last executing test programs: 24.436596997s ago: executing program 1 (id=176): add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000001500)="0100", 0x2, 0xfffffffffffffffc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x18, 0x3b, 0x92, 0x20, 0x13b1, 0x42, 0x5816, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xca, 0x0, 0x2, 0x7a, 0x8b, 0xb5, 0x0, [], [{{0x9, 0x5, 0x2, 0x0, 0x3ff}}, {{0x9, 0x5, 0x5}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000440)={0x24, &(0x7f0000000340)={0x20, 0x10, 0x71, {0x71, 0xd, "52082f7244799a411079e54426e949c321904b864c3d5c356f2530d6563a34857eb31729486b1c2986a0b80a253e3aa4b907fbfa28775a5d3e2949ffad4531580dabeaf5af60c131fc23a4109aa761f763b2647c05505f1aa6e8e4f37c04e4edf01a9944489b1c409d0489daf4594b"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x11}}, &(0x7f0000000200)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x9, "7500d666"}, @main=@item_012={0x1, 0x0, 0x9, "9a"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0xf72}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)={0x0, 0xd, 0x11, "107dc18f38c3c62961e4f4427a5cf33344"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000580)={0x20, 0x1, 0xe7, "06bc1c17772325442afb759ff998150c7feb25335ac7abe31974b98347675f68c5abff78ecf0dd611e86bdbde036410d0e21145847007a56a4e4176e9a0b68efd5ebc9e5d39e3dd914226539e26bcdd9a4d5fc0662cffea643a0858d48bf5d2a247ac4cc80426827bdce6c3b1839b7bdc7c10ba97e4606fbe85fd42d8a2ce8a95cffe9d4ddba7d213dabd1c56f2f920f3f8403dad6987a9d20ccdcbbd085d60fcb16bb835a1e37ad7e5243b64f5b234a5da2655ba923339ca0e6e014b7bc891d1773d834c4861c017b81a0bc762f03ce0962e98403dafbe7a50a5186a2bd9f3b8e7dd286b78a3d"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x80}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x35, {0x5, 0x1}, 0x1}, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0xffff, 0x4}, {}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000040}, 0x0) 21.165580956s ago: executing program 1 (id=187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004c00)={0x1c, 0x2c, 0x9, 0x70bd2b, 0x0, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @u32}]}, 0x1c}, 0x1, 0x0, 0x0, 0x26000000}, 0x4000) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x3106}}, './file0\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYRES8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, r5, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0xfffffed4, 0x1}}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) 19.698449443s ago: executing program 1 (id=189): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) read$dsp(0xffffffffffffffff, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0, 0x7ea}, 0x8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000380)={0x0, 0x80000}) socket$nl_route(0x10, 0x3, 0x0) setresuid(0xee00, 0xee01, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) 18.361513178s ago: executing program 1 (id=194): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) r2 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_enter(r2, 0x64f5, 0x90f4, 0x1, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)="42d7", 0xfffff, 0xfffffffffffffffe) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r3, 0x540b, 0x1) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="26000080", @ANYRESDEC, @ANYBLOB="000329bd7000ffdbdf2513000000060036000800000042ad190002000000c7a7782281484cf1e17393ded881c30044773533475d0ff74f5adb1414"], 0x24}}, 0x20008040) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x31, 0xf7, 0x6, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x40, 0x3ff, 0xf, 0x10000, 0x6, 0x7, 0xfffffeff, 0x2174]}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000180)=ANY=[@ANYRES64], 0x78) 14.140909271s ago: executing program 2 (id=202): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) read$dsp(0xffffffffffffffff, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0, 0x7ea}, 0x8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000380)={0x0, 0x80000}) socket$nl_route(0x10, 0x3, 0x0) setresuid(0xee00, 0xee01, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) 13.440502606s ago: executing program 3 (id=204): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20}, 0xfdef) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000440)={'#! ', './file0', [{0x20, 'wlan1\x00'}], 0xa, "1721d03759be36"}, 0x19) dup3(r2, r2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005e40)={0x2020}, 0xfffffffa) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0, r3}, 0x18) munmap(&(0x7f0000893000/0x4000)=nil, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000378ea696abbe7c4eee07010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r7}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000400)=[@mss={0x2, 0x4}, @sack_perm, @sack_perm, @mss={0x2, 0x1}, @timestamp, @timestamp, @mss={0x2, 0x4}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 11.977679983s ago: executing program 2 (id=205): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@typed={0x0, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}], 0x1}, 0x0) (fail_nth: 1) 11.104655131s ago: executing program 3 (id=207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') r2 = io_uring_setup(0x77bb, &(0x7f00000000c0)={0x0, 0xd709, 0x2, 0xf7fffffe, 0x2000062}) io_uring_enter(r2, 0x800000, 0x2, 0xf, &(0x7f0000000000)={[0x2000000]}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) sendfile(r4, r4, 0x0, 0x401) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f0000010000000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r5, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) 10.802704939s ago: executing program 1 (id=209): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, 0x1402, 0x1, 0x70bd2a, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) iopl(0x3) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000240)) r3 = gettid() process_vm_writev(r3, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dsp1(0xffffff9c, &(0x7f00000001c0), 0x30002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 10.765241586s ago: executing program 2 (id=210): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000280)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f00000020c0)=[{r3, 0x9012}], 0x1, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) poll(&(0x7f00000021c0)=[{r3, 0x1000}], 0x1, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xe, &(0x7f0000002080)=ANY=[@ANYRES16=r4, @ANYRESDEC=r5], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0xc6, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000003780)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)='H', 0x1}], 0x1, 0x0, 0x0, 0x4000080}], 0x1, 0x4040000) 8.771432902s ago: executing program 3 (id=212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe2(0x0, 0x80080) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000e99500000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) socket$nl_generic(0x10, 0x3, 0x10) setreuid(0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 8.746047515s ago: executing program 0 (id=213): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20"], 0xb0}}, 0x0) 8.360923199s ago: executing program 1 (id=215): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000eb0000/0x3000)=nil, 0x3000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) munlockall() (fail_nth: 1) 7.552662614s ago: executing program 2 (id=216): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x35) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000380)={0x1f, 0x7}, 0xe) listen(r3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000200)=0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100001000000000000000000e40000010000b34bbc00000000000000000000ffffffff0000000000000000000000004e200000000000000200002000000000129406ac25b2800d63d7134eeff8efc8d14281de9de084197cd0d53e4a59a4cc90a0e05096bbc873b91b8747a457cc52a846cbde9eaf9f7e1fe4191f817b8e198bc4d43ed3e67f47f65245170ca3a41056a837a0eed49fba7f9690aee74219bf53a660ad8c095a691e23f799567059a95652791779f6485a8f8ad5ce9f06e485c71d7c93043d37f0cb6f6f1ab082742518da3d978d256623cbaf1de7c5159be0f76f9175f727f82140ca5d815f4fb32e9287b5082e52b0abe0f3fa5c5d3bf3dd8f711cbe91eed19e5b28ab550a2a5537b201590c9b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000000000000006c000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff020000000000000000000000480003006c7a6a6800"/240], 0x138}}, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x42) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x80000000) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) shutdown(r0, 0x0) 7.204366923s ago: executing program 3 (id=217): unshare(0x24060400) syz_open_dev$midi(&(0x7f00000005c0), 0x2, 0x0) ppoll(&(0x7f0000000600), 0x0, &(0x7f0000000680), 0x0, 0x0) 6.961080219s ago: executing program 4 (id=218): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x204080, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x13, r6}) 6.880769051s ago: executing program 0 (id=219): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x204080, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, &(0x7f0000000240)=0x1) r5 = socket$inet(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x13, r7}) 6.880317209s ago: executing program 3 (id=220): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) r2 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_enter(r2, 0x64f5, 0x90f4, 0x1, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)="42d7", 0xfffff, 0xfffffffffffffffe) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r3, 0x540b, 0x1) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="26000080", @ANYRESDEC, @ANYBLOB="000329bd7000ffdbdf2513000000060036000800000042ad190002000000c7a7782281484cf1e17393ded881c30044773533475d0ff74f5adb1414"], 0x24}}, 0x20008040) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x31, 0xf7, 0x6, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x40, 0x3ff, 0xf, 0x10000, 0x6, 0x7, 0xfffffeff, 0x2174]}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000180)=ANY=[@ANYRES64], 0x78) 4.552256227s ago: executing program 4 (id=221): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) dup3(r0, r2, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000100)="39ac8469c75e197eba61e0c6421a26e64c75e5", 0x13}, {&(0x7f0000000340)="a4ce", 0x2}], 0x2, 0xffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) (fail_nth: 1) 4.516648143s ago: executing program 0 (id=222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') r2 = io_uring_setup(0x77bb, &(0x7f00000000c0)={0x0, 0xd709, 0x2, 0xf7fffffe, 0x2000062}) io_uring_enter(r2, 0x800000, 0x2, 0xf, &(0x7f0000000000)={[0x2000000]}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) sendfile(r4, r4, 0x0, 0x401) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f0000010000000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r5, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) 4.397665203s ago: executing program 2 (id=223): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x100, 0x0, 0x8, 0x870bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7a}, @void, @val={0xc, 0x99, {0x80000000, 0x16}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_DATA={0xcd, 0xc5, "5445e378d8e75892e731e5060de8dbc79ae4c1867313665e7c479911b42396968cb20441af8971e282890b3f4dd769f1b1bf67e3b9df771e84e0cf136301176657431bcd8f3e2b9d5af446129cc7d8c83456ec428cc5f4f49ee992a2ea78517007f76baae20d5221d634011b9a1b86a6fb32e1203beddadf79bee32aff3d0f67cd8e9bc2ef99fa5c8cd59f07d27118d3ac39c4854bcbe28719b889a62007f611c94a8e320d90c9e8ef930306c5abc651b716225758333026901ffc78b01fa7b0ca642b01af8f461d07"}]}, 0x100}, 0x1, 0x0, 0x0, 0x24044010}, 0x0) recvmsg$unix(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x10020) (fail_nth: 1) 3.848691924s ago: executing program 2 (id=224): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x20, r1, 0x852dd6c070cd7e4d, 0x20000000, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x4, 0x700000002000000, 0x0, 0x8d1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=r4, 0x7, 0x0, 0xddd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = io_uring_setup(0x35cc, &(0x7f00000000c0)={0x0, 0xa7e8, 0x2000, 0x3, 0x2b9}) syz_io_uring_setup(0x3ab6, &(0x7f0000000240)={0x0, 0xa868, 0x2, 0x2, 0x1d1, 0x0, r5}, &(0x7f0000000180), &(0x7f0000000340)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) 3.006865972s ago: executing program 4 (id=225): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x204080, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, &(0x7f0000000240)=0x1) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x13}) 2.978830922s ago: executing program 0 (id=226): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) sched_setscheduler(r1, 0x6, &(0x7f0000000080)=0xbda) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @none}, 0x8) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x3f6e, 0x0, 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000380)={0x2, 0x3, 0xfffffff9, 0x9, 0x15, "a294e7003e805a9d1b78d681c441000700"}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x200, 0x2e8, 0x2e8, 0x200, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffffff, 0xffffff00, 0xffff00], [0xffff00, 0xff], 'nr0\x00', 'veth0\x00', {0xff}, {0x47f0d8da367fb287}, 0x6, 0x4, 0x4}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc, 0x30e7, 0x101, 'snmp\x00'}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x0, 0x0, 0xff], [0xffffff00, 0xff000000, 0xffff00, 0xff], 'virt_wifi0\x00', 'team_slave_1\x00', {}, {}, 0xc, 0x7, 0x6, 0x1}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x8, 0x7, 0x3, '\x00', 'syz1\x00', {0xc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r4, 0x35, 0x1, 0x1b, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x18) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) linkat(r7, &(0x7f00000001c0)='./file1\x00', r7, &(0x7f0000000240)='./bus\x00', 0x1000) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000006c0)={0x7}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)={@ifindex, r8, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r8, r9, 0x2f, 0x2038, 0x4, @void, @void, @value=r10}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@map=r6, r4, 0xa, 0x8, 0x0, @void, @value=r8, @void, @void, r5}, 0x20) write$UHID_INPUT(r3, &(0x7f0000001c40)={0x8, {"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", 0x1000}}, 0x1006) 1.318252406s ago: executing program 4 (id=227): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe2(0x0, 0x80080) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000e99500000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) socket$nl_generic(0x10, 0x3, 0x10) setreuid(0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 1.209422945s ago: executing program 0 (id=228): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="10"], 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) prlimit64(0x0, 0x0, &(0x7f00000000c0)={0x8, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f0000003980)=[{{&(0x7f0000000380)=@nl=@unspec, 0x80, &(0x7f0000000140)=[{&(0x7f0000000440)=""/159, 0x9f}, {&(0x7f00000005c0)=""/244, 0xf4}], 0x2, &(0x7f0000000500)=""/119, 0x77}, 0x6}, {{&(0x7f00000006c0)=@can, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/175, 0xaf}, {&(0x7f0000000800)=""/183, 0xb7}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/108, 0x6c}], 0x4, &(0x7f0000000a40)=""/6, 0x6}, 0x4}, {{&(0x7f0000000a80)=@l2, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000b00)=""/56, 0x38}, {&(0x7f0000000bc0)=""/65, 0x41}, {&(0x7f0000000c40)=""/243, 0xf3}], 0x3, &(0x7f0000001100)=""/4096, 0x1000}}, {{&(0x7f0000000d40)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000000dc0)=""/3, 0x3}, {&(0x7f0000000e00)=""/18, 0x12}, {&(0x7f0000000e40)=""/187, 0xbb}, {&(0x7f0000000f00)=""/189, 0xbd}, {&(0x7f0000000fc0)=""/110, 0x6e}, {&(0x7f0000001040)=""/110, 0x6e}, {&(0x7f0000002100)=""/167, 0xa7}], 0x7}, 0x4f}, {{&(0x7f0000002240)=@xdp, 0x80, &(0x7f00000028c0)=[{&(0x7f00000022c0)=""/253, 0xfd}, {&(0x7f00000023c0)=""/178, 0xb2}, {&(0x7f0000002480)=""/125, 0x7d}, {&(0x7f0000002500)=""/187, 0xbb}, {&(0x7f00000025c0)=""/64, 0x40}, {&(0x7f0000002600)=""/69, 