000680)={'ah\x00'}, &(0x7f00000006c0)=0x1e) pselect6(0x40, &(0x7f0000000700)={0x80000000, 0xe, 0x1, 0x6, 0x7fffffff, 0x6, 0x3, 0x10000}, &(0x7f0000000740)={0x9, 0x7fff, 0x4, 0x8, 0x4, 0x6f0c, 0x5, 0x3075}, &(0x7f0000000780)={0x34, 0xdc6, 0x7, 0x8, 0x1, 0x7ff, 0x7, 0x4}, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000840)={&(0x7f0000000800)={[0x315]}, 0x8}) getpeername$tipc(r2, &(0x7f0000000880)=@id, &(0x7f00000008c0)=0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x800) connect$802154_dgram(r2, &(0x7f0000000940)={0x24, @short={0x2, 0x2, 0xfffc}}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000980)={'wlan1\x00'}) creat(&(0x7f00000009c0)='./file0\x00', 0xe8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000007, 0x40010, r5, 0x49ec0000) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@generic={&(0x7f0000000a00)='./file0\x00', 0x0, 0x10}, 0x18) preadv(r6, &(0x7f0000000c80)=[{&(0x7f0000000a80)=""/118, 0x76}, {&(0x7f0000000b00)=""/13, 0xd}, {&(0x7f0000000b40)=""/113, 0x71}, {&(0x7f0000000bc0)=""/14, 0xe}, {&(0x7f0000000c00)=""/61, 0x3d}, {&(0x7f0000000c40)=""/30, 0x1e}], 0x6, 0x34cb273, 0x9) memfd_create(&(0x7f0000000d00)=')\x00', 0x5) utime(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x1000, 0x400000000000}) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f0000000dc0)=0xfd, 0x4) 4.230379057s ago: executing program 3 (id=427): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x84}, 0x18) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) (fail_nth: 4) 4.21870702s ago: executing program 4 (id=428): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x1, 0x80000, 0x1) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c00000010000104000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000300", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000019080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4, 0x0, 0x0, 0x0}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r9, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r10, 0x0, 0x10000, 0x0, 0x0, 0x1000, 0x749bc}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r10, 0x0, 0x81, 0xf80, &(0x7f0000000700)="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", 0x4}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010029bd7000fddbdf251900000008000300", @ANYRES32=r14, @ANYBLOB="05001e000900000005264818a930a3f2989bd3365bc150001d0053420000131fe5ccdd1681da2b3163ef"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40420d0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000535000/0x4000)=nil) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r3, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r5, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) 4.075813684s ago: executing program 1 (id=429): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000130d00"/20, @ANYRES32=0x0, @ANYBLOB="d11101000000000008000500", @ANYRES32=r1, @ANYBLOB="140012800c0001006d6163766c616e"], 0x3c}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd}]}}) r3 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) read$smackfs_cipsonum(r3, 0x0, 0x0) getsockname(r2, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x80) 3.968892225s ago: executing program 2 (id=430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x2000009c) 3.383373198s ago: executing program 1 (id=431): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)='R', 0x1}, {&(0x7f0000000400)='Z', 0x1}], 0x2}}], 0x1, 0x24044880) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="9feb01001800000000000000180000000000000001000084040000000000000002000000000001000000b9257add1a933f5d5daa2794b99d9ba7902a6277b01d6b6a06bf9b3791fbe868624f807e1afd8bfd03e30fe26835b4a215b8c7f6cab89a45dfc32708ac81489451aaeabb5bd058e7961faf78fc88272636dd3a7205fd658daab03a04e22283a34a359fdfb33b1ae1fef74b7d11e48c4ab3bc0ebf38559fef9034c311e18420e21af5d4ea2242d5a5368aab0889b162b1c8fe222395"], 0x0, 0x32, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000002500)={r3}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x7, 0xb8, 0x9, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x1, 0x3, 0x3}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0x1, 0x58, &(0x7f0000000480)}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r5, @ANYBLOB="101000000000000008000d0005000000e4031680a4000180"], 0x40c}}, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000002b40), r6) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x8031, 0xffffffffffffffff, 0xe651e000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0xfffff63b) 3.382255532s ago: executing program 4 (id=432): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000cbe8abb2a0e7f9035a809f908848835a8950670bae1d7a4843b05b0c95306633de8b2b05ade699d6f82132559933d46020da1ed68b68ba01f30a7153c2dd350688f4166b517e87586b7988c09dab0a8c3c87eac8d2b36041ec54a2e994c8a8c64c01beaffe99b169825aefd3610e384173694d2accb791fffd038cb6ae12d130b136915729db575f791351e1c61a"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) userfaultfd(0xc0001) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, @default, @bpq0, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast, @bcast]}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.298959589s ago: executing program 3 (id=433): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioperm(0x0, 0x2, 0x7e) modify_ldt$write2(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x88}]}}}]}, 0x3c}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TCSETSW2(r4, 0x5437, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 3.157654724s ago: executing program 4 (id=434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) (fail_nth: 4) 2.76052481s ago: executing program 4 (id=435): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f00000003c0)={0x0, 0x10, 0xb8, {0xb8, 0x3, "472a8d09a799467608cfa49d44d957d64cfd923623a239b3020c8c0bc258c90110123af127d0b3501eb99c26a46930e5e678d9948120adfbcf74c1fe938004e8fad9a0fc29fd79ca48164356ae004737d58999866c6634da9393a45d87a86152d0bc74c5d7b5dcb2c7bbac3e2676aac23fba70f35384a4e7c0695926c961e4da02731a230e6cbb760c9ef16df37650eb71de2f9ad65656a330e0816e023491edbf486db3b142d02ab8b6da8958574bf674523e9f7b93"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}, &(0x7f0000000500)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf8, 0x10, 0x5a, 0x42, "913bc40c", "6b112508"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x8, 0x6, 0x1, 0xf, 0xffff, 0xa38}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000640)={0x0, 0xc, 0x1c, "ff4a4f14ce7df209a579b5f3d7ab51b08fd2400e51565f301a3dba63"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x37}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0x1, 0x1, [0xf0]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x6000}, &(0x7f00000007c0)={0x40, 0x9, 0x1}, &(0x7f0000000800)={0x40, 0xb, 0x2, "dae8"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000140)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000008c0)={0x40, 0x17, 0x6}, &(0x7f0000000900)={0x40, 0x19, 0x2, '44'}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x8}}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x1, &(0x7f0000000000)=0x9}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000065727370616e00fd58d7b1c93d820db3001800020404001200081b155a780bf615a9ab1a54a7ab78b055f65fc930cc80a96bdb7d570d45002f56144d481e4ce8346ca9020b7008000700e000000000000100aaaaaaaaaa00000040e01232e089b088864e0ba3717f728b10d25c2003213b3500000000000000a661aeea9fdc0b79a7"], 0x54}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r5, 0x0, 0x8000) syz_emit_ethernet(0xc2, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0xfffffffffffffd2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x1}]}}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', '\x00', {"0000000000115d48682e1c9a5500"}}}}}}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) 2.669490452s ago: executing program 2 (id=436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44015) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24040808) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000340)) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in=@broadcast, @in=@multicast1, 0x4e23, 0x400, 0x4e24, 0x0, 0x2, 0x80, 0xa0, 0x3c}, {0x47f, 0x6, 0x3, 0xfffffffffffffff4, 0x0, 0x3, 0x9, 0x9}, {0x80, 0xfffffffffffffffb, 0x100, 0x5}, 0x776a, 0x6e6bb5, 0x2, 0x1, 0x3, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0x32}, 0x5, @in=@local, 0x3500, 0x3, 0x1, 0x3, 0x0, 0x80000001, 0xc}}, 0xe8) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0, 0x500}) memfd_create(0x0, 0x2) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000080), &(0x7f0000000240)=0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0xb, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008b04"]) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c90012000e000500000000002700dd6202000000f7ff"], 0x17) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 2.294026356s ago: executing program 3 (id=437): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f00000003c0)={0x0, 0x10, 0xb8, {0xb8, 0x3, "472a8d09a799467608cfa49d44d957d64cfd923623a239b3020c8c0bc258c90110123af127d0b3501eb99c26a46930e5e678d9948120adfbcf74c1fe938004e8fad9a0fc29fd79ca48164356ae004737d58999866c6634da9393a45d87a86152d0bc74c5d7b5dcb2c7bbac3e2676aac23fba70f35384a4e7c0695926c961e4da02731a230e6cbb760c9ef16df37650eb71de2f9ad65656a330e0816e023491edbf486db3b142d02ab8b6da8958574bf674523e9f7b93"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}, &(0x7f0000000500)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf8, 0x10, 0x5a, 0x42, "913bc40c", "6b112508"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x8, 0x6, 0x1, 0xf, 0xffff, 0xa38}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000640)={0x0, 0xc, 0x1c, "ff4a4f14ce7df209a579b5f3d7ab51b08fd2400e51565f301a3dba63"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x37}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0x1, 0x1, [0xf0]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x6000}, &(0x7f00000007c0)={0x40, 0x9, 0x1}, &(0x7f0000000800)={0x40, 0xb, 0x2, "dae8"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000140)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000008c0)={0x40, 0x17, 0x6}, &(0x7f0000000900)={0x40, 0x19, 0x2, '44'}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x8}}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x1, &(0x7f0000000000)=0x9}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000065727370616e00fd58d7b1c93d820db3001800020404001200081b155a780bf615a9ab1a54a7ab78b055f65fc930cc80a96bdb7d570d45002f56144d481e4ce8346ca9020b7008000700e000000000000100aaaaaaaaaa00000040e01232e089b088864e0ba3717f728b10d25c2003213b3500000000000000a661aeea9fdc0b79a7"], 0x54}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r5, 0x0, 0x8000) syz_emit_ethernet(0xc2, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0xfffffffffffffd2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x1}]}}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', '\x00', {"0000000000115d48682e1c9a5500"}}}}}}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) 1.424039256s ago: executing program 2 (id=438): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x84, 0x30, 0xb, 0x5, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x15, 0x0, 0x0, {{0xfffffe70}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x6, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 1.339619148s ago: executing program 1 (id=439): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.256653069s ago: executing program 2 (id=440): bind$ax25(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x363002, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4607032005000000000000000002003e0000000000012a000038000000"], 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000680)=ANY=[@ANYRESDEC=r0, @ANYBLOB="cd5884d7f15b4b2cb5fe5ea8bc82c6d6accb317f36884f9367b3ade25a570da0a0afea03203924610c707d3f1579ca1b10063a4e4d5b7f48b7df09a457b0fe5364cc51a282048cf204bed1f1141960afefa15c45c159c4b49b6b2a830c43ca8f76f13cbfc165930e4ae384b0ab601e5a2de36d725dcb7bcb5d75c0aae80f90ec0e1878bea6c61a85479ab0bdbe23be6fca430717e0662e742e9e22da4c7738550aad1575bad5a44722c3000a2549636fcef885f37aded643563f6202528764397978aa8452c0dba51a3d325fa59ce7972163d91cb8c32860550e7f49659e9d37a00c222648dfcb2fb9cd9c7851e20428711574b74d961e5ef2ca4b746007516fe3128c4cec56cf85ecf7f9234d53265f3149dc7f7835ef940fe7008dc4b83132e0d4a89cad20d434bc8b2fbf6ba465920966e5bedd8e5acac6e9853a8a73e07ba7818efcec596cc85033639b57fc879a45ae13deb6fb8d66fe87c8273be75600ff2fc72e9798dfcfc7a94437bc126044f666d5a76d3a830879d2399a9d877d519018acc9df234550a9b07c9aa0964b7da7ddb317273cb8ab18c8118fa88e8fbacb5d95e371d1f09957712b1c2e11d4cf585d246517caf38d7e9fd7f66b8af0f2c7e6aca68d80074409e08f8f4821005d648108aa9424968b75a593d4eec78aaae8cc07b3d80d9aafeb1700767ceaf7d9c6e60e0593f15752f704ec08482b8ec897c210e9762b1b155b7fabb8bd0c1694c6c337629155db331de6d2dffe613719f7128100ccae23425eb5ee7d05c5e2ebe7aa44f9a647aaa59b5db5d4a0cdf453fd9492e81a8d880ef0207dfa70a4daaf0f58164e6089e488fb85fdfbfc945f55f2ca860439012843655c2f85a901be02cb31aefdb7e72b4682748b9f8ecab301f3e06af5e1929b9078f7114e1468a28d57ca66fa255f6bfd30b354d44a9feab049f87f361bb42ebc6aeaba25a9083d7e5b28a2563c36858c0581f43760f9a14bc0951de6caaad83e70024f83578ae51ed635590972084b64bac98b789fd80d0e75dc3fae70aeaadd25266352f7ac3754eef0e3e71a0682c84d0ef24ceeb43f0286db5cc8da37387a15f70e1252ab9a5cc11cb68ac84c6f7254be82fe3f2246900c71488a236cfaf6715045787be6f8597cd02f3ac4f40f7950ddff531ba3fd83f709d18cd87176647237d607b6a5f66668724be07e39ec7bd93c94de02c213bdc29ba503a52f0fd07ff4a94b4f23f4919ecf4afe3a2995382a66eaf33ddb349fd774ce5c1d8b1be7d2b234f744f45dbd67d99f47843b5c627afe329cc2f4e34a0ee6c753549128bc30934eacd1d239305f5dd73531a91a2d433311f50cff083dae23563aee1c054d354ab9b14ac03e97b1963c8a214eb25210a99ded0bd4db753683ff382db859f51437632c0fea55b5eb29f466ea2859c2a636b60be0866602b183d354b80a9fda3a782a215ec2849860ab407393cec5b71aedee7a9d429e62436dc3430acf917852e44eca1f407faa11141bdcaeb9f7709c042434400691e125838407475ea4fb9151547b3e137cc369050e657d2fc36d685f3f1e32456e8d28785cc10c9a4e48fb84f451ea1856da81fafe375881632db652d4a8ad873ceba420cf16ad5e6bf3ed18e4efb920c61b491b6d74a3c831b6448886d5c438475a51fac2b9d50c4a4c83f7f9a2409ca4f2a3253527dd391a23422d8f4a4031272cfbe56210365aec808a72b8baf7cb02d46f5d210d21196388c2c1e9477cfec131771b8b1e1cbddf2b4922f8b155ae6133409c7e249798b589a8680baecbfa9a9fae6b5f101b19e5c3ac605b5f141e05c22b54d9108a3e96a55c2fb08a1a000d442d7d920b1e6c0d36ba6a704504826074979d76354c56344b42dd5ceda32d4ef58751c38c8a58971d96ff571ce0775a7fd2086b9e0eca26f109849e42307e15039fc5cee99db6aad865767191cacca230a9de02240d7b0ca3067d83347430a8634bc98421a35278d47dfccb508fa6e0b8bcd45a940bbdd8bcd1ec6cff93b7a3be251ba846e5192ca3ed1b8f3c7bbb9eb0cd9cdb40f3c188238817d6fb64545a668e4828db56ec099918ec79de6d34c3c6fb45e49c3acb9217e67466f6962b6ad9483db93e993c00363af6b82d3bd9bb290a166310597920592a7bbebaa638f9701a07efd3b6bf55e51cf615dd81052bf9fc85a091b9354628f7be55685f1c5cb4e5818fc72c908bccef15e1fb4b5997bfda6a07b35ad1be1ee057577b19dff896f897d5a3eda54c4882a6096bd7f8e33a1f7bb7adb5e41b3d534c0a38a3477a0c02a55d23a9aea4616a33a5fd05b41675aedf3962b8626ec4c653f00ed4682ee59d6d220df49ff45e875447a274f3dbba7766a632db9bc214d9a2310b562088063c41dca2f2b0b86a0e2668aa130f7a0dc434802676a98795032d3ac181e948c728295ee7db420983a87d69c114bb2edb608d80815cba19c0ecec952665a91f67e6cb5c92fba6bf7f30ca641f165d47b4f5b6b15d07caf345bec0cc7d6583340c24ccd0381da4c6a351231efe574a2b9c964f2fcc0cd0e39713ab41550ea93226df5e96d6eba6b5d19baf794d3361f1cb11068fb0e18f184e8dd85c5df90d8a0edb6688247039fd0840d809ac2a7b13393376bb6d3ca22ff4b18e55d566729891a57f8bd2c79aa8c89daeac1f56a809a561dcb6e862405300901bbec0fd13f944f241eb57cec598282e3698f49135ddc68214a26e6428ea373ce441ead0c3e8620b3af3308b72b8591330be1283b0a05a0fa7e0ea6d19a1c2eeac68982828121ad3921e1ddc2082ec0b75be048d