last executing test programs: 3m49.112295421s ago: executing program 1 (id=1849): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0106401, &(0x7f0000000580)={0x4000, 0x0}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x34}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000002900)=[0x0]) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r5 = openat$autofs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000006d02000000000000000013"]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044081}, 0x20008011) 3m4.673326496s ago: executing program 1 (id=1849): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0106401, &(0x7f0000000580)={0x4000, 0x0}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x34}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000002900)=[0x0]) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r5 = openat$autofs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000006d02000000000000000013"]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044081}, 0x20008011) 2m15.621750968s ago: executing program 1 (id=1849): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0106401, &(0x7f0000000580)={0x4000, 0x0}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x34}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000002900)=[0x0]) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r5 = openat$autofs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000006d02000000000000000013"]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044081}, 0x20008011) 2m4.525713079s ago: executing program 4 (id=2506): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00002000000040000000000000001b000027f6284cbfe6adbcc7e92ff25e2800"/42], 0x50) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x300) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0xb8, 0x7ffc0002}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0x20000006}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x4}) epoll_pwait(r3, &(0x7f0000000400)=[{}, {}], 0x2, 0x4, 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r5 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000500)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}}, 0x14}}, 0x0) 1m58.46006414s ago: executing program 4 (id=2515): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ustat(0x7fff, &(0x7f0000000040)) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x2) (async) r2 = signalfd(r1, &(0x7f00000000c0)={[0xfd16]}, 0x8) ioctl$TIOCNXCL(r2, 0x540d) umount2(&(0x7f0000000100)='./file0\x00', 0x1) add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="f5607608454b3fd99d0dcf41b821db8ef481ba08a6ad88745b129f9cdd6fb7b63b63d3eb691c444ca51c3a6c34ceda0058db8b4f55f47ab73d079a5ed42a729146bc9572bedb231f1e87810b0613c2562478588ade172756f616a986722ef631e6231440986cf81666c75cf373313224d0d5634c71e9378b2e77665d6d286addf6e51a0f6f5d4cc699866ff74caae2c4c24990b3ff65f1ace0477c766d159b3160f9f2dee913561d49d8a05a3f75ae3d71579a242f9a234332", 0xb9, 0x0) (async) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @private=0xa010100}, 0x10) (async) r3 = request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='-^\x00', 0xfffffffffffffffe) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0xbc) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000380)) (async) close_range(r1, r0, 0x0) (async) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000003c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x10001, 0x10}}, 0x30) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r3) lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_clone(0x48208200, &(0x7f0000000e80)="8964801866dec1cac3e08b8c2ecc6c11678dbb580cd3cc45ecf16fc34abef0f784b15455cb90f4256a3dd21d63cddecb7e57a437723cff08fb1826c67aac2594b990bf82b6df0f9ca4b9fe7a2935fd8d1db78636d714f951012f10cef16eda241ce63fb251a24ed4aa2954df9b7de7ef071156d75c0ade484be3493f47bcd6ae9a9d4bfb1f5a5373b9cd12af01e468efaf92d3a1b8ff1c30d601df833df16ff6969e611b57405dc4974dab31fbb190691e9f892b8b295cb69a7441530d97e076837670883180bdfcff2504ba3a6ca81fdbc44680a2164835340190e9165d4594fcc7ee4ddc180a64de1b4e8a9f845d8cec6aa0b81df1aa3110d2f084d515a8a7fca181140dce304bdd132b5054f0f7d1394cbff2b363030854cbf56d082f17edac045dd1e7b9af21dcb2f654f5eb8ca0b8f2c14c230de3c33156b2086d7b8023756a34e146648009df9d61fd78ed056311c55340c2951e8b33e5bcd4df021f79520eb22b75b4dfa9f9de19d859565355b595a7ba08545a81bd356df7b93bd0b23404f99e0e1b26026fbf4761fc594305b4ebd8db269c0e39ac31559eba6192154681e1931f7a31fb41008095fbd28f822d5a20ee68d14cc103527a75975869528484a5c0fc348bc26bbaa812e0dfa3b90e958968f1be2c0336cd9ea905e8f37a89d9463d51e19f8fa9dc302bba645d29d5580423ee970c75057989807bf69740907562d0d7c73e75fd767ba52024ca9daa53bc8223238c60010703a1023f009c3161279ae5a408f3e8b8711e180984c37bc89d4674c876f72e5177d7be1c0c0a7e4f861c5e525023471832833530e51aec70a2b921d68d978c12bbe7cd1f388fc892ddb91f8360e26cbe72eaa14b1387060e66bffe42facb9b68a263964a4ed8070aea724afd79c4be8f53d1c598064f09d93c6cda0d24221b9585c20d22eefd96736d8fba3639b3f3aaab7fd4b8eeafcdccb8b9a718cb322b52ce7204d5f6ac696d0c7190b7a5f6ea573115f37f487063db5b02cbdb7cd7a6b5f9f0cfb68e3e575a90a8c24531e6d0497c9f8d6ed8a30c5d7bfe3d6d117691885f6e1c2a5bf3c737735c634c5ca4c2b0ab85310b5fb5e01aa0eef9337ed8ea3fc9883c019a4e131adced03e01f8c8606c13d0eaa5fdb6177e2c9b02dd93df479a2887b5e9e818a6915795f7f2d55127ddc175b1ba9f8751f08a30e098361f5389d0898ddd7e2bb6d85af8752226aaab86310d8c4f072db8785901d228cb4ad612b7a1ab839bf8c63df4e79ae63d67d91bc974e22ea06cac8560e802ec0ab1a7198c04c46bb7cba3dba83d05b1703bf7c92feb01386ffc2e9b32f24d9c16c99af7f8a81f33141bd80f82e6d86c2c511442a28c8572aac41112815c5eb38622c584eea51c4317d755d7a6a1ef2deec96ee16f64913bc422a2f35b744d17ede1726e7370120841e25eef09a796f695376121e5a40abac894de726dc2db00d5ff63c2642dd9b5de43a85db9c2285f6ea939351aa67e0bba9e49c83ceac2fe3565a24afc7250225e8b5a7b433ab50bd831925a45dedd88774d98f8d04116cf532cf9cfe580df25c396dd7efe06b4d7f81d870debe2c637b813577f0a8d214b22371ad59654fd86021d403216a342515756d1f7f43849e7cb48829aa5416f0a59228f5687ab45a2d695651e5b561d05108c44df5cef13260a8ec5df7dc595df2a3157b63601de8a34e91a0a3d2b384bc2e2a0b9a20d6947b374f243ff77067525d2db3a8c172163032b72c8373123faff6f27f2a148258143a56b2c955784214f9821cb12418371052b597bff0ed7e847289c2a5bcefefcf51ebdea798b345a295a54484222f375816f75a59b693d2a6f8b6275219c1250bc1c09587a6789f5c9d9f8d832060f51f130374444613de15b49fd7c43d36fda5314631a6f2a1bdc64e0b7993c18748cc4fac4cebf1506e10b7e27a2130646da83c540dc5e914e9256ac0a2f81bc0c7b28f9c1265f388f2a1392a33ea6810aeb4c199b6cdd2970e620aee0fa8fba1221f061d9ea309d44345b70f040dc4965d52a3885ff4f4bfe432464161558dacc8141c15710c7e2e7bc89d5b798b3b240e5a7fd51730c0f53f396a8f5685b4d90f54079b2f72b9a5d43dd0efea4af6e45c1dfbfb0d3b03a1d3eac9688a40765b3ed4cf7810359ab08f46d375141a61389e37d33c69c7e3caafea1e21084d27b021318dd1e30c151f760ab3dad06c4c7a5ae399271f6f1ea1cb35d3500512a4def3a2811f3affa599568cf38bb683cd331d384943392b891892bc2dda870ec55dba1ccb2036cb1f610b103d6029d4d36c34d21937d22819a15ecd07f409bdffcbc251e2c12faae86e0ad4b9fd124c60fb7c70962b20e011236c48fb5edafa106a359769694dea782254917c2f936c95d32997f995aaa2b575c97615540d5d1ab6f297c07b783f60413e660ab71f2082f1274a4a940619df93e09f394ab5deda1485302f82f68165e60ab4a6890f990a5355c4dd30458389a94b6665c55865fe5111c5744ce0c39cd4f2dcae175d5831a9bbe6c12c6fec8ff8a3335c4ed9743849dbedc973df3c7a6886dd1529bb2924bb2b5880b111da7d7d71d338668291de63aa8d9ac6ab92815d51c128537b1a95fdf32ef834e88f77e8ad500e0f3cdb9c054470eee1022a19079d0446f08043feb52d0b07a9c8cf7f6503a0b681e54c040ac54ac9739089bbec4856842e47227f24d783117848d52388cba773468032ac561b8f740b7066f3f03921e7d32218300e1067dd9a0f408b35e9a39df5c255f4dea0794345819bf32386815990753dc1875f2eebce4161534a67a826acb03ae149a4b6e65cf9f9a2d1341aca6c351def88c846c9e54fc918744814a3b6310b3b2d735be27bd44e57cdef02766ad21cfb5ca4b54ed341d5828106391d106ceb04fabed8fc3339ee1a0ac1408ed5d9159946a45bc3e0a4a031baa2f06d6baf7002341033f3af23ca8052bb41c323b179753b81a688a802ae3354481b2ab293f275d3d2c2a609698340072e81c6232a9e143b3d17ac57a8e6f5c8f2bb264e3da7f420e6baddeab5ddeef56fb77a86ee32c65eee5e72e8e2af2b86211ba78a41eb0172c758a24b77ee6e7914be332aca4d66ca8e65d2ae37fa7e85ac66fc6fe2e876ea2adb8714662fa197462603c6c996c129b0b9b0156e9a3d52f18d75624d740883d941ef1a782ad05e1e20a638f811365dba3ae2063d0b1c0f1a3078a5674687242031b017cfc7ec6d06c5443723c7df65c46cf18d1e89c42043045683c7edd3eef36430c612a116c1e711f03c31eedc2b44096c024d1882fbaafa8b44b4b4291e77d3ddba6209863c6f487a7c05b9c358f8ed643933ac74cbb821071c88b0ca8700f5f2696b9e832530f632870ac59b31ba93ee16f6f97ce33a8ad09f9862e8f028068a8c94234e7ba607e4e27862631f78676beec5335b60c9a81dfd17cd9571ec88251d7a640d7c48496f22a4d6e9f4a0c08c8bdbefd61cca22ce70056653ab3a7c46d4d950021b8af2577cb3e19ea3f631854fe3e595a537fca8e812cda18674792d419e298685a976bcbd85cc99e007eaba38f09bb29c069167266ba56751ec2f46536d30fb563001049bbd9855988bfdccc0575bfdd510a3ba068c17a57fde07b2732812ac4ba19c94ccc18975321cdf33722765eb7d6a0ebea177123880e22b6566fbf0eab7157467c162a33df16540b92d837a7ecf5113ffac8841e636b4da6938878b7a63ce2f8cda39840c6f3d4fc8343eee1f8a5e4e069f720fbf5a09b6c7280510033d24c960aab431a98d4bebe72e2cc6def16c137393527b9674536c178fb9458516a28ccbcf768d081717743127ccaeb9559773fc03141aaabbb647c9f60f1bf7059d9046f80e19a190c2e7d4efbace19f4d6b0419524a701855ed31c3b2dd2da055cb282961ad92c8fe5e66210f1cab0a8a15100fea9863f6038aa3631275e15c75b39bb3174d270f5b7bfdd7d4eecb6a8bd2c71e68334837f73131132f0f9f243fc146a849c4e4155398f1d200d66649dd817fee240ca0c4e740cf9ab9cf7c4099e1047b7b2ad6ff2bbc532a27218ff04e88e19cf07eac85d23155789f56fe88494954a227367a6aba2a66787c14cacbd6725b353c80c7200d46d15dbd655b0079b4f8a378e4f3b036376b81440870cad38b00e145ede4f206128a54938b2034d3ae790784d15d38e62b7a54b3c2d113e38aaa9537f4114090c0ade9cc64fd3e94bcafa07c8b04c644ea55dbfef8cff328f6d30de5bf709ca974c736813094abffcbb92b9f787c77aeccac1e16e8833a4ad7aaf9a64b04a18180b03dd75fe46f9f21073a5d4927bdf20c5351121fe7be0ea29aac197c77daa72fe93b6cd5008419b14a925c722d879b1f863f518859f2a3fa4fd7d513dd5b5cf66d0bc4a94eb0d1395d583aedaaa13392e45e9474f93ca9b0537b35c1aff5c2201189fd36d6f3006ec29d7675c82535bf0d5afe4f245f8284f9cd73a18e684b2541990996e974d5afcf174dc3d3f8fdf07e03c41c1d21a1659f1014ac6d01d2ec9dcb4042b3e2122a07170b89bcfb4611a5628c4b6815560399318b9334c8769cbef2dd6b690df6dc484e2d88bb05158d53f1c8be5d9323752696d16880a561a15cd62d0f3c923fbef17e50f048455b67f7b9f2ff1fbb6d26f4ee5358dfc1ae604597b27f39fd631784a25286dc7628d4933cf8b2e53de6cee1488c07f4d3127eabc452d190318703022b9db39583f9146ed4e85e745dff1dca9cdccc9a7364ccd3390c8f38afcdcc23b18567ecdbb9b3277c186fb3d8d5e14937e0aee3ae3be6f606c485d17ef035736ab85cd10b61bff7f678c8a162c5c77d3ad0beadcf5676d22c6a8d735410d92d338257b6e1f14d07527f7fe0b706558de323ee98cb49cd8b37c3405cb702b5d10a4afb9b98be2616b4ecd042f26af3b6f785a80f9f3cab9a34b98ac3b16eaab5b067f5fdeee2dd153b1798273f80520174cef4b8c84bf6db015713bed7482c28af7bd518b6dccd32a0eeadda102d3090476c35e25e57e5bc9b352323f359d62e79bfb081c5ed18c4f95a83931d780daccc9663c77d46d6be5f91e5f179fa867f5dc390ce39cd784aaacd12d4b9386a00f7db0e503ef8c05af0158cfa6429a8496a055944393000eafa219fb9737768c5da0c8a197e5c69f0fecc0cdf42f9ed2b9681185ce5ba8f481826bc33d0118ae18ce73037782b4afb64db794cbb140069c9bcfe3638deeca623b4b470175e60a102576fb303e86e58cc0bbe30b1f053bdc8d0ce8fdc5e3e1c2fbccc8cf677662106dbeae15db8dfb003fbc3c343613d913d6d5ddd454e3a068883ddda563658782961f66e491434762ec1f10d0cdf4f694f48a2fda6b8ca0aaf1d7445603ce74c4d4be8d6eba36a9882f3928fec3a2457abc12931386ffd4848d6ad4879f6e307ba1cf47908529c1ba254c39199e9b05bda455178ecfa9ac8771dff8914ff112d50c644462feb2a5e77b9f9b5046839e851e82343ab96e08a5def2538579b1e96acb2d51af2a975a89d795b9d2c8b0c1b2850d9004242efa6f9b1a13ab601eb25b79e75eb7f5466539af9b6edcae323b67f307cb4309c8a2fd3b34fd74bd8ee9d36964761ab05b225b2b2ed644de37222267a343b6cc70fea613bbf8706a3499b9e77b47ccbb35444e0b59e3b7d3beac0e963ace6530db0c628dc9d26991ade6861ec1b1d33bc20666115f731fb2f638c0a8128d86f962b96e59ea2b803626d229d3de16e377443f1c", 0x1000, &(0x7f0000001e80), &(0x7f0000001ec0), &(0x7f0000001f00)="a2b58161df18738d7819511ba2f85533694faeff12bed53d0c86dd40a31f1d3aa5ea724aca37fb01ae36be577c7233a8c0311ebfb351acefe19c4e3d59c1f9accc6c14127c0a925df0b12fd2dcb4d158419e24508814497da819b81538bcf711328923dc998565d44aaf81b6e7f03110c79152a27c8a19c18464718f14f38dfa32b253c8148e9586cbfb8f7af1110bdce602634f41b817d80bbbd00f78a4560bdb3f0e41258a28fea7091abe0ac47427c50dba6b94c2ea083b287d6b80ea66e0af280f3dee02ca6c49a374afb7c6b9cf97e5d081d67a829ab2511adf92591a219584a9974a825502253fc1052441b25961e805bc065e") r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002880), 0x800, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000003ac0)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000003bc0)=0xe8) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000003e00)={0x0, 0x0}) (async) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000003e80)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000003f80)=0xe8) r10 = syz_clone(0x1000, &(0x7f0000003fc0)="b170dba9f960746259560b184609a5df1abbd94df34a0c6de1b7efa97aaa5e45d06785818be79f03dfd07208f28c6c994fbab1d527853be9ac8d0ca096d1f5782e199926604bbc987b5f59c2108b04acb6c641606398202fcccd", 0x5a, &(0x7f0000004040), &(0x7f0000004080), &(0x7f00000040c0)="94dc055d705bfb023af7ae4b1a75709c0db41f41ca2d708c4487ffbbf70a3f7abafc101b024708e3bf99c50c3861a9192ca6c9aa736daec1e9d5d2541dbffb7d86d9a07501140fdd2c639161e7823cdea1c39be9bfdd228a333cd0302a0cee89d887a7c6156ac4bd672a20c66d61bb96895c3cb868a7d0fdf4a86707080449af5ff2a062ead6bacfaa41443bc6d9739f84b32bb1b6825cc49a3af0d5357a46889f64a3d9f06dff25e5d478114ba4c5db0583eff6") (async) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000004180)={0x0, 0xffffff00, {}, {0xee00}, 0xffffffffffffffff, 0xfffffffffffffff1}) (async) statx(r2, &(0x7f00000041c0)='./file0\x00', 0x400, 0x800, &(0x7f0000004200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000004300)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000004400)=0xe8) r14 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000004440), 0x80400, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000004480)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) (async) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000044c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0xfffeffff, '\x00', 0x0, r2, 0x4, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000004540)={0xfffffffb, 0x7, {0xffffffffffffffff}, {}, 0x6, 0xffffffff}) (async) fstat(r0, &(0x7f0000004580)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f00000047c0)={&(0x7f0000000480)=@proc={0x10, 0x0, 0x25dfdbff, 0x4001000}, 0xc, &(0x7f0000003d80)=[{&(0x7f00000004c0)={0x360, 0x15, 0x400, 0x70bd2d, 0x25dfdbfc, "", [@generic="a6f15b212f1b346ab6330eb0a246818d2827b5bf43c5a36b0d47339b533f0edbd0689eead1dd0ad743de793e5a45c4722f97dd624b802a3b7dc818171881a954fd11ab36df20f428440c29e9980ee431c5f6217093d1bcab1bf72844aed560d3c981a0d01a85b39d01dde6a593cf88eda97dd1f27c6a90099e12eb35b1e36a53f2d119345e3137c3e1c9b2f547649cc0544b5e04c22fb3192f02b26cdf20339481a77cfe257398bd9436fbf6d1ccdb80890c99b20bf9929e178b6afab845eacbd109730f03375275ac30706fc8be0db5090c2f3d612c983121333bc7a7e559c8c374242427bf7de889d2f57300b404f07a1272c00702c9a9", @typed={0x6, 0x5e, 0x0, 0x0, @str='#\x00'}, @nested={0x8, 0xc9, 0x0, 0x1, [@nested={0x4, 0xe2}]}, @generic="d447c5d1a97fcf9e5713abc9ecf3f8bf95007a637c063a0f60626f855cde28ad442aa8749e6db0ece8ec7bcd1a3e349dd9ad457d6250afea20ceb31d538f11bdbaf603c80855fd", @typed={0x8, 0x1d, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="7100ff9b1bcb1dc4cf7f4d4f5c8d4b0799ed15144c5ae6fd7713846b3278f117def45ea739f721e42d58fcd0f8d0460d4f8685788e9f8ebf63a59d8842f4ae3de300593e63d962da6decae82790a576ecc071fb86465c64d8a3b8b9c2b17ffd87396bb1f9fdab6f01f480d8c4437978a0b1d22d054e1a4d8c4952521da52a2aba8f7d726508e04ca73cb4aa346729cd665c0c97cecd90cbdee362af7fbed6ea4dbcc8f7d67c834d7038b666f33", @generic="ed8af065370f772cc811fe4e97535e7753ea59ee22c2cde6d48c3f8f66b4a85b8b9da7f1138fcc0fba0384cebeff2274740c9956cdf5e2af34955f5f8c665041467b44d10180996ed54f88990f2a9b1a59c8d6a5fe5e226f40ff2cdc698c63f8dc08de62e69bf5584297976467dd36a004ab994bf36d4e0e42843c6e03415c23dcd516ce3b0bb3cc002581417fcd311ad7d127559314532cc1418b431c117c9be761d14cbacd696b797fd7e4345c74", @generic="215317969c892e54ed81e390b3c02dbef4bfe2ce8dd02022fa7a6c656a2b0bb39920f5c87a616cfb911bf2a62e2234b49089324920a2e2fe35445c8b5d67a76e34d87f232b816a1ea699c0b9fa24aee8fbcddf946066f837c72d1719feb87362ae148df78d60b59a07714f4b574ef1655d1af5258b77c1fe51b54791f35863d52a15d6b247a245db68f3c71b66ad6294b5327f976fec445d5ab4ccc41f"]}, 0x360}, {&(0x7f0000000840)={0x544, 0x12, 0x10, 0x70bd25, 0x25dfdbfd, "", [@generic="d705b6238c8e0f93c5f2848051e3aa50de394873f939ebb05ff16e5c3db65fb0b2ee92d0c43ed3bb22fee16ccebe56915292fea86e2a1075df5f4fd1e2a2bfee9ce7fced17d79239eac6cf33717f640e9876b26eadfe94149db3bf20f9d5a792b58c662eb604b3bb281df3f24bb373bab2912c27c08488de060a83d40fa0e411228ef2f46395248d8e9181af4fb3fa2a6fc727993d4671b6bcf6bad2b1c0926dba6a079aa796857fae06c40c64aea40ad5953203f631cf52f6dbbbe1c3f1f7", @nested={0x10b, 0x4a, 0x0, 0x1, [@generic="27e36759192d5217efe27035d870d363e136c04179f2121cfab36f7377aacd8e59bb740d1a9af8fa2991f31a55ecf385330b3247736740aa2e7360962bb5097640e7349d5d7ef6c9b2599eca974ac0427f73581e5d788f1668dce91f45bf51fbc38df8a52cf7bf94515eada90bab97f1976ad9af592938fd07919a50740b3bb95e459a9cf77a49e3880d2fd5d1822a3710a72069b932c2a6", @nested={0x4, 