0x45}, {&(0x7f0000002680)=""/214, 0xd6}, {&(0x7f0000002780)=""/220, 0xdc}, {&(0x7f0000002880)=""/25, 0x19}], 0x9, &(0x7f0000002980)=""/4096, 0x1000}, 0x9}], 0x5, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x81) ppoll(0x0, 0x0, 0x0, &(0x7f00000001c0)={[0x2a]}, 0x8) openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'netdevsim0\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10) write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000000200020000", 0x1c) bind$rxrpc(r6, &(0x7f00000010c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}, 0x24) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000340)={0xa9, 0x0, 0x3015, 0x3, 0x1, 0x100021, 0x8000}) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) 352.802201ms ago: executing program 3 (id=229): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000200)={0x1d, 0x0, 0x5}, 0x18, &(0x7f0000000280)={0x0}}, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0xb6, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007000c00000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="fffffeff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000486609c600"/28], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) 255.617043ms ago: executing program 4 (id=230): unshare(0x24060400) syz_open_dev$midi(&(0x7f00000005c0), 0x2, 0x0) ppoll(&(0x7f0000000600), 0x0, &(0x7f0000000680), 0x0, 0x0) 84.780922ms ago: executing program 4 (id=231): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040), 0x2) unshare(0xc040400) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="61153000000000006113500000000000bfa000000000000036000000080013002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000002000000160300000ee60060bf310000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44b6b498b98ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089da6d6a710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f50e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8d829906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a443c299848649e1a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87100900000000000000de8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e52a2a10f922cc2de27ac24483639c369b06ecc7ea4195898691cc9c414c599c33eac655d01d1c4f89c999fd7aaa5d0984c82128ad6a1fad9dd079e095aa8331fe3d2e2baed37d6c93d402dc67b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) timerfd_gettime(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 0s ago: executing program 0 (id=232): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000000000000b00000000030014b69dfa3000000000"], 0x28}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000300)={0xef60, {{0xa, 0x4e22, 0xca, @dev={0xfe, 0x80, '\x00', 0xb}, 0x1a}}}, 0x90) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_IOAS_UNMAP(r6, 0x3b86, &(0x7f0000000900)={0x18, 0x0, 0x1000, 0x1004000}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.6' (ED25519) to the list of known hosts. [ 82.618663][ T5822] cgroup: Unknown subsys name 'net' [ 82.749626][ T5822] cgroup: Unknown subsys name 'cpuset' [ 82.759390][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.487525][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.171544][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.193918][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.205491][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.205796][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.213731][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.227911][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.235882][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.245819][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.246683][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.254947][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.260847][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.268877][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.289543][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.295953][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.297527][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.458664][ T5141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.467672][ T5141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.478144][ T5141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.487652][ T5141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.495937][ T5141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.569207][ T5141] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.577576][ T5141] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.585811][ T5141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.593959][ T5141] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.602107][ T5141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.180702][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 88.296305][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 88.338879][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 88.547292][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.554954][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.562940][ T5843] bridge_slave_0: entered allmulticast mode [ 88.571383][ T5843] bridge_slave_0: entered promiscuous mode [ 88.611461][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 88.633209][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.642043][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.650389][ T5843] bridge_slave_1: entered allmulticast mode [ 88.658559][ T5843] bridge_slave_1: entered promiscuous mode [ 88.791839][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 88.834270][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.843850][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.852372][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.860121][ T5834] bridge_slave_0: entered allmulticast mode [ 88.868436][ T5834] bridge_slave_0: entered promiscuous mode [ 88.899833][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.907825][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.915354][ T5833] bridge_slave_0: entered allmulticast mode [ 88.923064][ T5833] bridge_slave_0: entered promiscuous mode [ 88.940214][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.949846][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.958264][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.965714][ T5834] bridge_slave_1: entered allmulticast mode [ 88.973190][ T5834] bridge_slave_1: entered promiscuous mode [ 89.020045][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.027391][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.035600][ T5833] bridge_slave_1: entered allmulticast mode [ 89.044263][ T5833] bridge_slave_1: entered promiscuous mode [ 89.161654][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.217841][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.225930][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.233250][ T5853] bridge_slave_0: entered allmulticast mode [ 89.241690][ T5853] bridge_slave_0: entered promiscuous mode [ 89.250218][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.257588][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.264943][ T5853] bridge_slave_1: entered allmulticast mode [ 89.272310][ T5853] bridge_slave_1: entered promiscuous mode [ 89.282665][ T5843] team0: Port device team_slave_0 added [ 89.291702][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.301638][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.310020][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.317683][ T5848] bridge_slave_0: entered allmulticast mode [ 89.325746][ T5848] bridge_slave_0: entered promiscuous mode [ 89.337383][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.355804][ T5141] Bluetooth: hci2: command tx timeout [ 89.361777][ T5141] Bluetooth: hci1: command tx timeout [ 89.367547][ T5841] Bluetooth: hci0: command tx timeout [ 89.379445][ T5843] team0: Port device team_slave_1 added [ 89.398929][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.406306][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.413576][ T5848] bridge_slave_1: entered allmulticast mode [ 89.421750][ T5848] bridge_slave_1: entered promiscuous mode [ 89.447801][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.532738][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.547372][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.573397][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.580839][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.607989][ T5141] Bluetooth: hci3: command tx timeout [ 89.613507][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.629620][ T5834] team0: Port device team_slave_0 added [ 89.638973][ T5834] team0: Port device team_slave_1 added [ 89.648237][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.674985][ T5141] Bluetooth: hci4: command tx timeout [ 89.689102][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.696223][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.722561][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.749110][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.776958][ T5833] team0: Port device team_slave_0 added [ 89.801210][ T5853] team0: Port device team_slave_0 added [ 89.862892][ T5833] team0: Port device team_slave_1 added [ 89.872306][ T5853] team0: Port device team_slave_1 added [ 89.907736][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.915113][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.941478][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.955776][ T5848] team0: Port device team_slave_0 added [ 90.014603][ T5843] hsr_slave_0: entered promiscuous mode [ 90.021856][ T5843] hsr_slave_1: entered promiscuous mode [ 90.030134][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.038971][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.065532][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.078784][ T5848] team0: Port device team_slave_1 added [ 90.100940][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.108042][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.134075][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.149053][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.156185][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.182210][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.194094][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.201311][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.227885][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.240720][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.247770][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.274235][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.380774][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.388324][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.414791][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.428096][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.435619][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.461895][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.518962][ T5833] hsr_slave_0: entered promiscuous mode [ 90.525959][ T5833] hsr_slave_1: entered promiscuous mode [ 90.532275][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.541134][ T5833] Cannot create hsr debugfs directory [ 90.590086][ T5834] hsr_slave_0: entered promiscuous mode [ 90.597289][ T5834] hsr_slave_1: entered promiscuous mode [ 90.603522][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.612066][ T5834] Cannot create hsr debugfs directory [ 90.718448][ T5853] hsr_slave_0: entered promiscuous mode [ 90.726015][ T5853] hsr_slave_1: entered promiscuous mode [ 90.732316][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.741125][ T5853] Cannot create hsr debugfs directory [ 90.823592][ T5848] hsr_slave_0: entered promiscuous mode [ 90.833610][ T5848] hsr_slave_1: entered promiscuous mode [ 90.843016][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.851356][ T5848] Cannot create hsr debugfs directory [ 91.392215][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.407809][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.435173][ T5141] Bluetooth: hci1: command tx timeout [ 91.435199][ T5841] Bluetooth: hci0: command tx timeout [ 91.446601][ T5841] Bluetooth: hci2: command tx timeout [ 91.463561][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.476188][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.531413][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.545473][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.576719][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.589885][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.675263][ T5841] Bluetooth: hci3: command tx timeout [ 91.684503][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.709295][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.724584][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.742837][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.765310][ T5841] Bluetooth: hci4: command tx timeout [ 91.880455][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.912902][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.953127][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.965575][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.979044][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.079172][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.102487][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.111483][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.141694][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.157665][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.180504][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.187808][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.215548][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.248421][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.270832][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.278285][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.318054][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.337041][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.372154][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.379398][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.391788][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.399012][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.427261][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.434509][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.447395][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.454608][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.679364][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.725835][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.833448][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.871843][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.961247][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.968621][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.030887][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.052356][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.059626][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.082036][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.112884][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.120349][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.163399][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.170746][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.243874][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.254476][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.442308][ T5843] veth0_vlan: entered promiscuous mode [ 93.500251][ T5843] veth1_vlan: entered promiscuous mode [ 93.515657][ T5841] Bluetooth: hci2: command tx timeout [ 93.521132][ T5841] Bluetooth: hci0: command tx timeout [ 93.522198][ T5141] Bluetooth: hci1: command tx timeout [ 93.600437][ T5833] veth0_vlan: entered promiscuous mode [ 93.665952][ T5833] veth1_vlan: entered promiscuous mode [ 93.762124][ T5840] Bluetooth: hci3: command