2319f2a52b4e6c63e7e510002bb1ddf2bc1e79a5e4af23d4d48e97bdb83c24cd4662dc3c41606850d463916c9ccaf7d6ba1b6dcf9dfc9776346ee0614dfd4738043301a8ff0dc3faa5c74fba271f8353b2b1bae5bf2a86b9166afc848c8aae89d16f2e6bc4fbd0a27dbe9c4501a60f789d3b3a09cb4529ede1c5524546059837b43795253e76e29e90922784ff93b0e523ec2d412349712d92884bebc66bd6da916b9417451045080ec39f86f3170b3bb35def27f0a4e278ed0c421571160a1994d2d4aefaf445298de4788086b2b2d489ccd55e58b89014b0716ddd465019e3b4fd07dec3e8a814a7af0ca51e696159fdbca2006ccb8998117a0cf694a96d4d3f9dc1f90cf4d6804ae54840fc83936dbc09b75fc839420b57466d6548ce25d1cd7796e04b178abf96e8683aeec39344554c9e1d18e45218093e71b7d447dd0651c8dfa150c37340fec9710d9b0e7f3180cb5b2a07e7e805042870cc24e9333e818d114765408740d3d656e919b3f058a93956f9c756f67662fdee67a921bd6cc05130f0bb284df3e027841311c36b1b6bc15b61f67794866433e44ba2feebfb10c0827d70f0554111299bf72c1c7a7f0db74bf3ad1cfcebbedf5e4fff404a6d2d7f6ef5b7a08572913c9a1b72cf0f17a4a3ae3a371f647f269624518a32dd2de8c2ff4b19c6f43343a423fc321bb68b7b46a3876996b042bc6f4dbb513dc00a62a31e7fb6552dc9ec120b27b455a68046839002e564c39c1873147fd8f115c84a838ccb02379e6bf58e8351a7339fe8ba3083d1d37ca3fc78effc99f8004743e4b05c46fd03516cb9cb2d1d206c6f06196b9b72c06ea093c2ead5e7cc9f9ca34b73718778734ad0eb15299b7e02dbf05dfb33f6f689145bcf6b940e263d8036ba8575985a2fa6cbd9f4698b32a0f878882e21cded529f8261c088d11158fb6f4e6c695a6fba72394eb4ee0c6a25519daccaa541a8f6a96bac0ead2882daa54bef3b230fee7dbf7aaa5b2560f50fb9e8a867883a3be08d6738e481e0200a06c44e39c9ecb119bdf5114d1a24e43a180019150422958bf487bb8f90ea6709f647f7105de997af9fbf055cf641d25d79736752ca0e2499cd1bd62e277c3dbf6f3b531a328af62a8d518091f39a328bc69f941fe1e583924b4edd636cc9a1c11753e6c10e46ba7b914aac84951a025a5a440087b0c812879b62e6c6c1c2c78eb9aea4da65a86796eeeb790b2ad26a5f0d59ac02d239c1bb7ea217587b7269a3d3a867f3db7f0e8048ab4437a582d2b982d68359a38d7cac47af094bac3dd210a74a4067d0719161939d4bd3ce23e090897c3baa96714158bf7762be8013f59d64d32bbe120b822f377c4202f7c6db72334e844635ea66e5f4217798c2ce82b37b7a3ad858436289d36e8fbcf792a48c267185a99bbf6445a02229f698bd22cf3529c09c937413ebcd06b05687bc06e18903ff43030a05949b5d9f64abf6811ccaa6f2d64781aeaa0b5e5770499a4b4dd613de015569a95ba9b3e7a5e27ecd0fb8ae62946bfbac78c58ff3005f9fe5574c9399894978dd6abe4ebaf93fe758c265bde81e07671d3f508875f1ee76176e0f003234dc4a0c2b33065e8d8a03c3802857dd39cdd5705f2774309aa922a5088c8dd9eac5affbb27dc19b40d09e8319fc6786df9fa190cd18017b3768ccaa4216c0b5dbda90df31f4568721ba9bc37c33d5efac310fe48c29ab8c8b5afe15d08dc1ce5eb50894968a06e7d6111d045ca8edd4fade8f1a0db0ce16e124f46f7a2b03a85ba64596010b352e178d08eb9ffc74ddef040b79d67fefd6170203e3746ce2f466dd3b6bbc5779145e7f0997ab2d793e2252f288c40f45b8c4c5a1053b05730d7a1183613c114342d9516aa55211254da7ee07836751bb0102c9c7b8e50fd2c466b70187a0ff811f83ebc7a8db9f44a3f673e0277c2ac4aab13a1144d235cc0fb32c2b00eb5b27b69d6e2b3587a9621a64bed3759a7cb4985227bc8e891fbd76be1f5167bcae05d79d634ae4bd5c734fe7317f2b8cfc2945305bd2f8de5efdef37a8b1282c30ffc83df9305a64f1ba9b1b834127ce1c6d61b2f325fad0d5e0d7c2e6f2cb632e400307fdc3a2e979f5b5aaddc389dd42cf3d8d59e4d686332c4678875a3b62bdba19c21ff70517c56b6b78cd37a62a9f5709fd3b6d99751c371f74604663394ee1ae562bf7a0474797a00671606aa2399a7c0b255a7bcafab2bf740cb9d77ce687de7b93475481b53f4b65be730c35aaa0003a6bf5f7cbc396cfe867524d24897ab29ac0ec97ee0ed06e57dacaec54a7b0d7a640f1a932df9e87a7017875c3d9c92855a7bc2e0f7927a35734dbd50c4ab2970037ba790c9a886470cd682f1f4e64597ad0f4cc47388151e2bacbca2d4ca206373c48a23050f5fd985f0eeae9dab7238518b4955e9b461cf69fc6f179b4a5f1b6b4119e696423ee7866906c5ad47bfbecb6b7a52328b21aa5975752f3d75fdbac2aa3cc2f7752df7a59d875069edd100e2bddfed3eeb90be6191827546438f1828eca391bd77b474608ad689b802778c398ffeacd4a0ce4518444d28ce4da6c085540c82d0915f6550e05f6f5a821708e2829b724b7cfac9d0327c7874afc68027002c280855d9bf2ab5575176bd9b88e435795f340a185d3f3e129cc135f92b49da36004d002364c92468744cebb0e57afd79dd6ab1ec0da99893d8408928dedf7acf7338287a2b4da9618e7508d8be96bdd0c8a31e730527750cf81db4f67234289dadb1afce709e3416cc9ae6b26f1fee5244175f4ec7079878a14ad85685e965d86ca2baaf94922a0b14ca06b425fe2e99848cc7f88ad4cdc2ae90e6dcd22a94440c5e09f7139f6ff1300f8affc3ef70e6028a2c63a11fa84657230e40e6ce124bb5cd0ddf1b398414557542c76eab2e92e2bd67396ca872f7b8509e2d96ce993d0c0ad21ceca44", @ANYBLOB, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRES8=r2, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0x10, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000440)=ANY=[@ANYRES8=r3], 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8) name_to_handle_at(r6, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1000) 107.504882ms ago: executing program 0 (id=441): r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, 0x0, &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r1, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000010000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000073797a3100"/236], 0x118) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3a, 0xfe, 0x6, 0x20, 0x4e6, 0xb, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x2, 0xa0, 0x24, 0x26, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) 49.051776ms ago: executing program 2 (id=442): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01010044140503", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a68765a6c733a8eb6df2944f6c2ef", 0x1c, 0xfffffffffffffffe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000680)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6], 0xeeee0000, 0x8340}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f00)={'wlan0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x14, "4372071e845c1497c85538300000000200000035"}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000010001f0000000000000000000000000a20000000000a0103000000000000003066de63414eb9f13224797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240ef44d3739523cd84fffe08000140000000000900010073060a0104000000000000000001000008000b40000000000900010045c6d0cf73797aba492901006d6574610000000014000280080001410000000c0800024000000016140000001100000a000000000000000000000000a5254cce3b75e4369f3eaf27d84e60471435af5d4d8ed6cf8fa2c6d44d5af1dfe205c4c97171bf8cb8077c06cf5c66b6580931bf1ddfc244388353a34b69b70e7191e7ab7c00"/292], 0xd8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005040000", @ANYRES32=r7], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x4) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r8, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 0s ago: executing program 1 (id=443): r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, 0x0, &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r1, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000010000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000073797a3100"/236], 0x118) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3a, 0xfe, 0x6, 0x20, 0x4e6, 0xb, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x2, 0xa0, 0x24, 0x26, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.52' (ED25519) to the list of known hosts. [ 76.959399][ T5806] cgroup: Unknown subsys name 'net' [ 77.072072][ T5806] cgroup: Unknown subsys name 'cpuset' [ 77.081288][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.695638][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.681105][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.717269][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.725111][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.733440][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.742369][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.751134][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.758833][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.767161][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.775269][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.783757][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.792876][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.806784][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.815039][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.828517][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.837328][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.844983][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.846358][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.860593][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.868532][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.871331][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.877923][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.890958][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.897353][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.906677][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.915565][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.489929][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 83.558066][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 83.659754][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 83.746582][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.754355][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.762161][ T5823] bridge_slave_0: entered allmulticast mode [ 83.769875][ T5823] bridge_slave_0: entered promiscuous mode [ 83.822152][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 83.848088][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.855245][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.863559][ T5823] bridge_slave_1: entered allmulticast mode [ 83.871304][ T5823] bridge_slave_1: entered promiscuous mode [ 84.013571][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.021010][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.028575][ T5824] bridge_slave_0: entered allmulticast mode [ 84.036202][ T5824] bridge_slave_0: entered promiscuous mode [ 84.044075][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 84.064753][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.080728][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.088487][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.095711][ T5824] bridge_slave_1: entered allmulticast mode [ 84.103118][ T5824] bridge_slave_1: entered promiscuous mode [ 84.143011][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.193429][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.200748][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.208673][ T5816] bridge_slave_0: entered allmulticast mode [ 84.215854][ T5816] bridge_slave_0: entered promiscuous mode [ 84.224849][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.232299][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.239699][ T5816] bridge_slave_1: entered allmulticast mode [ 84.246893][ T5816] bridge_slave_1: entered promiscuous mode [ 84.326552][ T5823] team0: Port device team_slave_0 added [ 84.349520][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.362116][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.391432][ T5823] team0: Port device team_slave_1 added [ 84.400538][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.408262][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.415423][ T5819] bridge_slave_0: entered allmulticast mode [ 84.425331][ T5819] bridge_slave_0: entered promiscuous mode [ 84.433612][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.441054][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.448545][ T5819] bridge_slave_1: entered allmulticast mode [ 84.455712][ T5819] bridge_slave_1: entered promiscuous mode [ 84.496185][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.539958][ T5824] team0: Port device team_slave_0 added [ 84.550286][ T5824] team0: Port device team_slave_1 added [ 84.564235][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.659380][ T5816] team0: Port device team_slave_0 added [ 84.666307][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.674186][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.700236][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.714898][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.753443][ T5816] team0: Port device team_slave_1 added [ 84.774719][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.782901][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.809181][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.823220][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.845451][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.852547][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.878527][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.891458][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.898778][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.925218][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.936459][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.946632][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.953899][ T5822] bridge_slave_0: entered allmulticast mode [ 84.961765][ T5822] bridge_slave_0: entered promiscuous mode [ 84.968404][ T5837] Bluetooth: hci2: command tx timeout [ 84.968468][ T5838] Bluetooth: hci0: command tx timeout [ 84.974115][ T5837] Bluetooth: hci3: command tx timeout [ 84.979893][ T55] Bluetooth: hci4: command tx timeout [ 84.989703][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.990408][ T5820] Bluetooth: hci1: command tx timeout [ 84.998021][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.010232][ T5822] bridge_slave_1: entered allmulticast mode [ 85.017525][ T5822] bridge_slave_1: entered promiscuous mode [ 85.045778][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.052881][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.078833][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.112515][ T5819] team0: Port device team_slave_0 added [ 85.123202][ T5819] team0: Port device team_slave_1 added [ 85.146288][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.153863][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.180597][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.232437][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.245040][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.352578][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.359698][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.385664][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.402609][ T5823] hsr_slave_0: entered promiscuous mode [ 85.410061][ T5823] hsr_slave_1: entered promiscuous mode [ 85.421243][ T5822] team0: Port device team_slave_0 added [ 85.455958][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.463369][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.489606][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.510563][ T5822] team0: Port device team_slave_1 added [ 85.524840][ T5816] hsr_slave_0: entered promiscuous mode [ 85.531745][ T5816] hsr_slave_1: entered promiscuous mode [ 85.538271][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.546781][ T5816] Cannot create hsr debugfs directory [ 85.558639][ T5824] hsr_slave_0: entered promiscuous mode [ 85.564986][ T5824] hsr_slave_1: entered promiscuous mode [ 85.571911][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.579586][ T5824] Cannot create hsr debugfs directory [ 85.709608][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.716605][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.743024][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.775480][ T5819] hsr_slave_0: entered promiscuous mode [ 85.782257][ T5819] hsr_slave_1: entered promiscuous mode [ 85.788966][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.796547][ T5819] Cannot create hsr debugfs directory [ 85.829112][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.836109][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.862492][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.018799][ T5822] hsr_slave_0: entered promiscuous mode [ 86.025503][ T5822] hsr_slave_1: entered promiscuous mode [ 86.033010][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.041180][ T5822] Cannot create hsr debugfs directory [ 86.438554][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.458580][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.475595][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.504517][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.569455][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.588548][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.599972][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.622427][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.678142][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.704646][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.721580][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.733733][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.882304][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.931020][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.996462][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.042706][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.050036][ T5820] Bluetooth: hci3: command tx timeout [ 87.059489][ T5838] Bluetooth: hci0: command tx timeout [ 87.063164][ T5820] Bluetooth: hci1: command tx timeout [ 87.064975][ T55] Bluetooth: hci4: command tx timeout [ 87.071141][ T5837] Bluetooth: hci2: command tx timeout [ 87.104147][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.144377][ T5822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.162073][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.178332][ T5822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.192472][ T5822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.244176][ T5822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.264399][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.302068][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.316471][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.324126][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.339267][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.372357][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.379576][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.390852][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.398020][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.426218][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.433411][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.498807][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.569989][ T2905] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.577139][ T2905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.586554][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.593695][ T2905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.731439][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.792423][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.833408][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.840587][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.882984][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.922073][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.964956][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.972148][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.998279][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.064001][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.071232][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.125114][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.132413][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.212528][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.264475][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.320324][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.454018][ T5816] veth0_vlan: entered promiscuous mode [ 88.480872][ T5823] veth0_vlan: entered promiscuous mode [ 88.524617][ T5823] veth1_vlan: entered promiscuous mode [ 88.537261][ T5816] veth1_vlan: entered promiscuous mode [ 88.556503][ T5824] veth0_vlan: entered promiscuous mode [ 88.654134][ T5824] veth1_vlan: entered promiscuous mode [ 88.689385][ T5816] veth0_macvtap: entered promiscuous mode [ 88.702467][ T5823] veth0_macvtap: entered promiscuous mode [ 88.720746][ T5816] veth1_macvtap: entered promiscuous mode [ 88.734911][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.746062][ T5823] veth1_macvtap: entered promiscuous mode [ 88.792808][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.816531][ T5824] veth0_macvtap: entered promiscuous mode [ 88.826423][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.846695][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.860944][ T5816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.869945][ T5816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.879780][ T5816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.892179][ T5816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.915855][ T5824] veth1_macvtap: entered promiscuous mode [ 88.954636][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.965878][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.979860][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.022655][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.034437][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.054678][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.086468][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.099048][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.117493][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.130103][ T5820] Bluetooth: hci1: command tx timeout [ 89.135573][ T5820] Bluetooth: hci2: command tx timeout [ 89.141384][ T5838] Bluetooth: hci0: command tx timeout [ 89.141387][ T5837] Bluetooth: hci3: command tx timeout [ 89.141553][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.146858][ T55] Bluetooth: hci4: command tx timeout [ 89.154966][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.184546][ T5823] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.195437][ T5823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.206438][ T5823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.216979][ T5823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.254467][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.265759][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.275907][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.286390][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.301018][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.325613][ T5824] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.334896][ T5824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.343735][ T5824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.352649][ T5824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.400353][ T275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.412751][ T275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.484551][ T5819] veth0_vlan: entered promiscuous mode [ 89.533791][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.538733][ T5819] veth1_vlan: entered promiscuous mode [ 89.553153][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.589065][ T5822] veth0_vlan: entered promiscuous mode [ 89.655567][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.671079][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.710708][ T5822] veth1_vlan: entered promiscuous mode [ 89.730099][ T5816] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.765005][ T275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.773474][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.785712][ T275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.796780][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.898680][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.898903][ T5819] veth0_macvtap: entered promiscuous mode [ 89.906537][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.955146][ T5819] veth1_macvtap: entered promiscuous mode [ 89.982146][ T5822] veth0_macvtap: entered promiscuous mode [ 90.037556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 90.127822][ T5822] veth1_macvtap: entered promiscuous mode [ 90.202087][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.257633][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.288299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.315972][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.387552][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.398181][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.419497][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.471448][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.702319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.980793][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.997640][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.027514][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.050749][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.099441][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.110079][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.134858][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.167637][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.181193][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.212650][ T55] Bluetooth: hci2: command tx timeout [ 91.218818][ T55] Bluetooth: hci3: command tx timeout [ 91.224249][ T55] Bluetooth: hci1: command tx timeout [ 91.230369][ T55] Bluetooth: hci4: command tx timeout [ 91.235807][ T55] Bluetooth: hci0: command tx timeout [ 91.261610][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.486590][ T5920] netlink: 'syz.2.3': attribute type 13 has an invalid length. [ 91.495670][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.510095][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.520731][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.534220][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.545046][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.557127][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.619501][ T5929] Zero length message leads to an empty skb [ 91.754263][ T5930] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6'. [ 92.248265][ T24] cfg80211: failed to load regulatory.db [ 92.351808][ T5926] netlink: 160 bytes leftover after parsing attributes in process `syz.0.6'. [ 92.381495][ T5926] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 92.465427][ T5920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.538897][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.550116][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.560357][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.571856][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.582534][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.593687][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.604269][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.710536][ T5937] FAULT_INJECTION: forcing a failure. [ 92.710536][ T5937] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.723944][ T5937] CPU: 1 UID: 0 PID: 5937 Comm: syz.3.8 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 92.723970][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 92.723991][ T5937] Call Trace: [ 92.724000][ T5937] [ 92.724012][ T5937] dump_stack_lvl+0x189/0x250 [ 92.724049][ T5937] ? irqentry_exit+0x74/0x90 [ 92.724082][ T5937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.724129][ T5937] should_fail_ex+0x414/0x560 [ 92.724164][ T5937] _copy_from_iter+0x1db/0x15a0 [ 92.724199][ T5937] ? __pfx__copy_from_iter+0x10/0x10 [ 92.724220][ T5937] ? __pfx_woken_wake_function+0x10/0x10 [ 92.724247][ T5937] ? file_tty_write+0x2e6/0x990 [ 92.724275][ T5937] ? rcu_is_watching+0x15/0xb0 [ 92.724304][ T5937] ? kfree+0x4d/0x440 [ 92.724336][ T5937] file_tty_write+0x484/0x990 [ 92.724405][ T5937] vfs_write+0x548/0xa90 [ 92.724438][ T5937] ? __pfx_tty_write+0x10/0x10 [ 92.724468][ T5937] ? __pfx_vfs_write+0x10/0x10 [ 92.724506][ T5937] ? __fget_files+0x2a/0x420 [ 92.724545][ T5937] ksys_write+0x145/0x250 [ 92.724569][ T5937] ? rcu_is_watching+0x15/0xb0 [ 92.724598][ T5937] ? __pfx_ksys_write+0x10/0x10 [ 92.724628][ T5937] ? do_syscall_64+0xba/0x210 [ 92.724651][ T5937] do_syscall_64+0xf6/0x210 [ 92.724671][ T5937] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 92.724690][ T5937] ? clear_bhb_loop+0x45/0xa0 [ 92.724715][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.724734][ T5937] RIP: 0033:0x7f80b3b8e969 [ 92.724757][ T5937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.724773][ T5937] RSP: 002b:00007f80b4974038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 92.724798][ T5937] RAX: ffffffffffffffda RBX: 00007f80b3db6160 RCX: 00007f80b3b8e969 [ 92.724812][ T5937] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 000000000000000a [ 92.724824][ T5937] RBP: 00007f80b4974090 R08: 0000000000000000 R09: 0000000000000000 [ 92.724835][ T5937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.724846][ T5937] R13: 0000000000000000 R14: 00007f80b3db6160 R15: 00007fffb0229ac8 [ 92.724877][ T5937] [ 92.964078][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.981023][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.009730][ T5819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.031699][ T5819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.051215][ T5819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.068281][ T5819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.113120][ T5822] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.121986][ T5822] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.132299][ T5822] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.141086][ T5822] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.447947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.662174][ T5917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.688530][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 93.773966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.774408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.876490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 93.877624][ T5917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.927795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.169176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.221513][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.266887][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.326746][ T5950] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.356339][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.373486][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.980458][ T5954] ip6t_srh: unknown srh invflags 7863 [ 95.136443][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.165104][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.289591][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.488255][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.534726][ T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 95.550069][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.572142][ T5964] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.583062][ T24] usb 3-1: config 0 descriptor?? [ 95.822508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.887893][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 96.287704][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 96.323842][ T24] usb 3-1: USB disconnect, device number 2 [ 99.013491][ T5996] capability: warning: `syz.0.19' uses 32-bit capabilities (legacy support in use) [ 99.794169][ T6009] process 'syz.3.21' launched './file0' with NULL argv: empty string added [ 99.808128][ T5988] ip6t_srh: unknown srh invflags 7863 [ 100.036381][ T6012] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 100.044409][ T6012] overlayfs: failed to set xattr on upper [ 100.050475][ T6012] overlayfs: ...falling back to redirect_dir=nofollow. [ 100.057552][ T6012] overlayfs: ...falling back to index=off. [ 100.064008][ T6012] overlayfs: maximum fs stacking depth exceeded [ 104.747032][ T6055] overlayfs: overlapping lowerdir path [ 106.400909][ T6060] netlink: 'syz.0.30': attribute type 13 has an invalid length. [ 109.409305][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.39'. [ 109.607993][ T6060] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.998486][ T6103] overlayfs: overlapping lowerdir path [ 111.341208][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 111.652944][ T6127] Bluetooth: MGMT ver 1.23 [ 111.933144][ T52] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.140499][ T52] usb 3-1: Using ep0 maxpacket: 8 [ 112.166980][ T52] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 112.182158][ T52] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.205304][ T52] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.238072][ T52] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.248598][ T2148] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.275269][ T52] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.315961][ T52] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 112.331815][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.429497][ T2148] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 112.454802][ T2148] usb 5-1: config 0 has no interface number 0 [ 112.467471][ T2148] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 112.481751][ T2148] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.498718][ T2148] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 112.515420][ T2148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.525988][ T2148] usb 5-1: Product: syz [ 112.531321][ T2148] usb 5-1: Manufacturer: syz [ 112.576517][ T52] usb 3-1: GET_CAPABILITIES returned 0 [ 112.592804][ T2148] usb 5-1: SerialNumber: syz [ 112.602971][ T52] usbtmc 3-1:16.0: can't read capabilities [ 112.632275][ T2148] usb 5-1: config 0 descriptor?? [ 112.669232][ T6130] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 112.686729][ T2148] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 112.713167][ T2148] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 112.792029][ T2148] usb 3-1: USB disconnect, device number 3 [ 113.023808][ T6148] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.018627][ T55] Bluetooth: hci0: command tx timeout [ 114.188830][ T6154] netlink: 52 bytes leftover after parsing attributes in process `syz.4.51'. [ 114.677677][ T2148] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.275480][ T2148] usb 3-1: config 0 has an invalid interface number: 25 but max is 0 [ 116.312593][ T2148] usb 3-1: config 0 has no interface number 0 [ 116.349337][ T2148] usb 3-1: config 0 interface 25 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 116.724988][ T2148] usb 3-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee [ 116.742255][ T2148] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.756145][ T2148] usb 3-1: Product: syz [ 116.766270][ T2148] usb 3-1: Manufacturer: syz [ 116.774496][ T2148] usb 3-1: SerialNumber: syz [ 116.937335][ T2148] usb 3-1: config 0 descriptor?? [ 116.996326][ T6180] FAULT_INJECTION: forcing a failure. [ 116.996326][ T6180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.051656][ T5892] usb 5-1: USB disconnect, device number 2 [ 117.098846][ T6180] CPU: 1 UID: 0 PID: 6180 Comm: syz.0.66 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 117.098876][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 117.098887][ T6180] Call Trace: [ 117.098895][ T6180] [ 117.098904][ T6180] dump_stack_lvl+0x189/0x250 [ 117.098939][ T6180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.098969][ T6180] ? __pfx__printk+0x10/0x10 [ 117.099012][ T6180] should_fail_ex+0x414/0x560 [ 117.099046][ T6180] _copy_to_user+0x31/0xb0 [ 117.099072][ T6180] simple_read_from_buffer+0xe1/0x170 [ 117.099104][ T6180] proc_fail_nth_read+0x1df/0x250 [ 117.099126][ T6180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.099173][ T6180] ? rw_verify_area+0x258/0x650 [ 117.099197][ T6180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.099230][ T6180] vfs_read+0x1fd/0x980 [ 117.099260][ T6180] ? __pfx___mutex_lock+0x10/0x10 [ 117.099280][ T6180] ? __pfx_vfs_read+0x10/0x10 [ 117.099307][ T6180] ? __fget_files+0x2a/0x420 [ 117.099340][ T6180] ? __fget_files+0x3a0/0x420 [ 117.099367][ T6180] ? __fget_files+0x2a/0x420 [ 117.099405][ T6180] ksys_read+0x145/0x250 [ 117.099428][ T6180] ? __fget_files+0x2a/0x420 [ 117.099457][ T6180] ? __pfx_ksys_read+0x10/0x10 [ 117.099486][ T6180] ? do_syscall_64+0xba/0x210 [ 117.099509][ T6180] do_syscall_64+0xf6/0x210 [ 117.099528][ T6180] ? clear_bhb_loop+0x45/0xa0 [ 117.099552][ T6180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.099571][ T6180] RIP: 0033:0x7f61e958d37c [ 117.099587][ T6180] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 117.099603][ T6180] RSP: 002b:00007f61ea3b8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 117.099623][ T6180] RAX: ffffffffffffffda RBX: 00007f61e97b5fa0 RCX: 00007f61e958d37c [ 117.099637][ T6180] RDX: 000000000000000f RSI: 00007f61ea3b80a0 RDI: 0000000000000004 [ 117.099649][ T6180] RBP: 00007f61ea3b8090 R08: 0000000000000000 R09: 0000000000000000 [ 117.099660][ T6180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.099671][ T6180] R13: 0000000000000000 R14: 00007f61e97b5fa0 R15: 00007ffd5e8ca3a8 [ 117.099701][ T6180] [ 117.516671][ T2148] usb 3-1: Found UVC 0.00 device syz (1b3b:2951) [ 117.523324][ T2148] usb 3-1: No valid video chain found. [ 118.213855][ T2148] usb 3-1: USB disconnect, device number 4 [ 118.379119][ T5892] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 118.668301][ T5892] cyberjack 5-1:0.69: device disconnected [ 119.446539][ T6211] overlayfs: missing 'lowerdir' [ 121.215548][ T6227] ip6t_srh: unknown srh invflags 7863 [ 121.233628][ T6230] FAULT_INJECTION: forcing a failure. [ 121.233628][ T6230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.287704][ T6230] CPU: 1 UID: 0 PID: 6230 Comm: syz.0.80 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 122.287734][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 122.287746][ T6230] Call Trace: [ 122.287754][ T6230] [ 122.287762][ T6230] dump_stack_lvl+0x189/0x250 [ 122.287797][ T6230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.287824][ T6230] ? __pfx__printk+0x10/0x10 [ 122.287864][ T6230] should_fail_ex+0x414/0x560 [ 122.287899][ T6230] _copy_to_user+0x31/0xb0 [ 122.287927][ T6230] simple_read_from_buffer+0xe1/0x170 [ 122.287961][ T6230] proc_fail_nth_read+0x1df/0x250 [ 122.287997][ T6230] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.288031][ T6230] ? rw_verify_area+0x258/0x650 [ 122.288055][ T6230] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.288087][ T6230] vfs_read+0x1fd/0x980 [ 122.288117][ T6230] ? __pfx___mutex_lock+0x10/0x10 [ 122.288137][ T6230] ? __pfx_vfs_read+0x10/0x10 [ 122.288163][ T6230] ? __fget_files+0x2a/0x420 [ 122.288196][ T6230] ? __fget_files+0x3a0/0x420 [ 122.288222][ T6230] ? __fget_files+0x2a/0x420 [ 122.288261][ T6230] ksys_read+0x145/0x250 [ 122.288284][ T6230] ? rcu_is_watching+0x15/0xb0 [ 122.288312][ T6230] ? __pfx_ksys_read+0x10/0x10 [ 122.288341][ T6230] ? do_syscall_64+0xba/0x210 [ 122.288364][ T6230] do_syscall_64+0xf6/0x210 [ 122.288383][ T6230] ? clear_bhb_loop+0x45/0xa0 [ 122.288425][ T6230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.288444][ T6230] RIP: 0033:0x7f61e958d37c [ 122.288462][ T6230] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 122.288478][ T6230] RSP: 002b:00007f61ea3b8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 122.288499][ T6230] RAX: ffffffffffffffda RBX: 00007f61e97b5fa0 RCX: 00007f61e958d37c [ 122.288513][ T6230] RDX: 000000000000000f RSI: 00007f61ea3b80a0 RDI: 0000000000000004 [ 122.288524][ T6230] RBP: 00007f61ea3b8090 R08: 0000000000000000 R09: 0000000000000000 [ 122.288536][ T6230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.288546][ T6230] R13: 0000000000000000 R14: 00007f61e97b5fa0 R15: 00007ffd5e8ca3a8 [ 122.288585][ T6230] [ 122.750835][ T6226] syz.1.82 (6226): drop_caches: 2 [ 124.128183][ T6260] overlayfs: missing 'lowerdir' [ 124.998575][ T6270] FAULT_INJECTION: forcing a failure. [ 124.998575][ T6270] name failslab, interval 1, probability 0, space 0, times 0 [ 125.863198][ T6270] CPU: 1 UID: 0 PID: 6270 Comm: syz.1.93 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 125.863227][ T6270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 125.863245][ T6270] Call Trace: [ 125.863253][ T6270] [ 125.863261][ T6270] dump_stack_lvl+0x189/0x250 [ 125.863296][ T6270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.863323][ T6270] ? __pfx__printk+0x10/0x10 [ 125.863358][ T6270] ? __pfx___might_resched+0x10/0x10 [ 125.863391][ T6270] should_fail_ex+0x414/0x560 [ 125.863424][ T6270] should_failslab+0xa8/0x100 [ 125.863456][ T6270] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 125.863484][ T6270] ? __alloc_skb+0x112/0x2d0 [ 125.863518][ T6270] __alloc_skb+0x112/0x2d0 [ 125.863551][ T6270] netlink_sendmsg+0x5c6/0xb30 [ 125.863577][ T6270] ? is_bpf_text_address+0x26/0x2b0 [ 125.863611][ T6270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.863647][ T6270] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 125.863667][ T6270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.863695][ T6270] __sock_sendmsg+0x219/0x270 [ 125.863724][ T6270] ____sys_sendmsg+0x505/0x830 [ 125.863750][ T6270] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.863779][ T6270] ? import_iovec+0x74/0xa0 [ 125.863806][ T6270] ___sys_sendmsg+0x21f/0x2a0 [ 125.863829][ T6270] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.863886][ T6270] ? __fget_files+0x2a/0x420 [ 125.863915][ T6270] ? __fget_files+0x3a0/0x420 [ 125.863954][ T6270] __x64_sys_sendmsg+0x19b/0x260 [ 125.863978][ T6270] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 125.864014][ T6270] ? do_syscall_64+0xba/0x210 [ 125.864038][ T6270] do_syscall_64+0xf6/0x210 [ 125.864057][ T6270] ? clear_bhb_loop+0x45/0xa0 [ 125.864081][ T6270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.864098][ T6270] RIP: 0033:0x7f1ca3d8e969 [ 125.864115][ T6270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.864130][ T6270] RSP: 002b:00007f1ca4bdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.864150][ T6270] RAX: ffffffffffffffda RBX: 00007f1ca3fb5fa0 RCX: 00007f1ca3d8e969 [ 125.864164][ T6270] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 125.864175][ T6270] RBP: 00007f1ca4bdf090 R08: 0000000000000000 R09: 0000000000000000 [ 125.864187][ T6270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.864197][ T6270] R13: 0000000000000000 R14: 00007f1ca3fb5fa0 R15: 00007ffe5aab9af8 [ 125.864226][ T6270] [ 126.725712][ T6284] ======================================================= [ 126.725712][ T6284] WARNING: The mand mount option has been deprecated and [ 126.725712][ T6284] and is ignored by this kernel. Remove the mand [ 126.725712][ T6284] option from the mount to silence this warning. [ 126.725712][ T6284] ======================================================= [ 126.832123][ T5892] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 126.996685][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.267048][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 127.319578][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 127.506585][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 128.004679][ T5892] usb 4-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 128.053289][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.129828][ T5892] usb 4-1: config 0 descriptor?? [ 128.163027][ T5892] usb 4-1: can't set config #0, error -71 [ 128.202848][ T5892] usb 4-1: USB disconnect, device number 2 [ 128.422310][ T5830] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 128.649627][ T5830] usb 2-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=ce.1a [ 128.678938][ T6301] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 129.190015][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.218080][ T6301] overlayfs: missing 'lowerdir' [ 129.317919][ T5830] usb 2-1: Product: syz [ 129.409981][ T5830] usb 2-1: Manufacturer: syz [ 129.737511][ T5830] usb 2-1: SerialNumber: syz [ 129.754064][ T5830] usb 2-1: config 0 descriptor?? [ 131.681714][ T6317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.691609][ T6317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.974734][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'. [ 132.597513][ T5830] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 132.914224][ T5830] usb 5-1: Using ep0 maxpacket: 8 [ 132.925149][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.958138][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.572244][ T5875] usb 2-1: USB disconnect, device number 2 [ 133.578476][ T5830] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 133.586676][ T5830] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.623376][ T5830] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.633748][ T5830] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 133.647733][ T5830] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.664809][ T5830] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 133.683232][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.077883][ T5830] usb 5-1: GET_CAPABILITIES returned 0 [ 134.107474][ T5830] usbtmc 5-1:16.0: can't read capabilities [ 134.277343][ T5830] usb 5-1: USB disconnect, device number 3 [ 134.365796][ T6342] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 134.378933][ T6342] overlayfs: missing 'lowerdir' [ 137.247763][ T6364] hsr0: entered promiscuous mode [ 137.263458][ T6364] macvtap1: entered promiscuous mode [ 137.298682][ T6364] macvtap1: entered allmulticast mode [ 137.315176][ T6364] hsr0: entered allmulticast mode [ 137.344751][ T6364] hsr_slave_0: entered allmulticast mode [ 137.368036][ T6364] hsr_slave_1: entered allmulticast mode [ 137.411346][ T6364] hsr0: left allmulticast mode [ 137.435207][ T6364] hsr_slave_0: left allmulticast mode [ 137.445144][ T6364] hsr_slave_1: left allmulticast mode [ 137.477487][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 137.485039][ T5892] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 137.645505][ T6373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.125'. [ 137.820136][ T5892] usb 5-1: config 0 has an invalid interface number: 187 but max is 0 [ 139.434188][ T10] usb 3-1: too many configurations: 146, using maximum allowed: 8 [ 139.489145][ T5892] usb 5-1: config 0 has no interface number 0 [ 139.495339][ T5892] usb 5-1: config 0 interface 187 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 139.582913][ T5892] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 139.606395][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 139.616030][ T6376] ip6t_srh: unknown srh invflags 7863 [ 139.629685][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.644517][ T5892] usb 5-1: Product: syz [ 139.650730][ T10] usb 3-1: can't read configurations, error -61 [ 139.657645][ T5892] usb 5-1: Manufacturer: syz [ 139.667451][ T5892] usb 5-1: SerialNumber: syz [ 139.753366][ T5892] usb 5-1: config 0 descriptor?? [ 139.775197][ T6368] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 139.809174][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 140.119436][ T6368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.160354][ T6368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.173254][ T10] usb 3-1: device descriptor read/all, error -71 [ 140.185575][ T10] usb usb3-port1: attempt power cycle [ 140.259290][ T5875] usb 5-1: USB disconnect, device number 4 [ 140.332212][ T6387] netlink: 104 bytes leftover after parsing attributes in process `syz.3.131'. [ 140.717646][ T2148] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 140.966346][ T2148] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.473571][ T2148] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 141.497013][ T2148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 141.518155][ T2148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 141.564931][ T2148] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.712304][ T2148] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 141.771477][ T2148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.807175][ T2148] usb 4-1: Product: syz [ 141.825593][ T2148] usb 4-1: Manufacturer: syz [ 141.839119][ T2148] usb 4-1: SerialNumber: syz [ 141.876503][ T2148] usb 4-1: config 0 descriptor?? [ 141.884936][ T6387] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 142.284460][ T6387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.555118][ T6387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.664192][ T2148] rc_core: IR keymap rc-xbox-dvd not found [ 142.686315][ T2148] Registered IR keymap rc-empty [ 142.693124][ T6408] netlink: 'syz.1.135': attribute type 13 has an invalid length. [ 142.959226][ T2148] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 142.987643][ T2148] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 143.535234][ T2148] usb 4-1: USB disconnect, device number 3 [ 143.541293][ C1] xbox_remote 4-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 143.751375][ T6408] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.543267][ T6429] ip6t_srh: unknown srh invflags 7863 [ 147.013782][ T6453] overlayfs: missing 'lowerdir' [ 148.813245][ T6480] ip6t_srh: unknown srh invflags 7863 [ 149.242962][ T6478] FAULT_INJECTION: forcing a failure. [ 149.242962][ T6478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.381461][ T6478] CPU: 1 UID: 0 PID: 6478 Comm: syz.2.155 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 149.381489][ T6478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 149.381500][ T6478] Call Trace: [ 149.381507][ T6478] [ 149.381514][ T6478] dump_stack_lvl+0x189/0x250 [ 149.381537][ T6478] ? __lock_acquire+0xaac/0xd20 [ 149.381557][ T6478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.381582][ T6478] ? __pfx__printk+0x10/0x10 [ 149.381604][ T6478] ? __might_fault+0xb0/0x130 [ 149.381634][ T6478] should_fail_ex+0x414/0x560 [ 149.381659][ T6478] set_fd_set+0x3a/0xa0 [ 149.381679][ T6478] core_sys_select+0x731/0x990 [ 149.381707][ T6478] ? __pfx_core_sys_select+0x10/0x10 [ 149.381745][ T6478] ? __pfx_set_user_sigmask+0x10/0x10 [ 149.381774][ T6478] __se_sys_pselect6+0x27a/0x300 [ 149.381799][ T6478] ? __pfx___se_sys_pselect6+0x10/0x10 [ 149.381823][ T6478] ? __x64_sys_pselect6+0x31/0xf0 [ 149.381848][ T6478] do_syscall_64+0xf6/0x210 [ 149.381862][ T6478] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 149.381875][ T6478] ? clear_bhb_loop+0x45/0xa0 [ 149.381892][ T6478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.381906][ T6478] RIP: 0033:0x7f629018e969 [ 149.381918][ T6478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.381930][ T6478] RSP: 002b:00007f6290f4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 149.381945][ T6478] RAX: ffffffffffffffda RBX: 00007f62903b6080 RCX: 00007f629018e969 [ 149.381955][ T6478] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 149.381963][ T6478] RBP: 00007f6290f4c090 R08: 0000000000000000 R09: 0000000000000000 [ 149.381972][ T6478] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 149.381981][ T6478] R13: 0000000000000001 R14: 00007f62903b6080 R15: 00007ffce2d76f88 [ 149.382002][ T6478] [ 150.091129][ T6495] syz.1.162: attempt to access beyond end of device [ 150.091129][ T6495] nbd1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 150.155455][ T6494] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 150.444263][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 150.617713][ T10] usb 2-1: device descriptor read/64, error -71 [ 151.028955][ T6494] usb usb8: usbfs: process 6494 (syz.4.161) did not claim interface 0 before use [ 151.216113][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 151.233369][ T6504] overlayfs: missing 'lowerdir' [ 152.226112][ T10] usb 2-1: device descriptor read/64, error -71 [ 152.400124][ T10] usb usb2-port1: attempt power cycle [ 153.017835][ T10] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 153.856923][ T10] usb 2-1: device descriptor read/8, error -71 [ 154.182841][ T6526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.171'. [ 154.481546][ T6530] netlink: 24 bytes leftover after parsing attributes in process `syz.3.172'. [ 154.672678][ T6528] netlink: 160 bytes leftover after parsing attributes in process `syz.3.172'. [ 155.809890][ T6528] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 156.021503][ T6545] overlayfs: missing 'lowerdir' [ 157.805251][ T6558] netlink: 'syz.3.180': attribute type 1 has an invalid length. [ 158.018879][ T6566] netlink: 'syz.2.179': attribute type 13 has an invalid length. [ 158.868765][ T6566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.619808][ T6558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.652495][ T6588] FAULT_INJECTION: forcing a failure. [ 161.652495][ T6588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.671358][ T6588] CPU: 0 UID: 0 PID: 6588 Comm: syz.1.187 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 161.671387][ T6588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 161.671399][ T6588] Call Trace: [ 161.671406][ T6588] [ 161.671415][ T6588] dump_stack_lvl+0x189/0x250 [ 161.671445][ T6588] ? __lock_acquire+0xaac/0xd20 [ 161.671473][ T6588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.671499][ T6588] ? __pfx__printk+0x10/0x10 [ 161.671529][ T6588] ? __might_fault+0xb0/0x130 [ 161.671571][ T6588] should_fail_ex+0x414/0x560 [ 161.671606][ T6588] _copy_from_user+0x2d/0xb0 [ 161.671632][ T6588] kvm_vm_ioctl+0x722/0xc60 [ 161.671658][ T6588] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 161.671716][ T6588] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 161.671749][ T6588] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 161.671780][ T6588] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 161.671822][ T6588] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 161.671852][ T6588] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 161.671890][ T6588] ? vfs_write+0x8d8/0xa90 [ 161.671928][ T6588] ? __asan_memset+0x22/0x50 [ 161.671951][ T6588] ? smack_file_ioctl+0x302/0x340 [ 161.671983][ T6588] ? __pfx_smack_file_ioctl+0x10/0x10 [ 161.672021][ T6588] ? ksys_write+0x1e1/0x250 [ 161.672044][ T6588] ? rcu_is_watching+0x15/0xb0 [ 161.672075][ T6588] ? bpf_lsm_file_ioctl+0x9/0x20 [ 161.672097][ T6588] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 161.672117][ T6588] __se_sys_ioctl+0xf9/0x170 [ 161.672143][ T6588] do_syscall_64+0xf6/0x210 [ 161.672162][ T6588] ? clear_bhb_loop+0x45/0xa0 [ 161.672186][ T6588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.672204][ T6588] RIP: 0033:0x7f1ca3d8e969 [ 161.672221][ T6588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.672236][ T6588] RSP: 002b:00007f1ca4bdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.672256][ T6588] RAX: ffffffffffffffda RBX: 00007f1ca3fb5fa0 RCX: 00007f1ca3d8e969 [ 161.672269][ T6588] RDX: 00002000000000c0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 161.672281][ T6588] RBP: 00007f1ca4bdf090 R08: 0000000000000000 R09: 0000000000000000 [ 161.672298][ T6588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.672309][ T6588] R13: 0000000000000000 R14: 00007f1ca3fb5fa0 R15: 00007ffe5aab9af8 [ 161.672339][ T6588] [ 162.255488][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.190'. [ 162.577717][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 162.817837][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 162.877163][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 162.938800][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 162.939263][ T6603] ip6t_srh: unknown srh invflags 7863 [ 162.954457][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.076496][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 163.144695][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.712173][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 163.955648][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.372990][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 164.384943][ T10] usbtmc 5-1:16.0: can't read capabilities [ 164.739837][ T6621] netlink: 36 bytes leftover after parsing attributes in process `syz.0.196'. [ 165.536314][ T24] usb 5-1: USB disconnect, device number 5 [ 169.004635][ T979] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 169.248015][ T979] usb 1-1: Using ep0 maxpacket: 8 [ 169.337121][ T979] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.435982][ T979] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 169.507473][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.530843][ T979] usb 1-1: config 0 descriptor?? [ 169.545440][ T979] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 169.639389][ T6648] netlink: 'syz.2.204': attribute type 13 has an invalid length. [ 169.713186][ T6667] netlink: 24 bytes leftover after parsing attributes in process `syz.4.211'. [ 169.766771][ T6664] netlink: 160 bytes leftover after parsing attributes in process `syz.4.211'. [ 169.776080][ T6664] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 169.836048][ T6648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.954656][ T979] gspca_vc032x: reg_w err -71 [ 169.974772][ T979] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 170.274230][ T979] usb 1-1: USB disconnect, device number 2 [ 170.615535][ T6679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 170.807767][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 170.997421][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 171.059800][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 171.233505][ T24] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 171.322955][ T24] usb 4-1: config 179 has no interface number 0 [ 171.398376][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 171.460861][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 171.478513][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 171.575541][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 171.608051][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 171.697611][ T24] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 171.759822][ T24] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 172.136703][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.150600][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.202726][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.209802][ T6677] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 172.284428][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.352784][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.373200][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 172.386266][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.484287][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input6 [ 173.746636][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 173.830241][ T10] usbtmc 2-1:16.0: can't read capabilities [ 174.097626][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 174.097655][ T5830] usb 4-1: USB disconnect, device number 4 [ 174.105996][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 174.383091][ T10] usb 2-1: USB disconnect, device number 7 [ 175.081210][ T5830] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 176.176153][ T6715] FAULT_INJECTION: forcing a failure. [ 176.176153][ T6715] name failslab, interval 1, probability 0, space 0, times 0 [ 176.300219][ T6715] CPU: 0 UID: 0 PID: 6715 Comm: syz.1.227 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 176.300249][ T6715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 176.300260][ T6715] Call Trace: [ 176.300267][ T6715] [ 176.300275][ T6715] dump_stack_lvl+0x189/0x250 [ 176.300308][ T6715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.300333][ T6715] ? __pfx__printk+0x10/0x10 [ 176.300366][ T6715] ? __pfx___might_resched+0x10/0x10 [ 176.300397][ T6715] should_fail_ex+0x414/0x560 [ 176.300431][ T6715] should_failslab+0xa8/0x100 [ 176.300461][ T6715] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 176.300490][ T6715] ? __alloc_skb+0x112/0x2d0 [ 176.300523][ T6715] __alloc_skb+0x112/0x2d0 [ 176.300555][ T6715] netlink_sendmsg+0x5c6/0xb30 [ 176.300581][ T6715] ? is_bpf_text_address+0x26/0x2b0 [ 176.300615][ T6715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.300650][ T6715] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 176.300669][ T6715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.300697][ T6715] __sock_sendmsg+0x219/0x270 [ 176.300726][ T6715] ____sys_sendmsg+0x505/0x830 [ 176.300751][ T6715] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.300780][ T6715] ? import_iovec+0x74/0xa0 [ 176.300807][ T6715] ___sys_sendmsg+0x21f/0x2a0 [ 176.300829][ T6715] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.300914][ T6715] ? __fget_files+0x2a/0x420 [ 176.300942][ T6715] ? __fget_files+0x3a0/0x420 [ 176.300982][ T6715] __x64_sys_sendmsg+0x19b/0x260 [ 176.301006][ T6715] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.301043][ T6715] ? do_syscall_64+0xba/0x210 [ 176.301063][ T6715] do_syscall_64+0xf6/0x210 [ 176.301082][ T6715] ? asm_sysvec_call_function_single+0x1a/0x20 [ 176.301105][ T6715] ? clear_bhb_loop+0x45/0xa0 [ 176.301129][ T6715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.301146][ T6715] RIP: 0033:0x7f1ca3d8e969 [ 176.301163][ T6715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.301179][ T6715] RSP: 002b:00007f1ca4bdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.301199][ T6715] RAX: ffffffffffffffda RBX: 00007f1ca3fb5fa0 RCX: 00007f1ca3d8e969 [ 176.301213][ T6715] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 0000000000000004 [ 176.301237][ T6715] RBP: 00007f1ca4bdf090 R08: 0000000000000000 R09: 0000000000000000 [ 176.301247][ T6715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.301258][ T6715] R13: 0000000000000000 R14: 00007f1ca3fb5fa0 R15: 00007ffe5aab9af8 [ 176.301286][ T6715] [ 177.731645][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 178.354370][ T6706] kvm: emulating exchange as write [ 179.490311][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.237'. [ 179.817465][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 180.139114][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 180.248570][ T6756] overlayfs: failed to resolve './file1': -2 [ 180.351464][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 180.395902][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.434039][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 180.563876][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 180.668968][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.786771][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 180.895879][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.914314][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 181.968610][ T24] usbtmc 5-1:16.0: can't read capabilities [ 182.083317][ T6773] FAULT_INJECTION: forcing a failure. [ 182.083317][ T6773] name failslab, interval 1, probability 0, space 0, times 0 [ 182.114455][ T6773] CPU: 1 UID: 0 PID: 6773 Comm: syz.3.246 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 