0x139}, @generic="cb5aa13969d1b3e0a95e73c07ccd4a8bdae6bf3c14b04a1f914d9fe68c3bcb73f4dbacc1cd009d0d6575b50cc35e5bc7911a3e30dad09f0baa779e626580c02caf29ea693566a5a2a8813171cedab0be6eb627cc70923c4d88f6ae87f1142cb4d652bff7c99cd3", @nested={0x4, 0x5b}]}, @generic="931ddb5a6f2a75bff2b0", @typed={0x73, 0x17, 0x0, 0x0, @binary="c8af85f2b6f1a9b45c5d42d18b5924add08136d0b9ea21947d6a5007344098738894cd7cfafbe4a5ff3d885ee521bab312aa0faed8c82d7da0731dc0e31da237ee10d85aa3a29c4df98c44ab8cf3e801e195df77c8300fcb84977a92700571a1ad9dd67298a1f5c855027c1bbbf8fe"}, @typed={0x8, 0xf1, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x1c0, 0x127, 0x0, 0x1, [@generic="160d20dd8a8255ea4c898faa6f633042a57ad7b26fe1f2835406eb64dd98e73570d2f7d17900c83dc4ee6d52cbcb71730af8", @generic="dddfee1cf08fc3959acce4e4898d41ea9676ab544e9846d15c064e6b0337baa7cab5541c562a647f269fb11eafbbd6efe74418abd220d10e52bc54b04915d93210668935dac76e6e4b3c924c63487ca2cca5b6c208e884703d2134c88a9fed3a7d2a30c0b82d2d361592346f8d5ac5c69f83afed30d45578631fbe1e279bacc62ea4c21d4b40d84a2ecdd834f0383d2fe93969", @generic="88417fc04fded36650428cc352d75f5bc5d5fad862c60d63f09777502f1162383f899881f074da557632190e98c8e7f22c1802faec726733a1328eed7d8eb6319f48b2ae970cc56749168889e6849dfe9be528c176dd427152fc526affb32ad76d8e15a98e55d98c29941fdcc54a9a8747748e2dc76b8e6001a6351749bfcfd03822095b49b22f146728a9d28a5c9f6d2a947143928a37762b95548c8255b9648fd93432631079774df12e171ee94bddcb49adb421d47076c5021c799befdb7c6fef9fbd0b6dfc21b732c9981649fe56717a1ec51248f43f763ffa75f3cc93b5a47e343918807f55a8cc98d99e13c984545f0c81fa198e"]}, @nested={0x36, 0x8f, 0x0, 0x1, [@generic="4c1b6000ecb5dbf05bf67353e683504ba9028136d2785d7c3df9f4d83026020ca35e81eb8464", @typed={0x8, 0x74, 0x0, 0x0, @u32}, @nested={0x4, 0xaf}]}, @generic="911f2a032a2b8d5e3a8bf4c749def5ff52169468823260ba327b4fe31ff0d2c502a0a9f22c6f0b306487547c8ecf50ffa472b8628e7ed308eecf16005a9dc615246fb381924f4f3b7157d20d9fe97d931f13eb49dc8ec4b3e90c62eae60d88d7e188401d4128c06aa336084bf14dba6bdc0d569ea896ba20bf190abc09a3e20a968c7f9f120abc84a294fa3d0b4da975ed64e14427ce806d31167fafe641f54e914af7f734cb1ee658c73b56458f10b18570349a93a61b6031442f678321d24115d9a3f364cbecc22289959802cd926c9df8447ae49107b819d648f0bcb4fca91d356a272aeec25a"]}, 0x544}, {&(0x7f0000002000)={0xf4, 0x2f, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@nested={0xda, 0x113, 0x0, 0x1, [@typed={0x8, 0x13f, 0x0, 0x0, @uid=r4}, @generic="02d664d9e97bc5f1fba43eddcbafa8dde9c78b64e47b9178c07a5502b732e98b44a3daa053ca45fde74737be1c2327736418bc11862f05503a902b7db4e63977", @generic="60adac56d24fbf7dc231df", @generic="b677959e1337c3828c4d790c633eba2cca665db8c11b650537d1a96166b52034d18cd20cd9981112f8698dab453acd78a44aae87d169fe82f7d13f884773a72f9ad14effe3415b3d35a1bbf46aa09b6e31f05613e30488f72f1eaa4ccbcc65a8b59b4fb5f502571a010e15be30b629f075b1eb0fa55f28dadbf2f0a5f0df64", @nested={0x4, 0xd5}]}, @typed={0x8, 0x43, 0x0, 0x0, @pid=r5}]}, 0xf4}, {&(0x7f0000002100)={0x71c, 0x11, 0x400, 0x70bd29, 0x25dfdbfb, "", [@nested={0xee, 0x3a, 0x0, 0x1, [@nested={0x4, 0x51}, @typed={0x8, 0x151, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x3f, 0x0, 0x0, @fd=r2}, @generic="88d650c820ccabe8d85a0bedfa5704416acb4427dc902f198c9ac526cc99d1f754573a54ac64d0d942710d3c6a2a662c575f20df3050540d1e1785", @generic="82a4669d20f3d9e8caad34616cb1a72d2d8502d4603b4c13c52ad8b45697aa9154f1f8acf1b879add1a17547e25a2ef98dbd7b1d19cf7b0d5f5777da1b057a8b1046c19868e929243ee9dae9666128ab45180be9ca824eddbc19bdddce8e18955212936bb4e6cb1cd59ae4614f6f889d402027df6e027a5a0f3c0a85023422ad607f202beadb7c8897110a", @nested={0x4, 0x115}, @typed={0xc, 0x60, 0x0, 0x0, @u64=0xb}]}, @generic="ba8bd01993ff88b97573e3e7dfa233731354bcc5afb4f83e2787f2bf4190680bc7413bf385311ba14ade40391ec78bd1af3f574a06045328a08233636d6fbcabb700ccb60b1cc28b523c03e2232756b5a5b5fc9c4825e0a90c10c1cc9f9267df10329ff3a09420702f7de48b179c8ae933c5f245527d0d171ddde465cbda6294ac68c933b4308a7d11c502282e88896579f321bf4b303a0636db53df7eef6b6b6815372ddfd85a502deeb524b3b9daebf442482a0f945ac300a38d09adcb926134d96957a494371e93b28dd53793a5a8d576359658abb5eac9763da3d87abcf5ece2e4", @generic="6e22f5572520fd46c8d160e02bb12f1a9e5375a23bf6a2b3c10ecacb400ca49198cc6333cf84475347b39514edb91f5006e7f019b6aff4bd91ac9d4f4b074b20b85873e463cf869a97a3f46e08451e6aa368786d8194e16be46d8642a7f6ad8e173cbb529494ceea18e808b2e1d50605e923e2b422435c28e1bf46e92e8ac25d798985e8db0ef58d7ab2784e356f2e296b71384f4a8f73f0f795d72e1c", @nested={0x352, 0x17, 0x0, 0x1, [@nested={0x4, 0x12b}, @nested={0x4, 0x34}, @generic="8f5be6672ca7ed9d06f03deea1b9d245767b4406d780d1e81a479c9b6f75b01169baff4db65334867fe9f8de6abd499c4028d60c605f77acdb8802046fc254d4c9cfb945849cfa5055d8fa666ef5917d36d60c1f7c6409d72f2f33888c71c93a0369d5c47ff7105f91909ce361931e38fd4cb22e50a51f2bb497221db12ed9472f74e96b74c5ebfe4393e1c0fcab876c4ba334f06cfae19141a937c0cda10df65dab", @generic="55c3951c8e190e3da144f89c49e700d7e1b73fced274d9cb74d58fbf5f96c69b02e58f9bf41403afdd3fbb9ca11078a71d9e5d9941f4b441bba04acab64f79896856ffc1a7d52e7823fcdae4e9d4715ddb823b032c29872f0db7ed95db02d59f4dfa57269e4b9f8065accc4c9c6ba734cb3a547c1723dce1414ef3b6a5f92892ef1d5bd14e0c8fe1c1f3be288797e3b2812e961a2c51c1121feed41a51eed9358ee70012547b24c3bbf28edb00aa0d25038b65bbbded32944eceecce64c5c143301de4c324717bb39c0623fe040d63cd2dc3a3c1c569053b0627565690ff40048739c5d48a0e58b40ada8f31f8eb260e4d3fa8f42f76", @typed={0x8, 0xb7, 0x0, 0x0, @u32=0xd}, @generic="ac4ad34d2c15980985a3e65a5a1ae133dcc4ff7db6851e35fff263e66192ebc4dc76af794c758fbf763c39435f0bfbfdf813108573472db736008db0fcf9602543b24324d10d6bd43a6c48e97d2526b113169f3b69062bc59a230bde0a5d3612a010778f2419fc76db176c88792a43c32656d18447b52959b407f566584c106bb964eff543b705df14f1a87c2986687d3c10678105f731d9a3bfd5a4525b3d28769aec0f19ab37ffe196b43998abaf5e82e9c167d7b512a09256f9ac", @typed={0xc, 0x2c, 0x0, 0x0, @u64=0x8000}, @generic="fd51c3b602b3438cb9a3d4c384a3677f2d9d5f9f7b34144dd78e7e1a08dfa35eea3e70c3099d9581ee96e5ba9c3780cc9a6077bd1a4170d9952916d43c37c0151f97cd2426f89a1540c9bbed391a3029772ecd5ca44ae9961581988f6c32f351601aed11618e030a1df9400b9367499b4800f16d28bef8df384e7e9d065782efa4611a27d100f0c98656261e691f4d5dfda0134abd6b946d98e4aa7e32c5d100a73d2b26fe8b11cf2b70375769fe5fc766492b645487f2f6fba9a713ec5a3570b4687fac0e05a1bbc6d7f54c82426225e5d8dfe0796ddccfe85dd360132a"]}, @generic="a68e257fe253bafe587caa1e55689ca2ef671da979d68ed13a594aea613afd8b5f71ea8538eea1a3e421d6f775e10445e599ce6fdd7ab5f4b258bdb96e06d2ee877b4669c8fb52390d96baa408f863734f6f59536e212a33888905e4915ca4a7dafe04954b11dc", @generic="35c5238365fbe7c9b95f7f4604c2159070c129b8325595691e74a56d35a36afb64ec3d87293b510a823281e304f95488f58b96a1115baed22199699cc17b5ab2a1563dd077b23057a4d723e171085245e34ddab425327fbc5df754f97795420f", @nested={0x80, 0x49, 0x0, 0x1, [@generic="325461126f4dda91591b8a8880a6f8a20839300d79948676ea804972e9a543fc1cfd965901614edf0ba61491e8aef2ba0972b33b35e1c1dbaadd81a692075c7dfdc17ed27ba29c1ec6fca36f120fd2229f3cf4be39dfa4f2036b7362930262750a2120323d787bd8361f8858a41330d6f31c29f2aac887b209ed6812"]}]}, 0x71c}, {&(0x7f0000002840)={0x1c, 0x2d, 0x400, 0x70bd2d, 0x25dfdbfe, "", [@nested={0xc, 0x130, 0x0, 0x1, [@typed={0x8, 0x10d, 0x0, 0x0, @fd=r2}]}, @generic]}, 0x1c}, {&(0x7f00000028c0)={0x11f4, 0x36, 0x200, 0x70bd28, 0x25dfdbfc, "", [@typed={0x8, 0xdb, 0x0, 0x0, @u32=0x3}, @generic="6de5a1dfceab22836f5b7ca811ca7c69537279ed89e3c836609c9b68051549e980e54354960f999efd5a703f48b918136ac0cf2496a960bc20b1dbaead48eb7112f840cb62663b4bf356a274999c763a8229cd5871edcf44b4e2730ce8da36ef51d2023fb3e7fb214639c5ce00734def996abbb7e60ffa726573a15f5100080d2f296af7aef84c83461816585b52a3fc574101e790e91ddb7b8f6c77ef589812e8f44e5c5ffe7e42aed5e4a8839ddd308b3f288ece48eb11b752524db9fd2bab986353f7d0e7623641b4", @generic="1f017c9933edb948bce122357ea43177df29d0137ff0555d95d53cb162478d209ba13239fa92f299262a36ba", @generic="b6382aa1b4f6c8a0314b5ee7dfeb445405dd67652aec2ba6a1e33b93459813aefda6349addf8e0af90f3df2d229d24c4a3571fcb1c01c8484eeb988f2993fb829bf68b39add35c91a0f05c01125d825261dd9f904835d9b1d4b5ab1e98ce0bc7a61959d332d72244eeb4fc0cc52ed627c7cf50fe39655d7f7108490e91931356271bfdd57040635ec01f4007ebf9f9184ad24a7af7d46d6713ac8ea585a767f563016735e40633bbf1039d59115c504822ccda3fa4f051cc5a217d51be5171036e7f404c439b114b2d0b3da94a96f7445025718e3f9ac5c801f1079573ba2fed524ca75920ad63c4ac65e5d4ccfe06563a65483bcbb6e09756f52455b8be42f504337d668439f8a08360f31b4e0a138a4a774a55050923cbe091969d1af6d37ebbb407bdd82d40352f06604b31a3216c5c8751eb8fe01c67ee1201387c4c4a6ff77c3dab3ce46766e97fc0ed1f15a25aae381637f17052cd8f520b25c2006878f00ca80c76ea14a85cf6391b7a15761c922383ad46abc4ac28b7ea5ca86196dc3c10b9d0e37db9f38f0ba6466802d35b10402f68963f65f90820db60b9c6a7a66036435c7337a0d0cd4ef782fc271c0192d93cea5eb25ea5a8c148513c8469382258bb2b11a72f05b45543c38a841f7276bb6edab7ff53f85a277da21debf648455932a0b7aa9273c04d744ead89128b40f648ff9a2295f4adc94060633975f5aed37730301a133f95d538d32a9c66c592e16408a6adc7c6e86e71aa6da057cd887622e3b95801f3b242c8d7512f12009dbc31a1f0c6e689f1112996cad5d4994c8558646a80357afdc34fb39bc3da6a0a98ae77a5cfd7008d13b57ad30ba55893d9d9cb2eb9118419ed39eb1107556e555872d2f9a190b58c988a7eb38ec374c3c6bd60a6265b559f07e40cfacc2639335cdcd5d1acc607de279ad0da64846e529c79dd3bf3d005ea6422eebd3c190884ffc68c914ce97486796d905008eec31aecad6ec181f74d59a5cd0e8013ac30077257f5906e27a10dfe64d4579eda478d7491df1b1b5d13179a2f689b1603401b8fd32a752511a5204ff3faf6157f768da72b2d05cedd87f84b2351bdb48197c288121c2082e76d601226f7249ca0d545d22ea7a4b7f9f5d12518bb4165e5a8f3f904617d7e2002e5bad83b92811d644c4516524f548a92eed6e6f594d12b0ffe94c1241b4b178c6f21180771deb8df9e87ff33b09d6f5a61812f0384e796f0d0de2fded55185f216af8a54e1e48610225c154aff39d6c0bcece4bb22d5fa20fc14b14c41c28e4968a0406059443b1db5710718b93913af879f14b9e57dbf33a669d36a4e8ec16057f589e5ef25b40a152d0b3c77a6f5466bbf94e8a5c72581e69d99f31a852d1f044301766f17efe841c0433a734a62b6acb445cdd72bfaeb87bddc271e80146533f3fbe92f43bd64765feb466116f6dff417d1f0211216114fc99189df64738648409d5fd627eca4f07db424c44f879cc3a3d6b17b440e1690b4ade6a6f7b0531d4fc735a737ad2b01269abc0c0ff2e14f5a0885c5a40d5d5a9444b174e448385c2e374a2f0ac7dae376c5f23e2f8bac62a8f543a4d7a44ac00390a5e1786457c9d32b9ca4dcb41e66f2c1e837d6453735de87dc83f4e424cd53fe0510e6c3c8d2e583af90f76e46a554791ccd773c8b0cb754db2434af46b564e9ace89039a0c33c1ae7c58bd6520c7f3401245f12da4d91e09aec4494096287ff05de075b81def63e4876693be847a3fe3f1a75dacd27e950fb42965023441d9614e7395241dd47841f315c994d87019a171bef85feca55e1b825494c42633deb7d934a8b7c5862a821f810d631fdfd37530bd6b1cd2b154f1d728257f41747734592ebf1959a28782e4f568b9c8a2293c801040ac7ee4cb8634cab78c8bad4500fe11db512304354fe9b441b9a0586c14a7f526b40837f7ff5feb1a18962f593e574269cecbf889f19e044ace91defaa345dda6e367de28e6d028a84a8186a543e6757d82bf20d1a195da0593069e4a64d599b78b19fb8db1780bc066ddb67789468e404acad25bfc5b9dd134ecdb5979a4a57eb9b21f2409ece5b7ca6313b5e0a53aa51298ad8e5c27e7255b66677d2ff3fb5c8176dc2b1601d718937fdf9f04001a9bf426e684aaa407eb306954c364f4dfae8d9e0f2006a9df18f40b65a6ce8a5dc50ddf3533ad0ded953626f6f7a62238890f73ced4b4de91d91bccf97f152d839f6b6102d8bbe34626a98b55a82e690f5a29d49dff5505949411359664ab249166a3ebae935e7a6090fef28a61bb225d7fcaa2a01337511b1556a649610a1aef3d8b48120de551ceb55920717195735fbc2609096391b5dee5b3d9ecbd6512c0d2d8b85451836a5afb585ceb226604e59392885fb92dfbe6afeb3c5ae951a32a2d3d5dfd7020a214796e9e3a059b7c4f3916654a269649c5d28d4515d5a7812aeafb56e4d8fe57b8379e299f22495e099e2860711b469b66397230a657de2e6027d9afdf07142588cb82f8c7616bdb83e35ccfac2436edff0c5696a7ef81ee0879bab16fadac6f573449cc0eb5c9047b8b79d6fd4ee271572e3b6e96f74586a7f0a6fed7a35c1b62406d860cdd60bc7b3061d9f6129ce558586afb54b6f691fe23680e5ceff27acf397c914f47e65a2cf1434949ca25b30f34c722c1324affcb154550dd2232c85e7e353689bea1b775fc004c9d03e51d773e06dd97b5dac4326905c8808c58972e88be5603194d85537d51cd83da864e11d78705a1ec1087e046c696bdaf92e23d905033a87f8146c9ee356545fcc01bbc3d1f9df7686cddd61df50eff4bc49a9494746c4fc92b85281e42d97fdba916fff2b924ded318bedb8c4d493212b120a0f930007b0b3d77e5eb31d52d808f2fe5ef99496040b7ea1bceae2f1ba88fd4bf23e921e02184376cc23bc9e5799a921711975d81ef5b03b99e1417554966d9a6a294a2ebb6eb30e329778329edb5233405c03d2500dd8b587f67585e90b6a4d088c1bfbec9bbd6408bc1772e6389c183c334d2380dd2442f2ac0888cf6d81358455bbe2a77648388da8904258200c4a17a3b2ea59eec3556d15d032558f73b3420c96c85c61eda1e6c4da3c7d591fd3b3fce54caae4ddeec07590050e254f6ef10ca01676d0e7e07bae976b9f4f0ae07844699a4a28a6074552657733b5e8ec1155d910f8cebcc99fc16fe7291019370487e5119b4ebfc5800c6a72b0335f412485fa44744e80e427e04acf2601e97d08c359af9ccae579513493f454e22a3a9448dd34efbbcf7232233f855b1e245b74c790f0797a2bf1258191092d3c142c9b54b267fcb4d54a1d1fe9532abe4dd0318d34afab9e54b58ccc9468a3e133deeb6fe979e80ec516ea53f138c958ea5a1272f79af40a7c44ffb4d3114dac2d0f5cd8f339801125dcf9901bdd77f682f3193a3f2a5700e1c842fd950b771ad73150f0037fc064b5765c8bb5325c24e4f93af1c2e137c681d0d866a9a83ba405126a7c10d9cb1086ac03f50a2ca8695543ba6439b43b25cd9834d0bc698fccd5f2c3cbac058466a006c7491c35b5848d5ccc7f2f546ea512e25afc4a78acb28202c2eae717a573a4f69b9ce5a71b14157db994df18067dcd8451904c24c95424c3820bfee1a7b137835da888f2c0569eed0b8e2753bbbd99305183133441a4c86ea3ba8c8c8331ccacd652198ec4beab14582da2a09987a28e0ef1b30b7e3cc95d643295e563831cb369a91f6d7195df92d87f05ed8567b08201cc45abc0c7a4dd99a590f9b337804868bc522aabf6cd9f29d1b0122e314cbebd3b057073e491ec1d6368fa990a0e145fba2f33e7c94d178e53c2548d991a3c6dd1119f3ec671ed8556edae7df42a8a8cefd88fe1d7bd4146b8a091b6ef5378580c7dd99a299eda987546e12b835e5b41c513148a9c16ec9675b605f347bb0e1c987c71c52938cf6962478bb65b47f8a73538c8d1cb8536fea73791fb8262646c2ba2f3cc6b83068a5aab55e9ee5d4833e8fcec73d4349c07eca548094eb97cd5c21fbca8a942af43e59f2022778739f2c16b3c455bdcccf588cb27db42f74db941c5c9c223ffd099527116ee196cc96f58c1d90c68b9d121bee132af48fc6ee7fc9d744f9bd074dab5b4f5a954d9e3a64152a0cae52218a529950a73de29a6caf9c67f66c02368f3db39adc7047b69dea78e302fc1b5c27a51131499edc09ae1f423d2141aa8398677cdaa6353b004905f0adaf72820845f7df0e1b9f9392a3f5f01263b0ee7191939f121a3dccb4c0974e9f5d01c1cb714d7a09de10c4ba158d6d08a2f61ce66dc99f5776aa9be1799d2cbd896aa2272c12b447f51382b1f5e50dd746dd7deefb30f8102a2812f655976584a5d22ae3d6ac30fe67bb7879219ef528bb849c6f868b4f12aafaa5581c5f2f8d54035050f2e723a0dc6345ae2363c3a17efc75d9eb7dca0719b7f3893e99fe8e0ded8a1b965786b7793bc9dbe5abc7d8a2d302b3cdd1f9f88e3e7cc591670ef5ecaed89dc0202086fb342852b67b97594449253c5d231b6193c408b00f9e3888a3d12d47c96957bd2356a938a5b91b20d6cf81e1af40f367697b6a1294400619568f4ad80b98b65521214d6b1d1d50acaa29b06ba29f076a3193a42a1e69189ad1c09ae10ebca4c2053ef9a89880ee55dda61093a1b7dd239a8ef20ab5c870ab7547c785cba9fee831084e62be9ab71099e0798a8c8aedac2747cc2b80f37e0be4b2a1824a754a038f2f5fa8772d750f273fbfc46b3b1a43a6ada12c8572c04dc28ce365c6d1ebae5716ab8711a4163bdfe79056e7276fdf0680d2c01176f050be374fe5c46ee6e9bf4fde3a5be8b92b54b61de2b1410ce5566f104d1a657a8f05e62cd33288368a8d79d63a21b362c97070d9dccc1a1222be73a7c77ecd2f6baef205f484e9e59915b348d4541bead4bae3de36ecf08ac6aeba13302e31c6abf7526ca3fd8d541e6bf93258925e174b131386888356d810ea7ebf77cf22376d5afc4b4ace3bffbea8242e00c9bac11f06d3f72a2eb24771425cf597831173f141e8f24848c2e916c27688a02a07f5a1fd2fdb6fed4884a52d7c088768bf3866932bf8cf825b98f93bcada60117115d1bcd3344325d99764314be4203fc5bcc200f90b3111e534e8647b67b6b9e27b6333df63513f66395258f2f825243e51af96820ecc69ab7f54e28942d8b52f4e372e2c164b16bc8f1101d23633d1c17d5f0d8fa9f49ef23f74a0ced831dc0f9e3603a255a36e81aad17522c1e2994130b6dcc0c1ccc3ffbaee860411cb2b426eae5824cbf1625ee0ff41094c777e42a9f8c234ff648e73a80402689608ebe60a798f0a162a85f775e25cd8bed3bfa15403f9fba146b8a3edd34512c175f3668b7bb67038a86de9ad8372a0e42daf023374f0342bb083867f6ad7eb859b50ae424ab0d3da91894c2a52822c891ce020215c3137f7e6f8a39db5c66ad725a4c95be28043879b6e99b5da8cdfe4f8d93a1be79257c432ffcaab9c933af47ca12e2b9a78219cacf8ef08cf6766862d7f3a8de0bb0b653f0b2e5e6a6a9755b6cfdb5eeb80100c8b574747969cbeb4c3dc232b32f9cfbe50c060c00e40617abd6146c0949ecd54152fa945e61241fb5da49c5d50b2f7081c855a2001e820b9e396bf7d109e7d27b8f423cec17f68d423321b932cd5a81a90605938a04f2f439860277dfebee017b0a59b590e6312b5a07e5675105fbbdd58b2bc71f36c2312d097127ac474c3c87d60dad6a", @typed={0x8, 0x100, 0x0, 0x0, @fd=r6}, @nested={0xdc, 0x34, 0x0, 0x1, [@generic="7d81eed5a964bc4852b7b077b446fc7c07b3dd0c4883485e2a647dc36b6dedb8e55d75e485dfebae0aeb39a4912bb9971e2f5374bedf988d2778e151f7d836a69d56fd1f5cb35f006a02574ec8b10867b52778fc37be6632ece65f831e20778ef8ed6e0408351771ec634e204e8162e02d43a57c5015a2481ba731e18d19d99fe65fa6491aa6189f8b530200f913016483782beac78f4e045de21e85f13a2ad3981546388b15ac24189428042b158fbe3314cef7a4a7275531569dd867b8e58d4b6a2e50ff9dd3b5481b00c8c88b2a55f3bea6d9de7263e1"]}]}, 0x11f4}, {&(0x7f0000003c00)={0x150, 0x10, 0x1, 0x70bd27, 0x25dfdbfb, "", [@nested={0x10, 0x94, 0x0, 0x1, [@typed={0x8, 0x9d, 0x0, 0x0, @uid=r7}, @nested={0x4, 0xb2}]}, @nested={0x130, 0xe7, 0x0, 0x1, [@generic="223c97f243315d06fd0416e0bf3119a3487f7cf1cf6d056d11dc3086d7406154589e6bd88c397c1dab2359f144e289ccacd53367fe80040c9a73fea60f2aee5f4683c4e9132e8aeb880f", @typed={0xc, 0x3c, 0x0, 0x0, @u64=0x9}, @typed={0x4, 0xa7}, @nested={0x4, 0xbf}, @typed={0x8, 0x5f, 0x0, 