tx timeout [ 93.794648][ T5843] veth0_macvtap: entered promiscuous mode [ 93.806869][ T5843] veth1_macvtap: entered promiscuous mode [ 93.838901][ T5840] Bluetooth: hci4: command tx timeout [ 93.874570][ T5833] veth0_macvtap: entered promiscuous mode [ 93.910056][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.931760][ T5833] veth1_macvtap: entered promiscuous mode [ 93.949804][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.974521][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.991330][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.005300][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.014107][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.024155][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.051787][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.063057][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.079012][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.090473][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.101239][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.114098][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.138557][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.151173][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.163237][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.172578][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.181429][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.274088][ T5834] veth0_vlan: entered promiscuous mode [ 94.322976][ T5834] veth1_vlan: entered promiscuous mode [ 94.390355][ T5853] veth0_vlan: entered promiscuous mode [ 94.413845][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.419006][ T5848] veth0_vlan: entered promiscuous mode [ 94.425539][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.493033][ T5853] veth1_vlan: entered promiscuous mode [ 94.531702][ T5848] veth1_vlan: entered promiscuous mode [ 94.564148][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.575986][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.593838][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.609240][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.619636][ T5834] veth0_macvtap: entered promiscuous mode [ 94.674290][ T5834] veth1_macvtap: entered promiscuous mode [ 94.714058][ T5853] veth0_macvtap: entered promiscuous mode [ 94.752138][ T5853] veth1_macvtap: entered promiscuous mode [ 94.763545][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.779422][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.791320][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.802361][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.815085][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.827537][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.837881][ T5848] veth0_macvtap: entered promiscuous mode [ 94.849521][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.864174][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.891735][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.912023][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.922337][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.937681][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.952342][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.975173][ T5848] veth1_macvtap: entered promiscuous mode [ 95.008104][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.017236][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.027413][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.034678][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 95.046101][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.059154][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.071110][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.082247][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.093786][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.104159][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.115502][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.127899][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.143626][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.157549][ T5924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 95.159840][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.177840][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.188398][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.199251][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.210363][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.222875][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.277702][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.289353][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.301108][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.313512][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.324020][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.337667][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.347686][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.359805][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.371945][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.385518][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.394371][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.405217][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.414065][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.497869][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.526906][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.548262][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.572141][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.601598][ T5840] Bluetooth: hci0: command tx timeout [ 95.604959][ T5841] Bluetooth: hci2: command tx timeout [ 95.608102][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.613241][ T5141] Bluetooth: hci1: command tx timeout [ 95.623108][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.623129][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.623147][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.625876][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.722127][ T5853] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.733248][ T5853] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.758239][ T5853] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.762982][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 95.770184][ T5853] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.830974][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.839334][ T5141] Bluetooth: hci3: command tx timeout [ 95.852072][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.915515][ T5141] Bluetooth: hci4: command tx timeout [ 96.030708][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.039298][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.114855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 96.217279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.653714][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.686390][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.790410][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.815901][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.448571][ T5946] FAULT_INJECTION: forcing a failure. [ 97.448571][ T5946] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.462135][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz.2.9 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 97.462165][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 97.462183][ T5946] Call Trace: [ 97.462192][ T5946] [ 97.462200][ T5946] dump_stack_lvl+0x241/0x360 [ 97.462251][ T5946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.462301][ T5946] should_fail_ex+0x424/0x570 [ 97.462329][ T5946] _copy_to_iter+0x1f6/0x1c90 [ 97.462364][ T5946] ? __pfx_up_write+0x10/0x10 [ 97.462389][ T5946] ? ima_get_action+0x75/0xb0 [ 97.462416][ T5946] ? __pfx__copy_to_iter+0x10/0x10 [ 97.462443][ T5946] ? process_measurement+0x1b33/0x1fe0 [ 97.462491][ T5946] __skb_datagram_iter+0x3d2/0x940 [ 97.462520][ T5946] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 97.462553][ T5946] skb_copy_datagram_iter+0xd1/0x250 [ 97.462589][ T5946] tcp_recvmsg_locked+0xf84/0x3ba0 [ 97.462635][ T5946] ? rcu_is_watching+0x15/0xb0 [ 97.462664][ T5946] ? __pfx_hlock_conflict+0x10/0x10 [ 97.462695][ T5946] ? check_noncircular+0xee/0x160 [ 97.462740][ T5946] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 97.462780][ T5946] ? __lock_acquire+0xad5/0xd80 [ 97.462810][ T5946] ? __local_bh_enable_ip+0x168/0x200 [ 97.462841][ T5946] ? lockdep_hardirqs_on+0x9d/0x150 [ 97.462867][ T5946] ? __local_bh_enable_ip+0x168/0x200 [ 97.462901][ T5946] ? tcp_recvmsg+0x203/0x8c0 [ 97.462940][ T5946] tcp_recvmsg+0x222/0x8c0 [ 97.462972][ T5946] ? __pfx_tcp_recvmsg+0x10/0x10 [ 97.462997][ T5946] ? __lock_acquire+0xad5/0xd80 [ 97.463025][ T5946] ? sock_rps_record_flow+0x1a/0x410 [ 97.463046][ T5946] ? inet_recvmsg+0xe0/0x2d0 [ 97.463068][ T5946] ? __pfx_tcp_recvmsg+0x10/0x10 [ 97.463116][ T5946] inet_recvmsg+0x152/0x2d0 [ 97.463142][ T5946] ? __pfx_inet_recvmsg+0x10/0x10 [ 97.463162][ T5946] ? __fget_files+0x2a/0x420 [ 97.463189][ T5946] ? __fget_files+0x39d/0x420 [ 97.463212][ T5946] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 97.463247][ T5946] sock_recvmsg+0x1ae/0x280 [ 97.463280][ T5946] __sys_recvfrom+0x204/0x380 [ 97.463307][ T5946] ? __pfx___sys_recvfrom+0x10/0x10 [ 97.463342][ T5946] ? __fget_files+0x2a/0x420 [ 97.463377][ T5946] ? ksys_write+0x275/0x2d0 [ 97.463419][ T5946] __x64_sys_recvfrom+0xde/0x100 [ 97.463444][ T5946] do_syscall_64+0xf3/0x230 [ 97.463470][ T5946] ? clear_bhb_loop+0x45/0xa0 [ 97.463495][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.463515][ T5946] RIP: 0033:0x7f122658d169 [ 97.463544][ T5946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.463560][ T5946] RSP: 002b:00007f12273fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 97.463589][ T5946] RAX: ffffffffffffffda RBX: 00007f12267a6160 RCX: 00007f122658d169 [ 97.463605][ T5946] RDX: fffffffffffffd0b RSI: 0000200000000080 RDI: 0000000000000007 [ 97.463619][ T5946] RBP: 00007f12273fd090 R08: 0000000000000000 R09: fffffffffffffd25 [ 97.463632][ T5946] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000001 [ 97.463645][ T5946] R13: 0000000000000000 R14: 00007f12267a6160 R15: 00007ffe22c0c1b8 [ 97.463677][ T5946] [ 98.184236][ T9] cfg80211: failed to load regulatory.db [ 99.065643][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.820366][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.933843][ T5954] FAULT_INJECTION: forcing a failure. [ 99.933843][ T5954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.948135][ T5954] CPU: 1 UID: 0 PID: 5954 Comm: syz.2.11 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 99.948164][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 99.948176][ T5954] Call Trace: [ 99.948184][ T5954] [ 99.948192][ T5954] dump_stack_lvl+0x241/0x360 [ 99.948227][ T5954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.948255][ T5954] ? __pfx__printk+0x10/0x10 [ 99.948294][ T5954] should_fail_ex+0x424/0x570 [ 99.948320][ T5954] _copy_from_user+0x2d/0xb0 [ 99.948360][ T5954] copy_msghdr_from_user+0xb3/0x580 [ 99.948393][ T5954] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 99.948418][ T5954] ? __fget_files+0x2a/0x420 [ 99.948445][ T5954] ? __fget_files+0x2a/0x420 [ 99.948478][ T5954] __sys_sendmsg+0x20a/0x360 [ 99.948504][ T5954] ? __pfx___sys_sendmsg+0x10/0x10 [ 99.948581][ T5954] ? do_syscall_64+0xb6/0x230 [ 99.948608][ T5954] do_syscall_64+0xf3/0x230 [ 99.948633][ T5954] ? clear_bhb_loop+0x45/0xa0 [ 99.948656][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.948675][ T5954] RIP: 0033:0x7f122658d169 [ 99.948692][ T5954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.948708][ T5954] RSP: 002b:00007f122743f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.948729][ T5954] RAX: ffffffffffffffda RBX: 00007f12267a5fa0 RCX: 00007f122658d169 [ 99.948744][ T5954] RDX: 0000000000000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 99.948756][ T5954] RBP: 00007f122743f090 R08: 0000000000000000 R09: 0000000000000000 [ 99.948767][ T5954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.948779][ T5954] R13: 0000000000000000 R14: 00007f12267a5fa0 R15: 00007ffe22c0c1b8 [ 99.948809][ T5954] [ 99.995791][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.097244][ T5949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 100.211853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.216771][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.248412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.294831][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 100.305179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.306281][ T5887] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.620518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.635438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.639041][ T5887] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 100.658022][ T5887] usb 1-1: config 0 has no interface number 0 [ 100.764974][ T5887] usb 1-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 100.866354][ T5887] usb 1-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 100.915127][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.983362][ T5887] usb 1-1: config 0 descriptor?? [ 101.039469][ T5887] cxacru 1-1:0.109: cxacru_bind: interface has incorrect endpoints [ 101.115311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.219517][ T5887] cxacru 1-1:0.109: usbatm_usb_probe: bind failed: -19! [ 101.257766][ T5919] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.321185][ T5969] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.359110][ T5969] netlink: 80 bytes leftover after parsing attributes in process `syz.2.13'. [ 101.516025][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 101.672529][ T5919] usb 4-1: config 0 has an invalid interface number: 131 but max is 0 [ 101.682696][ T5887] usb 1-1: USB disconnect, device number 2 [ 101.750821][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.778813][ T5919] usb 4-1: config 0 has no interface number 0 [ 101.795236][ T5919] usb 4-1: config 0 interface 131 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 101.809183][ T5919] usb 4-1: config 0 interface 131 has no altsetting 0 [ 101.880887][ T5973] loop7: detected capacity change from 0 to 16383 [ 102.129395][ T5919] usb 4-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=6c.e1 [ 102.230249][ T5977] FAULT_INJECTION: forcing a failure. [ 102.230249][ T5977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.244789][ T5977] CPU: 1 UID: 0 PID: 5977 Comm: syz.1.2 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 102.244817][ T5977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 102.244829][ T5977] Call Trace: [ 102.244838][ T5977] [ 102.244846][ T5977] dump_stack_lvl+0x241/0x360 [ 102.244885][ T5977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.244915][ T5977] ? __pfx__printk+0x10/0x10 [ 102.244956][ T5977] should_fail_ex+0x424/0x570 [ 102.244984][ T5977] _copy_from_user+0x2d/0xb0 [ 102.245015][ T5977] __sys_bpf+0x1c5/0x8b0 [ 102.245037][ T5977] ? __pfx___sys_bpf+0x10/0x10 [ 102.245071][ T5977] ? ksys_write+0x275/0x2d0 [ 102.245125][ T5977] __x64_sys_bpf+0x7c/0x90 [ 102.245164][ T5977] do_syscall_64+0xf3/0x230 [ 102.245193][ T5977] ? clear_bhb_loop+0x45/0xa0 [ 102.245219][ T5977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.245254][ T5977] RIP: 0033:0x7fc60158d169 [ 102.245272][ T5977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.245289][ T5977] RSP: 002b:00007fc60246c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 102.245313][ T5977] RAX: ffffffffffffffda RBX: 00007fc6017a6160 RCX: 00007fc60158d169 [ 102.245328][ T5977] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000012 [ 102.245341][ T5977] RBP: 00007fc60246c090 R08: 0000000000000000 R09: 0000000000000000 [ 102.245354][ T5977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.245366][ T5977] R13: 0000000000000000 R14: 00007fc6017a6160 R15: 