182.114491][ T6773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 182.114503][ T6773] Call Trace: [ 182.114511][ T6773] [ 182.114520][ T6773] dump_stack_lvl+0x189/0x250 [ 182.114556][ T6773] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.114583][ T6773] ? __pfx__printk+0x10/0x10 [ 182.114616][ T6773] ? __pfx___might_resched+0x10/0x10 [ 182.114644][ T6773] ? fs_reclaim_acquire+0x7d/0x100 [ 182.114670][ T6773] should_fail_ex+0x414/0x560 [ 182.114706][ T6773] should_failslab+0xa8/0x100 [ 182.114738][ T6773] __kmalloc_noprof+0xcb/0x4f0 [ 182.114777][ T6773] ? tomoyo_encode+0x28b/0x550 [ 182.114803][ T6773] tomoyo_encode+0x28b/0x550 [ 182.114832][ T6773] tomoyo_realpath_from_path+0x58d/0x5d0 [ 182.114867][ T6773] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 182.114897][ T6773] tomoyo_path_number_perm+0x1e8/0x5a0 [ 182.114929][ T6773] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 182.114976][ T6773] ? __lock_acquire+0xaac/0xd20 [ 182.115021][ T6773] ? __fget_files+0x2a/0x420 [ 182.115053][ T6773] ? __fget_files+0x3a0/0x420 [ 182.115079][ T6773] ? __fget_files+0x2a/0x420 [ 182.115110][ T6773] security_file_ioctl+0xcb/0x2d0 [ 182.115132][ T6773] __se_sys_ioctl+0x47/0x170 [ 182.115172][ T6773] do_syscall_64+0xf6/0x210 [ 182.115192][ T6773] ? clear_bhb_loop+0x45/0xa0 [ 182.115216][ T6773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.115235][ T6773] RIP: 0033:0x7f80b3b8e969 [ 182.115251][ T6773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.115267][ T6773] RSP: 002b:00007f80b49b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.115286][ T6773] RAX: ffffffffffffffda RBX: 00007f80b3db5fa0 RCX: 00007f80b3b8e969 [ 182.115300][ T6773] RDX: 00002000000004c0 RSI: 00000000c4c85512 RDI: 0000000000000003 [ 182.115311][ T6773] RBP: 00007f80b49b6090 R08: 0000000000000000 R09: 0000000000000000 [ 182.115321][ T6773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.115332][ T6773] R13: 0000000000000000 R14: 00007f80b3db5fa0 R15: 00007fffb0229ac8 [ 182.115363][ T6773] [ 182.115457][ T6773] ERROR: Out of memory at tomoyo_realpath_from_path. [ 182.133555][ T979] usb 5-1: USB disconnect, device number 6 [ 183.317575][ T52] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 183.487480][ T5830] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 183.510549][ T52] usb 1-1: config 0 has no interfaces? [ 183.539877][ T52] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.592954][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.633267][ T52] usb 1-1: Product: syz [ 183.650300][ T5830] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 183.669375][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.671191][ T52] usb 1-1: Manufacturer: syz [ 183.714053][ T5830] usb 2-1: config 0 descriptor?? [ 183.760321][ T52] usb 1-1: SerialNumber: syz [ 183.834724][ T52] usb 1-1: config 0 descriptor?? [ 184.142078][ T5830] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 184.146904][ T6800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.156764][ T5830] elan 0003:04F3:0755.0001: item fetching failed at offset 3/5 [ 184.196729][ T5830] elan 0003:04F3:0755.0001: Hid Parse failed [ 184.228333][ T6800] bond0: (slave rose0): Enslaving as an active interface with an up link [ 184.245497][ T5830] elan 0003:04F3:0755.0001: probe with driver elan failed with error -22 [ 184.347331][ T5830] usb 2-1: USB disconnect, device number 8 [ 185.984788][ T24] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 186.346186][ T24] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 186.413029][ T24] usb 5-1: config 0 has no interface number 0 [ 186.958397][ T24] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 186.980314][ T6826] ip6t_srh: unknown srh invflags 7863 [ 187.012106][ T24] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 187.034577][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.043424][ T6832] netlink: 88 bytes leftover after parsing attributes in process `syz.3.261'. [ 187.077324][ T24] usb 5-1: Product: syz [ 187.100167][ T24] usb 5-1: Manufacturer: syz [ 187.105829][ T24] usb 5-1: SerialNumber: syz [ 187.137550][ T24] usb 5-1: config 0 descriptor?? [ 187.143207][ T6820] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 187.188654][ T24] usb-storage 5-1:0.20: USB Mass Storage device detected [ 187.282679][ T24] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 187.599366][ T5875] usb 1-1: USB disconnect, device number 3 [ 187.646147][ T6848] netlink: 160 bytes leftover after parsing attributes in process `syz.3.263'. [ 187.695445][ T6848] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 187.773620][ T6848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.263'. [ 188.603197][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.268'. [ 188.674845][ T24] scsi host1: usb-storage 5-1:0.20 [ 188.725791][ T6875] xt_TCPMSS: Only works on TCP SYN packets [ 188.784733][ T24] usb 5-1: USB disconnect, device number 7 [ 190.998159][ T6890] ip6t_srh: unknown srh invflags 7863 [ 191.605438][ T6909] bridge0: entered promiscuous mode [ 191.637710][ T6909] macvlan2: entered promiscuous mode [ 191.678607][ T6909] bridge0: port 3(macvlan2) entered blocking state [ 191.702010][ T6909] bridge0: port 3(macvlan2) entered disabled state [ 191.730018][ T6909] macvlan2: entered allmulticast mode [ 191.735501][ T6909] bridge0: entered allmulticast mode [ 191.757605][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'. [ 191.807453][ T6919] syz.0.275 uses obsolete (PF_INET,SOCK_PACKET) [ 191.832104][ T6909] macvlan2: left allmulticast mode [ 191.859712][ T6909] bridge0: left allmulticast mode [ 191.880384][ T6909] bridge0: left promiscuous mode [ 191.971424][ T6914] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 192.031869][ T6914] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 192.089747][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 192.301271][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 192.320888][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 192.354985][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 192.544445][ T6938] FAULT_INJECTION: forcing a failure. [ 192.544445][ T6938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.557749][ T6938] CPU: 0 UID: 0 PID: 6938 Comm: syz.0.283 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 192.557775][ T6938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 192.557788][ T6938] Call Trace: [ 192.557796][ T6938] [ 192.557805][ T6938] dump_stack_lvl+0x189/0x250 [ 192.557836][ T6938] ? __lock_acquire+0xaac/0xd20 [ 192.557857][ T6938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.557876][ T6938] ? __pfx__printk+0x10/0x10 [ 192.557897][ T6938] ? __might_fault+0xb0/0x130 [ 192.557928][ T6938] should_fail_ex+0x414/0x560 [ 192.557953][ T6938] _copy_from_user+0x2d/0xb0 [ 192.557971][ T6938] kstrtouint_from_user+0xc4/0x170 [ 192.557988][ T6938] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 192.558014][ T6938] proc_fail_nth_write+0x88/0x240 [ 192.558028][ T6938] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 192.558046][ T6938] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 192.558060][ T6938] vfs_write+0x27b/0xa90 [ 192.558086][ T6938] ? __pfx_vfs_write+0x10/0x10 [ 192.558105][ T6938] ? __fget_files+0x2a/0x420 [ 192.558129][ T6938] ? __fget_files+0x3a0/0x420 [ 192.558149][ T6938] ? __fget_files+0x2a/0x420 [ 192.558178][ T6938] ksys_write+0x145/0x250 [ 192.558199][ T6938] ? __pfx_ksys_write+0x10/0x10 [ 192.558221][ T6938] ? do_syscall_64+0xba/0x210 [ 192.558238][ T6938] do_syscall_64+0xf6/0x210 [ 192.558251][ T6938] ? asm_sysvec_call_function_single+0x1a/0x20 [ 192.558265][ T6938] ? clear_bhb_loop+0x45/0xa0 [ 192.558282][ T6938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.558295][ T6938] RIP: 0033:0x7f61e958d41f [ 192.558309][ T6938] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 192.558320][ T6938] RSP: 002b:00007f61ea397030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 192.558335][ T6938] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f61e958d41f [ 192.558344][ T6938] RDX: 0000000000000001 RSI: 00007f61ea3970a0 RDI: 0000000000000005 [ 192.558353][ T6938] RBP: 00007f61ea397090 R08: 0000000000000000 R09: 0000000000000000 [ 192.558361][ T6938] R10: 0000200000000900 R11: 0000000000000293 R12: 0000000000000001 [ 192.558370][ T6938] R13: 0000000000000000 R14: 00007f61e97b6080 R15: 00007ffd5e8ca3a8 [ 192.558393][ T6938] [ 192.929672][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 192.943873][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 192.953952][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.967052][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 192.976201][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.363402][ T6944] loop6: detected capacity change from 0 to 524287999 [ 193.370559][ T979] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 193.387571][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 194.039013][ T10] usbtmc 2-1:16.0: can't read capabilities [ 194.109275][ T979] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 194.141735][ T979] usb 1-1: config 0 has no interface number 0 [ 194.171220][ T10] usb 2-1: USB disconnect, device number 9 [ 194.265553][ T979] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 194.373998][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.380928][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.385900][ T979] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.532705][ T979] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 194.828128][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.501740][ T979] usb 1-1: Product: syz [ 195.519312][ T979] usb 1-1: Manufacturer: syz [ 195.533412][ T979] usb 1-1: SerialNumber: syz [ 195.554560][ T979] usb 1-1: config 0 descriptor?? [ 195.858137][ T6942] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 195.867135][ T6956] ip6t_srh: unknown srh invflags 7863 [ 195.873608][ T979] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 195.965444][ T979] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 196.145774][ T10] usb 1-1: USB disconnect, device number 4 [ 196.154148][ T6965] netlink: 'syz.3.291': attribute type 3 has an invalid length. [ 196.180857][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 196.212365][ T10] cyberjack 1-1:0.69: device disconnected [ 196.480516][ T6970] xt_bpf: check failed: parse error [ 197.472197][ T6980] FAULT_INJECTION: forcing a failure. [ 197.472197][ T6980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.502289][ T6980] CPU: 0 UID: 0 PID: 6980 Comm: syz.2.295 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 197.502319][ T6980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 197.502329][ T6980] Call Trace: [ 197.502334][ T6980] [ 197.502341][ T6980] dump_stack_lvl+0x189/0x250 [ 197.502366][ T6980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.502386][ T6980] ? __pfx__printk+0x10/0x10 [ 197.502418][ T6980] should_fail_ex+0x414/0x560 [ 197.502444][ T6980] _copy_to_user+0x31/0xb0 [ 197.502464][ T6980] simple_read_from_buffer+0xe1/0x170 [ 197.502488][ T6980] proc_fail_nth_read+0x1df/0x250 [ 197.502505][ T6980] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.502530][ T6980] ? rw_verify_area+0x258/0x650 [ 197.502548][ T6980] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.502578][ T6980] vfs_read+0x1fd/0x980 [ 197.502601][ T6980] ? __pfx___mutex_lock+0x10/0x10 [ 197.502616][ T6980] ? __pfx_vfs_read+0x10/0x10 [ 197.502635][ T6980] ? __fget_files+0x2a/0x420 [ 197.502659][ T6980] ? __fget_files+0x3a0/0x420 [ 197.502678][ T6980] ? __fget_files+0x2a/0x420 [ 197.502706][ T6980] ksys_read+0x145/0x250 [ 197.502726][ T6980] ? __pfx_ksys_read+0x10/0x10 [ 197.502751][ T6980] do_syscall_64+0xf6/0x210 [ 197.502766][ T6980] ? clear_bhb_loop+0x45/0xa0 [ 197.502783][ T6980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.502797][ T6980] RIP: 0033:0x7f629018d37c [ 197.502809][ T6980] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 197.502822][ T6980] RSP: 002b:00007f6290f6d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.502837][ T6980] RAX: ffffffffffffffda RBX: 00007f62903b5fa0 RCX: 00007f629018d37c [ 197.502847][ T6980] RDX: 000000000000000f RSI: 00007f6290f6d0a0 RDI: 0000000000000004 [ 197.502855][ T6980] RBP: 00007f6290f6d090 R08: 0000000000000000 R09: 0000000000000000 [ 197.502864][ T6980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.502872][ T6980] R13: 0000000000000000 R14: 00007f62903b5fa0 R15: 00007ffce2d76f88 [ 197.502894][ T6980] [ 198.100626][ T6994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.299'. [ 201.575337][ T7025] fuse: Bad value for 'group_id' [ 201.580611][ T7025] fuse: Bad value for 'group_id' [ 204.411447][ T7043] loop6: detected capacity change from 0 to 524287999 [ 205.508987][ T5830] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 206.192524][ T5830] usb 3-1: unable to get BOS descriptor or descriptor too short [ 206.247600][ T5830] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 206.291375][ T5830] usb 3-1: config 1 has no interface number 1 [ 206.347459][ T5830] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 206.654047][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 206.657504][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 206.662904][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 206.666113][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 207.265420][ T5830] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 207.278635][ T5830] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 207.289874][ T5830] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 207.309823][ T5830] usb 3-1: string descriptor 0 read error: -22 [ 207.316173][ T5830] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 207.341780][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.354064][ T7054] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 207.371129][ T5830] usb 3-1: low speed audio streaming not supported [ 207.667705][ T7062] JFS: discard option not supported on device [ 207.675324][ T7062] Mount JFS Failure: -22 [ 207.833462][ T7062] jfs_mount failed w/return code = -22 [ 209.572877][ T7098] program syz.4.321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.517702][ T7098] vim2m vim2m.0: vidioc_s_fmt queue busy [ 211.367780][ T5129] Bluetooth: hci4: command 0x0405 tx timeout [ 212.096330][ T7117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.115313][ T7118] netlink: 32 bytes leftover after parsing attributes in process `syz.0.325'. [ 212.125333][ T7118] netlink: 32 bytes leftover after parsing attributes in process `syz.0.325'. [ 213.387566][ T24] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 213.649768][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 213.680805][ T24] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 213.697006][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.420379][ T24] usb 1-1: config 0 descriptor?? [ 216.421427][ T24] usb 1-1: USB disconnect, device number 5 [ 217.076291][ T10] usb 3-1: USB disconnect, device number 8 [ 217.116897][ T7153] capability: warning: `syz.4.334' uses deprecated v2 capabilities in a way that may be insecure [ 217.307852][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 217.628313][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 217.959972][ T24] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 217.970335][ T24] usb 1-1: config 179 has no interface number 0 [ 217.976659][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 217.997833][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 218.025721][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 218.037706][ T24] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 218.051888][ T24] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 218.061382][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.761632][ T7140] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 219.194567][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input7 [ 219.570059][ T5830] usb 1-1: USB disconnect, device number 6 [ 219.570059][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 219.570200][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 220.280885][ T5830] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 221.445572][ T7183] FAULT_INJECTION: forcing a failure. [ 221.445572][ T7183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.459268][ T7183] CPU: 0 UID: 0 PID: 7183 Comm: syz.1.341 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 221.459294][ T7183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 221.459307][ T7183] Call Trace: [ 221.459315][ T7183] [ 221.459323][ T7183] dump_stack_lvl+0x189/0x250 [ 221.459354][ T7183] ? __lock_acquire+0xaac/0xd20 [ 221.459390][ T7183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.459418][ T7183] ? __pfx__printk+0x10/0x10 [ 221.459449][ T7183] ? __might_fault+0xb0/0x130 [ 221.459493][ T7183] should_fail_ex+0x414/0x560 [ 221.459528][ T7183] _copy_from_user+0x2d/0xb0 [ 221.459554][ T7183] proc_ioctl_default+0x8e/0x100 [ 221.459576][ T7183] ? __pfx_proc_ioctl_default+0x10/0x10 [ 221.459608][ T7183] usbdev_ioctl+0x1376/0x20c0 [ 221.459638][ T7183] ? __pfx_smack_file_ioctl+0x10/0x10 [ 221.459681][ T7183] ? __pfx_usbdev_ioctl+0x10/0x10 [ 221.459711][ T7183] ? __fget_files+0x3a0/0x420 [ 221.459739][ T7183] ? __fget_files+0x2a/0x420 [ 221.459772][ T7183] ? bpf_lsm_file_ioctl+0x9/0x20 [ 221.459797][ T7183] ? __pfx_usbdev_ioctl+0x10/0x10 [ 221.459826][ T7183] __se_sys_ioctl+0xf9/0x170 [ 221.459854][ T7183] do_syscall_64+0xf6/0x210 [ 221.459875][ T7183] ? clear_bhb_loop+0x45/0xa0 [ 221.459899][ T7183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.459918][ T7183] RIP: 0033:0x7f1ca3d8e969 [ 221.459936][ T7183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.459951][ T7183] RSP: 002b:00007f1ca4b9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.459971][ T7183] RAX: ffffffffffffffda RBX: 00007f1ca3fb6160 RCX: 00007f1ca3d8e969 [ 221.459985][ T7183] RDX: 0000200000000040 RSI: 00000000c0105512 RDI: 0000000000000008 [ 221.459997][ T7183] RBP: 00007f1ca4b9d090 R08: 0000000000000000 R09: 0000000000000000 [ 221.460009][ T7183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.460020][ T7183] R13: 0000000000000000 R14: 00007f1ca3fb6160 R15: 00007ffe5aab9af8 [ 221.460052][ T7183] [ 222.669085][ T7175] ip6t_srh: unknown srh invflags 7863 [ 222.805689][ T7190] netlink: 'syz.1.344': attribute type 3 has an invalid length. [ 222.927539][ T7190] netlink: 'syz.1.344': attribute type 1 has an invalid length. [ 222.935341][ T7190] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.344'. [ 224.056657][ T7196] usb usb8: usbfs: process 7196 (syz.3.347) did not claim interface 0 before use [ 229.743626][ T7232] ip6t_srh: unknown srh invflags 7863 [ 231.483460][ T7253] netlink: 160 bytes leftover after parsing attributes in process `syz.0.365'. [ 231.492734][ T7253] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 231.517219][ T7253] netlink: 24 bytes leftover after parsing attributes in process `syz.0.365'. [ 231.788894][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 231.981020][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.025463][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 232.043563][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.066816][ T10] usb 3-1: config 0 descriptor?? [ 236.175980][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 236.215706][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 236.267898][ T10] usb 3-1: USB disconnect, device number 9 [ 236.300234][ T7286] mkiss: ax0: crc mode is auto. [ 236.365193][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.376'. [ 237.940596][ T7286] mkiss: ax0: crc mode is auto. [ 237.984961][ T7293] warning: `syz.4.376' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 240.437430][ T52] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 240.486660][ T7326] ip6t_srh: unknown srh invflags 7863 [ 240.527496][ T979] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 240.648339][ T52] usb 1-1: Using ep0 maxpacket: 8 [ 240.721964][ T52] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 240.791480][ T52] usb 1-1: config 179 has no interface number 0 [ 240.866605][ T52] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 240.965313][ T52] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 241.036370][ T979] usb 5-1: Using ep0 maxpacket: 8 [ 241.047709][ T979] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 241.056803][ T979] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 241.065819][ T979] usb 5-1: Product: syz [ 241.070088][ T979] usb 5-1: Manufacturer: syz [ 241.074712][ T979] usb 5-1: SerialNumber: syz [ 241.082919][ T979] usb 5-1: config 0 descriptor?? [ 241.092237][ T52] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 241.093575][ T979] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 241.117112][ T52] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 241.135644][ T52] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 241.861535][ T979] gspca_zc3xx: reg_w_i err -110 [ 241.866607][ T979] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 241.867400][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.136185][ T7320] netlink: 'syz.4.383': attribute type 16 has an invalid length. [ 242.144097][ T7320] netlink: 'syz.4.383': attribute type 3 has an invalid length. [ 242.152523][ T7320] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.383'. [ 242.172220][ T7325] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 242.175885][ T7320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.215563][ T7320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.365957][ T7342] hub 2-0:1.0: USB hub found [ 242.376682][ T7342] hub 2-0:1.0: 1 port detected [ 244.481600][ T10] usb 5-1: USB disconnect, device number 8 [ 244.560634][ T5874] usb 1-1: USB disconnect, device number 7 [ 244.560632][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 244.560683][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 244.718429][ T5972] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input8 [ 245.351726][ T5874] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 245.356845][ T7347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.390'. [ 246.778567][ T7368] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.396'. [ 246.827555][ T7368] netlink: zone id is out of range [ 246.856224][ T7371] Bluetooth: MGMT ver 1.23 [ 246.862861][ T7368] netlink: zone id is out of range [ 246.877074][ T7371] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 246.908418][ T7368] netlink: get zone limit has 8 unknown bytes [ 246.916047][ T7371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.940644][ T5972] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 246.980200][ T7368] netlink: 44 bytes leftover after parsing attributes in process `syz.1.396'. [ 248.086836][ T5972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.103055][ T5972] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 248.129825][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.253520][ T5972] usb 4-1: config 0 descriptor?? [ 248.382996][ T7390] ip6t_srh: unknown srh invflags 7863 [ 248.642935][ T5874] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 248.898550][ T5874] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 248.920459][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.943859][ T5874] usb 3-1: config 0 descriptor?? [ 250.026111][ T7402] FAULT_INJECTION: forcing a failure. [ 250.026111][ T7402] name failslab, interval 1, probability 0, space 0, times 0 [ 250.040058][ T5874] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 250.057720][ T5874] elan 0003:04F3:0755.0002: item fetching failed at offset 3/5 [ 250.068067][ T7402] CPU: 0 UID: 0 PID: 7402 Comm: syz.4.403 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 250.068095][ T7402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 250.068107][ T7402] Call Trace: [ 250.068114][ T7402] [ 250.068143][ T7402] dump_stack_lvl+0x189/0x250 [ 250.068179][ T7402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.068206][ T7402] ? __pfx__printk+0x10/0x10 [ 250.068240][ T7402] ? __pfx___might_resched+0x10/0x10 [ 250.068269][ T7402] ? fs_reclaim_acquire+0x7d/0x100 [ 250.068293][ T7402] should_fail_ex+0x414/0x560 [ 250.068327][ T7402] should_failslab+0xa8/0x100 [ 250.068357][ T7402] __kmalloc_cache_noprof+0x70/0x3d0 [ 250.068385][ T7402] ? alloc_fs_context+0x61/0x7d0 [ 250.068419][ T7402] alloc_fs_context+0x61/0x7d0 [ 250.068449][ T7402] ? kfree+0x193/0x440 [ 250.068481][ T7402] ? get_fs_type+0x407/0x480 [ 250.068505][ T7402] __se_sys_fsopen+0xa5/0x2b0 [ 250.068530][ T7402] do_syscall_64+0xf6/0x210 [ 250.068551][ T7402] ? clear_bhb_loop+0x45/0xa0 [ 250.068575][ T7402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.068594][ T7402] RIP: 0033:0x7fcbd9d8e969 [ 250.068612][ T7402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.068628][ T7402] RSP: 002b:00007fcbdab4c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 250.068648][ T7402] RAX: ffffffffffffffda RBX: 00007fcbd9fb5fa0 RCX: 00007fcbd9d8e969 [ 250.068662][ T7402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 250.068678][ T7402] RBP: 00007fcbdab4c090 R08: 0000000000000000 R09: 0000000000000000 [ 250.068690][ T7402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.068700][ T7402] R13: 0000000000000001 R14: 00007fcbd9fb5fa0 R15: 00007fff89cb5ae8 [ 250.068731][ T7402] [ 250.256472][ T5874] elan 0003:04F3:0755.0002: Hid Parse failed [ 250.263377][ T5874] elan 0003:04F3:0755.0002: probe with driver elan failed with error -22 [ 250.265058][ T5972] usbhid 4-1:0.0: can't add hid device: -71 [ 250.287895][ T5972] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 250.308056][ T5972] usb 4-1: USB disconnect, device number 5 [ 250.371922][ T5874] usb 3-1: USB disconnect, device number 10 [ 250.800198][ T979] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 250.859040][ T5830] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 251.195751][ T5830] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 251.335501][ T5830] usb 1-1: config 0 has no interface number 0 [ 251.367794][ T5830] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 251.692520][ T5830] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 251.703073][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.720261][ T979] usb 2-1: Using ep0 maxpacket: 8 [ 251.725473][ T5830] usb 1-1: Product: syz [ 251.729800][ T5830] usb 1-1: Manufacturer: syz [ 251.739498][ T979] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 251.751180][ T5830] usb 1-1: SerialNumber: syz [ 251.756951][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.779741][ T5830] usb 1-1: config 0 descriptor?? [ 251.794674][ T979] usb 2-1: Product: syz [ 251.807597][ T979] usb 2-1: Manufacturer: syz [ 251.812823][ T7407] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 251.823786][ T5830] usb-storage 1-1:0.20: USB Mass Storage device detected [ 251.836448][ T979] usb 2-1: SerialNumber: syz [ 251.851971][ T5830] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 251.860456][ T979] usb 2-1: config 0 descriptor?? [ 252.081749][ T5830] scsi host1: usb-storage 1-1:0.20 [ 252.088519][ T7423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.411'. [ 252.103317][ T979] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 252.128174][ T5830] usb 1-1: USB disconnect, device number 8 [ 252.442978][ T7435] Smack: duplicate mount options [ 252.476769][ T7437] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 252.611862][ T7442] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 254.039343][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 254.200348][ T7405] fuse: Bad value for 'user_id' [ 254.207232][ T7405] fuse: Bad value for 'user_id' [ 255.007116][ T24] usb 3-1: device descriptor read/64, error -71 [ 257.045492][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.056899][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.193985][ T979] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 257.248257][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 257.465842][ T979] usb 2-1: USB disconnect, device number 10 [ 257.734818][ T7438] Set syz1 is full, maxelem 65536 reached [ 258.012200][ T7445] Set syz1 is full, maxelem 65536 reached [ 259.059881][ T7465] netfs: Couldn't get user pages (rc=-14) [ 259.953026][ T7477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.039744][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.429'. [ 260.079925][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 260.144366][ T7479] bond_slave_0: entered promiscuous mode [ 260.151125][ T7479] bond_slave_1: entered promiscuous mode [ 260.190688][ T7479] macvlan2: entered promiscuous mode [ 260.201993][ T7486] FAULT_INJECTION: forcing a failure. [ 260.201993][ T7486] name failslab, interval 1, probability 0, space 0, times 0 [ 260.220374][ T7479] bond0: entered promiscuous mode [ 260.230929][ T7479] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 260.262662][ T7486] CPU: 0 UID: 0 PID: 7486 Comm: syz.3.427 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 260.262708][ T7486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 260.262726][ T7486] Call Trace: [ 260.262740][ T7486] [ 260.262754][ T7486] dump_stack_lvl+0x189/0x250 [ 260.262802][ T7486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.262829][ T7486] ? __pfx__printk+0x10/0x10 [ 260.262864][ T7486] ? __pfx___might_resched+0x10/0x10 [ 260.262893][ T7486] ? fs_reclaim_acquire+0x7d/0x100 [ 260.262920][ T7486] should_fail_ex+0x414/0x560 [ 260.262954][ T7486] ? __pfx_proc_alloc_inode+0x10/0x10 [ 260.262975][ T7486] should_failslab+0xa8/0x100 [ 260.263007][ T7486] ? __pfx_proc_alloc_inode+0x10/0x10 [ 260.263025][ T7486] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 260.263054][ T7486] ? proc_alloc_inode+0x2a/0xc0 [ 260.263077][ T7486] ? __pfx_proc_alloc_inode+0x10/0x10 [ 260.263096][ T7486] proc_alloc_inode+0x2a/0xc0 [ 260.263116][ T7486] alloc_inode+0x67/0x1b0 [ 260.263147][ T7486] new_inode+0x22/0x170 [ 260.263181][ T7486] proc_pid_make_inode+0x21/0x130 [ 260.263209][ T7486] proc_map_files_instantiate+0xa2/0x1a0 [ 260.263234][ T7486] proc_fill_cache+0x2cd/0x3d0 [ 260.263262][ T7486] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 260.263285][ T7486] ? __pfx_proc_fill_cache+0x10/0x10 [ 260.263305][ T7486] ? snprintf+0xda/0x120 [ 260.263328][ T7486] ? __pfx___might_resched+0x10/0x10 [ 260.263386][ T7486] proc_map_files_readdir+0x7bc/0xa00 [ 260.263420][ T7486] ? __pfx_proc_map_files_readdir+0x10/0x10 [ 260.263452][ T7486] ? __pfx___mutex_lock+0x10/0x10 [ 260.263481][ T7486] ? iterate_dir+0x49f/0x770 [ 260.263504][ T7486] ? down_read_killable+0x1d1/0x350 [ 260.263530][ T7486] iterate_dir+0x5ac/0x770 [ 260.263562][ T7486] __se_sys_getdents64+0xe4/0x260 [ 260.263592][ T7486] ? __pfx___se_sys_getdents64+0x10/0x10 [ 260.263615][ T7486] ? ksys_write+0x1f0/0x250 [ 260.263639][ T7486] ? __pfx_filldir64+0x10/0x10 [ 260.263674][ T7486] ? do_syscall_64+0xba/0x210 [ 260.263698][ T7486] do_syscall_64+0xf6/0x210 [ 260.263718][ T7486] ? clear_bhb_loop+0x45/0xa0 [ 260.263743][ T7486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.263762][ T7486] RIP: 0033:0x7f80b3b8e969 [ 260.263780][ T7486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.263795][ T7486] RSP: 002b:00007f80b49b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 260.263816][ T7486] RAX: ffffffffffffffda RBX: 00007f80b3db5fa0 RCX: 00007f80b3b8e969 [ 260.263830][ T7486] RDX: 