0x0, @fd=r1}, @generic="22538e26e045fe8cb224bc889092e0d6d4f7fcac1e4860a6f8607e011ac5b9ef867c4bcff84b03bed38c5748bfa2115dea6c279da1e30552391e3002b932b08d241894af8d884d56775624c5b626e1ee7f085111c1aca31884bea81db3f5737938039088e8f53f5c80af685362f08df0dc599abc5164fa2382886842b121987e56817c1e00b03b692c71ee522f15a600a0d0dc9362ae07c30704c7cea980e5b9b30e58383ab5", @typed={0x7, 0xa4, 0x0, 0x0, @str='-^\x00'}, @nested={0x4, 0x11c}, @typed={0xf, 0x1d, 0x0, 0x0, @str='cifs.idmap\x00'}, @nested={0x4, 0x2f}]}]}, 0x150}], 0x7, &(0x7f0000004640)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r2, r0, r2, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x20, 0x1, 0x1, [r1, r2, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r13}}}, @rights={{0x14, 0x1, 0x1, [r14]}}, @rights={{0x28, 0x1, 0x1, [r15, r1, r2, r2, r0, r16]}}, @cred={{0x1c, 0x1, 0x2, {r17, r18}}}, @rights={{0x2c, 0x1, 0x1, [r0, r2, r0, r2, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150, 0x4}, 0x0) 1m57.224517794s ago: executing program 4 (id=2517): memfd_create(&(0x7f0000000b80)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0x0) r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r5 = syz_open_procfs(0x0, 0x0) pread64(r5, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0xfff1}, {}, {0xb, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) close(0xffffffffffffffff) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 1m53.988696755s ago: executing program 4 (id=2525): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000080)={0xfff, 0x2, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'batadv_slave_0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x1}}, 0x20) 1m53.829025596s ago: executing program 4 (id=2528): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r1, 0x107, 0x2, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x42081}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcb65000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) shutdown(r0, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/243, 0xb1, 0x0, 0x0}, &(0x7f00000064c0)=0x40) 1m51.701768055s ago: executing program 4 (id=2529): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x20000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000006, 0x40032, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000180)={{0x89, 0x6}, 'port0\x00', 0x0, 0x80008, 0x3, 0x0, 0x688, 0x851, 0x400, 0x0, 0x0, 0x6}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r4, 0x89e1, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x1, 0x1, 0xffffff81) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 1m36.18671034s ago: executing program 32 (id=2529): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x20000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000006, 0x40032, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000180)={{0x89, 0x6}, 'port0\x00', 0x0, 0x80008, 0x3, 0x0, 0x688, 0x851, 0x400, 0x0, 0x0, 0x6}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r4, 0x89e1, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x1, 0x1, 0xffffff81) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 1m34.331631808s ago: executing program 1 (id=1849): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0106401, &(0x7f0000000580)={0x4000, 0x0}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x34}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000002900)=[0x0]) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r5 = openat$autofs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000006d02000000000000000013"]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044081}, 0x20008011) 48.61564379s ago: executing program 1 (id=1849): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0106401, &(0x7f0000000580)={0x4000, 0x0}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x34}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000002900)=[0x0]) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r5 = openat$autofs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000006d02000000000000000013"]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044081}, 0x20008011) 43.012440515s ago: executing program 0 (id=2667): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r4, &(0x7f0000000040)={0x1a, 0x331, 0x0, 0x0, 0xe, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) io_setup(0x5, &(0x7f0000000e80)=0x0) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)={0x1b8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x194, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "4e4f66b43ea4208109441fb27bd05d199a56b5bd"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "9ad6e68f88346da0c4a2d76b23b0382ad5d69ba6eabcf9cc11958aae98f049dcabeadb76"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "c9879cdfa990b11706d04b766c2e5e2eaff547b244fb1f"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xae, 0x3, "85eb24b6cb4db0949a73d8cf7b7adc4194d56f7cbebba561853da1e0cf1982793a79c8940f6a0276efff7cb98a32b83eb4dd9a5f31ae51b7970974c88b723ad4f8f5d3051d4a0195f591b0caf2e432f51e940c5c225b4b6948342425f79485eca86f31a6ec18d465f97b1db2ac6e6a20d0554733acafb0acaa2741a85bb7dba3dd8f4b9edaf1b4a8a64ab4067b522bc1cb8e999a92e69e6317bf50f34ade51d7408a32f2199b6973715a"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x100}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) io_submit(r6, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r7, &(0x7f0000000080)='d', 0x2}]) syz_init_net_socket$llc(0x1a, 0x801, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x10) mbind(&(0x7f00002ad000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) 40.653913453s ago: executing program 0 (id=2671): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) syz_open_dev$sndmidi(0x0, 0x1, 0x40503) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0xa80d, 0x10, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000440)=0x0) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) lseek(r5, 0xfffffffffffffe01, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x29, 0x4007, @fd_index=0x4, 0x3, 0x4, 0x1, 0x2, 0x0, {0x2}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x77359400}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x1) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_io_uring_setup(0x3b, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r9, r10, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r11, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0xe3d08660d3cd4e84}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3e0, 0x1f8, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110, 0x0, {0x0, 0xd2030000}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @remote, @multicast1}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'vlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) io_uring_enter(r8, 0x92, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0x14, &(0x7f0000000040), 0x50) 38.492283193s ago: executing program 0 (id=2674): rename(&(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000003c0)='./cgroup.cpu/cpuset.cpus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000280)={0x0, 0x0}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e00)={r2}, 0xc) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="52926de67c32af705e3779ba762ac85a45acb853df77db4852720300000000000000238af9d8495138072e8f691ed7596356ec419cebbd96cc71f9c383520f74fe816231228664fb6d5fb8c88b85f7e487879616c00e15de8f08da72a36c019e864274d3c5c97600f2c2bb3f20da7ee97c0470d08b065e4e3a5ba85dc7e91186be7ef80c20738df6acffcca71f1e1ccdc45d35caeb16dde9", @ANYRES16=r4, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000008000a0000000000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb0500220000000000"], 0x64}}, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x14, 0x0, 0x309, 0x0, 0x25dfdbfc, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0xc015}, 0x20040800) timer_settime(0x0, 0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000440), 0x200000000404, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, &(0x7f0000000000)="0dc2fc66653cc7"}, 0x20) r8 = syz_open_dev$usbfs(&(0x7f0000000400), 0x76, 0xa0801) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) ioctl$USBDEVFS_RESET(r8, 0x5514) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@private, @multicast1}, &(0x7f0000000340)=0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 37.169081799s ago: executing program 0 (id=2677): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = socket(0xa, 0x4, 0x3) socket$nl_rdma(0x10, 0x3, 0x14) r4 = accept4$x25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x12, 0x0) sendmsg(r4, 0x0, 0x4000004) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r5, &(0x7f000000ae80)={0x2020}, 0x2020) 32.797964712s ago: executing program 0 (id=2684): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x44080) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x10, 0x464, 0x800, 0x70bd28, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0xc010}, 0x80) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) 31.118074659s ago: executing program 0 (id=2688): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x29, 0xfffffffe, 0xffffffff85000014, 0x1, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095", @ANYRESDEC=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x79, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x18, r7, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x4}]}, 0x18}}, 0x0) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r2, &(0x7f0000000700)=""/90, 0x5a) 30.632945049s ago: executing program 33 (id=2688): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x29, 0xfffffffe, 0xffffffff85000014, 0x1, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095", @ANYRESDEC=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x79, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x18, r7, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x4}]}, 0x18}}, 0x0) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r2, &(0x7f0000000700)=""/90, 0x5a) 17.275447305s ago: executing program 2 (id=2713): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30043030303030303030303030303030093034303030302c757365725f839353", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0xfe05a, 0x5000, 0x0, 0xff, 0x4000000b}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r3], 0x78}}, 0x20000800) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x55, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x33, 0x0, @opaque="7cff0798ff05f9cbcf75520c2bb6843f29bddbc3a9662c000e7df80897724059421c54b9cc6e5507d497a4"}}}}}, 0x0) r5 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x13, r5, 0x0) write$binfmt_script(r5, &(0x7f0000000600)={'#! ', './file1/file0', [{0x20, '\x89,Qhm\xcd\xc7\xeb\xaf\xcd]y\x9c\x93\xacz\xd2c.\xc9}\xafm\t\x91\xcf\xcc\\N\xeb\x17\xc0\x90\\\x9d\x18\xb2\xbd\x17\x12\x8c{\xa5X\x92\x9b\xed?\xfd\xcb\xa5\xd0\xeduI\xc81w\xa9\x83\x89\xb1h\xe11=\x85\x82\xa2OI\xee\x02[\xf5:[\xb7\xa4l\xa6\xc5~\x8d\t\x00b\xf1\xe8I\x94\x82!\xedW\xb7t+\x02\xfb\xb9\x82\x89\x00\x00\x00\x00\x00'}, {0x20, '\xfe]\xe9a<$\x01)\xa3\x03D%\x06\xf9}iv\xfc\xe0\xc7s\xc1\xa5c\xfd\xb8\xea\xe5\x9a\x82w\xc6\\]\x8cB\xfb\xea\xd1\xe3\x8c@\x8aqX\xcd\xf5?\xe6\xa2z\xbdPF_\x01K5\xbf\xc0\x83=\xa9]S\xe2`\x02j;\xce\x8a\x9fY\xdc\x90L\x1f\x9cS\x83\xb4\xc3\xfb\xe9$\x80\xbd\x85\x8bu-a\x9a\xb3\xb0{\xed\xcc\xdd\xeeG\xeb\x98\xb2\xfa\xc8\xa1\x04\xd5N\x9f\xda\x95\xf8\x8c\x92v\xf3\xf6I\xeb6\xe9`\xcbt\x0f`\xb3dl\x0f\x8e\x93\x10\x97n@\xc4\xcb\xc6\x80\x17O\x8dM#x\xe2\xe9T\xda\x1d\xe6\xb1\x1b\x06\x89\x94Q\xcb\x8f\x92N\xade\xf9l\xc3\x81\xd3\xd1\x84`6\xed\x98\x9a\x90:\x13\xdb\x8f\x87\xd6\xe8w\xfdb\x17}\x14*z\x98\xb3\x96\x9dW\xa7\x81\x0e\x11Q3\xc2\xbfx\x94\xbb\x13\x9b\xd2\xec/\xfac^\xa2\x8e8\xbeM\x11\xcb\x89P\xba\xd9E}\xe4\xa7M~?\xbdiMh\xce\xb2\b\x9d\xf0\xbd\xc5\xa7=A\xc9\xf6\xff\\\x9c\xf0\xaa=\xb7\x83\x80\x01.%\t\xed\xb6\xacP\"\a\xc6\x8a\xf6GB\xd2a\x83\xa4\xa4\x1bRO\x1a\xe2N\xe6\xc8\xf2Cm\xb0\xe7\xeb\xcf\xc3\xba\xbd\xf4\xde\x8aZ@\xcd\xc9\xcbLJi8\x04q+\xf9x\xeas\xb2\xa1D\xd5\xc7\xfa\x919\x93_\xc7/:R2\xc5\xc0\xb4\"\x85\xe8THI$\xe5\xac\xb7\x13\xb2\xa5\x93\xbf\x83g5.\xb9\xd0\x89\xef\x8f\r\xa2\xfe\x90\x1b\xc8['}]}, 0x1ef) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f0000000cc0), r6}}, 0x18) ioctl$BLKRRPART(r5, 0x125f, 0x0) unlinkat(r5, &(0x7f0000000100)='./file0\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3f75d8c1e137169e, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000a00)=[{{&(0x7f0000000740)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f00000009c0)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x11}}], 0x1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r9, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') ioctl$FS_IOC_ENABLE_VERITY(r10, 0x40806685, &(0x7f0000000440)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000a80)={0x20, 0xfffffffffffffffe, 0xfffffffffffffffe, {0x81, 0x0, 0x7dd73e26, 0x7ff}}, 0x0}) write$cgroup_devices(r10, &(0x7f0000000200)=ANY=[@ANYBLOB="62202a3a2a20726d0077627bcfc361c5ea158a7e763d37c6ba3c03b5ba7716dff454827da14344ebedc434e068c051ddda9e76fa23641cde6ea9a5687744d321a89e276431a2277370d92a788cda00e9bf4845274db8a19ad9d549686dac4fe6244a4f548d8015ea57d6676939fa8710a4b9d76770"], 0x9) preadv(r5, &(0x7f0000000800)=[{&(0x7f00000004c0)=""/152, 0x98}, {&(0x7f0000000940)=""/217, 0xd9}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f000000a800)=""/4096, 0x1000}, {&(0x7f0000000580)=""/111, 0x6f}, {&(0x7f0000000ac0)=""/167, 0xa7}, {&(0x7f0000000340)=""/51, 0x33}, {&(0x7f0000000ec0)=""/230, 0xe6}], 0x8, 0x1000, 0x3) 16.460366622s ago: executing program 2 (id=2716): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x80000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f00000066c0)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x8, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x937}, 0x2, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r3, &(0x7f0000001200)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x79e7, @local, 0x2}, 0x18, 0x0}}], 0x1, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) 15.216765067s ago: executing program 2 (id=2718): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) mount(0x0, 0x0, 0x0, 0x10, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01032cbd7000fcdbdf25040000000c00018008000100", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_open_dev$amidi(0x0, 0x3e0, 0x123e81) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000000c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000000406ff01000000000000003cfe5732951408000000000000000200ffff05000100070000000900020073797a00586782acf4aa7bb5d000000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20004010}, 0x4004) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 9.397625592s ago: executing program 3 (id=2726): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000300)='./file0/../file0\x00') 9.153342202s ago: executing program 5 (id=2727): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x80000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f00000066c0)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x8, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x937}, 0x2, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r3, &(0x7f0000001200)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x79e7, @local, 0x2}, 0x18, 0x0}}], 0x1, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) 9.13905672s ago: executing program 3 (id=2728): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x490400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) r1 = semget$private(0x0, 0x6, 0x0) socket$kcm(0x10, 0x2, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_tables_targets\x00') readv(r6, &(0x7f0000000280)=[{&(0x7f0000000180)=""/193, 0xc1}], 0x1) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000300)={0x3, "901bde"}, 0x4) preadv(r6, 0x0, 0x0, 0x64, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0xc00) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) semtimedop(r1, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r1, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 9.020893259s ago: executing program 2 (id=2729): socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) acct(&(0x7f00000001c0)='./file0\x00') socket$inet6(0xa, 0x3, 0xff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)=r4}, 0x20) 7.42597303s ago: executing program 3 (id=2730): syz_io_uring_setup(0x4951, &(0x7f0000000500)={0x0, 0x1ffffc, 0x2000}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r2 = memfd_create(&(0x7f0000000580)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x01\x00\x00\x80h\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\x89\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\'.