00007ffc9cfcb6d8 [ 102.245397][ T5977] [ 102.566083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 102.574457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 103.088517][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.098244][ T5919] usb 4-1: Product: syz [ 103.102492][ T5919] usb 4-1: Manufacturer: syz [ 103.255351][ T5919] usb 4-1: SerialNumber: syz [ 103.321169][ T5919] usb 4-1: config 0 descriptor?? [ 103.559327][ T5965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.631964][ T5965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.718503][ T5985] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 104.007366][ T5919] usb 4-1: bad CDC descriptors [ 104.013461][ T5919] cdc_acm 4-1:0.131: Zero length descriptor references [ 104.021926][ T5988] netlink: 'syz.2.17': attribute type 4 has an invalid length. [ 104.023896][ T5919] cdc_acm 4-1:0.131: probe with driver cdc_acm failed with error -22 [ 104.042590][ T5919] usb 4-1: USB disconnect, device number 2 [ 104.052634][ T5988] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.357346][ T96] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 104.436629][ T5995] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 104.499406][ T96] usb 1-1: device descriptor read/64, error -71 [ 104.522588][ T5995] CUSE: unknown device info "3ܟ,̘" [ 104.602311][ T5995] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 104.602311][ T5995] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 104.651458][ T6003] netlink: 6208 bytes leftover after parsing attributes in process `syz.3.21'. [ 104.680023][ T5997] bridge0: entered promiscuous mode [ 104.687333][ T5997] macvlan2: entered promiscuous mode [ 104.700091][ T5997] bridge0: port 3(macvlan2) entered blocking state [ 104.707613][ T5995] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 104.734980][ T5997] bridge0: port 3(macvlan2) entered disabled state [ 104.758344][ T5995] CUSE: DEVNAME unspecified [ 104.762927][ T5997] macvlan2: entered allmulticast mode [ 104.762963][ T5997] bridge0: entered allmulticast mode [ 104.797044][ T96] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 104.814270][ T5997] macvlan2: left allmulticast mode [ 104.843923][ T5997] bridge0: left allmulticast mode [ 104.858329][ T5997] bridge0: left promiscuous mode [ 104.902176][ T6007] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.084009][ T96] usb 1-1: device descriptor read/64, error -71 [ 105.465192][ T6011] ipvlan2: entered promiscuous mode [ 105.490287][ T6012] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 105.558675][ T96] usb usb1-port1: attempt power cycle [ 105.777398][ T5997] syz.4.19 (5997) used greatest stack depth: 18416 bytes left [ 106.024966][ T6016] FAULT_INJECTION: forcing a failure. [ 106.024966][ T6016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.101943][ T6016] CPU: 0 UID: 0 PID: 6016 Comm: syz.4.25 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 106.101976][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.101989][ T6016] Call Trace: [ 106.101997][ T6016] [ 106.102006][ T6016] dump_stack_lvl+0x241/0x360 [ 106.102045][ T6016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.102074][ T6016] ? __pfx__printk+0x10/0x10 [ 106.102116][ T6016] should_fail_ex+0x424/0x570 [ 106.102143][ T6016] _copy_from_user+0x2d/0xb0 [ 106.102176][ T6016] get_timespec64+0x9a/0x290 [ 106.102200][ T6016] ? __pfx_get_timespec64+0x10/0x10 [ 106.102217][ T6016] ? __fget_files+0x2a/0x420 [ 106.102276][ T6016] __x64_sys_recvmmsg+0x14b/0x260 [ 106.102305][ T6016] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 106.102335][ T6016] ? do_syscall_64+0xb6/0x230 [ 106.102365][ T6016] do_syscall_64+0xf3/0x230 [ 106.102390][ T6016] ? clear_bhb_loop+0x45/0xa0 [ 106.102415][ T6016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.102435][ T6016] RIP: 0033:0x7fcdaad8d169 [ 106.102454][ T6016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.102471][ T6016] RSP: 002b:00007fcdabbfd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 106.102493][ T6016] RAX: ffffffffffffffda RBX: 00007fcdaafa5fa0 RCX: 00007fcdaad8d169 [ 106.102508][ T6016] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 106.102522][ T6016] RBP: 00007fcdabbfd090 R08: 0000200000003700 R09: 0000000000000000 [ 106.102536][ T6016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.102548][ T6016] R13: 0000000000000000 R14: 00007fcdaafa5fa0 R15: 00007ffd1f025148 [ 106.102579][ T6016] [ 106.253953][ T96] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 107.353435][ T96] usb 1-1: device descriptor read/8, error -71 [ 107.971027][ T6033] FAULT_INJECTION: forcing a failure. [ 107.971027][ T6033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.031340][ T6030] Zero length message leads to an empty skb [ 108.057811][ T6033] CPU: 0 UID: 0 PID: 6033 Comm: syz.0.29 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 108.057841][ T6033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 108.057851][ T6033] Call Trace: [ 108.057857][ T6033] [ 108.057865][ T6033] dump_stack_lvl+0x241/0x360 [ 108.058014][ T6033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.058035][ T6033] ? __pfx__printk+0x10/0x10 [ 108.058067][ T6033] should_fail_ex+0x424/0x570 [ 108.058088][ T6033] _copy_from_user+0x2d/0xb0 [ 108.058239][ T6033] copy_msghdr_from_user+0xb3/0x580 [ 108.058265][ T6033] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 108.058283][ T6033] ? __fget_files+0x2a/0x420 [ 108.058303][ T6033] ? __fget_files+0x2a/0x420 [ 108.058326][ T6033] __sys_sendmsg+0x20a/0x360 [ 108.058345][ T6033] ? __pfx___sys_sendmsg+0x10/0x10 [ 108.058399][ T6033] ? do_syscall_64+0xb6/0x230 [ 108.058420][ T6033] do_syscall_64+0xf3/0x230 [ 108.058437][ T6033] ? clear_bhb_loop+0x45/0xa0 [ 108.058455][ T6033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.058469][ T6033] RIP: 0033:0x7f867838d169 [ 108.058483][ T6033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.058494][ T6033] RSP: 002b:00007f8679286038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.058511][ T6033] RAX: ffffffffffffffda RBX: 00007f86785a5fa0 RCX: 00007f867838d169 [ 108.058521][ T6033] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 108.058530][ T6033] RBP: 00007f8679286090 R08: 0000000000000000 R09: 0000000000000000 [ 108.058539][ T6033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.058547][ T6033] R13: 0000000000000000 R14: 00007f86785a5fa0 R15: 00007ffc12b7caa8 [ 108.058569][ T6033] [ 108.960556][ T6045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 110.569663][ T6060] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 112.031294][ T6067] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 112.069799][ T6079] usb usb1: usbfs: process 6079 (syz.0.38) did not claim interface 0 before use [ 112.080857][ T6079] usb usb1: usbfs: process 6079 (syz.0.38) did not claim interface 0 before use [ 112.536761][ T6067] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 115.004470][ T6095] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 115.485883][ T6099] netlink: 40 bytes leftover after parsing attributes in process `syz.0.46'. [ 115.795605][ T6099] netlink: 52 bytes leftover after parsing attributes in process `syz.0.46'. [ 115.804644][ T6099] netlink: 10 bytes leftover after parsing attributes in process `syz.0.46'. [ 115.813623][ T6099] netlink: 52 bytes leftover after parsing attributes in process `syz.0.46'. [ 115.822688][ T6099] netlink: 10 bytes leftover after parsing attributes in process `syz.0.46'. [ 115.831633][ T6099] netlink: 52 bytes leftover after parsing attributes in process `syz.0.46'. [ 116.757911][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 117.334435][ T6128] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 117.404787][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.417306][ T6128] netlink: 'syz.2.53': attribute type 10 has an invalid length. [ 117.436685][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.445224][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.474512][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.482502][ T6128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.490895][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.498183][ T6128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.559365][ T6128] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 117.595725][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 117.612719][ T10] usb 4-1: config 0 has an invalid interface number: 202 but max is 0 [ 117.645289][ T10] usb 4-1: config 0 has no interface number 0 [ 117.653082][ T6141] FAULT_INJECTION: forcing a failure. [ 117.653082][ T6141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.669911][ T6141] CPU: 1 UID: 0 PID: 6141 Comm: syz.1.56 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 117.669942][ T6141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.669955][ T6141] Call Trace: [ 117.669981][ T6141] [ 117.669989][ T6141] dump_stack_lvl+0x241/0x360 [ 117.670026][ T6141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.670055][ T6141] ? __pfx__printk+0x10/0x10 [ 117.670093][ T6141] should_fail_ex+0x424/0x570 [ 117.670120][ T6141] _copy_to_user+0x31/0xb0 [ 117.670153][ T6141] simple_read_from_buffer+0xc4/0x170 [ 117.670180][ T6141] proc_fail_nth_read+0x1ef/0x260 [ 117.670210][ T6141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.670240][ T6141] ? rw_verify_area+0x246/0x630 [ 117.670267][ T6141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.670295][ T6141] vfs_read+0x21f/0xb90 [ 117.670323][ T6141] ? kmem_cache_free+0x197/0x410 [ 117.670351][ T6141] ? __pfx_vfs_read+0x10/0x10 [ 117.670382][ T6141] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.670403][ T6141] ? put_files_struct+0x23d/0x310 [ 117.670441][ T6141] ksys_read+0x19d/0x2d0 [ 117.670472][ T6141] ? __pfx_ksys_read+0x10/0x10 [ 117.670506][ T6141] ? do_syscall_64+0xb6/0x230 [ 117.670535][ T6141] do_syscall_64+0xf3/0x230 [ 117.670560][ T6141] ? clear_bhb_loop+0x45/0xa0 [ 117.670583][ T6141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.670611][ T6141] RIP: 0033:0x7fc60158bb7c [ 117.670629][ T6141] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 117.670646][ T6141] RSP: 002b:00007fc6024ae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 117.670668][ T6141] RAX: ffffffffffffffda RBX: 00007fc6017a5fa0 RCX: 00007fc60158bb7c [ 117.670682][ T6141] RDX: 000000000000000f RSI: 00007fc6024ae0a0 RDI: 0000000000000003 [ 117.670695][ T6141] RBP: 00007fc6024ae090 R08: 0000000000000000 R09: 0000000000000000 [ 117.670707][ T6141] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 117.670719][ T6141] R13: 0000000000000000 R14: 00007fc6017a5fa0 R15: 00007ffc9cfcb6d8 [ 117.670750][ T6141] [ 117.672156][ T10] usb 4-1: config 0 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 117.902259][ T10] usb 4-1: config 0 interface 202 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.927271][ T10] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 117.944761][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.963117][ T10] usb 4-1: Product: syz [ 117.986612][ T10] usb 4-1: Manufacturer: syz [ 117.991336][ T10] usb 4-1: SerialNumber: syz [ 118.089874][ T10] usb 4-1: config 0 descriptor?? [ 118.149692][ T10] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 118.431653][ T6151] block nbd1: Device being setup by another task [ 118.469399][ T6154] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.561056][ T6156] warning: `syz.4.60' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.977912][ T6144] block nbd1: shutting down sockets [ 119.049381][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'. [ 119.429239][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.61'. [ 119.553461][ T5937] IPVS: starting estimator thread 0... [ 119.745138][ T6167] IPVS: using max 26 ests per chain, 62400 per kthread [ 120.738706][ T36] usb 4-1: Failed to read usb control message: -110 [ 120.765925][ T36] usb 4-1: Unable to read the bmi data from the device: -110 [ 120.773386][ T36] usb 4-1: unable to get target info from device [ 120.784262][ T36] usb 4-1: could not get target info (-110) [ 120.790744][ T36] usb 4-1: could not probe fw (-110) [ 121.158022][ T5937] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 121.278725][ T6181] usb usb8: usbfs: process 6181 (syz.2.65) did not claim interface 0 before use [ 122.054787][ T5937] usb 5-1: Using ep0 maxpacket: 16 [ 122.093092][ T5937] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 122.104821][ T5937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.144796][ T5937] usb 5-1: config 0 has no interface number 0 [ 122.150983][ T5937] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 122.188248][ T5937] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 122.234938][ T5937] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 122.288126][ T5937] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 147 [ 122.304809][ T5888] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 122.365198][ T5937] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 123.138394][ T5937] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 123.159399][ T10] usb 4-1: USB disconnect, device number 3 [ 123.184851][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.332948][ T5937] usb 5-1: config 0 descriptor?? [ 123.354613][ T5888] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 123.377986][ T6173] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 123.408070][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.422234][ T6173] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 123.449897][ T5888] usb 1-1: config 0 has no interface number 0 [ 123.462020][ T5937] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 123.489040][ T5888] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 123.533023][ T5888] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.549405][ T6198] FAULT_INJECTION: forcing a failure. [ 123.549405][ T6198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.658723][ T5888] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 123.667900][ T6198] CPU: 1 UID: 0 PID: 6198 Comm: syz.2.73 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 123.667934][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.667946][ T6198] Call Trace: [ 123.667955][ T6198] [ 123.667964][ T6198] dump_stack_lvl+0x241/0x360 [ 123.668001][ T6198] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.668036][ T6198] ? __pfx__printk+0x10/0x10 [ 123.668077][ T6198] should_fail_ex+0x424/0x570 [ 123.668105][ T6198] _copy_from_user+0x2d/0xb0 [ 123.668136][ T6198] copy_bpf_fprog_from_user+0x16a/0x3f0 [ 123.668164][ T6198] ? __pfx_copy_bpf_fprog_from_user+0x10/0x10 [ 123.668198][ T6198] fanout_set_data+0x278/0x490 [ 123.668234][ T6198] ? __pfx_fanout_set_data+0x10/0x10 [ 123.668284][ T6198] packet_setsockopt+0x912/0x1870 [ 123.668318][ T6198] ? __pfx_packet_setsockopt+0x10/0x10 [ 123.668347][ T6198] ? rcu_read_lock_any_held+0xbb/0x160 [ 123.668374][ T6198] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 123.668403][ T6198] ? vfs_write+0xb29/0xd10 [ 123.668451][ T6198] ? sb_end_write+0xe9/0x1c0 [ 123.668475][ T6198] ? vfs_write+0xb29/0xd10 [ 123.668506][ T6198] ? kmem_cache_free+0x197/0x410 [ 123.668527][ T6198] ? do_sys_openat2+0x165/0x1d0 [ 123.668554][ T6198] ? __pfx_vfs_write+0x10/0x10 [ 123.668579][ T6198] ? do_sys_openat2+0x165/0x1d0 [ 123.668603][ T6198] ? __pfx_packet_setsockopt+0x10/0x10 [ 123.668630][ T6198] do_sock_setsockopt+0x3b1/0x710 [ 123.668657][ T6198] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 123.668685][ T6198] ? ksys_write+0x266/0x2d0 [ 123.668720][ T6198] __x64_sys_setsockopt+0x1ee/0x280 [ 123.668747][ T6198] do_syscall_64+0xf3/0x230 [ 123.668774][ T6198] ? clear_bhb_loop+0x45/0xa0 [ 123.668802][ T6198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.668826][ T6198] RIP: 0033:0x7f122658d169 [ 123.668848][ T6198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.668867][ T6198] RSP: 002b:00007f122743f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 123.668890][ T6198] RAX: ffffffffffffffda RBX: 