0000000000001002 RSI: 0000200000002f40 RDI: 0000000000000003 [ 260.263842][ T7486] RBP: 00007f80b49b6090 R08: 0000000000000000 R09: 0000000000000000 [ 260.263853][ T7486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.263864][ T7486] R13: 0000000000000000 R14: 00007f80b3db5fa0 R15: 00007fffb0229ac8 [ 260.263896][ T7486] [ 260.617337][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 260.698086][ T7489] netlink: 160 bytes leftover after parsing attributes in process `syz.1.431'. [ 260.744166][ T7489] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 260.763990][ T7491] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 260.772620][ T24] usb 1-1: device descriptor read/64, error -71 [ 260.782270][ T7494] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 260.870653][ T7496] FAULT_INJECTION: forcing a failure. [ 260.870653][ T7496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.885271][ T7496] CPU: 0 UID: 0 PID: 7496 Comm: syz.4.434 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 260.885311][ T7496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 260.885324][ T7496] Call Trace: [ 260.885332][ T7496] [ 260.885341][ T7496] dump_stack_lvl+0x189/0x250 [ 260.885372][ T7496] ? __lock_acquire+0xaac/0xd20 [ 260.885406][ T7496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.885433][ T7496] ? __pfx__printk+0x10/0x10 [ 260.885465][ T7496] ? __might_fault+0xb0/0x130 [ 260.885507][ T7496] should_fail_ex+0x414/0x560 [ 260.885544][ T7496] _copy_from_iter+0x1db/0x15a0 [ 260.885575][ T7496] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 260.885601][ T7496] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 260.885633][ T7496] ? __pfx__copy_from_iter+0x10/0x10 [ 260.885656][ T7496] ? __build_skb_around+0x257/0x3e0 [ 260.885692][ T7496] ? netlink_sendmsg+0x642/0xb30 [ 260.885720][ T7496] ? skb_put+0x11b/0x210 [ 260.885743][ T7496] netlink_sendmsg+0x6b2/0xb30 [ 260.885771][ T7496] ? is_bpf_text_address+0x26/0x2b0 [ 260.885807][ T7496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.885846][ T7496] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 260.885867][ T7496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.885898][ T7496] __sock_sendmsg+0x219/0x270 [ 260.885929][ T7496] ____sys_sendmsg+0x505/0x830 [ 260.885956][ T7496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.885988][ T7496] ? import_iovec+0x74/0xa0 [ 260.886016][ T7496] ___sys_sendmsg+0x21f/0x2a0 [ 260.886047][ T7496] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.886107][ T7496] ? __fget_files+0x2a/0x420 [ 260.886137][ T7496] ? __fget_files+0x3a0/0x420 [ 260.886178][ T7496] __x64_sys_sendmsg+0x19b/0x260 [ 260.886201][ T7496] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 260.886240][ T7496] ? do_syscall_64+0xba/0x210 [ 260.886264][ T7496] do_syscall_64+0xf6/0x210 [ 260.886298][ T7496] ? clear_bhb_loop+0x45/0xa0 [ 260.886323][ T7496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.886342][ T7496] RIP: 0033:0x7fcbd9d8e969 [ 260.886360][ T7496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.886375][ T7496] RSP: 002b:00007fcbdab4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.886396][ T7496] RAX: ffffffffffffffda RBX: 00007fcbd9fb5fa0 RCX: 00007fcbd9d8e969 [ 260.886409][ T7496] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 260.886420][ T7496] RBP: 00007fcbdab4c090 R08: 0000000000000000 R09: 0000000000000000 [ 260.886432][ T7496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.886442][ T7496] R13: 0000000000000000 R14: 00007fcbd9fb5fa0 R15: 00007fff89cb5ae8 [ 260.886472][ T7496] [ 261.247534][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 261.397275][ T24] usb 1-1: device descriptor read/64, error -71 [ 261.472128][ T5972] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 261.534594][ T24] usb usb1-port1: attempt power cycle [ 261.822893][ T5972] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 261.880565][ T5972] usb 5-1: config 0 has no interface number 0 [ 261.940217][ T5972] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 262.042515][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 262.068961][ T5972] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.254981][ T5972] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 262.285931][ T24] usb 1-1: device descriptor read/8, error -71 [ 262.292537][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.320389][ T5972] usb 5-1: Product: syz [ 262.346294][ T5972] usb 5-1: Manufacturer: syz [ 262.357581][ T5972] usb 5-1: SerialNumber: syz [ 262.408008][ T5972] usb 5-1: config 0 descriptor?? [ 262.413944][ T7499] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 262.424575][ T5972] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 262.440156][ T5972] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 262.548062][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 262.573463][ T5875] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 262.595912][ T24] usb 1-1: device descriptor read/8, error -71 [ 262.737887][ T24] usb usb1-port1: unable to enumerate USB device [ 262.776029][ T5875] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 262.786689][ T5875] usb 4-1: config 0 has no interface number 0 [ 262.797791][ T5875] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 262.820767][ T5875] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.863539][ T5875] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 262.899734][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.931393][ T5875] usb 4-1: Product: syz [ 262.941224][ T5875] usb 4-1: Manufacturer: syz [ 263.001786][ T5875] usb 4-1: SerialNumber: syz [ 263.012937][ T5875] usb 4-1: config 0 descriptor?? [ 263.018731][ T7505] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 263.032570][ T5875] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 263.845263][ T5875] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB1 [ 264.125864][ T7522] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 264.142123][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.442'. [ 264.151963][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.442'. [ 264.894979][ T7527] ------------[ cut here ]------------ [ 264.900977][ T7527] WARNING: CPU: 1 PID: 7527 at ./include/linux/memcontrol.h:361 folio_memcg+0x1a8/0x310 [ 264.910887][ T7527] Modules linked in: [ 264.915766][ T7527] CPU: 1 UID: 0 PID: 7527 Comm: syz.2.442 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 264.928428][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 264.938596][ T7527] RIP: 0010:folio_memcg+0x1a8/0x310 [ 264.943837][ T7527] Code: 80 3c 28 00 74 08 4c 89 f7 e8 e4 cd 1a 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 19 fe ba ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 264.963625][ T7527] RSP: 0018:ffffc90003d1f270 EFLAGS: 00010287 [ 264.969749][ T7527] RAX: ffffffff8204be77 RBX: 0000000000000000 RCX: 0000000000080000 [ 264.977765][ T7527] RDX: ffffc9000d62f000 RSI: 000000000000f526 RDI: 000000000000f527 [ 264.985829][ T7527] RBP: 0000000000000000 R08: ffffea00011e1847 R09: 1ffffd400023c308 [ 264.993925][ T7527] R10: dffffc0000000000 R11: fffff9400023c309 R12: ffffea00011e1870 [ 265.002291][ T7527] R13: dffffc0000000000 R14: ffff888033dce700 R15: 0000000000000002 [ 265.010276][ T7527] FS: 00007f6290f4b6c0(0000) GS:ffff888126203000(0000) knlGS:0000000000000000 [ 265.019388][ T7527] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.026039][ T7527] CR2: 0000000000000000 CR3: 0000000054432000 CR4: 00000000003526f0 [ 265.034106][ T7527] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.042106][ T7527] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 265.050131][ T7527] Call Trace: [ 265.053438][ T7527] [ 265.056424][ T7527] workingset_activation+0x5f/0x4a0 [ 265.061662][ T7527] ? folio_mark_accessed+0x2f1/0x4a0 [ 265.067006][ T7527] folio_mark_accessed+0x3b5/0x4a0 [ 265.072160][ T7527] kvm_release_page_clean+0x9a/0xe0 [ 265.077418][ T7527] kvm_tdp_page_fault+0x2dd/0x370 [ 265.082482][ T7527] kvm_mmu_do_page_fault+0x2c5/0x640 [ 265.087834][ T7527] ? vmx_vcpu_run+0xdad/0x2610 [ 265.092640][ T7527] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 265.098527][ T7527] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 265.104129][ T7527] kvm_mmu_page_fault+0x22f/0xb70 [ 265.109226][ T7527] ? __pfx_handle_ept_violation+0x10/0x10 [ 265.115385][ T7527] vmx_handle_exit+0x103b/0x1850 [ 265.120375][ T7527] ? vcpu_run+0x34ed/0x6ae0 [ 265.124929][ T7527] vcpu_run+0x419b/0x6ae0 [ 265.129324][ T7527] ? vcpu_run+0x34ed/0x6ae0 [ 265.133917][ T7527] ? __pfx_vcpu_run+0x10/0x10 [ 265.138636][ T7527] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 265.144408][ T7527] ? rcu_is_watching+0x15/0xb0 [ 265.149212][ T7527] kvm_arch_vcpu_ioctl_run+0xfca/0x1940 [ 265.154878][ T7527] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 265.160702][ T7527] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 265.166725][ T7527] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 265.173739][ T7527] ? rcu_is_watching+0x15/0xb0 [ 265.178974][ T7527] ? look_up_lock_class+0x74/0x170 [ 265.184183][ T7527] ? register_lock_class+0x51/0x320 [ 265.189424][ T7527] ? __lock_acquire+0xaac/0xd20 [ 265.194356][ T7527] kvm_vcpu_ioctl+0x95a/0xe90 [ 265.199076][ T7527] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 265.204335][ T7527] ? rcu_is_watching+0x15/0xb0 [ 265.209135][ T7527] ? trace_irq_disable+0x37/0x110 [ 265.214214][ T7527] ? preempt_schedule_irq+0xde/0x150 [ 265.219540][ T7527] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 265.225757][ T7527] ? smack_file_ioctl+0x302/0x340 [ 265.230850][ T7527] ? irqentry_exit+0x74/0x90 [ 265.235516][ T7527] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.240771][ T7527] ? __se_sys_ioctl+0x52/0x170 [ 265.245571][ T7527] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 265.250858][ T7527] __se_sys_ioctl+0xf9/0x170 [ 265.255485][ T7527] do_syscall_64+0xf6/0x210 [ 265.260038][ T7527] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 265.265699][ T7527] ? clear_bhb_loop+0x45/0xa0 [ 265.270702][ T7527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.276765][ T7527] RIP: 0033:0x7f629018e969 [ 265.281247][ T7527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.300990][ T7527] RSP: 002b:00007f6290f4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.309435][ T7527] RAX: ffffffffffffffda RBX: 00007f62903b6080 RCX: 00007f629018e969 [ 265.317463][ T7527] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000e [ 265.325483][ T7527] RBP: 00007f6290210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 265.333813][ T7527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.341798][ T7527] R13: 0000000000000000 R14: 00007f62903b6080 R15: 00007ffce2d76f88 [ 265.349855][ T7527] [ 265.352923][ T7527] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 265.360211][ T7527] CPU: 1 UID: 0 PID: 7527 Comm: syz.2.442 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 265.372192][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 265.382253][ T7527] Call Trace: [ 265.385540][ T7527] [ 265.388473][ T7527] dump_stack_lvl+0x99/0x250 [ 265.393106][ T7527] ? __asan_memcpy+0x40/0x70 [ 265.397732][ T7527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.402949][ T7527] ? __pfx__printk+0x10/0x10 [ 265.407658][ T7527] panic+0x2db/0x790 [ 265.411573][ T7527] ? __pfx_panic+0x10/0x10 [ 265.416039][ T7527] __warn+0x31b/0x4b0 [ 265.420052][ T7527] ? folio_memcg+0x1a8/0x310 [ 265.424665][ T7527] ? folio_memcg+0x1a8/0x310 [ 265.429276][ T7527] report_bug+0x2be/0x4f0 [ 265.433628][ T7527] ? folio_memcg+0x1a8/0x310 [ 265.438228][ T7527] ? folio_memcg+0x1a8/0x310 [ 265.442830][ T7527] ? folio_memcg+0x1aa/0x310 [ 265.447438][ T7527] handle_bug+0x84/0x160 [ 265.451699][ T7527] exc_invalid_op+0x1a/0x50 [ 265.456209][ T7527] asm_exc_invalid_op+0x1a/0x20 [ 265.461064][ T7527] RIP: 0010:folio_memcg+0x1a8/0x310 [ 265.466286][ T7527] Code: 80 3c 28 00 74 08 4c 89 f7 e8 e4 cd 1a 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 19 fe ba ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 265.485900][ T7527] RSP: 0018:ffffc90003d1f270 EFLAGS: 00010287 [ 265.491976][ T7527] RAX: ffffffff8204be77 RBX: 0000000000000000 RCX: 0000000000080000 [ 265.499950][ T7527] RDX: ffffc9000d62f000 RSI: 000000000000f526 RDI: 000000000000f527 [ 265.507924][ T7527] RBP: 0000000000000000 R08: ffffea00011e1847 R09: 1ffffd400023c308 [ 265.515909][ T7527] R10: dffffc0000000000 R11: fffff9400023c309 R12: ffffea00011e1870 [ 265.523891][ T7527] R13: dffffc0000000000 R14: ffff888033dce700 R15: 0000000000000002 [ 265.531882][ T7527] ? folio_memcg+0x1a7/0x310 [ 265.536501][ T7527] workingset_activation+0x5f/0x4a0 [ 265.541713][ T7527] ? folio_mark_accessed+0x2f1/0x4a0 [ 265.547013][ T7527] folio_mark_accessed+0x3b5/0x4a0 [ 265.552141][ T7527] kvm_release_page_clean+0x9a/0xe0 [ 265.557354][ T7527] kvm_tdp_page_fault+0x2dd/0x370 [ 265.562394][ T7527] kvm_mmu_do_page_fault+0x2c5/0x640 [ 265.567691][ T7527] ? vmx_vcpu_run+0xdad/0x2610 [ 265.572553][ T7527] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 265.578390][ T7527] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 265.583944][ T7527] kvm_mmu_page_fault+0x22f/0xb70 [ 265.588985][ T7527] ? __pfx_handle_ept_violation+0x10/0x10 [ 265.594713][ T7527] vmx_handle_exit+0x103b/0x1850 [ 265.599657][ T7527] ? vcpu_run+0x34ed/0x6ae0 [ 265.604183][ T7527] vcpu_run+0x419b/0x6ae0 [ 265.608564][ T7527] ? vcpu_run+0x34ed/0x6ae0 [ 265.613137][ T7527] ? __pfx_vcpu_run+0x10/0x10 [ 265.617835][ T7527] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 265.623575][ T7527] ? rcu_is_watching+0x15/0xb0 [ 265.628362][ T7527] kvm_arch_vcpu_ioctl_run+0xfca/0x1940 [ 265.633936][ T7527] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 265.639673][ T7527] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 265.645672][ T7527] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 265.652624][ T7527] ? rcu_is_watching+0x15/0xb0 [ 265.657490][ T7527] ? look_up_lock_class+0x74/0x170 [ 265.662631][ T7527] ? register_lock_class+0x51/0x320 [ 265.667850][ T7527] ? __lock_acquire+0xaac/0xd20 [ 265.672813][ T7527] kvm_vcpu_ioctl+0x95a/0xe90 [ 265.677509][ T7527] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 265.682723][ T7527] ? rcu_is_watching+0x15/0xb0 [ 265.687501][ T7527] ? trace_irq_disable+0x37/0x110 [ 265.692556][ T7527] ? preempt_schedule_irq+0xde/0x150 [ 265.697853][ T7527] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 265.703585][ T7527] ? smack_file_ioctl+0x302/0x340 [ 265.708633][ T7527] ? irqentry_exit+0x74/0x90 [ 265.713326][ T7527] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.718552][ T7527] ? __se_sys_ioctl+0x52/0x170 [ 265.723328][ T7527] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 265.728542][ T7527] __se_sys_ioctl+0xf9/0x170 [ 265.733144][ T7527] do_syscall_64+0xf6/0x210 [ 265.737653][ T7527] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 265.743292][ T7527] ? clear_bhb_loop+0x45/0xa0 [ 265.748002][ T7527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.753904][ T7527] RIP: 0033:0x7f629018e969 [ 265.758327][ T7527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.777944][ T7527] RSP: 002b:00007f6290f4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.786365][ T7527] RAX: ffffffffffffffda RBX: 00007f62903b6080 RCX: 00007f629018e969 [ 265.794519][ T7527] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000e [ 265.802493][ T7527] RBP: 00007f6290210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 265.810469][ T7527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.818442][ T7527] R13: 0000000000000000 R14: 00007f62903b6080 R15: 00007ffce2d76f88 [ 265.826433][ T7527] [ 265.829805][ T7527] Kernel Offset: disabled [ 265.834137][ T7527] Rebooting in 86400 seconds..