\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0xc) lseek(r2, 0xfffffffffffffffe, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x2, 0x485c2ec651740288, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1800}) 7.393483865s ago: executing program 5 (id=2731): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) 7.388320439s ago: executing program 1 (id=1849): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0106401, &(0x7f0000000580)={0x4000, 0x0}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x34}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000002900)=[0x0]) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r5 = openat$autofs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000006d02000000000000000013"]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044081}, 0x20008011) 5.28538975s ago: executing program 2 (id=2732): socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) acct(&(0x7f00000001c0)='./file0\x00') socket$inet6(0xa, 0x3, 0xff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)=r4}, 0x20) (fail_nth: 2) 5.278571688s ago: executing program 3 (id=2733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write(r1, &(0x7f00000002c0)='u', 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x901f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000300)="608a942b704c6ef0aa34fe3e4832c2eee68f0f6bc646f1092d1086e15c85ebfdcc6ea5e52038f836ab3fd21e28546cc35eb5dfc4a892ed35ca6d2257f69dff402f7049afc0a62d18d34bb6a4de7e6081e6f548d4d57a56fcbedbc194917996f41031d775202db3c1232b4c9b4de228e275acf3d6270703be975df735f8d87eb65b64a4cff17ff2162173ba868c6c7058b63a70", 0x93, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000081000010000000000000000000000000a20000000000a030000000000000000000300000009007a300000000040000000030a03020000000000000000030000000900030073797a30000000000900010073797a3000000000140004800800024000000000080001400000000028000000000a010400000000000000000b0000000900010073797a3000000000080002400000000114000000110001000000000000"], 0xb0}}, 0x0) 5.278338737s ago: executing program 5 (id=2734): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) socket$unix(0x1, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x1d}, {0xfff3}}}, 0x24}}, 0x0) 4.6541002s ago: executing program 6 (id=2689): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x44, r8, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x44}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r12], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r13}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4.302076873s ago: executing program 2 (id=2735): openat$drirender128(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x4003, 0xff, 0xc, 0x4, 0x0, 0x0, 0x40}, 0xc) listen(r0, 0xffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x2, 0x9a402) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x400445a0, &(0x7f0000000040)=""/255) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000800030003"], 0x68}}, 0x64000004) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 3.033514478s ago: executing program 6 (id=2736): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x3) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=@newqdisc={0x220, 0x24, 0x10, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x88a06bbbaeab0cf8}, {0x4}, {0xe, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xff}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0xffffffff, 0x80400000}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x7, 0x9, 0x7ff, 0x2, 0x6, 0x1, 0x5}}, {0xe, 0x2, [0x8, 0x8001, 0x10, 0x7995, 0x2]}}, {{0x1c, 0x1, {0x3, 0x7, 0x3, 0xa20, 0x1, 0xeb, 0x3, 0x5}}, {0xe, 0x2, [0x40, 0x0, 0x814, 0xfff, 0x6]}}, {{0x1c, 0x1, {0x4, 0x3, 0x3, 0x5e, 0x0, 0x10001, 0x3bb6, 0x2}}, {0x8, 0x2, [0x100, 0x4]}}, {{0x1c, 0x1, {0x7c, 0x8, 0xe, 0x1, 0x0, 0x4, 0x8, 0x4}}, {0xc, 0x2, [0x9, 0x6, 0x20a7, 0x8]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x80000001}}, @TCA_STAB={0xdc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x5, 0x4, 0x2, 0x2, 0x8, 0x1, 0x6}}, {0x10, 0x2, [0x7, 0x8, 0x7a5b, 0x3, 0x332c, 0x0]}}, {{0x1c, 0x1, {0x4, 0x3a, 0x0, 0xffff, 0x1, 0x18, 0x6, 0x3}}, {0xa, 0x2, [0x7, 0xc, 0x6]}}, {{0x1c, 0x1, {0x5, 0xf4, 0xffff, 0x2, 0x0, 0x80, 0x417, 0x7}}, {0x12, 0x2, [0x9, 0x60, 0xfffa, 0x9f4a, 0x9, 0x1, 0x4]}}, {{0x1c, 0x1, {0x10, 0xc, 0x9, 0xf, 0x2, 0x2, 0x0, 0x5}}, {0xe, 0x2, [0x4, 0x2, 0x4, 0x2, 0x6]}}, {{0x1c, 0x1, {0x2, 0x4, 0x3, 0xfffffc00, 0x0, 0x5, 0xe, 0x3}}, {0xa, 0x2, [0xa, 0x2, 0x100]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4000}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x5, 0x7}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x220}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000640)=""/4096, 0x1000, 0x2000, &(0x7f0000000380)=@generic={0x11, "d71d9c1bf36be386b8195be2f96732daece168ab8c4756fcaaaaa57ab4d9fa9c5e136c872457faea878081b25c7ac9863e328325d3608f7b92b91789fb2322981d60e78ecebc51a8a848ac66a135cbf9adb555f5fff1d2552ce4b120288f1c606bebc17e3b75c547a1c41ac89d1be3f0e179d586d665ef8397dfdbdaa865"}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r4, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:* r\x00'], 0x8) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) 2.847389425s ago: executing program 5 (id=2737): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x3) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0xe1, 0x7, 0xd220, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x7, 0x20, 0x3, 0x4}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=@newqdisc={0x224, 0x24, 0x10, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xb, 0x88a06bbbaeab0cf8}, {0x4}, {0xe, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xff}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0xffffffff, 0x80400000}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x7, 0x9, 0x7ff, 0x2, 0x6, 0x1, 0x5}}, {0xe, 0x2, [0x8, 0x8001, 0x10, 0x7995, 0x2]}}, {{0x1c, 0x1, {0x3, 0x7, 0x3, 0xa20, 0x1, 0xeb, 0x3, 0x5}}, {0xe, 0x2, [0x40, 0x0, 0x814, 0xfff, 0x6]}}, {{0x1c, 0x1, {0x4, 0x3, 0x3, 0x5e, 0x0, 0x10001, 0x3bb6, 0x3}}, {0xa, 0x2, [0x100, 0x4, 0x7fff]}}, {{0x1c, 0x1, {0x7c, 0x8, 0xe, 0x1, 0x0, 0x4, 0x8, 0x3}}, {0xa, 0x2, [0x9, 0x6, 0x8]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x80000001}}, @TCA_STAB={0xdc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x5, 0x4, 0x2, 0x2, 0x8, 0x1, 0x6}}, {0x10, 0x2, [0x7, 0x8, 0x7a5b, 0x3, 0x332c, 0x0]}}, {{0x1c, 0x1, {0x4, 0x3a, 0x0, 0xffff, 0x1, 0x18, 0x6, 0x3}}, {0xa, 0x2, [0x7, 0xc, 0x6]}}, {{0x1c, 0x1, {0x5, 0xf4, 0xffff, 0x2, 0x0, 0x80, 0x417, 0x7}}, {0x12, 0x2, [0x9, 0x60, 0xfffa, 0x9f4a, 0x9, 0x1, 0x4]}}, {{0x1c, 0x1, {0x10, 0xc, 0x9, 0xf, 0x2, 0x2, 0x0, 0x5}}, {0xe, 0x2, [0x4, 0x2, 0x4, 0x2, 0x6]}}, {{0x1c, 0x1, {0x2, 0x4, 0x3, 0xfffffc00, 0x0, 0x5, 0xe, 0x3}}, {0xa, 0x2, [0xa, 0x2, 0x100]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4000}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x5, 0x7}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x224}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000640)=""/4096, 0x1000, 0x2000, &(0x7f0000000380)=@generic={0x11, "d71d9c1bf36be386b8195be2f96732daece168ab8c4756fcaaaaa57ab4d9fa9c5e136c872457faea878081b25c7ac9863e328325d3608f7b92b91789fb2322981d60e78ecebc51a8a848ac66a135cbf9adb555f5fff1d2552ce4b120288f1c606bebc17e3b75c547a1c41ac89d1be3f0e179d586d665ef8397dfdbdaa865"}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r5, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:* r\x00'], 0x8) r8 = openat$cgroup_devices(r6, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="6115033a2a"], 0x8) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.341492105s ago: executing program 5 (id=2738): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x31, 0xfffffffffffffffc) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioperm(0x14, 0x4, 0x9e6) clock_adjtime(0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={0x0, r1, r1}, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1ff}], 0x18, 0x40}, 0x40008d0) r3 = socket$inet6(0xa, 0x1, 0x100) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000240)={'icmp\x00'}, &(0x7f0000000280)=0x1e) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) ptrace$getregset(0x4204, 0x0, 0x2, 0x0) 660.6992ms ago: executing program 5 (id=2739): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) close_range(r0, r0, 0x2) rseq(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') fchdir(r0) preadv(r4, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) 618.466256ms ago: executing program 3 (id=2740): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x80000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f00000066c0)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x8, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x937}, 0x2, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r3, &(0x7f0000001200)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x79e7, @local, 0x2}, 0x18, 0x0}}], 0x1, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) 0s ago: executing program 3 (id=2741): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYRES16=r1, @ANYBLOB="e81b4793bd6343f50b5ca747f898d1b620495540f18c4a4eb8290dba0675a4de0b750f75c43ffd9df4ac2e0747c4e83133f0bafaff13fc923fd5b8a42101e8794800f0da75862b2caaa3e7579dff35ec3066629b59c30cdc2eda4d45cbb13da84c7cd838a8165340cb7e9df47464d878f401ce2522c302745dba4a4fe2e7e584d90a762a49ef1769f7a9646b6659a119a31f41d2894e9682fd90b846d32c6e205c2d9cbf9c3e10690c0bd8de4f6c6bcb23801476a457670090645d72efe7473cdb751042abc468073039c98be08f96afa74dfdabc9da52f9bcb405de37ee99c91d03870e12c1b21d6e99274208521aabd55471a47197", @ANYRES8=r2, @ANYRES64=r3, @ANYRES32=0x0, @ANYRESHEX, @ANYRESHEX=r2, @ANYRES16=r1], 0x28}, 0x1, 0x0, 0x0, 0x20044095}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000300)='./file0/../file0\x00') kernel console output (not intermixed with test programs): d disabled state [ 1185.281310][T15101] bridge_slave_1: entered allmulticast mode [ 1185.289257][T15101] bridge_slave_1: entered promiscuous mode [ 1185.472009][T15245] overlayfs: overlapping lowerdir path [ 1186.240329][T15248] xt_ipcomp: unknown flags 12 [ 1186.578443][ T24] usb 5-1: USB disconnect, device number 63 [ 1186.578884][T15101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1186.616506][ T5876] usb 4-1: USB disconnect, device number 56 [ 1186.669284][T15101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1187.307844][T15258] netlink: 'syz.2.2349': attribute type 11 has an invalid length. [ 1187.334030][ T24] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1187.690610][T15101] team0: Port device team_slave_0 added [ 1187.813916][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1187.823061][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1187.857920][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1187.858806][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1187.858966][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.947355][ T24] usb 5-1: config 0 descriptor?? [ 1188.004705][T15101] team0: Port device team_slave_1 added [ 1188.062653][ T24] hub 5-1:0.0: USB hub found [ 1189.088852][T15263] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1189.412531][T15277] overlayfs: invalid redirect ((null)) [ 1190.102907][T15101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1190.131393][T15101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1190.182389][T15101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1190.195771][T15101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1190.202966][T15101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1190.238072][T15101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1190.832126][ T24] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1190.845344][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 1190.851887][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1190.915103][ T24] usb 5-1: USB disconnect, device number 64 [ 1191.329108][T15101] hsr_slave_0: entered promiscuous mode [ 1191.339361][T15101] hsr_slave_1: entered promiscuous mode [ 1193.929318][T15311] xt_ipcomp: unknown flags 12 [ 1199.254016][T15101] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1199.316474][T15101] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1199.340826][T15101] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1199.384256][T15101] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1199.399546][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2374'. [ 1199.424841][T15369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2374'. [ 1200.261258][T15101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1200.288843][T15375] netlink: 'syz.3.2374': attribute type 1 has an invalid length. [ 1200.312418][T15101] 8021q: adding VLAN 0 to HW filter on device team0 [ 1200.476102][T15380] xt_ipcomp: unknown flags 12 [ 1200.867254][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.874487][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1200.958784][ T6244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.966024][ T6244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1201.741048][T15101] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1201.751628][T15101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1201.829394][T15394] openvswitch: netlink: Actions may not be safe on all matching packets [ 1201.851659][T15394] usb usb8: usbfs: process 15394 (syz.0.2377) did not claim interface 0 before use [ 1202.143830][T15396] overlayfs: invalid redirect ((null)) [ 1202.351699][T15398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2379'. [ 1202.459522][T15401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2379'. [ 1202.808420][T15398] netlink: 'syz.3.2379': attribute type 1 has an invalid length. [ 1203.984110][T15101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1204.135807][T15101] veth0_vlan: entered promiscuous mode [ 1204.170911][T15101] veth1_vlan: entered promiscuous mode [ 1204.293259][T15101] veth0_macvtap: entered promiscuous mode [ 1204.335648][T15101] veth1_macvtap: entered promiscuous mode [ 1204.626797][T15429] overlayfs: conflicting lowerdir path [ 1205.045212][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1205.061527][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1205.157400][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1205.210899][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1205.231652][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1205.264165][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1205.290463][T15101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1205.358923][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1205.574199][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1205.584459][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1205.596242][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1205.607180][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1205.618026][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1205.640196][T15101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1206.560453][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1206.627866][T15101] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.712978][T15101] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.803368][T15101] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.840152][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1206.852396][T15101] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.899288][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1206.937206][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1207.066142][T15449] xt_ipcomp: unknown flags 12 [ 1207.440293][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1207.466429][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.521060][ T10] usb 3-1: config 0 descriptor?? [ 1207.575508][ T10] hub 3-1:0.0: USB hub found [ 1208.174083][ T6047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.185573][ T6047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.437357][ T6047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.621789][ T6047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.799604][T15466] overlayfs: overlapping lowerdir path [ 1209.952760][ T10] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1209.980187][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 1210.156834][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1211.206545][ T10] usb 3-1: USB disconnect, device number 53 [ 1214.316128][T15507] overlayfs: invalid redirect ((null)) [ 1214.544927][T15512] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2400'. [ 1214.544953][T15512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2400'. [ 1214.544971][T15512] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2400'. [ 1214.545006][T15512] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2400'. [ 1214.621015][ T6246] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.700512][T15502] lo speed is unknown, defaulting to 1000 [ 1214.869766][ T6246] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.013046][ T6246] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.079517][ T6246] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.292585][ T6246] bridge_slave_1: left allmulticast mode [ 1215.302323][ T6246] bridge_slave_1: left promiscuous mode [ 1215.312896][ T6246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.332585][ T6246] bridge_slave_0: left allmulticast mode [ 1215.339170][ T6246] bridge_slave_0: left promiscuous mode [ 1215.345951][ T6246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.897687][ T6246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1216.848941][T14788] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1216.897733][ T6246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1216.960178][ T6246] bond0 (unregistering): Released all slaves [ 1217.169679][T14788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1217.239829][T14788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1217.554348][T14788] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1217.584274][T14788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.648791][T14788] usb 4-1: config 0 descriptor?? [ 1217.857663][ T10] kernel write not supported for file /1809/attr/sockcreate (pid: 10 comm: kworker/0:1) [ 1217.876807][ T5879] kernel read not supported for file /rfkill (pid: 5879 comm: kworker/1:3) [ 1217.934351][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1218.137037][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1218.436161][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.614092][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1218.625075][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1218.638943][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.647620][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1218.655244][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1218.663013][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1218.673915][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1218.681687][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1218.689315][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1218.698003][T14788] uclogic 0003:256C:006D.0017: interface is invalid, ignoring [ 1218.708511][T13538] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1218.720071][T13538] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1218.730344][T13538] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1218.754668][ T6246] hsr_slave_0: left promiscuous mode [ 1218.760305][T13538] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1218.761372][T14788] usb 4-1: USB disconnect, device number 57 [ 1218.776677][ T9] usb 3-1: config 0 descriptor?? [ 1218.783907][T13538] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1218.818384][ T9] hub 3-1:0.0: USB hub found [ 1218.831052][ T6246] hsr_slave_1: left promiscuous mode [ 1218.890289][ T6246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1219.074997][ T6246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1219.774092][ T6246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1219.783689][ T6246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1220.247742][ T6246] veth1_macvtap: left promiscuous mode [ 1220.259974][ T6246] veth0_macvtap: left promiscuous mode [ 1220.270501][ T6246] veth1_vlan: left promiscuous mode [ 1220.294299][ T6246] veth0_vlan: left promiscuous mode [ 1220.843796][T15596] overlayfs: overlapping lowerdir path [ 1220.866080][T13538] Bluetooth: hci4: command tx timeout [ 1221.511793][ T9] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1221.550103][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1221.582741][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1221.841797][ T9] usb 3-1: USB disconnect, device number 54 [ 1222.944262][T13538] Bluetooth: hci4: command tx timeout [ 1224.694220][ T10] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 1224.876240][ T10] usb 3-1: config index 0 descriptor too short (expected 35355, got 27) [ 1224.904173][ T10] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 1224.920827][ T10] usb 3-1: config 0 has no interface number 0 [ 1224.934196][ T10] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 12336, setting to 64 [ 1224.966407][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1224.976586][ T10] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1224.985086][ T10] usb 3-1: Product: syz [ 1224.994503][ T10] usb 3-1: Manufacturer: syz [ 1224.994614][ T2148] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1224.999112][ T10] usb 3-1: SerialNumber: syz [ 1225.032075][ T10] usb 3-1: config 0 descriptor?? [ 1225.033690][T13538] Bluetooth: hci4: command tx timeout [ 1225.053927][ T10] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 1225.075101][ T10] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 1225.093571][ T10] keyspan 3-1:0.107: unsupported endpoint type 0 [ 1225.114335][ T10] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 1225.117628][ T24] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1225.125978][ T10] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1225.152778][ T6246] team0 (unregistering): Port device team_slave_1 removed [ 1225.160031][ T10] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 1225.178549][ T2148] usb 4-1: Using ep0 maxpacket: 16 [ 1225.183914][ T10] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1225.199567][ T2148] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 1225.220410][ T2148] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1225.228756][ T10] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 1225.230440][ T2148] usb 4-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1225.253415][ T6246] team0 (unregistering): Port device team_slave_0 removed [ 1225.262753][ T10] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1225.284423][ T2148] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1225.293489][ T10] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 1225.296326][ T24] usb 5-1: too many configurations: 151, using maximum allowed: 8 [ 1225.311670][ T2148] usb 4-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 1225.331498][ T2148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.333282][ T10] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1225.358472][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1225.368905][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1225.392066][ T24] usb 5-1: Product: syz [ 1225.398905][ T24] usb 5-1: Manufacturer: syz [ 1225.404430][ T24] usb 5-1: SerialNumber: syz [ 1225.455933][ T24] usb 5-1: config 0 descriptor?? [ 1225.516221][ T2148] usb 4-1: config 0 descriptor?? [ 1225.699920][ T10] usb 5-1: USB disconnect, device number 65 [ 1225.837755][ T24] usb 3-1: USB disconnect, device number 55 [ 1225.868861][ T24] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1225.905658][ T24] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1225.936439][ T24] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1225.955083][ T24] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1225.981734][ T2148] hid-alps 0003:044E:120B.0018: item fetching failed at offset 0/3 [ 1225.990140][ T24] keyspan 3-1:0.107: device disconnected [ 1226.002214][ T2148] hid-alps 0003:044E:120B.0018: parse failed [ 1226.009820][ T2148] hid-alps 0003:044E:120B.0018: probe with driver hid-alps failed with error -22 [ 1226.086886][T15572] lo speed is unknown, defaulting to 1000 [ 1226.194294][ T5879] usb 4-1: USB disconnect, device number 58 [ 1226.621275][T15659] xt_ipcomp: unknown flags 12 [ 1226.654194][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1226.832253][T15655] netlink: 'syz.4.2426': attribute type 12 has an invalid length. [ 1226.854560][T15655] netlink: 'syz.4.2426': attribute type 29 has an invalid length. [ 1226.888736][T15655] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2426'. [ 1227.019674][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1227.043485][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1227.071313][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.104568][T13538] Bluetooth: hci4: command tx timeout [ 1227.108071][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1227.607791][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.622649][T15572] chnl_net:caif_netlink_parms(): no params data found [ 1227.632516][ T10] usb 3-1: config 0 descriptor?? [ 1227.800187][ T10] hub 3-1:0.0: USB hub found [ 1228.397553][T15572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.441530][T15572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.463966][T15572] bridge_slave_0: entered allmulticast mode [ 1228.503529][T15572] bridge_slave_0: entered promiscuous mode [ 1228.536240][T15572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.563906][T15572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.584073][T15572] bridge_slave_1: entered allmulticast mode [ 1228.620797][T15572] bridge_slave_1: entered promiscuous mode [ 1228.734377][ T5879] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1228.977021][ T5879] usb 5-1: device descriptor read/64, error -71 [ 1229.284295][ T5879] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1229.350388][T15572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1229.391513][T15572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1229.414662][ T5879] usb 5-1: device descriptor read/64, error -71 [ 1229.463091][ T10] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1229.492772][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 1229.506770][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1229.554655][ T5879] usb usb5-port1: attempt power cycle [ 1229.579191][ T10] usb 3-1: USB disconnect, device number 56 [ 1229.849869][T15572] team0: Port device team_slave_0 added [ 1229.934362][ T5879] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1229.937314][T15572] team0: Port device team_slave_1 added [ 1230.031944][ T5879] usb 5-1: device descriptor read/8, error -71 [ 1230.355602][T15572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1230.378719][T15572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1230.404254][ T5879] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1230.954780][T15572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1230.971454][ T5879] usb 5-1: device descriptor read/8, error -71 [ 1230.992185][T15572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1230.999792][T15572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1231.029320][T15572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1231.086910][ T5879] usb usb5-port1: unable to enumerate USB device [ 1232.146891][T15572] hsr_slave_0: entered promiscuous mode [ 1232.153230][T15572] hsr_slave_1: entered promiscuous mode [ 1232.644694][T15724] xt_ipcomp: unknown flags 12 [ 1233.158475][T15732] netlink: 'syz.2.2436': attribute type 39 has an invalid length. [ 1233.303240][T15740] FAULT_INJECTION: forcing a failure. [ 1233.303240][T15740] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.348484][T15740] CPU: 0 UID: 0 PID: 15740 Comm: syz.0.2440 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1233.348511][T15740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1233.348522][T15740] Call Trace: [ 1233.348530][T15740] [ 1233.348539][T15740] dump_stack_lvl+0x189/0x250 [ 1233.348571][T15740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1233.348596][T15740] ? __pfx__printk+0x10/0x10 [ 1233.348628][T15740] ? __pfx___might_resched+0x10/0x10 [ 1233.348658][T15740] should_fail_ex+0x414/0x560 [ 1233.348715][T15740] should_failslab+0xa8/0x100 [ 1233.348746][T15740] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1233.348775][T15740] ? __alloc_skb+0x112/0x2d0 [ 1233.348800][T15740] __alloc_skb+0x112/0x2d0 [ 1233.348825][T15740] netlink_sendmsg+0x5c6/0xb30 [ 1233.348845][T15740] ? is_bpf_text_address+0x26/0x2b0 [ 1233.348878][T15740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1233.348906][T15740] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1233.348925][T15740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1233.348946][T15740] __sock_sendmsg+0x219/0x270 [ 1233.348978][T15740] ____sys_sendmsg+0x505/0x830 [ 1233.349006][T15740] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1233.349039][T15740] ? import_iovec+0x74/0xa0 [ 1233.349067][T15740] ___sys_sendmsg+0x21f/0x2a0 [ 1233.349092][T15740] ? __pfx____sys_sendmsg+0x10/0x10 [ 1233.349151][T15740] ? __fget_files+0x2a/0x420 [ 1233.349178][T15740] ? __fget_files+0x3a0/0x420 [ 1233.349215][T15740] __x64_sys_sendmsg+0x19b/0x260 [ 1233.349242][T15740] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1233.349281][T15740] ? do_syscall_64+0xba/0x210 [ 1233.349307][T15740] do_syscall_64+0xf6/0x210 [ 1233.349330][T15740] ? clear_bhb_loop+0x45/0xa0 [ 1233.349353][T15740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.349371][T15740] RIP: 0033:0x7ffbc498e969 [ 1233.349388][T15740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1233.349405][T15740] RSP: 002b:00007ffbc584a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1233.349425][T15740] RAX: ffffffffffffffda RBX: 00007ffbc4bb5fa0 RCX: 00007ffbc498e969 [ 1233.349439][T15740] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 1233.349451][T15740] RBP: 00007ffbc584a090 R08: 0000000000000000 R09: 0000000000000000 [ 1233.349463][T15740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1233.349474][T15740] R13: 0000000000000000 R14: 00007ffbc4bb5fa0 R15: 00007ffd205fcfc8 [ 1233.349503][T15740] [ 1233.595748][ C0] vkms_vblank_simulate: vblank timer overrun [ 1234.212898][T15732] veth0_macvtap: left promiscuous mode [ 1234.744341][ T5879] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1234.972305][ T5879] usb 4-1: Using ep0 maxpacket: 32 [ 1235.053524][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1235.088294][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1235.114198][ T5879] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1235.131175][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.148656][ T5879] usb 4-1: config 0 descriptor?? [ 1235.175294][ T5879] hub 4-1:0.0: USB hub found [ 1236.294935][T15750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2443'. [ 1238.225417][ T5879] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1238.261387][T15789] xt_ipcomp: unknown flags 12 [ 1238.699793][ T5879] usbhid 4-1:0.0: can't add hid device: -71 [ 1238.708574][ T5879] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1238.764965][ T5879] usb 4-1: USB disconnect, device number 59 [ 1238.789434][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.799779][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.255358][T15797] sock: sock_set_timeout: `syz.3.2451' (pid 15797) tries to set negative timeout [ 1239.453470][ T5879] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1239.714347][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 1239.862047][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1240.015846][ T5879] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1240.136305][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.470528][ T5879] usb 5-1: config 0 descriptor?? [ 1240.816008][T15572] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1240.832587][T15572] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1240.879438][T15572] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1240.963890][T15572] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1241.099491][ T5879] ntrig 0003:1B96:000A.0019: unknown main item tag 0x0 [ 1241.127874][ T5879] ntrig 0003:1B96:000A.0019: unknown main item tag 0x0 [ 1241.232100][ T5879] ntrig 0003:1B96:000A.0019: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 1241.545468][ T9] usb 5-1: USB disconnect, device number 70 [ 1242.101890][T15812] sock: sock_set_timeout: `syz.3.2456' (pid 15812) tries to set negative timeout [ 1243.559775][T15572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1243.704013][T15572] 8021q: adding VLAN 0 to HW filter on device team0 [ 1243.735602][ T6245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.743102][ T6245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1243.791977][ T6245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.799188][ T6245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1245.041876][T15572] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1245.056202][T15572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1245.166126][T15828] overlayfs: invalid redirect ((null)) [ 1248.074251][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1248.408504][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1248.435667][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1248.449901][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1248.474461][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1248.483594][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.598845][ T9] usb 3-1: config 0 descriptor?? [ 1249.626750][ T9] hub 3-1:0.0: USB hub found [ 1250.659683][T15572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.955621][T15879] overlayfs: invalid redirect ((null)) [ 1251.865532][ T9] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1251.893933][T15572] veth0_vlan: entered promiscuous mode [ 1251.934000][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1251.944394][T15572] veth1_vlan: entered promiscuous mode [ 1251.963791][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1252.475067][ T9] usb 3-1: USB disconnect, device number 57 [ 1252.529789][T15572] veth0_macvtap: entered promiscuous mode [ 1252.722647][T15890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2464'. [ 1252.723303][T15572] veth1_macvtap: entered promiscuous mode [ 