00007f12267a5fa0 RCX: 00007f122658d169 [ 123.668906][ T6198] RDX: 0000000000000016 RSI: 0000000000000107 RDI: 0000000000000003 [ 123.668920][ T6198] RBP: 00007f122743f090 R08: 0000000000000010 R09: 0000000000000000 [ 123.668939][ T6198] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.668951][ T6198] R13: 0000000000000000 R14: 00007f12267a5fa0 R15: 00007ffe22c0c1b8 [ 123.668986][ T6198] [ 123.945955][ T6199] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.011537][ T5937] usb 5-1: USB disconnect, device number 2 [ 124.119212][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.171181][ T5888] usb 1-1: Product: syz [ 124.191484][ T5888] usb 1-1: Manufacturer: syz [ 124.327588][ T5888] usb 1-1: SerialNumber: syz [ 124.347384][ T5888] usb 1-1: config 0 descriptor?? [ 124.529104][ T5958] udevd[5958]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.587154][ T6207] FAULT_INJECTION: forcing a failure. [ 124.587154][ T6207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.645064][ T6207] CPU: 0 UID: 0 PID: 6207 Comm: syz.3.76 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 124.645091][ T6207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 124.645101][ T6207] Call Trace: [ 124.645108][ T6207] [ 124.645115][ T6207] dump_stack_lvl+0x241/0x360 [ 124.645147][ T6207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.645175][ T6207] ? __pfx__printk+0x10/0x10 [ 124.645210][ T6207] should_fail_ex+0x424/0x570 [ 124.645233][ T6207] _copy_from_user+0x2d/0xb0 [ 124.645259][ T6207] copy_msghdr_from_user+0xb3/0x580 [ 124.645291][ T6207] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 124.645311][ T6207] ? __fget_files+0x2a/0x420 [ 124.645335][ T6207] ? __fget_files+0x2a/0x420 [ 124.645364][ T6207] __sys_sendmsg+0x20a/0x360 [ 124.645387][ T6207] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.645459][ T6207] ? do_syscall_64+0xb6/0x230 [ 124.645488][ T6207] do_syscall_64+0xf3/0x230 [ 124.645511][ T6207] ? clear_bhb_loop+0x45/0xa0 [ 124.645535][ T6207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.645555][ T6207] RIP: 0033:0x7efef858d169 [ 124.645573][ T6207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.645589][ T6207] RSP: 002b:00007efef9395038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.645611][ T6207] RAX: ffffffffffffffda RBX: 00007efef87a5fa0 RCX: 00007efef858d169 [ 124.645625][ T6207] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 124.645638][ T6207] RBP: 00007efef9395090 R08: 0000000000000000 R09: 0000000000000000 [ 124.645650][ T6207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.645662][ T6207] R13: 0000000000000000 R14: 00007efef87a5fa0 R15: 00007fffbf5d41f8 [ 124.645704][ T6207] [ 125.004616][ T5888] usb 1-1: USB disconnect, device number 7 [ 126.089423][ T5919] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 127.024915][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 127.041649][ T5919] usb 3-1: config 0 has an invalid interface number: 202 but max is 0 [ 127.058411][ T5919] usb 3-1: config 0 has no interface number 0 [ 127.074792][ T5919] usb 3-1: config 0 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 127.087259][ T5919] usb 3-1: config 0 interface 202 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.336986][ T5919] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 127.354783][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.362901][ T5919] usb 3-1: Product: syz [ 127.375756][ T5919] usb 3-1: Manufacturer: syz [ 127.380449][ T5919] usb 3-1: SerialNumber: syz [ 127.398166][ T5919] usb 3-1: config 0 descriptor?? [ 127.789340][ T6240] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 128.293429][ T5919] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 128.304525][ T3561] usb 3-1: Failed to submit usb control message: -71 [ 128.323826][ T3561] usb 3-1: unable to send the bmi data to the device: -71 [ 128.336879][ T3561] usb 3-1: unable to get target info from device [ 128.343392][ T3561] usb 3-1: could not get target info (-71) [ 128.351224][ T3561] usb 3-1: could not probe fw (-71) [ 128.455677][ T5919] usb 3-1: USB disconnect, device number 2 [ 128.603782][ T6249] FAULT_INJECTION: forcing a failure. [ 128.603782][ T6249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.726186][ T6249] CPU: 1 UID: 0 PID: 6249 Comm: syz.0.87 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 128.726216][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 128.726228][ T6249] Call Trace: [ 128.726237][ T6249] [ 128.726246][ T6249] dump_stack_lvl+0x241/0x360 [ 128.726283][ T6249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.726312][ T6249] ? __pfx__printk+0x10/0x10 [ 128.726352][ T6249] should_fail_ex+0x424/0x570 [ 128.726379][ T6249] _copy_from_user+0x2d/0xb0 [ 128.726410][ T6249] copy_msghdr_from_user+0xb3/0x580 [ 128.726445][ T6249] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 128.726470][ T6249] ? __fget_files+0x2a/0x420 [ 128.726497][ T6249] ? __fget_files+0x2a/0x420 [ 128.726536][ T6249] __sys_sendmsg+0x20a/0x360 [ 128.726561][ T6249] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.726630][ T6249] ? do_syscall_64+0xb6/0x230 [ 128.726656][ T6249] do_syscall_64+0xf3/0x230 [ 128.726678][ T6249] ? clear_bhb_loop+0x45/0xa0 [ 128.726700][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.726718][ T6249] RIP: 0033:0x7f867838d169 [ 128.726735][ T6249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.726750][ T6249] RSP: 002b:00007f8679286038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.726770][ T6249] RAX: ffffffffffffffda RBX: 00007f86785a5fa0 RCX: 00007f867838d169 [ 128.726783][ T6249] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 128.726794][ T6249] RBP: 00007f8679286090 R08: 0000000000000000 R09: 0000000000000000 [ 128.726805][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.726815][ T6249] R13: 0000000000000000 R14: 00007f86785a5fa0 R15: 00007ffc12b7caa8 [ 128.726842][ T6249] [ 128.938583][ T6252] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.168887][ T6258] FAULT_INJECTION: forcing a failure. [ 129.168887][ T6258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.225114][ T6258] CPU: 0 UID: 0 PID: 6258 Comm: syz.1.90 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 129.225146][ T6258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 129.225158][ T6258] Call Trace: [ 129.225166][ T6258] [ 129.225174][ T6258] dump_stack_lvl+0x241/0x360 [ 129.225211][ T6258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.225249][ T6258] ? __pfx__printk+0x10/0x10 [ 129.225291][ T6258] should_fail_ex+0x424/0x570 [ 129.225318][ T6258] _copy_from_user+0x2d/0xb0 [ 129.225350][ T6258] copy_msghdr_from_user+0xb3/0x580 [ 129.225377][ T6258] ? __pfx_kstrtoull+0x10/0x10 [ 129.225404][ T6258] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 129.225437][ T6258] ? kstrtouint+0xfc/0x190 [ 129.225463][ T6258] do_recvmmsg+0x3bf/0xab0 [ 129.225497][ T6258] ? __pfx_do_recvmmsg+0x10/0x10 [ 129.225537][ T6258] ? rcu_read_lock_any_held+0xbb/0x160 [ 129.225563][ T6258] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 129.225590][ T6258] ? vfs_write+0xb29/0xd10 [ 129.225622][ T6258] ? sb_end_write+0xe9/0x1c0 [ 129.225646][ T6258] ? vfs_write+0xb29/0xd10 [ 129.225676][ T6258] ? kmem_cache_free+0x197/0x410 [ 129.225695][ T6258] ? do_sys_openat2+0x165/0x1d0 [ 129.225727][ T6258] ? __pfx_do_sys_openat2+0x10/0x10 [ 129.225747][ T6258] ? put_files_struct+0x23d/0x310 [ 129.225785][ T6258] __x64_sys_recvmmsg+0x1ab/0x260 [ 129.225811][ T6258] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 129.225840][ T6258] ? do_syscall_64+0xb6/0x230 [ 129.225868][ T6258] do_syscall_64+0xf3/0x230 [ 129.225892][ T6258] ? clear_bhb_loop+0x45/0xa0 [ 129.225917][ T6258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.225936][ T6258] RIP: 0033:0x7fc60158d169 [ 129.225953][ T6258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.225969][ T6258] RSP: 002b:00007fc6024ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 129.225992][ T6258] RAX: ffffffffffffffda RBX: 00007fc6017a5fa0 RCX: 00007fc60158d169 [ 129.226006][ T6258] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 129.226025][ T6258] RBP: 00007fc6024ae090 R08: 0000000000000000 R09: 0000000000000000 [ 129.226036][ T6258] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 129.226048][ T6258] R13: 0000000000000000 R14: 00007fc6017a5fa0 R15: 00007ffc9cfcb6d8 [ 129.226078][ T6258] [ 129.861977][ T6264] Bluetooth: MGMT ver 1.23 [ 131.486512][ T6273] FAULT_INJECTION: forcing a failure. [ 131.486512][ T6273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.672821][ T6273] CPU: 0 UID: 0 PID: 6273 Comm: syz.1.92 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 131.672854][ T6273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 131.672867][ T6273] Call Trace: [ 131.672877][ T6273] [ 131.672886][ T6273] dump_stack_lvl+0x241/0x360 [ 131.672925][ T6273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.672954][ T6273] ? __pfx__printk+0x10/0x10 [ 131.673002][ T6273] should_fail_ex+0x424/0x570 [ 131.673031][ T6273] _copy_from_user+0x2d/0xb0 [ 131.673063][ T6273] copy_msghdr_from_user+0xb3/0x580 [ 131.673099][ T6273] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 131.673125][ T6273] ? __fget_files+0x2a/0x420 [ 131.673153][ T6273] ? __fget_files+0x2a/0x420 [ 131.673186][ T6273] __sys_sendmsg+0x20a/0x360 [ 131.673214][ T6273] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.673292][ T6273] ? do_syscall_64+0xb6/0x230 [ 131.673322][ T6273] do_syscall_64+0xf3/0x230 [ 131.673347][ T6273] ? clear_bhb_loop+0x45/0xa0 [ 131.673372][ T6273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.673392][ T6273] RIP: 0033:0x7fc60158d169 [ 131.673411][ T6273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.673427][ T6273] RSP: 002b:00007fc6024ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.673450][ T6273] RAX: ffffffffffffffda RBX: 00007fc6017a5fa0 RCX: 00007fc60158d169 [ 131.673465][ T6273] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 131.673478][ T6273] RBP: 00007fc6024ae090 R08: 0000000000000000 R09: 0000000000000000 [ 131.673490][ T6273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.673501][ T6273] R13: 0000000000000000 R14: 00007fc6017a5fa0 R15: 00007ffc9cfcb6d8 [ 131.673532][ T6273] [ 132.109047][ T5141] Bluetooth: Unexpected continuation frame (len 10) [ 132.483131][ T6283] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 133.035339][ T6288] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 133.600305][ T6297] capability: warning: `syz.3.100' uses deprecated v2 capabilities in a way that may be insecure [ 133.678770][ T6302] netlink: 68 bytes leftover after parsing attributes in process `syz.2.105'. [ 135.007094][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.014593][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.032082][ T5141] Bluetooth: Unexpected continuation frame (len 10) [ 135.086675][ T6326] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.211609][ T6302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.251922][ T6302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.417490][ T6302] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.430346][ T6302] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.447672][ T6302] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.457029][ T6302] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.533404][ T6324] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 135.690028][ T5890] syz1: Port: 1 Link DOWN [ 136.625175][ T6335] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 136.762181][ T6340] syz.4.114: attempt to access beyond end of device [ 136.762181][ T6340] loop4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 136.777842][ T6340] hfsplus: unable to find HFS+ superblock [ 138.387222][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.412420][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.724839][ T24] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 140.035976][ T6361] syz.2.118 uses obsolete (PF_INET,SOCK_PACKET) [ 140.198000][ T6365] FAULT_INJECTION: forcing a failure. [ 140.198000][ T6365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.224190][ T24] usb 2-1: config 7 has an invalid interface number: 252 but max is 0 [ 140.254863][ T6365] CPU: 1 UID: 0 PID: 6365 Comm: syz.3.122 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 140.254896][ T6365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 140.254908][ T6365] Call Trace: [ 140.254916][ T6365] [ 140.254925][ T6365] dump_stack_lvl+0x241/0x360 [ 140.254962][ T6365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.254989][ T6365] ? __pfx__printk+0x10/0x10 [ 140.255029][ T6365] should_fail_ex+0x424/0x570 [ 140.255057][ T6365] _copy_from_user+0x2d/0xb0 [ 140.255090][ T6365] ucma_write+0x17f/0x430 [ 140.255128][ T6365] ? __pfx_ucma_write+0x10/0x10 [ 140.255164][ T6365] ? bpf_lsm_file_permission+0x9/0x10 [ 140.255189][ T6365] ? rw_verify_area+0x246/0x630 [ 140.255222][ T6365] vfs_writev+0x5ba/0xbc0 [ 140.255245][ T6365] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 140.255282][ T6365] ? __pfx_ucma_write+0x10/0x10 [ 140.255312][ T6365] ? __pfx_vfs_writev+0x10/0x10 [ 140.255353][ T6365] ? __fget_files+0x2a/0x420 [ 140.255380][ T6365] ? __fget_files+0x39d/0x420 [ 140.255401][ T6365] ? __fget_files+0x2a/0x420 [ 140.255434][ T6365] do_writev+0x1b8/0x360 [ 140.255464][ T6365] ? __pfx_do_writev+0x10/0x10 [ 140.255493][ T6365] ? do_syscall_64+0xb6/0x230 [ 140.255522][ T6365] do_syscall_64+0xf3/0x230 [ 140.255548][ T6365] ? clear_bhb_loop+0x45/0xa0 [ 140.255574][ T6365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.255594][ T6365] RIP: 0033:0x7efef858d169 [ 140.255612][ T6365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.255629][ T6365] RSP: 002b:00007efef9395038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 140.255651][ T6365] RAX: ffffffffffffffda RBX: 00007efef87a5fa0 RCX: 00007efef858d169 [ 140.255666][ T6365] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 0000000000000004 [ 140.255679][ T6365] RBP: 00007efef9395090 R08: 0000000000000000 R09: 0000000000000000 [ 140.255691][ T6365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.255703][ T6365] R13: 0000000000000000 R14: 00007efef87a5fa0 R15: 00007fffbf5d41f8 [ 140.255735][ T6365] [ 140.473843][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.481979][ T24] usb 2-1: config 7 has no interface number 0 [ 140.488707][ T24] usb 2-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 140.499915][ T24] usb 2-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 140.510662][ T24] usb 2-1: config 7 interface 252 has no altsetting 0 [ 140.683557][ T24] usb 2-1: string descriptor 0 read error: -22 [ 140.689983][ T24] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 140.699187][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=14 [ 140.712059][ T24] idmouse 2-1:7.252: Unable to find bulk-in endpoint. [ 140.945093][ T24] usb 2-1: USB disconnect, device number 2 [ 141.218505][ T6370] RDS: rds_bind could not find a transport for ::a:0:7f14, load rds_tcp or rds_rdma? [ 141.660234][ T6372] overlayfs: failed to resolve './file1': -2 [ 141.873818][ T5141] Bluetooth: Unexpected continuation frame (len 10) [ 142.010035][ T6375] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 143.128664][ T6388] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 144.572740][ T6400] FAULT_INJECTION: forcing a failure. [ 144.572740][ T6400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.598037][ T6403] netlink: 'syz.2.135': attribute type 21 has an invalid length. [ 144.665335][ T6400] CPU: 1 UID: 0 PID: 6400 Comm: syz.0.134 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 144.665367][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.665380][ T6400] Call Trace: [ 144.665388][ T6400] [ 144.665397][ T6400] dump_stack_lvl+0x241/0x360 [ 144.665434][ T6400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.665463][ T6400] ? __pfx__printk+0x10/0x10 [ 144.665503][ T6400] should_fail_ex+0x424/0x570 [ 144.665531][ T6400] _copy_from_user+0x2d/0xb0 [ 144.665562][ T6400] copy_msghdr_from_user+0xb3/0x580 [ 144.665602][ T6400] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 144.665627][ T6400] ? __fget_files+0x2a/0x420 [ 144.665655][ T6400] ? __fget_files+0x2a/0x420 [ 144.665687][ T6400] __sys_sendmsg+0x20a/0x360 [ 144.665715][ T6400] ? __pfx___sys_sendmsg+0x10/0x10 [ 144.665801][ T6400] ? do_syscall_64+0xb6/0x230 [ 144.665829][ T6400] do_syscall_64+0xf3/0x230 [ 144.665854][ T6400] ? clear_bhb_loop+0x45/0xa0 [ 144.665878][ T6400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.665898][ T6400] RIP: 0033:0x7f867838d169 [ 144.665916][ T6400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.665932][ T6400] RSP: 002b:00007f8679286038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.665955][ T6400] RAX: ffffffffffffffda RBX: 00007f86785a5fa0 RCX: 00007f867838d169 [ 144.665969][ T6400] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000004 [ 144.665981][ T6400] RBP: 00007f8679286090 R08: 0000000000000000 R09: 0000000000000000 [ 144.665993][ T6400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.666005][ T6400] R13: 0000000000000000 R14: 00007f86785a5fa0 R15: 00007ffc12b7caa8 [ 144.666053][ T6400] [ 145.256163][ T6420] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 145.286677][ T6420] netlink: 'syz.0.140': attribute type 10 has an invalid length. [ 145.295237][ T6420] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.302792][ T6420] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.355496][ T6420] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.362798][ T6420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.370411][ T6420] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.377718][ T6420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.410183][ T6420] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 145.608258][ T6424] netlink: 'syz.0.141': attribute type 10 has an invalid length. [ 145.629783][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.637254][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.131367][ T6412] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 146.208431][ T6432] netlink: 32 bytes leftover after parsing attributes in process `syz.0.144'. [ 146.229282][ T6430] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 146.848068][ T6440] netlink: 68 bytes leftover after parsing attributes in process `syz.4.146'. [ 146.906727][ T30] audit: type=1326 audit(1744176842.876:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdaad8d169 code=0x7ffc0000 [ 147.542295][ T30] audit: type=1326 audit(1744176842.886:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdaad8d169 code=0x7ffc0000 [ 147.574948][ T30] audit: type=1326 audit(1744176842.886:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fcdaad8d169 code=0x7ffc0000 [ 147.670103][ T30] audit: type=1326 audit(1744176842.886:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdaad8d169 code=0x7ffc0000 [ 147.696188][ T30] audit: type=1326 audit(1744176842.886:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdaad8d169 code=0x7ffc0000 [ 147.795456][ T30] audit: type=1326 audit(1744176842.896:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcdaad8d169 code=0x7ffc0000 [ 147.824916][ T30] audit: type=1326 audit(1744176842.906:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdaad8d169 code=0x7ffc0000 [ 147.850315][ T30] audit: type=1326 audit(1744176842.906:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdaad8d169 code=0x7ffc0000 [ 147.920151][ T30] audit: type=1326 audit(1744176842.926:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcdaad8d169 code=0x7ffc0000 [ 147.941440][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.952550][ T30] audit: type=1326 audit(1744176842.926:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdaad8d169 code=0x7ffc0000 [ 147.973934][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.314856][ T5889] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 148.613840][ T5937] IPVS: starting estimator thread 0... [ 148.704956][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 148.716775][ T5889] usb 2-1: config 0 has an invalid interface number: 202 but max is 0 [ 148.764858][ T6456] IPVS: using max 24 ests per chain, 57600 per kthread [ 149.625971][ T5889] usb 2-1: config 0 has no interface number 0 [ 149.633039][ T5889] usb 2-1: config 0 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 149.675795][ T5889] usb 2-1: config 0 interface 202 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.409835][ T5889] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 150.424747][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.451438][ T5889] usb 2-1: Product: syz [ 150.746297][ T5889] usb 2-1: Manufacturer: syz [ 150.760208][ T5889] usb 2-1: SerialNumber: syz [ 150.870504][ T5889] usb 2-1: config 0 descriptor?? [ 151.047344][ T5889] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 151.207915][ T5889] usb 2-1: USB disconnect, device number 3 [ 151.215136][ T1103] usb 2-1: Failed to submit usb control message: -71 [ 151.222202][ T1103] usb 2-1: unable to send the bmi data to the device: -71 [ 151.301469][ T1103] usb 2-1: unable to get target info from device [ 151.314758][ T1103] usb 2-1: could not get target info (-71) [ 151.320697][ T1103] usb 2-1: could not probe fw (-71) [ 151.367910][ T6477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 151.516238][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 151.704935][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 151.757093][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.999881][ T6491] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 152.107839][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 152.107884][ T30] audit: type=1800 audit(1744176848.066:20): pid=6491 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.160" name="file0" dev="overlay" ino=210 res=0 errno=0 [ 152.725577][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.744054][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 152.750990][ T10] usb 3-1: New USB device found, idVendor=060b, idProduct=430a, bcdDevice= 0.00 [ 153.019649][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.039129][ T10] usb 3-1: config 0 descriptor?? [ 153.067350][ T6494] FAULT_INJECTION: forcing a failure. [ 153.067350][ T6494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.296796][ T6494] CPU: 0 UID: 0 PID: 6494 Comm: syz.4.161 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 153.296828][ T6494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.296841][ T6494] Call Trace: [ 153.296849][ T6494] [ 153.296858][ T6494] dump_stack_lvl+0x241/0x360 [ 153.296902][ T6494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.296931][ T6494] ? __pfx__printk+0x10/0x10 [ 153.296971][ T6494] should_fail_ex+0x424/0x570 [ 153.296999][ T6494] _copy_from_user+0x2d/0xb0 [ 153.297030][ T6494] __sys_bpf+0x1c5/0x8b0 [ 153.297052][ T6494] ? __pfx___sys_bpf+0x10/0x10 [ 153.297085][ T6494] ? ksys_write+0x275/0x2d0 [ 153.297127][ T6494] __x64_sys_bpf+0x7c/0x90 [ 153.297159][ T6494] do_syscall_64+0xf3/0x230 [ 153.297185][ T6494] ? clear_bhb_loop+0x45/0xa0 [ 153.297209][ T6494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.297229][ T6494] RIP: 0033:0x7fcdaad8d169 [ 153.297248][ T6494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.297264][ T6494] RSP: 002b:00007fcdabbdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 153.297286][ T6494] RAX: ffffffffffffffda RBX: 00007fcdaafa6080 RCX: 00007fcdaad8d169 [ 153.297301][ T6494] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 153.297314][ T6494] RBP: 00007fcdabbdc090 R08: 0000000000000000 R09: 0000000000000000 [ 153.297326][ T6494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.297338][ T6494] R13: 0000000000000001 R14: 00007fcdaafa6080 R15: 00007ffd1f025148 [ 153.297369][ T6494] [ 153.511515][ T6502] netlink: 'syz.1.164': attribute type 10 has an invalid length. [ 153.524833][ T6502] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.532659][ T6502] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.624612][ T6502] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.631903][ T6502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.639555][ T6502] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.646809][ T6502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.673260][ T6502] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 153.690847][ T6506] FAULT_INJECTION: forcing a failure. [ 153.690847][ T6506] name failslab, interval 1, probability 0, space 0, times 1 [ 153.711541][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: syz.3.167 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 153.711571][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.711584][ T6506] Call Trace: [ 153.711593][ T6506] [ 153.711603][ T6506] dump_stack_lvl+0x241/0x360 [ 153.711644][ T6506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.711672][ T6506] ? __pfx__printk+0x10/0x10 [ 153.711704][ T6506] ? __pfx___might_resched+0x10/0x10 [ 153.711733][ T6506] should_fail_ex+0x424/0x570 [ 153.711761][ T6506] should_failslab+0xac/0x100 [ 153.711784][ T6506] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 153.711806][ T6506] ? __alloc_skb+0x1c2/0x480 [ 153.711823][ T6506] ? tcp_current_mss+0x29d/0x4d0 [ 153.711856][ T6506] __alloc_skb+0x1c2/0x480 [ 153.711881][ T6506] ? __pfx___alloc_skb+0x10/0x10 [ 153.711899][ T6506] ? kernel_text_address+0xa7/0xe0 [ 153.711938][ T6506] tcp_stream_alloc_skb+0x3d/0x310 [ 153.711966][ T6506] tcp_sendmsg_locked+0xd96/0x5030 [ 153.712009][ T6506] ? kstrtouint+0xfc/0x190 [ 153.712065][ T6506] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 153.712100][ T6506] ? tcp_sendmsg+0x22/0x50 [ 153.712119][ T6506] ? do_raw_spin_unlock+0x13c/0x8b0 [ 153.712153][ T6506] tcp_sendmsg+0x30/0x50 [ 153.712174][ T6506] __sock_sendmsg+0x1a6/0x270 [ 153.712200][ T6506] __sys_sendto+0x365/0x4c0 [ 153.712233][ T6506] ? __pfx___sys_sendto+0x10/0x10 [ 153.712273][ T6506] ? __fget_files+0x2a/0x420 [ 153.712302][ T6506] ? ksys_write+0x275/0x2d0 [ 153.712338][ T6506] __x64_sys_sendto+0xde/0x100 [ 153.712370][ T6506] do_syscall_64+0xf3/0x230 [ 153.712393][ T6506] ? clear_bhb_loop+0x45/0xa0 [ 153.712415][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.712433][ T6506] RIP: 0033:0x7efef858d169 [ 153.712450][ T6506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.712465][ T6506] RSP: 002b:00007efef9395038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 153.712486][ T6506] RAX: ffffffffffffffda RBX: 00007efef87a5fa0 RCX: 00007efef858d169 [ 153.712499][ T6506] RDX: 00000000000020c8 RSI: 00002000000012c0 RDI: 0000000000000003 [ 153.712511][ T6506] RBP: 00007efef9395090 R08: 0000000000000000 R09: 0000000000000027 [ 153.712523][ T6506] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 153.712533][ T6506] R13: 0000000000000000 R14: 00007efef87a5fa0 R15: 00007fffbf5d41f8 [ 153.712562][ T6506] [ 154.027449][ T10] hid (null): invalid report_size 39569 [ 154.038419][ T10] hid (null): bogus close delimiter [ 154.045734][ T10] hid (null): unknown global tag 0xc [ 154.051548][ T10] hid (null): unknown global tag 0xe [ 154.057887][ T10] hid (null): invalid report_count 23915 [ 154.063654][ T10] hid (null): unknown global tag 0xd [ 154.069215][ T10] hid (null): unknown global tag 0xc [ 154.075052][ T10] hid (null): unknown global tag 0xc [ 154.080417][ T10] hid (null): unknown global tag 0xc3 [ 154.095114][ T10] hid-generic 0003:060B:430A.0001: unexpected long global item [ 154.104147][ T10] hid-generic 0003:060B:430A.0001: probe with driver hid-generic failed with error -22 [ 154.235091][ T96] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 154.399289][ T96] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 154.410473][ T96] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 154.419660][ T96] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.432621][ T96] usb 1-1: config 0 descriptor?? [ 154.442808][ T6510] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 154.459420][ T96] hub 1-1:0.0: USB hub found [ 154.642931][ T6517] FAULT_INJECTION: forcing a failure. [ 154.642931][ T6517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.679516][ T96] hub 1-1:0.0: 2 ports detected [ 154.680449][ T6517] CPU: 0 UID: 0 PID: 6517 Comm: syz.3.170 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 154.680480][ T6517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 154.680493][ T6517] Call Trace: [ 154.680503][ T6517] [ 154.680512][ T6517] dump_stack_lvl+0x241/0x360 [ 154.680553][ T6517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.680584][ T6517] ? __pfx__printk+0x10/0x10 [ 154.680627][ T6517] should_fail_ex+0x424/0x570 [ 154.680657][ T6517] _copy_to_user+0x31/0xb0 [ 154.680693][ T6517] simple_read_from_buffer+0xc4/0x170 [ 154.680722][ T6517] proc_fail_nth_read+0x1ef/0x260 [ 154.680767][ T6517] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 154.680799][ T6517] ? rw_verify_area+0x246/0x630 [ 154.680829][ T6517] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 154.680860][ T6517] vfs_read+0x21f/0xb90 [ 154.680896][ T6517] ? __pfx___mutex_lock+0x10/0x10 [ 154.680925][ T6517] ? __pfx_vfs_read+0x10/0x10 [ 154.680958][ T6517] ? __fget_files+0x2a/0x420 [ 154.680986][ T6517] ? __fget_files+0x39d/0x420 [ 154.681009][ T6517] ? __fget_files+0x2a/0x420 [ 154.681046][ T6517] ksys_read+0x19d/0x2d0 [ 154.681082][ T6517] ? __pfx_ksys_read+0x10/0x10 [ 154.681121][ T6517] ? do_syscall_64+0xb6/0x230 [ 154.681151][ T6517] do_syscall_64+0xf3/0x230 [ 154.681193][ T6517] ? clear_bhb_loop+0x45/0xa0 [ 154.681221][ T6517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.681244][ T6517] RIP: 0033:0x7efef858bb7c [ 154.681264][ T6517] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 154.681284][ T6517] RSP: 002b:00007efef9374030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 154.681309][ T6517] RAX: ffffffffffffffda RBX: 00007efef87a6080 RCX: 00007efef858bb7c [ 154.681325][ T6517] RDX: 000000000000000f RSI: 00007efef93740a0 RDI: 0000000000000004 [ 154.681340][ T6517] RBP: 00007efef9374090 R08: 0000000000000000 R09: 0000000000000000 [ 154.681354][ T6517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.681368][ T6517] R13: 0000000000000000 R14: 00007efef87a6080 R15: 00007fffbf5d41f8 [ 154.681402][ T6517] [ 154.751631][ T6475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.940308][ T6475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.201487][ T5890] usb 3-1: USB disconnect, device number 3 [ 155.211662][ T96] hub 1-1:0.0: set hub depth failed [ 155.533441][ T6527] tipc: Started in network mode [ 155.538675][ T6527] tipc: Node identity ac14140f, cluster identity 4711 [ 155.549178][ T6527] tipc: New replicast peer: 255.255.255.255 [ 155.558776][ T6527] tipc: Enabled bearer , priority 10 [ 156.243626][ T24] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 156.545268][ T96] usb 1-1: Failed to suspend device, error -71 [ 156.564128][ T96] usb 1-1: USB disconnect, device number 8 [ 156.686352][ T5888] tipc: Node number set to 2886997007 [ 157.205420][ T96] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 157.575082][ T96] usb 2-1: Using ep0 maxpacket: 32 [ 157.586833][ T96] usb 2-1: config 0 has an invalid interface number: 202 but max is 0 [ 157.596730][ T96] usb 2-1: config 0 has no interface number 0 [ 157.604459][ T96] usb 2-1: config 0 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 157.711650][ T96] usb 2-1: config 0 interface 202 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.991178][ T96] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 158.414173][ T96] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.424858][ T96] usb 2-1: Product: syz [ 158.429087][ T96] usb 2-1: Manufacturer: syz [ 158.433911][ T96] usb 2-1: SerialNumber: syz [ 158.451976][ T96] usb 2-1: config 0 descriptor?? [ 158.481632][ T96] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 159.113452][ T96] usb 2-1: USB disconnect, device number 4 [ 159.136231][ T1103] usb 2-1: Failed to read usb control message: -71 [ 159.320199][ T1103] usb 2-1: Unable to read the bmi data from the device: -71 [ 159.649734][ T1103] usb 2-1: unable to get target info from device [ 159.666199][ T6568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'. [ 159.684818][ T1103] usb 2-1: could not get target info (-71) [ 159.695634][ T1103] usb 2-1: could not probe fw (-71) [ 160.166134][ T5887] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 160.564744][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 160.586035][ T5887] usb 3-1: unable to get BOS descriptor or descriptor too short [ 160.654587][ T5887] usb 3-1: config 3 has an invalid interface number: 7 but max is 1 [ 160.799943][ T5887] usb 3-1: config 3 has no interface number 0 [ 160.913605][ T5887] usb 3-1: config 3 interface 1 altsetting 6 endpoint 0xE has invalid wMaxPacketSize 0 [ 161.071621][ T5887] usb 3-1: config 3 interface 7 has no altsetting 0 [ 161.348830][ T5887] usb 3-1: config 3 interface 1 has no altsetting 0 [ 161.374022][ T5887] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=e3.e2 [ 161.513934][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.524089][ T5887] usb 3-1: Product: syz [ 161.528799][ T5887] usb 3-1: Manufacturer: syz [ 161.549293][ T5887] usb 3-1: SerialNumber: syz [ 161.637389][ T5889] IPVS: starting estimator thread 0... [ 161.724934][ T6587] IPVS: using max 24 ests per chain, 57600 per kthread [ 162.024942][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 162.863909][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.884839][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.917177][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 162.932413][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 162.960957][ T24] usb 4-1: SerialNumber: syz [ 163.027013][ T24] usb 4-1: can't set config #1, error -71 [ 163.078669][ T24] usb 4-1: USB disconnect, device number 4 [ 163.370124][ T6605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.378232][ T5887] xr_serial 3-1:3.7: xr_serial converter detected [ 163.394616][ T5887] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 163.401175][ T5887] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 163.441159][ T5887] usb 3-1: USB disconnect, device number 4 [ 163.462654][ T5887] xr_serial 3-1:3.7: device disconnected [ 163.869288][ T6610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 164.945830][ T6600] dns_resolver: Unsupported server list version (0) [ 165.325873][ T6630] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 165.356601][ T6630] netlink: 'syz.0.201': attribute type 10 has an invalid length. [ 170.117354][ T6695] FAULT_INJECTION: forcing a failure. [ 170.117354][ T6695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.174952][ T6695] CPU: 0 UID: 0 PID: 6695 Comm: syz.2.205 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 170.174985][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.174998][ T6695] Call Trace: [ 170.175007][ T6695] [ 170.175016][ T6695] dump_stack_lvl+0x241/0x360 [ 170.175055][ T6695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.175085][ T6695] ? __pfx__printk+0x10/0x10 [ 170.175127][ T6695] should_fail_ex+0x424/0x570 [ 170.175154][ T6695] _copy_from_user+0x2d/0xb0 [ 170.175186][ T6695] copy_msghdr_from_user+0xb3/0x580 [ 170.175222][ T6695] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 170.175257][ T6695] ? __fget_files+0x2a/0x420 [ 170.175286][ T6695] ? __fget_files+0x2a/0x420 [ 170.175320][ T6695] __sys_sendmsg+0x20a/0x360 [ 170.175349][ T6695] ? __pfx___sys_sendmsg+0x10/0x10 [ 170.175430][ T6695] ? do_syscall_64+0xb6/0x230 [ 170.175459][ T6695] do_syscall_64+0xf3/0x230 [ 170.175485][ T6695] ? clear_bhb_loop+0x45/0xa0 [ 170.175512][ T6695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.175532][ T6695] RIP: 0033:0x7f122658d169 [ 170.175551][ T6695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.175568][ T6695] RSP: 002b:00007f122743f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.175591][ T6695] RAX: ffffffffffffffda RBX: 00007f12267a5fa0 RCX: 00007f122658d169 [ 170.175606][ T6695] RDX: 0000000000000000 RSI: 0000200000001e00 RDI: 0000000000000003 [ 170.175619][ T6695] RBP: 00007f122743f090 R08: 0000000000000000 R09: 0000000000000000 [ 170.175632][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.175644][ T6695] R13: 0000000000000000 R14: 00007f12267a5fa0 R15: 00007ffe22c0c1b8 [ 170.175676][ T6695] [ 171.860534][ T6707] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 172.927273][ T6717] FAULT_INJECTION: forcing a failure. [ 172.927273][ T6717] name failslab, interval 1, probability 0, space 0, times 0 [ 172.975028][ T6717] CPU: 0 UID: 0 PID: 6717 Comm: syz.0.213 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 172.975061][ T6717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 172.975074][ T6717] Call Trace: [ 172.975083][ T6717] [ 172.975091][ T6717] dump_stack_lvl+0x241/0x360 [ 172.975129][ T6717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.975158][ T6717] ? __pfx__printk+0x10/0x10 [ 172.975190][ T6717] ? __pfx___might_resched+0x10/0x10 [ 172.975219][ T6717] should_fail_ex+0x424/0x570 [ 172.975247][ T6717] should_failslab+0xac/0x100 [ 172.975271][ T6717] __kmalloc_noprof+0xdf/0x4d0 [ 172.975289][ T6717] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 172.975310][ T6717] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 172.975336][ T6717] tomoyo_realpath_from_path+0xcf/0x5e0 [ 172.975370][ T6717] tomoyo_path_number_perm+0x245/0x790 [ 172.975403][ T6717] ? tomoyo_path_number_perm+0x215/0x790 [ 172.975434][ T6717] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 172.975471][ T6717] ? ksys_write+0x24e/0x2d0 [ 172.975508][ T6717] ? __lock_acquire+0xad5/0xd80 [ 172.975547][ T6717] ? __fget_files+0x2a/0x420 [ 172.975570][ T6717] ? __fget_files+0x2a/0x420 [ 172.975594][ T6717] ? __fget_files+0x2a/0x420 [ 172.975617][ T6717] security_file_ioctl+0xc6/0x2a0 [ 172.975644][ T6717] __se_sys_ioctl+0x46/0x160 [ 172.975670][ T6717] do_syscall_64+0xf3/0x230 [ 172.975692][ T6717] ? clear_bhb_loop+0x45/0xa0 [ 172.975712][ T6717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.975754][ T6717] RIP: 0033:0x7f867838d169 [ 172.975769][ T6717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.975782][ T6717] RSP: 002b:00007f8679286038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.975801][ T6717] RAX: ffffffffffffffda RBX: 00007f86785a5fa0 RCX: 00007f867838d169 [ 172.975813][ T6717] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 172.975823][ T6717] RBP: 00007f8679286090 R08: 0000000000000000 R09: 0000000000000000 [ 172.975834][ T6717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.975843][ T6717] R13: 0000000000000000 R14: 00007f86785a5fa0 R15: 00007ffc12b7caa8 [ 172.975868][ T6717] [ 172.975882][ T6717] ERROR: Out of memory at tomoyo_realpath_from_path. [ 173.540536][ T6728] tipc: Enabling of bearer rejected, already enabled [ 174.644910][ T6734] netlink: 72 bytes leftover after parsing attributes in process `syz.2.216'. [ 175.996873][ T6746] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.337020][ T6747] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 176.678090][ T6744] FAULT_INJECTION: forcing a failure. [ 176.678090][ T6744] name failslab, interval 1, probability 0, space 0, times 0 [ 176.735671][ T6744] CPU: 0 UID: 0 PID: 6744 Comm: syz.1.215 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 176.735703][ T6744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 176.735716][ T6744] Call Trace: [ 176.735723][ T6744] [ 176.735732][ T6744] dump_stack_lvl+0x241/0x360 [ 176.735768][ T6744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.735795][ T6744] ? __pfx__printk+0x10/0x10 [ 176.735827][ T6744] ? __pfx___might_resched+0x10/0x10 [ 176.735862][ T6744] should_fail_ex+0x424/0x570 [ 176.735889][ T6744] should_failslab+0xac/0x100 [ 176.735916][ T6744] kmem_cache_alloc_noprof+0x78/0x390 [ 176.735937][ T6744] ? mas_alloc_nodes+0x267/0x7e0 [ 176.735966][ T6744] mas_alloc_nodes+0x267/0x7e0 [ 176.736002][ T6744] mas_preallocate+0x5ea/0x950 [ 176.736030][ T6744] ? __pfx_mas_preallocate+0x10/0x10 [ 176.736048][ T6744] ? __lock_acquire+0xad5/0xd80 [ 176.736074][ T6744] ? __asan_memset+0x23/0x50 [ 176.736098][ T6744] ? init_multi_vma_prep+0x383/0x460 [ 176.736123][ T6744] commit_merge+0x25a/0x730 [ 176.736162][ T6744] ? __pfx_commit_merge+0x10/0x10 [ 176.736198][ T6744] ? dup_anon_vma+0x7d/0x2b0 [ 176.736226][ T6744] ? vma_merge_existing_range+0xba5/0x16c0 [ 176.736252][ T6744] vma_merge_existing_range+0x1226/0x16c0 [ 176.736281][ T6744] ? vma_merge_existing_range+0x801/0x16c0 [ 176.736309][ T6744] ? __pfx_vma_merge_existing_range+0x10/0x10 [ 176.736343][ T6744] vma_modify+0x76/0x390 [ 176.736376][ T6744] vma_modify_flags+0x3b2/0x430 [ 176.736412][ T6744] ? __pfx_vma_modify_flags+0x10/0x10 [ 176.736468][ T6744] mlock_fixup+0x21a/0x350 [ 176.736507][ T6744] apply_mlockall_flags+0x309/0x410 [ 176.736542][ T6744] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 176.736582][ T6744] ? __do_sys_munlockall+0x5a/0x220 [ 176.736627][ T6744] __do_sys_munlockall+0x10a/0x220 [ 176.736662][ T6744] do_syscall_64+0xf3/0x230 [ 176.736688][ T6744] ? clear_bhb_loop+0x45/0xa0 [ 176.736712][ T6744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.736732][ T6744] RIP: 0033:0x7fc60158d169 [ 176.736751][ T6744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.736767][ T6744] RSP: 002b:00007fc60248d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 176.736789][ T6744] RAX: ffffffffffffffda RBX: 00007fc6017a6080 RCX: 00007fc60158d169 [ 176.736803][ T6744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.736814][ T6744] RBP: 00007fc60248d090 R08: 0000000000000000 R09: 0000000000000000 [ 176.736827][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.736839][ T6744] R13: 0000000000000000 R14: 00007fc6017a6080 R15: 00007ffc9cfcb6d8 [ 176.736878][ T6744] [ 176.737178][ T6744] vmg ffffc9001b607c40 dumped because: VM_WARN_ON_VMG(prev && start <= prev->vm_start) [ 177.031627][ T6758] FAULT_INJECTION: forcing a failure. [ 177.031627][ T6758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.068583][ T6758] CPU: 0 UID: 0 PID: 6758 Comm: syz.2.223 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 177.068616][ T6758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 177.068629][ T6758] Call Trace: [ 177.068638][ T6758] [ 177.068647][ T6758] dump_stack_lvl+0x241/0x360 [ 177.068685][ T6758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.068714][ T6758] ? __pfx__printk+0x10/0x10 [ 177.068753][ T6758] should_fail_ex+0x424/0x570 [ 177.068780][ T6758] _copy_to_user+0x31/0xb0 [ 177.068814][ T6758] simple_read_from_buffer+0xc4/0x170 [ 177.068842][ T6758] proc_fail_nth_read+0x1ef/0x260 [ 177.068871][ T6758] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.068902][ T6758] ? rw_verify_area+0x246/0x630 [ 177.068928][ T6758] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.068956][ T6758] vfs_read+0x21f/0xb90 [ 177.068989][ T6758] ? __pfx___mutex_lock+0x10/0x10 [ 177.069016][ T6758] ? __pfx_vfs_read+0x10/0x10 [ 177.069048][ T6758] ? __fget_files+0x2a/0x420 [ 177.069073][ T6758] ? __fget_files+0x39d/0x420 [ 177.069094][ T6758] ? __fget_files+0x2a/0x420 [ 177.069128][ T6758] ksys_read+0x19d/0x2d0 [ 177.069158][ T6758] ? __pfx_ksys_read+0x10/0x10 [ 177.069193][ T6758] ? do_syscall_64+0xb6/0x230 [ 177.069222][ T6758] do_syscall_64+0xf3/0x230 [ 177.069247][ T6758] ? clear_bhb_loop+0x45/0xa0 [ 177.069272][ T6758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.069291][ T6758] RIP: 0033:0x7f122658bb7c [ 177.069310][ T6758] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 177.069326][ T6758] RSP: 002b:00007f122741e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 177.069348][ T6758] RAX: ffffffffffffffda RBX: 00007f12267a6080 RCX: 00007f122658bb7c [ 177.069363][ T6758] RDX: 000000000000000f RSI: 00007f122741e0a0 RDI: 0000000000000004 [ 177.069376][ T6758] RBP: 00007f122741e090 R08: 0000000000000000 R09: 0000000000000000 [ 177.069388][ T6758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.069400][ T6758] R13: 0000000000000000 R14: 00007f12267a6080 R15: 00007ffe22c0c1b8 [ 177.069432][ T6758] [ 177.104942][ T6744] vmg ffffc9001b607c40 state: mm ffff888030314600 pgoff 2f0 [ 177.104942][ T6744] vmi ffffc9001b607de0 [200000ced000,200000eb0000) [ 177.104942][ T6744] prev ffff888034b6f280 middle ffff888034b6f280 next 0000000000000000 target 0000000000000000 [ 177.104942][ T6744] start 200000ced000 end 200000eb0000 flags 82000fd [ 177.104942][ T6744] file ffff8880334801c0 anon_vma 0000000000000000 policy 0000000000000000 [ 177.104942][ T6744] uffd_ctx 0000000000000000 [ 177.104942][ T6744] anon_name 0000000000000000 [ 177.104942][ T6744] state 0 [ 177.104942][ T6744] just_expand 0 [ 177.104942][ T6744] __adjust_middle_start 0 __adjust_next_start 0 [ 177.104942][ T6744] __remove_middle 0 __remove_next 0 [ 177.200786][ T6765] FAULT_INJECTION: forcing a failure. [ 177.200786][ T6765] name failslab, interval 1, probability 0, space 0, times 0 [ 177.621847][ T6744] vmg ffffc9001b607c40 mm: [ 177.644866][ T6744] mm ffff888030314600 task_size 140737488351232 [ 177.644866][ T6744] mmap_base 140488418750464 mmap_legacy_base 47144376418304 [ 177.644866][ T6744] pgd ffff888030c74000 mm_users 3 mm_count 1 pgtables_bytes 147456 map_count 40 [ 177.644866][ T6744] hiwater_rss 1bea hiwater_vm 5fc7 total_vm 5fc5 locked_vm 30d [ 177.644866][ T6744] pinned_vm 0 data_vm 15db exec_vm fa2 stack_vm 21 [ 177.644866][ T6744] start_code 7fc601448000 end_code 7fc6015e9529 start_data 7fc601780000 end_data 7fc601780000 [ 177.644866][ T6744] start_brk 5555798b3000 brk 5555798e7000 start_stack 7ffc9cfcbf40 [ 177.644866][ T6744] arg_start 7ffc9cfcdf6d arg_end 7ffc9cfcdf81 env_start 7ffc9cfcdf81 env_end 7ffc9cfcdfe9 [ 177.644866][ T6744] binfmt ffffffff8eeb2680 flags 800007fd [ 177.644866][ T6744] ioctx_table 0000000000000000 [ 177.644866][ T6744] owner ffff888011f08000 exe_file ffff888032d0fc00 [ 177.644866][ T6744] notifier_subscriptions 0000000000000000 [ 177.644866][ T6744] numa_next_scan 4294954518 numa_scan_offset 0 numa_scan_seq 0 [ 177.644866][ T6744] tlb_flush_pending 0 [ 177.644866][ T6744] def_flags: 0x0() [ 177.809385][ T6765] CPU: 0 UID: 0 PID: 6765 Comm: syz.4.221 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 177.809418][ T6765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 177.809431][ T6765] Call Trace: [ 177.809440][ T6765] [ 177.809449][ T6765] dump_stack_lvl+0x241/0x360 [ 177.809489][ T6765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.809520][ T6765] ? __pfx__printk+0x10/0x10 [ 177.809553][ T6765] ? __pfx___might_resched+0x10/0x10 [ 177.809583][ T6765] should_fail_ex+0x424/0x570 [ 177.809612][ T6765] should_failslab+0xac/0x100 [ 177.809636][ T6765] __kmalloc_noprof+0xdf/0x4d0 [ 177.809657][ T6765] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 177.809678][ T6765] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 177.809712][ T6765] tomoyo_realpath_from_path+0xcf/0x5e0 [ 177.809748][ T6765] tomoyo_path_number_perm+0x245/0x790 [ 177.809783][ T6765] ? tomoyo_path_number_perm+0x215/0x790 [ 177.809816][ T6765] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 177.809853][ T6765] ? ksys_write+0x24e/0x2d0 [ 177.809891][ T6765] ? __lock_acquire+0xad5/0xd80 [ 177.809932][ T6765] ? __fget_files+0x2a/0x420 [ 177.809955][ T6765] ? __fget_files+0x2a/0x420 [ 177.809983][ T6765] ? __fget_files+0x2a/0x420 [ 177.810013][ T6765] security_file_ioctl+0xc6/0x2a0 [ 177.810128][ T6765] __se_sys_ioctl+0x46/0x160 [ 177.810163][ T6765] do_syscall_64+0xf3/0x230 [ 177.810190][ T6765] ? clear_bhb_loop+0x45/0xa0 [ 177.810216][ T6765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.810237][ T6765] RIP: 0033:0x7fcdaad8d169 [ 177.810256][ T6765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.810277][ T6765] RSP: 002b:00007fcdabbdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.810300][ T6765] RAX: ffffffffffffffda RBX: 00007fcdaafa6080 RCX: 00007fcdaad8d169 [ 177.810316][ T6765] RDX: 0000000000000001 RSI: 000000000000540b RDI: 0000000000000003 [ 177.810329][ T6765] RBP: 00007fcdabbdc090 R08: 0000000000000000 R09: 