1253.347625][T15572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1253.358251][T15572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.368209][T15572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1253.378762][T15572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.738813][T15572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1253.764221][T15572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.791404][T15572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1253.812396][T15891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2470'. [ 1253.859997][T15893] netlink: 'syz.4.2464': attribute type 1 has an invalid length. [ 1253.936187][T15572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.954045][T15572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.028423][T15572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1254.245961][T15572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.256121][T15572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1254.266714][T15572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.002146][T15572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1255.386737][T15572] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.564191][T15572] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.572950][T15572] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.614195][T15572] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.772516][T15919] FAULT_INJECTION: forcing a failure. [ 1255.772516][T15919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1255.785970][T15919] CPU: 0 UID: 0 PID: 15919 Comm: syz.3.2476 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1255.786005][T15919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1255.786017][T15919] Call Trace: [ 1255.786023][T15919] [ 1255.786029][T15919] dump_stack_lvl+0x189/0x250 [ 1255.786048][T15919] ? __lock_acquire+0xaac/0xd20 [ 1255.786068][T15919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1255.786089][T15919] ? __pfx__printk+0x10/0x10 [ 1255.786109][T15919] ? __might_fault+0xb0/0x130 [ 1255.786135][T15919] should_fail_ex+0x414/0x560 [ 1255.786158][T15919] _copy_from_user+0x2d/0xb0 [ 1255.786175][T15919] ___sys_sendmsg+0x158/0x2a0 [ 1255.786193][T15919] ? __pfx____sys_sendmsg+0x10/0x10 [ 1255.786232][T15919] ? __fget_files+0x2a/0x420 [ 1255.786250][T15919] ? __fget_files+0x3a0/0x420 [ 1255.786276][T15919] __x64_sys_sendmsg+0x19b/0x260 [ 1255.786293][T15919] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1255.786323][T15919] do_syscall_64+0xf6/0x210 [ 1255.786339][T15919] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1255.786352][T15919] ? clear_bhb_loop+0x45/0xa0 [ 1255.786367][T15919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.786380][T15919] RIP: 0033:0x7fa9b798e969 [ 1255.786390][T15919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1255.786401][T15919] RSP: 002b:00007fa9b57d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1255.786414][T15919] RAX: ffffffffffffffda RBX: 00007fa9b7bb6080 RCX: 00007fa9b798e969 [ 1255.786424][T15919] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 000000000000000a [ 1255.786433][T15919] RBP: 00007fa9b57d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1255.786440][T15919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1255.786448][T15919] R13: 0000000000000000 R14: 00007fa9b7bb6080 R15: 00007ffd8babe398 [ 1255.786467][T15919] [ 1256.483176][T15921] netlink: 'syz.2.2475': attribute type 4 has an invalid length. [ 1256.558112][T15922] netlink: 'syz.2.2475': attribute type 4 has an invalid length. [ 1256.703363][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.766921][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.777214][ T6245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.788220][ T6245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.710324][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 1257.710355][ T30] audit: type=1326 audit(1746732371.650:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15920 comm="syz.2.2475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2672d8e969 code=0x0 [ 1259.549356][T15945] openvswitch: netlink: Actions may not be safe on all matching packets [ 1259.571497][T15945] usb usb8: usbfs: process 15945 (syz.2.2481) did not claim interface 0 before use [ 1260.498005][T15947] sock: sock_set_timeout: `syz.4.2479' (pid 15947) tries to set negative timeout [ 1261.701752][T15955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2483'. [ 1262.320910][T15963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2485'. [ 1262.387873][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.602053][T15964] netlink: 'syz.2.2485': attribute type 1 has an invalid length. [ 1262.659038][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.798881][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.889946][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.080344][ T53] bridge_slave_1: left allmulticast mode [ 1263.086706][ T53] bridge_slave_1: left promiscuous mode [ 1263.094103][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.125244][ T53] bridge_slave_0: left allmulticast mode [ 1263.130936][ T53] bridge_slave_0: left promiscuous mode [ 1263.147642][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.722782][ T30] audit: type=1326 audit(1746732377.660:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15985 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b798e969 code=0x7ffc0000 [ 1263.767780][ T30] audit: type=1326 audit(1746732377.660:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15985 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b798e969 code=0x7ffc0000 [ 1263.793004][ T30] audit: type=1326 audit(1746732377.660:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15985 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa9b798e969 code=0x7ffc0000 [ 1263.832968][ T30] audit: type=1326 audit(1746732377.660:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15985 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b798e969 code=0x7ffc0000 [ 1263.864692][ T30] audit: type=1326 audit(1746732377.660:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15985 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b798e969 code=0x7ffc0000 [ 1263.887108][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1263.896721][ T30] audit: type=1326 audit(1746732377.660:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15985 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa9b798e969 code=0x7ffc0000 [ 1263.921844][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1263.932669][ T53] bond0 (unregistering): Released all slaves [ 1263.949252][ T30] audit: type=1326 audit(1746732377.660:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15985 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b798e969 code=0x7ffc0000 [ 1263.954231][T10442] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1263.954231][ T5876] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1263.999221][T15984] lo speed is unknown, defaulting to 1000 [ 1264.010452][ T30] audit: type=1326 audit(1746732377.660:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15985 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b798e969 code=0x7ffc0000 [ 1264.090199][ T30] audit: type=1326 audit(1746732377.660:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15985 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa9b798e969 code=0x7ffc0000 [ 1264.134433][ T30] audit: type=1326 audit(1746732377.660:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15985 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b798e969 code=0x7ffc0000 [ 1264.171457][ T5876] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.194894][ T5876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1264.206516][ T5876] usb 5-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 1264.218844][ T5876] usb 5-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 1264.234910][T10442] usb 4-1: Using ep0 maxpacket: 8 [ 1264.240926][ T5876] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1264.269530][T10442] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1264.270970][ T5876] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1264.286966][T10442] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1264.323533][T10442] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1264.326197][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.355052][T10442] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1264.374286][ T5876] usb 5-1: Product: syz [ 1264.401178][ T5876] usb 5-1: Manufacturer: syz [ 1264.406386][ T5876] usb 5-1: SerialNumber: syz [ 1264.429552][ T5876] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 1264.536204][T10442] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1264.549964][T10442] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1264.574245][T10442] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.608927][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1264.639674][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1264.649704][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1264.865332][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1264.882528][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1265.162038][T10442] usb 4-1: usb_control_msg returned -32 [ 1265.180538][T10442] usbtmc 4-1:16.0: can't read capabilities [ 1265.416869][ T53] hsr_slave_0: left promiscuous mode [ 1265.433195][ T53] hsr_slave_1: left promiscuous mode [ 1265.462570][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1265.494377][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1265.515263][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1265.522684][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1265.685361][T16016] mmap: syz.4.2489 (16016) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1266.665250][ T53] veth1_macvtap: left promiscuous mode [ 1266.701817][ T53] veth0_macvtap: left promiscuous mode [ 1266.720601][ T53] veth1_vlan: left promiscuous mode [ 1266.762045][ T53] veth0_vlan: left promiscuous mode [ 1267.189837][ T55] Bluetooth: hci4: command tx timeout [ 1267.359086][ T53] team0 (unregistering): Port device team_slave_1 removed [ 1267.400657][ T53] team0 (unregistering): Port device team_slave_0 removed [ 1267.750019][T15946] usb 4-1: USB disconnect, device number 60 [ 1267.959157][T15999] lo speed is unknown, defaulting to 1000 [ 1268.234476][T16040] openvswitch: netlink: Actions may not be safe on all matching packets [ 1268.832446][ T5876] usb 5-1: USB disconnect, device number 71 [ 1269.265273][ T55] Bluetooth: hci4: command tx timeout [ 1269.568687][T15999] chnl_net:caif_netlink_parms(): no params data found [ 1270.089348][T16047] xt_ipcomp: unknown flags 12 [ 1270.452239][T16067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2498'. [ 1270.927363][T16064] netlink: 'syz.0.2498': attribute type 1 has an invalid length. [ 1271.380020][ T55] Bluetooth: hci4: command tx timeout [ 1272.719851][T16087] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2502'. [ 1272.834507][T16087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2502'. [ 1272.843600][T16087] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2502'. [ 1273.276344][T15999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.886063][ T55] Bluetooth: hci4: command tx timeout [ 1274.048402][T15999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.055825][T15999] bridge_slave_0: entered allmulticast mode [ 1274.063630][T15999] bridge_slave_0: entered promiscuous mode [ 1274.077426][T16084] lo speed is unknown, defaulting to 1000 [ 1274.085184][T15999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.092315][T15999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.386084][T15999] bridge_slave_1: entered allmulticast mode [ 1274.398955][T15999] bridge_slave_1: entered promiscuous mode [ 1274.414644][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1274.414659][ T30] audit: type=1326 audit(1746732388.360:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16112 comm="syz.4.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff966f8e969 code=0x7ffc0000 [ 1274.442659][ C1] vkms_vblank_simulate: vblank timer overrun [ 1274.463488][ T30] audit: type=1326 audit(1746732388.360:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16112 comm="syz.4.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff966f8e969 code=0x7ffc0000 [ 1274.487305][ T30] audit: type=1326 audit(1746732388.370:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16112 comm="syz.4.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff966f8e969 code=0x7ffc0000 [ 1274.513938][ T30] audit: type=1326 audit(1746732388.370:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16112 comm="syz.4.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff966f8e969 code=0x7ffc0000 [ 1274.542550][ T30] audit: type=1326 audit(1746732388.370:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16112 comm="syz.4.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff966f8e969 code=0x7ffc0000 [ 1274.564720][ T30] audit: type=1326 audit(1746732388.370:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16112 comm="syz.4.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7ff966f8e969 code=0x7ffc0000 [ 1274.587744][ T30] audit: type=1326 audit(1746732388.370:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16112 comm="syz.4.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff966f8e969 code=0x7ffc0000 [ 1274.617960][ T30] audit: type=1326 audit(1746732388.370:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16112 comm="syz.4.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff966f8e969 code=0x7ffc0000 [ 1274.640357][ T30] audit: type=1326 audit(1746732388.370:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16112 comm="syz.4.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff966f8e969 code=0x7ffc0000 [ 1274.662463][ T30] audit: type=1326 audit(1746732388.370:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16112 comm="syz.4.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7ff966f8e969 code=0x7ffc0000 [ 1274.684272][ T5876] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1274.974205][ T5876] usb 5-1: Using ep0 maxpacket: 8 [ 1275.094831][T16119] openvswitch: netlink: Actions may not be safe on all matching packets [ 1275.721618][ T5876] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1275.735145][ T5876] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1275.818147][T16116] delete_channel: no stack [ 1275.818727][ T5876] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1275.909898][T15999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1275.936868][ T5876] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1275.948204][ T5876] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1275.961618][ T5876] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1275.970688][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.530071][T15999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1276.685159][T15999] team0: Port device team_slave_0 added [ 1276.698024][ T5876] usb 5-1: usb_control_msg returned -32 [ 1276.716268][ T5876] usbtmc 5-1:16.0: can't read capabilities [ 1276.743058][T15999] team0: Port device team_slave_1 added [ 1277.389347][T15999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1277.428036][T15999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1277.550913][T15999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1277.663381][T15999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1277.699477][T15999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1277.851592][T15999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1279.326196][ T10] usb 5-1: USB disconnect, device number 72 [ 1279.638547][T15999] hsr_slave_0: entered promiscuous mode [ 1280.265481][T15999] hsr_slave_1: entered promiscuous mode [ 1280.289168][T16160] FAULT_INJECTION: forcing a failure. [ 1280.289168][T16160] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.312025][T16160] CPU: 1 UID: 0 PID: 16160 Comm: syz.0.2516 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1280.312065][T16160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1280.312079][T16160] Call Trace: [ 1280.312088][T16160] [ 1280.312097][T16160] dump_stack_lvl+0x189/0x250 [ 1280.312133][T16160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1280.312161][T16160] ? __pfx__printk+0x10/0x10 [ 1280.312197][T16160] ? __pfx___might_resched+0x10/0x10 [ 1280.312232][T16160] should_fail_ex+0x414/0x560 [ 1280.312268][T16160] should_failslab+0xa8/0x100 [ 1280.312301][T16160] __kmalloc_noprof+0xcb/0x4f0 [ 1280.312329][T16160] ? qrtr_tun_write_iter+0xbf/0x180 [ 1280.312348][T16160] ? security_file_permission+0x75/0x290 [ 1280.312374][T16160] qrtr_tun_write_iter+0xbf/0x180 [ 1280.312396][T16160] aio_write+0x532/0x790 [ 1280.312432][T16160] ? __pfx_aio_write+0x10/0x10 [ 1280.312493][T16160] ? __might_fault+0xb0/0x130 [ 1280.312544][T16160] io_submit_one+0x70a/0x1240 [ 1280.312582][T16160] ? __lock_acquire+0xaac/0xd20 [ 1280.312614][T16160] ? __pfx_io_submit_one+0x10/0x10 [ 1280.312645][T16160] ? __might_fault+0xb0/0x130 [ 1280.312688][T16160] ? __might_fault+0xb0/0x130 [ 1280.312723][T16160] __se_sys_io_submit+0x185/0x2f0 [ 1280.312754][T16160] ? __pfx___se_sys_io_submit+0x10/0x10 [ 1280.312779][T16160] ? ksys_write+0x1f0/0x250 [ 1280.312817][T16160] ? do_syscall_64+0xba/0x210 [ 1280.312846][T16160] do_syscall_64+0xf6/0x210 [ 1280.312871][T16160] ? clear_bhb_loop+0x45/0xa0 [ 1280.312897][T16160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.312915][T16160] RIP: 0033:0x7ffbc498e969 [ 1280.312933][T16160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1280.312951][T16160] RSP: 002b:00007ffbc584a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1280.312973][T16160] RAX: ffffffffffffffda RBX: 00007ffbc4bb5fa0 RCX: 00007ffbc498e969 [ 1280.312988][T16160] RDX: 0000200000000180 RSI: 0000000000000001 RDI: 00007ffbc5804000 [ 1280.313003][T16160] RBP: 00007ffbc584a090 R08: 0000000000000000 R09: 0000000000000000 [ 1280.313016][T16160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1280.313028][T16160] R13: 0000000000000000 R14: 00007ffbc4bb5fa0 R15: 00007ffd205fcfc8 [ 1280.313066][T16160] [ 1282.512801][T16189] openvswitch: netlink: Actions may not be safe on all matching packets [ 1282.523124][T16189] usb usb8: usbfs: process 16189 (syz.3.2519) did not claim interface 0 before use [ 1285.800064][T16216] xt_ipcomp: unknown flags 12 [ 1288.441256][T16242] input: syz1 as /devices/virtual/input/input39 [ 1289.267693][T16245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2534'. [ 1289.714448][T10442] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1290.464145][T10442] usb 4-1: Using ep0 maxpacket: 8 [ 1290.598793][T10442] usb 4-1: config 126 has an invalid interface number: 10 but max is 0 [ 1290.631633][T10442] usb 4-1: config 126 has no interface number 0 [ 1291.118713][T10442] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=10.22 [ 1291.138110][T10442] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.145878][T15999] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1291.167904][T10442] usb 4-1: Product: syz [ 1291.314191][T10442] usb 4-1: Manufacturer: syz [ 1291.318831][T10442] usb 4-1: SerialNumber: syz [ 1291.364739][T10442] usb 4-1: Expected 3 endpoints, found: 0 [ 1291.430277][T16271] openvswitch: netlink: Actions may not be safe on all matching packets [ 1291.448579][T16271] usb usb8: usbfs: process 16271 (syz.2.2538) did not claim interface 0 before use [ 1291.887590][T10442] usb 4-1: USB disconnect, device number 61 [ 1291.937703][T15999] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1292.098758][T15999] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1292.152330][T15999] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1294.262890][T15999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1294.448218][T15999] 8021q: adding VLAN 0 to HW filter on device team0 [ 1294.471785][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.478926][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.559077][T16289] overlayfs: invalid redirect ((null)) [ 1295.081070][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.088202][ T3426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1296.294218][T15946] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1296.504440][T15946] usb 4-1: Using ep0 maxpacket: 8 [ 1296.521207][T15946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1296.964315][T15946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1297.052991][T15946] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1297.073380][T15946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 1297.104196][T15946] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1297.130816][T15946] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1297.160552][T15946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.213537][T15946] usb 4-1: config 0 descriptor?? [ 1297.235356][T16299] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1297.304545][T15999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1297.453779][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.457785][T15999] veth0_vlan: entered promiscuous mode [ 1297.461622][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.473767][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.480717][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.482314][T15999] veth1_vlan: entered promiscuous mode [ 1297.488046][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.499943][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.506932][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.513804][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.520777][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.527709][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.534637][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.541565][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.549248][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.556150][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.573167][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.580103][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.587070][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.593897][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.600883][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.610969][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.618120][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.627472][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.635210][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.642031][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.649315][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.656289][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.664748][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.664809][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.678648][T13538] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1297.983546][T15999] veth0_macvtap: entered promiscuous mode [ 1298.090795][T16325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2544'. [ 1298.845656][T15999] veth1_macvtap: entered promiscuous mode [ 1298.919025][T15999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.955682][T15999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.975546][T15999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.989090][T15999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.310595][T15999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1299.425108][ T55] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1299.474203][T15999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.525735][T15999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1299.551001][T15999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1299.568128][T15999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.590409][T15999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1299.602716][T15999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.612801][T15999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1299.644319][T15999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.666137][T15999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1299.678006][T15946] usb 4-1: USB disconnect, device number 62 [ 1299.700993][T15999] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.757399][T15999] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.774634][T15999] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.784405][T15999] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.029542][T16351] FAULT_INJECTION: forcing a failure. [ 1300.029542][T16351] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.072990][T16351] CPU: 1 UID: 0 PID: 16351 Comm: syz.3.2552 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1300.073022][T16351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1300.073034][T16351] Call Trace: [ 1300.073043][T16351] [ 1300.073052][T16351] dump_stack_lvl+0x189/0x250 [ 1300.073089][T16351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1300.073117][T16351] ? __pfx__printk+0x10/0x10 [ 1300.073151][T16351] ? __pfx___might_resched+0x10/0x10 [ 1300.073182][T16351] ? fs_reclaim_acquire+0x7d/0x100 [ 1300.073217][T16351] should_fail_ex+0x414/0x560 [ 1300.073255][T16351] should_failslab+0xa8/0x100 [ 1300.073288][T16351] __kmalloc_noprof+0xcb/0x4f0 [ 1300.073317][T16351] ? iovec_from_user+0x87/0x250 [ 1300.073348][T16351] iovec_from_user+0x87/0x250 [ 1300.073379][T16351] __import_iovec+0x163/0x7f0 [ 1300.073417][T16351] import_iovec+0x74/0xa0 [ 1300.073448][T16351] ___sys_recvmsg+0x43a/0x510 [ 1300.073483][T16351] ? __pfx____sys_recvmsg+0x10/0x10 [ 1300.073538][T16351] ? __fget_files+0x3a0/0x420 [ 1300.073580][T16351] do_recvmmsg+0x307/0x760 [ 1300.073616][T16351] ? __pfx_do_recvmmsg+0x10/0x10 [ 1300.073667][T16351] ? _copy_from_user+0x94/0xb0 [ 1300.073721][T16351] __x64_sys_recvmmsg+0x1af/0x240 [ 1300.073754][T16351] ? rcu_is_watching+0x15/0xb0 [ 1300.073780][T16351] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1300.073807][T16351] ? do_syscall_64+0xba/0x210 [ 1300.073831][T16351] do_syscall_64+0xf6/0x210 [ 1300.073852][T16351] ? clear_bhb_loop+0x45/0xa0 [ 1300.073873][T16351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.073890][T16351] RIP: 0033:0x7fa9b798e969 [ 1300.073906][T16351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1300.073921][T16351] RSP: 002b:00007fa9b57f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1300.073941][T16351] RAX: ffffffffffffffda RBX: 00007fa9b7bb5fa0 RCX: 00007fa9b798e969 [ 1300.073954][T16351] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 1300.073967][T16351] RBP: 00007fa9b57f6090 R08: 0000200000003700 R09: 0000000000000000 [ 1300.073979][T16351] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 1300.073990][T16351] R13: 0000000000000000 R14: 00007fa9b7bb5fa0 R15: 00007ffd8babe398 [ 1300.074017][T16351] [ 1300.300286][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.312375][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.771759][T16360] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1300.793135][T16360] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1301.641036][ T6244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1301.764924][ T6244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.697730][T11163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1302.744698][T11163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.951867][T16374] netlink: 212300 bytes leftover after parsing attributes in process `syz.3.2558'. [ 1303.186773][T13538] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1303.198304][T13538] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1303.211174][T13538] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1303.224388][T13538] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1303.232023][T13538] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1303.431052][T16376] lo speed is unknown, defaulting to 1000 [ 1303.833731][ T3426] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.159143][ T3426] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.358223][ T3426] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.529821][ T3426] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.760445][T16376] chnl_net:caif_netlink_parms(): no params data found [ 1305.041267][T16376] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.061131][T16376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.073209][T16376] bridge_slave_0: entered allmulticast mode [ 1305.081205][T16376] bridge_slave_0: entered promiscuous mode [ 1305.114333][T16376] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.146268][T16376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.153711][T16376] bridge_slave_1: entered allmulticast mode [ 1305.193948][T16376] bridge_slave_1: entered promiscuous mode [ 1305.269130][T13538] Bluetooth: hci5: command tx timeout [ 1305.280736][T16221] syz_tun (unregistering): left allmulticast mode [ 1305.407666][T16376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.449335][T16376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1305.472287][T16418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2562'. [ 1305.474517][ T3426] bridge_slave_1: left allmulticast mode [ 1305.496705][ T3426] bridge_slave_1: left promiscuous mode [ 1305.502490][ T3426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.569091][ T3426] bridge_slave_0: left allmulticast mode [ 1305.602374][ T3426] bridge_slave_0: left promiscuous mode [ 1305.689692][ T3426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.424184][T13538] Bluetooth: hci5: command tx timeout [ 1308.741543][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1308.750511][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1308.759147][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1308.768796][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1308.780228][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1308.963663][T16451] input: syz1 as /devices/virtual/input/input40 [ 1309.585739][ T55] Bluetooth: hci5: command tx timeout [ 1309.988962][ T3426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1310.009219][ T3426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1310.021485][ T3426] bond0 (unregistering): Released all slaves [ 1310.091847][T16446] lo speed is unknown, defaulting to 1000 [ 1310.866602][ T55] Bluetooth: hci2: command tx timeout [ 1311.041311][T16376] team0: Port device team_slave_0 added [ 1311.080781][T16376] team0: Port device team_slave_1 added [ 1311.184411][T15946] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1311.354239][T15946] usb 3-1: Using ep0 maxpacket: 8 [ 1311.635398][T15946] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1311.674264][ T55] Bluetooth: hci5: command tx timeout [ 1311.720823][T15946] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1311.790046][T15946] usb 3-1: Product: syz [ 1311.804854][T15946] usb 3-1: Manufacturer: syz [ 1311.809517][T15946] usb 3-1: SerialNumber: syz [ 1311.829161][T15946] usb 3-1: config 0 descriptor?? [ 1311.861750][T15946] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1312.060324][T16376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1312.089614][T16376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1312.126988][T16376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.223409][T16376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1312.249060][T16376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1312.319115][T16376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.356959][ T3426] hsr_slave_0: left promiscuous mode [ 1312.378512][ T3426] hsr_slave_1: left promiscuous mode [ 1312.386714][ T3426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1312.397658][ T3426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1312.409003][ T3426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1312.436230][ T3426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1312.476568][ T3426] veth1_macvtap: left promiscuous mode [ 1312.482135][ T3426] veth0_macvtap: left promiscuous mode [ 1312.534340][T15946] input: gspca_zc3xx as /devices/platform/dummy_hcd.2/usb3/3-1/input/input41 [ 1312.534371][ T3426] veth1_vlan: left promiscuous mode [ 1312.581371][ T3426] veth0_vlan: left promiscuous mode [ 1313.074230][ T55] Bluetooth: hci2: command tx timeout [ 1315.115382][T13538] Bluetooth: hci2: command tx timeout [ 1316.330078][T16518] FAULT_INJECTION: forcing a failure. [ 1316.330078][T16518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1316.343209][T16518] CPU: 1 UID: 0 PID: 16518 Comm: syz.3.2576 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1316.343238][T16518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1316.343251][T16518] Call Trace: [ 1316.343260][T16518] [ 1316.343268][T16518] dump_stack_lvl+0x189/0x250 [ 1316.343299][T16518] ? __lock_acquire+0xaac/0xd20 [ 1316.343330][T16518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1316.343358][T16518] ? __pfx__printk+0x10/0x10 [ 1316.343391][T16518] ? __might_fault+0xb0/0x130 [ 1316.343435][T16518] should_fail_ex+0x414/0x560 [ 1316.343472][T16518] _copy_from_user+0x2d/0xb0 [ 1316.343501][T16518] __sys_bpf+0x1ed/0x860 [ 1316.343527][T16518] ? __pfx___sys_bpf+0x10/0x10 [ 1316.343565][T16518] ? ksys_write+0x1f0/0x250 [ 1316.343591][T16518] ? rcu_is_watching+0x15/0xb0 [ 1316.343644][T16518] __x64_sys_bpf+0x7c/0x90 [ 1316.343666][T16518] do_syscall_64+0xf6/0x210 [ 1316.343692][T16518] ? clear_bhb_loop+0x45/0xa0 [ 1316.343727][T16518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.343746][T16518] RIP: 0033:0x7fa9b798e969 [ 1316.343763][T16518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1316.343780][T16518] RSP: 002b:00007fa9b57b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1316.343799][T16518] RAX: ffffffffffffffda RBX: 00007fa9b7bb6160 RCX: 00007fa9b798e969 [ 1316.343814][T16518] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 1316.343826][T16518] RBP: 00007fa9b57b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1316.343838][T16518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1316.343850][T16518] R13: 