0000000000000000 [ 177.810342][ T6765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.810354][ T6765] R13: 0000000000000000 R14: 00007fcdaafa6080 R15: 00007ffd1f025148 [ 177.810387][ T6765] [ 177.810541][ T6765] ERROR: Out of memory at tomoyo_realpath_from_path. [ 178.055069][ T6744] vmg ffffc9001b607c40 prev: [ 178.059750][ T6744] vma ffff888034b6f280 start 0000200000ced000 end 0000200000eb0000 mm ffff888030314600 [ 178.059750][ T6744] prot 25 anon_vma 0000000000000000 vm_ops ffffffff8c549d80 [ 178.059750][ T6744] pgoff 2f0 file ffff8880334801c0 private_data 0000000000000000 [ 178.059750][ T6744] refcnt 1 [ 178.059750][ T6744] flags: 0x82020fd(read|exec|shared|mayread|maywrite|mayexec|mayshare|locked|noreserve|softdirty) [ 178.100761][ T6744] vmg ffffc9001b607c40 middle: [ 178.225824][ T6744] vma ffff888034b6f280 start 0000200000ced000 end 0000200000eb0000 mm ffff888030314600 [ 178.225824][ T6744] prot 25 anon_vma 0000000000000000 vm_ops ffffffff8c549d80 [ 178.225824][ T6744] pgoff 2f0 file ffff8880334801c0 private_data 0000000000000000 [ 178.225824][ T6744] refcnt 1 [ 178.225824][ T6744] flags: 0x82020fd(read|exec|shared|mayread|maywrite|mayexec|mayshare|locked|noreserve|softdirty) [ 178.289536][ T6744] vmg ffffc9001b607c40 next: (NULL) [ 178.304815][ T6744] vmg ffffc9001b607c40 vmi: [ 178.350576][ T6744] MAS: tree=ffff888030314640 enode=ffff8880276d840c [ 178.351163][ T6744] (ma_active) [ 178.401763][ T6744] Store Type: [ 178.405956][ T6744] node_store [ 178.428845][ T6744] [2/8] index=200000ced000 last=200000eaffff [ 178.436659][ T6744] min=2000009fd000 max=5555798d4fff alloc=0000000000000000, depth=1, flags=0 [ 178.438656][ T6775] No such timeout policy "syz1" [ 178.472541][ T6744] maple_tree(ffff888030314640) flags 30B, height 2 root ffff8880276d9c1e [ 178.654517][ T6778] [U]  [ 178.658071][ T6778] [U] K{ [ 178.661233][ T6778] [U] T 1ŠFFˊ`GJǘGO/MC [ 178.668816][ T6778] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 178.685212][ T6778] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 178.696691][ T6778] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 178.736023][ T6778] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 178.760995][ T6778] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 178.772754][ T6778] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 178.794094][ T6778] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 178.902661][ T6778] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 178.914818][ T6778] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 178.928650][ T6778] [U] 22Ʃ۩X?0;3U [ 178.935275][ T6778] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 178.963975][ T6778] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 178.975615][ T6778] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 178.985681][ T6778] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 178.996654][ T6778] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 179.009236][ T6778] [U] EC [ 179.015745][ T6778] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 179.190830][ T6774] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 179.789662][ T6744] 0-ffffffffffffffff: node ffff8880276d9c00 depth 0 type 3 parent ffff888030314641 contents: 1fe4cfe9f000 3555788b2000 2a7085b10000 18f000 ffff800363032000 0 0 0 0 0 | 04 04| ffff8880276d960c 2000009FCFFF ffff8880276d840c 5555798D4FFF ffff888061be380c 7FC6013FFFFF ffff88803506740c 7FC60246DFFF ffff88803506700c FFFFFFFFFFFFFFFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 179.879963][ T6744] 0-2000009fcfff: node ffff8880276d9600 depth 1 type 1 parent ffff8880276d9c06 contents: 0000000000000000 110C22FFFF ffff8880349b1000 110E22FFFF 0000000000000000 1B3011FFFF ffff8880349b1140 1B3015FFFF 0000000000000000 1FFFFFFFEFFF ffff8880349b1280 1FFFFFFFFFFF ffff888034953280 20000012FFFF ffff888079154b40 20000092FFFF ffff888079154a00 2000009FCFFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 179.924399][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.974863][ T6744] 0-110c22ffff: 0000000000000000 [ 180.024342][ T6744] 110c230000-110e22ffff: ffff8880349b1000 [ 180.218749][ T6744] 110e230000-1b3011ffff: 0000000000000000 [ 180.234501][ T6744] 1b30120000-1b3015ffff: ffff8880349b1140 [ 180.264238][ T6785] tipc: Started in network mode [ 180.269851][ T6785] tipc: Node identity ac14140f, cluster identity 4711 [ 180.270982][ T6744] 1b30160000-1fffffffefff: [ 180.277194][ T6785] tipc: New replicast peer: 255.255.255.255 [ 180.290331][ T6785] tipc: Enabled bearer , priority 10 [ 180.297188][ T6744] 0000000000000000 [ 180.319600][ T6744] 1ffffffff000-1fffffffffff: ffff8880349b1280 [ 180.331080][ T6744] 200000000000-20000012ffff: ffff888034953280 [ 180.338970][ T6744] 200000130000-20000092ffff: ffff888079154b40 [ 180.349299][ T6744] 200000930000-2000009fcfff: ffff888079154a00 [ 180.357012][ T6744] 2000009fd000-5555798d4fff: node ffff8880276d8400 depth 1 type 1 parent ffff8880276d9c0e contents: ffff888079154c80 200000CEAFFF 0000000000000000 200000CECFFF ffff888034b6f280 200000EAFFFF ffff888079154dc0 200000EB2FFF ffff888034b6f3c0 200000FFCFFF ffff8880790cbb40 200000FFFFFF ffff8880349b1500 200001000FFF 0000000000000000 5555798B2FFF ffff8880349b1640 5555798D4FFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 180.423565][ T6744] 2000009fd000-200000ceafff: ffff888079154c80 [ 180.431972][ T6744] 200000ceb000-200000cecfff: 0000000000000000 [ 180.440201][ T6744] 200000ced000-200000eaffff: ffff888034b6f280 [ 180.447001][ T6744] 200000eb0000-200000eb2fff: ffff888079154dc0 [ 180.453613][ T6744] 200000eb3000-200000ffcfff: ffff888034b6f3c0 [ 180.460261][ T6744] 200000ffd000-200000ffffff: ffff8880790cbb40 [ 180.474396][ T6744] 200001000000-200001000fff: ffff8880349b1500 [ 180.493870][ T6744] 200001001000-5555798b2fff: 0000000000000000 [ 180.514328][ T6744] 5555798b3000-5555798d4fff: ffff8880349b1640 [ 180.568485][ T6744] 5555798d5000-7fc6013fffff: node ffff888061be3800 depth 1 type 1 parent ffff8880276d9c16 contents: ffff8880349b1780 5555798E6FFF 0000000000000000 7FC5FF3F6FFF ffff8880349b18c0 7FC5FF3F7FFF ffff8880349b1a00 7FC5FFBF7FFF ffff8880349b1b40 7FC5FFBF8FFF ffff8880349b1c80 7FC6003F8FFF ffff8880349b1dc0 7FC6003FAFFF ffff88804e384000 7FC6007FAFFF ffff88804e384140 7FC6007FCFFF ffff88804e384280 7FC600BFCFFF ffff88802a6d4780 7FC600BFEFFF ffff88802a6d48c0 7FC600FFEFFF ffff888028f36b40 7FC600FFFFFF ffff888028f36c80 7FC6013FFFFF 0000000000000000 0 000000000000000d [ 180.620868][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.645070][ T6744] 5555798d5000-5555798e6fff: ffff8880349b1780 [ 180.651691][ T6744] 5555798e7000-7fc5ff3f6fff: 0000000000000000 [ 180.658336][ T6744] 7fc5ff3f7000-7fc5ff3f7fff: ffff8880349b18c0 [ 180.675004][ T6744] 7fc5ff3f8000-7fc5ffbf7fff: ffff8880349b1a00 [ 180.692428][ T6744] 7fc5ffbf8000-7fc5ffbf8fff: ffff8880349b1b40 [ 180.700808][ T6744] 7fc5ffbf9000-7fc6003f8fff: ffff8880349b1c80 [ 180.707714][ T6744] 7fc6003f9000-7fc6003fafff: ffff8880349b1dc0 [ 180.714229][ T6744] 7fc6003fb000-7fc6007fafff: ffff88804e384000 [ 180.721138][ T6744] 7fc6007fb000-7fc6007fcfff: ffff88804e384140 [ 180.729317][ T6744] 7fc6007fd000-7fc600bfcfff: ffff88804e384280 [ 180.736758][ T6744] 7fc600bfd000-7fc600bfefff: ffff88802a6d4780 [ 180.743250][ T6744] 7fc600bff000-7fc600ffefff: ffff88802a6d48c0 [ 180.750444][ T6744] 7fc600fff000-7fc600ffffff: ffff888028f36b40 [ 180.757752][ T6744] 7fc601000000-7fc6013fffff: ffff888028f36c80 [ 180.764414][ T6744] 7fc601400000-7fc60246dfff: node ffff888035067400 depth 1 type 1 parent ffff8880276d9c1e contents: ffff888028f36dc0 7FC601447FFF ffff888034e40b40 7FC6015E9FFF ffff888034e40140 7FC601695FFF ffff888025ef1140 7FC601775FFF ffff888025ef1280 7FC60177EFFF 0000000000000000 7FC60177FFFF ffff888032321500 7FC6022DDFFF 0000000000000000 7FC60246CFFF ffff888034953c80 7FC60246DFFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 180.810838][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.825172][ T6744] 7fc601400000-7fc601447fff: ffff888028f36dc0 [ 180.831669][ T6744] 7fc601448000-7fc6015e9fff: ffff888034e40b40 [ 180.838709][ T6744] 7fc6015ea000-7fc601695fff: ffff888034e40140 [ 180.845552][ T6744] 7fc601696000-7fc601775fff: ffff888025ef1140 [ 180.852248][ T6744] 7fc601776000-7fc60177efff: ffff888025ef1280 [ 180.859327][ T6744] 7fc60177f000-7fc60177ffff: 0000000000000000 [ 180.867261][ T6744] 7fc601780000-7fc6022ddfff: ffff888032321500 [ 180.947324][ T6744] 7fc6022de000-7fc60246cfff: 0000000000000000 [ 180.953998][ T6744] 7fc60246d000-7fc60246dfff: ffff888034953c80 [ 181.031800][ T6744] 7fc60246e000-ffffffffffffffff: node ffff888035067000 depth 1 type 1 parent ffff8880276d9c26 contents: ffff8880790cb8c0 7FC60248DFFF ffff8880349533c0 7FC60248EFFF ffff8880790cb780 7FC6024AEFFF ffff8880336e7000 7FC6024B2FFF ffff8880336e7280 7FC6024B4FFF ffff8880790cb500 7FC6024B6FFF 0000000000000000 7FFC9CFACFFF ffff8880790cb640 7FFC9CFCDFFF 0000000000000000 FFFFFFFFFFFFFFFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 181.263897][ T6744] 7fc60246e000-7fc60248dfff: ffff8880790cb8c0 [ 181.340524][ T6744] 7fc60248e000-7fc60248efff: ffff8880349533c0 [ 181.373216][ T24] tipc: Node number set to 2886997007 [ 181.855055][ T6744] 7fc60248f000-7fc6024aefff: ffff8880790cb780 [ 181.861632][ T6744] 7fc6024af000-7fc6024b2fff: ffff8880336e7000 [ 182.016161][ T6800] netlink: ct family unspecified [ 182.030027][ T6800] openvswitch: netlink: Actions may not be safe on all matching packets [ 182.272421][ T6744] 7fc6024b3000-7fc6024b4fff: ffff8880336e7280 [ 182.917129][ T6744] 7fc6024b5000-7fc6024b6fff: ffff8880790cb500 [ 182.923653][ T6744] 7fc6024b7000-7ffc9cfacfff: 0000000000000000 [ 183.042257][ T6744] 7ffc9cfad000-7ffc9cfcdfff: ffff8880790cb640 [ 183.050795][ T6744] 7ffc9cfce000-ffffffffffffffff: 0000000000000000 [ 183.155305][ T6744] ------------[ cut here ]------------ [ 183.160862][ T6744] WARNING: CPU: 0 PID: 6744 at mm/vma.c:759 vma_merge_existing_range+0x1390/0x16c0 [ 183.170356][ T6744] Modules linked in: [ 183.175023][ T6744] CPU: 0 UID: 0 PID: 6744 Comm: syz.1.215 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 183.187177][ T6744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.197592][ T6744] RIP: 0010:vma_merge_existing_range+0x1390/0x16c0 [ 183.204148][ T6744] Code: e9 ff ef ff ff e8 40 7e a7 ff 90 0f 0b 90 e9 f3 ee ff ff e8 32 7e a7 ff 48 8b 7c 24 08 48 c7 c6 00 54 56 8c e8 f1 94 f1 ff 90 <0f> 0b 90 e9 68 ef ff ff e8 13 7e a7 ff e9 cc f0 ff ff e8 09 7e a7 [ 183.224618][ T6744] RSP: 0018:ffffc9001b607a60 EFLAGS: 00010286 [ 183.230873][ T6744] RAX: ffffffff8c20bff5 RBX: 0000200000ced000 RCX: ffff88807e020000 [ 183.238988][ T6744] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 183.247072][ T6744] RBP: ffffc9001b607b90 R08: ffffffff8c20bef0 R09: 1ffff920036c0eb4 [ 183.255419][ T6744] R10: dffffc0000000000 R11: fffff520036c0eb5 R12: 0000200000eb0000 [ 183.263802][ T6744] R13: ffffc9001b607c40 R14: ffffc9001b607c60 R15: 0000200000ced000 [ 183.272313][ T6744] FS: 00007fc60248d6c0(0000) GS:ffff888124fc9000(0000) knlGS:0000000000000000 [ 183.281521][ T6744] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 183.288862][ T6744] CR2: 000000110c352cb8 CR3: 0000000030c74000 CR4: 00000000003526f0 [ 183.297072][ T6744] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 183.305171][ T6744] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 183.313190][ T6744] Call Trace: [ 183.316560][ T6744] [ 183.319540][ T6744] ? __pfx_vma_merge_existing_range+0x10/0x10 [ 183.325808][ T6744] vma_modify+0x76/0x390 [ 183.330106][ T6744] vma_modify_flags+0x3b2/0x430 [ 183.335060][ T6744] ? __pfx_vma_modify_flags+0x10/0x10 [ 183.340499][ T6744] mlock_fixup+0x21a/0x350 [ 183.345060][ T6744] apply_mlockall_flags+0x309/0x410 [ 183.350304][ T6744] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 183.356192][ T6744] ? __do_sys_munlockall+0x5a/0x220 [ 183.361778][ T6744] __do_sys_munlockall+0x10a/0x220 [ 183.367320][ T6744] do_syscall_64+0xf3/0x230 [ 183.371897][ T6744] ? clear_bhb_loop+0x45/0xa0 [ 183.376680][ T6744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.382650][ T6744] RIP: 0033:0x7fc60158d169 [ 183.387254][ T6744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.407008][ T6744] RSP: 002b:00007fc60248d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 183.415677][ T6744] RAX: ffffffffffffffda RBX: 00007fc6017a6080 RCX: 00007fc60158d169 [ 183.423688][ T6744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.431775][ T6744] RBP: 00007fc60248d090 R08: 0000000000000000 R09: 0000000000000000 [ 183.441003][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.449404][ T6744] R13: 0000000000000000 R14: 00007fc6017a6080 R15: 00007ffc9cfcb6d8 [ 183.457505][ T6744] [ 183.460572][ T6744] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 183.467892][ T6744] CPU: 0 UID: 0 PID: 6744 Comm: syz.1.215 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 183.479921][ T6744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.490022][ T6744] Call Trace: [ 183.493330][ T6744] [ 183.496292][ T6744] dump_stack_lvl+0x241/0x360 [ 183.501018][ T6744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.506263][ T6744] ? __pfx__printk+0x10/0x10 [ 183.510894][ T6744] ? vscnprintf+0x5d/0x90 [ 183.515269][ T6744] panic+0x349/0x880 [ 183.519207][ T6744] ? __warn+0x174/0x4d0 [ 183.523397][ T6744] ? __pfx_panic+0x10/0x10 [ 183.527871][ T6744] __warn+0x344/0x4d0 [ 183.531884][ T6744] ? vma_merge_existing_range+0x1390/0x16c0 [ 183.537843][ T6744] report_bug+0x2b3/0x500 [ 183.542243][ T6744] ? vma_merge_existing_range+0x1390/0x16c0 [ 183.548203][ T6744] ? vma_merge_existing_range+0x1390/0x16c0 [ 183.554155][ T6744] ? vma_merge_existing_range+0x1392/0x16c0 [ 183.560084][ T6744] handle_bug+0x89/0x170 [ 183.564373][ T6744] exc_invalid_op+0x1a/0x50 [ 183.568917][ T6744] asm_exc_invalid_op+0x1a/0x20 [ 183.573801][ T6744] RIP: 0010:vma_merge_existing_range+0x1390/0x16c0 [ 183.580368][ T6744] Code: e9 ff ef ff ff e8 40 7e a7 ff 90 0f 0b 90 e9 f3 ee ff ff e8 32 7e a7 ff 48 8b 7c 24 08 48 c7 c6 00 54 56 8c e8 f1 94 f1 ff 90 <0f> 0b 90 e9 68 ef ff ff e8 13 7e a7 ff e9 cc f0 ff ff e8 09 7e a7 [ 183.600104][ T6744] RSP: 0018:ffffc9001b607a60 EFLAGS: 00010286 [ 183.606207][ T6744] RAX: ffffffff8c20bff5 RBX: 0000200000ced000 RCX: ffff88807e020000 [ 183.614210][ T6744] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 183.622208][ T6744] RBP: ffffc9001b607b90 R08: ffffffff8c20bef0 R09: 1ffff920036c0eb4 [ 183.630242][ T6744] R10: dffffc0000000000 R11: fffff520036c0eb5 R12: 0000200000eb0000 [ 183.638241][ T6744] R13: ffffc9001b607c40 R14: ffffc9001b607c60 R15: 0000200000ced000 [ 183.646250][ T6744] ? mt_dump_node+0x1860/0x2290 [ 183.651185][ T6744] ? mt_dump_node+0x1965/0x2290 [ 183.656114][ T6744] ? __pfx_vma_merge_existing_range+0x10/0x10 [ 183.662258][ T6744] vma_modify+0x76/0x390 [ 183.666573][ T6744] vma_modify_flags+0x3b2/0x430 [ 183.671586][ T6744] ? __pfx_vma_modify_flags+0x10/0x10 [ 183.677062][ T6744] mlock_fixup+0x21a/0x350 [ 183.681598][ T6744] apply_mlockall_flags+0x309/0x410 [ 183.686867][ T6744] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 183.692665][ T6744] ? __do_sys_munlockall+0x5a/0x220 [ 183.697937][ T6744] __do_sys_munlockall+0x10a/0x220 [ 183.703097][ T6744] do_syscall_64+0xf3/0x230 [ 183.707654][ T6744] ? clear_bhb_loop+0x45/0xa0 [ 183.712354][ T6744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.718259][ T6744] RIP: 0033:0x7fc60158d169 [ 183.722689][ T6744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.742340][ T6744] RSP: 002b:00007fc60248d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 183.750798][ T6744] RAX: ffffffffffffffda RBX: 00007fc6017a6080 RCX: 00007fc60158d169 [ 183.758794][ T6744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.766785][ T6744] RBP: 00007fc60248d090 R08: 0000000000000000 R09: 0000000000000000 [ 183.774821][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.782854][ T6744] R13: 0000000000000000 R14: 00007fc6017a6080 R15: 00007ffc9cfcb6d8 [ 183.790883][ T6744] [ 183.794233][ T6744] Kernel Offset: disabled [ 183.798565][ T6744] Rebooting in 86400 seconds..