0000000000000000 R14: 00007fa9b7bb6160 R15: 00007ffd8babe398 [ 1316.343888][T16518] [ 1317.278224][T13538] Bluetooth: hci2: command tx timeout [ 1317.486857][T16529] binder: BINDER_SET_CONTEXT_MGR already set [ 1317.493412][T16529] binder: 16528:16529 ioctl 4018620d 200000000040 returned -16 [ 1318.031457][ T3426] team0 (unregistering): Port device team_slave_1 removed [ 1318.079359][ T3426] team0 (unregistering): Port device team_slave_0 removed [ 1318.998821][T16446] chnl_net:caif_netlink_parms(): no params data found [ 1319.514711][ T5876] usb 3-1: USB disconnect, device number 58 [ 1319.529305][T16376] hsr_slave_0: entered promiscuous mode [ 1319.585463][T16376] hsr_slave_1: entered promiscuous mode [ 1320.136685][T16446] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.155699][T16446] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.163041][T16446] bridge_slave_0: entered allmulticast mode [ 1320.183312][T16446] bridge_slave_0: entered promiscuous mode [ 1320.215762][T16446] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.235875][T16446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.253480][T16446] bridge_slave_1: entered allmulticast mode [ 1320.275304][T16446] bridge_slave_1: entered promiscuous mode [ 1320.543310][T16446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1320.630195][T16446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1320.722610][ T3426] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.095649][ T3426] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.637885][T16446] team0: Port device team_slave_0 added [ 1322.695476][T16446] team0: Port device team_slave_1 added [ 1322.902873][ T3426] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.540697][ T3426] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.123300][T16446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.156687][T16446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1325.519222][T16446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1325.627898][T16446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1325.644341][T16446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1325.726480][T16446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1326.515707][T16376] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1326.576432][T16376] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1326.598772][T16376] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1326.784296][T16376] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1327.003241][T10442] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1327.314948][T16446] hsr_slave_0: entered promiscuous mode [ 1327.331591][T16446] hsr_slave_1: entered promiscuous mode [ 1327.344883][T16446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1327.359960][T16446] Cannot create hsr debugfs directory [ 1327.550702][T10442] usb 4-1: Using ep0 maxpacket: 16 [ 1327.595312][T10442] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1327.606371][T10442] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1327.626924][T16652] overlayfs: invalid redirect ((null)) [ 1328.042763][T10442] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1328.184578][T10442] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.233028][T10442] usb 4-1: config 0 descriptor?? [ 1328.736584][T10442] hid (null): unknown global tag 0x1e [ 1328.761449][T10442] hid (null): nested delimiters [ 1328.812223][ T3426] bridge_slave_1: left allmulticast mode [ 1328.824194][ T3426] bridge_slave_1: left promiscuous mode [ 1328.829963][ T3426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.844428][T10442] hid (null): report_id 24797 is invalid [ 1328.856271][T10442] hid (null): bogus close delimiter [ 1328.924607][T16662] overlayfs: conflicting lowerdir path [ 1329.065941][ T3426] bridge_slave_0: left allmulticast mode [ 1329.180221][ T3426] bridge_slave_0: left promiscuous mode [ 1329.296853][T10442] letsketch 0003:6161:4D15.001A: Device info: 豧 [ 1329.316968][ T3426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.589503][T10442] usb 4-1: Max retries (5) exceeded reading string descriptor 201 [ 1329.602585][T10442] letsketch 0003:6161:4D15.001A: probe with driver letsketch failed with error -71 [ 1329.611972][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1329.611986][ T30] audit: type=1326 audit(1746732443.540:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16666 comm="syz.0.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc498e969 code=0x7ffc0000 [ 1329.682308][T10442] usb 4-1: USB disconnect, device number 63 [ 1329.697540][ T30] audit: type=1326 audit(1746732443.540:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16666 comm="syz.0.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc498e969 code=0x7ffc0000 [ 1329.739088][ T30] audit: type=1326 audit(1746732443.580:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16666 comm="syz.0.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7ffbc498e969 code=0x7ffc0000 [ 1329.784516][ T30] audit: type=1326 audit(1746732443.580:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16666 comm="syz.0.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc498e969 code=0x7ffc0000 [ 1329.807867][ T30] audit: type=1326 audit(1746732443.580:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16666 comm="syz.0.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc498e969 code=0x7ffc0000 [ 1329.829907][ T30] audit: type=1326 audit(1746732443.580:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16666 comm="syz.0.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7ffbc498e969 code=0x7ffc0000 [ 1329.907353][ T30] audit: type=1326 audit(1746732443.580:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16666 comm="syz.0.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc498e969 code=0x7ffc0000 [ 1330.900381][T16690] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2602'. [ 1330.949102][T16690] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2602'. [ 1330.981228][T16690] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2602'. [ 1331.004259][T16690] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2602'. [ 1331.058972][ T3426] dvmrp1 (unregistering): left allmulticast mode [ 1331.231025][ T3426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1331.243275][ T3426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1331.253758][ T3426] bond0 (unregistering): Released all slaves [ 1331.544810][T16689] lo speed is unknown, defaulting to 1000 [ 1332.015870][T16707] xt_ipcomp: unknown flags 12 [ 1332.236688][T16716] syz.2.2606 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1332.624416][ T30] audit: type=1326 audit(1746732446.520:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16704 comm="syz.2.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2672d8e969 code=0x7ffc0000 [ 1332.680936][ T30] audit: type=1326 audit(1746732446.520:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16704 comm="syz.2.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2672d8e969 code=0x7ffc0000 [ 1332.988355][ T30] audit: type=1326 audit(1746732446.930:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16724 comm="syz.2.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2672d8e969 code=0x7ffc0000 [ 1333.099918][ T3426] hsr_slave_0: left promiscuous mode [ 1333.136584][ T3426] hsr_slave_1: left promiscuous mode [ 1333.142620][ T3426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1333.154210][ T3426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1333.177055][ T3426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1333.194316][ T3426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1333.242418][ T3426] veth1_macvtap: left promiscuous mode [ 1333.274314][ T3426] veth0_macvtap: left promiscuous mode [ 1333.279917][ T3426] veth1_vlan: left promiscuous mode [ 1333.300580][ T3426] veth0_vlan: left promiscuous mode [ 1333.665723][T16732] xt_ipcomp: unknown flags 12 [ 1333.903673][T16735] overlayfs: invalid redirect ((null)) [ 1334.610871][T16740] openvswitch: netlink: Actions may not be safe on all matching packets [ 1334.632663][T16740] usb usb8: usbfs: process 16740 (syz.2.2612) did not claim interface 0 before use [ 1335.862427][ T3426] team0 (unregistering): Port device team_slave_1 removed [ 1335.896595][T16750] xt_ipcomp: unknown flags 12 [ 1336.018097][ T3426] team0 (unregistering): Port device team_slave_0 removed [ 1336.169859][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1336.170712][ T30] audit: type=1326 audit(1746732450.110:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16757 comm="syz.0.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc498e969 code=0x7ffc0000 [ 1336.600606][ T30] audit: type=1326 audit(1746732450.110:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16757 comm="syz.0.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc498e969 code=0x7ffc0000 [ 1336.625258][ T30] audit: type=1326 audit(1746732450.110:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16757 comm="syz.0.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7ffbc498e969 code=0x7ffc0000 [ 1336.651316][ T30] audit: type=1326 audit(1746732450.110:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16757 comm="syz.0.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc498e969 code=0x7ffc0000 [ 1336.699458][ T30] audit: type=1326 audit(1746732450.110:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16757 comm="syz.0.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc498e969 code=0x7ffc0000 [ 1336.729923][ T30] audit: type=1326 audit(1746732450.120:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16757 comm="syz.0.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7ffbc498e969 code=0x7ffc0000 [ 1336.753097][ T30] audit: type=1326 audit(1746732450.130:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16757 comm="syz.0.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc498e969 code=0x7ffc0000 [ 1336.777488][T16762] FAULT_INJECTION: forcing a failure. [ 1336.777488][T16762] name failslab, interval 1, probability 0, space 0, times 0 [ 1336.797616][T16762] CPU: 0 UID: 0 PID: 16762 Comm: syz.0.2620 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1336.797645][T16762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1336.797658][T16762] Call Trace: [ 1336.797668][T16762] [ 1336.797677][T16762] dump_stack_lvl+0x189/0x250 [ 1336.797714][T16762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1336.797742][T16762] ? __pfx__printk+0x10/0x10 [ 1336.797792][T16762] ? __pfx___might_resched+0x10/0x10 [ 1336.797820][T16762] ? fs_reclaim_acquire+0x7d/0x100 [ 1336.797848][T16762] should_fail_ex+0x414/0x560 [ 1336.797884][T16762] should_failslab+0xa8/0x100 [ 1336.797917][T16762] __kmalloc_noprof+0xcb/0x4f0 [ 1336.797944][T16762] ? vb2_core_reqbufs+0x904/0x1420 [ 1336.797974][T16762] vb2_core_reqbufs+0x904/0x1420 [ 1336.798018][T16762] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1336.798069][T16762] ? __kasan_kmalloc+0x93/0xb0 [ 1336.798117][T16762] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 1336.798147][T16762] ? __vb2_init_fileio+0x1e8/0xff0 [ 1336.798178][T16762] __vb2_init_fileio+0x318/0xff0 [ 1336.798208][T16762] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1336.798231][T16762] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1336.798264][T16762] vb2_core_poll+0x4f5/0x840 [ 1336.798303][T16762] vb2_fop_poll+0x168/0x380 [ 1336.798333][T16762] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1336.798360][T16762] v4l2_poll+0x144/0x2c0 [ 1336.798383][T16762] ? __pfx_v4l2_poll+0x10/0x10 [ 1336.798411][T16762] __io_arm_poll_handler+0x36f/0xbb0 [ 1336.798451][T16762] io_poll_add+0xcd/0x1f0 [ 1336.798475][T16762] ? __pfx_io_poll_add+0x10/0x10 [ 1336.798498][T16762] ? __pfx_io_poll_queue_proc+0x10/0x10 [ 1336.798526][T16762] ? __fget_files+0x2a/0x420 [ 1336.798561][T16762] ? __fget_files+0x2a/0x420 [ 1336.798589][T16762] ? __fget_files+0x3a0/0x420 [ 1336.798625][T16762] __io_issue_sqe+0x1d3/0x3b0 [ 1336.798659][T16762] io_issue_sqe+0x165/0x1040 [ 1336.798698][T16762] io_submit_sqes+0xa65/0x1d20 [ 1336.798764][T16762] __se_sys_io_uring_enter+0x2df/0x2b20 [ 1336.798818][T16762] ? ksys_write+0x1cb/0x250 [ 1336.798850][T16762] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1336.798879][T16762] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1336.798903][T16762] ? __pfx_vfs_write+0x10/0x10 [ 1336.798934][T16762] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1336.798964][T16762] ? __fget_files+0x3a0/0x420 [ 1336.799003][T16762] ? fput+0xa0/0xd0 [ 1336.799025][T16762] ? ksys_write+0x1f0/0x250 [ 1336.799051][T16762] ? rcu_is_watching+0x15/0xb0 [ 1336.799090][T16762] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1336.799125][T16762] do_syscall_64+0xf6/0x210 [ 1336.799152][T16762] ? clear_bhb_loop+0x45/0xa0 [ 1336.799178][T16762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.799199][T16762] RIP: 0033:0x7ffbc498e969 [ 1336.799218][T16762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1336.799248][T16762] RSP: 002b:00007ffbc584a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1336.799268][T16762] RAX: ffffffffffffffda RBX: 00007ffbc4bb5fa0 RCX: 00007ffbc498e969 [ 1336.799283][T16762] RDX: 0000000000000000 RSI: 0000000000002d3e RDI: 0000000000000004 [ 1336.799302][T16762] RBP: 00007ffbc584a090 R08: 0000000000000000 R09: 0000000000000000 [ 1336.799315][T16762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1336.799327][T16762] R13: 0000000000000000 R14: 00007ffbc4bb5fa0 R15: 00007ffd205fcfc8 [ 1336.799360][T16762] [ 1337.862239][T16772] overlayfs: invalid redirect ((null)) [ 1338.530548][T16778] xt_ipcomp: unknown flags 12 [ 1338.995757][ T10] lo speed is unknown, defaulting to 1000 [ 1339.020576][T16376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1339.027566][ T10] infiniband syz0: ib_query_port failed (-19) [ 1339.098849][T16376] 8021q: adding VLAN 0 to HW filter on device team0 [ 1339.136504][ T6244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.143683][ T6244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1339.173055][ T6244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.180296][ T6244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1339.230090][T16784] xt_ipcomp: unknown flags 12 [ 1339.401843][ T30] audit: type=1326 audit(1746732453.340:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.2.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2672d8e969 code=0x7ffc0000 [ 1339.431564][T16376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1339.470803][T16446] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1339.499689][ T30] audit: type=1326 audit(1746732453.340:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.2.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2672d8e969 code=0x7ffc0000 [ 1339.580248][T16446] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1339.598290][T16796] /dev/nullb0: Can't open blockdev [ 1339.604728][ T30] audit: type=1326 audit(1746732453.380:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.2.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2672d8e969 code=0x7ffc0000 [ 1339.669842][T16446] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1339.716537][T16794] @: renamed from vlan0 (while UP) [ 1339.791587][T16446] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1339.894253][ T24] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1340.086478][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1340.117958][ T24] usb 3-1: config 1 has an invalid descriptor of length 203, skipping remainder of the config [ 1340.150601][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1340.299187][T16446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1340.406438][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=c249, bcdDevice= 0.40 [ 1340.458134][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.498014][ T24] usb 3-1: Product: syz [ 1340.502384][ T24] usb 3-1: Manufacturer: syz [ 1340.532562][ T24] usb 3-1: SerialNumber: syz [ 1340.675750][ T3426] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1340.861148][T16446] 8021q: adding VLAN 0 to HW filter on device team0 [ 1340.891897][T11197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.899124][T11197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1340.922157][T16376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1340.966040][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.973257][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1341.009448][ T24] usb 3-1: cannot find UAC_HEADER [ 1341.108592][ T24] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1341.155654][ T24] usb 3-1: USB disconnect, device number 59 [ 1341.414248][T16830] xt_ipcomp: unknown flags 12 [ 1341.776865][T16821] udevd[16821]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1341.995616][T16838] FAULT_INJECTION: forcing a failure. [ 1341.995616][T16838] name failslab, interval 1, probability 0, space 0, times 0 [ 1342.037564][T16838] CPU: 0 UID: 0 PID: 16838 Comm: syz.3.2638 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1342.037591][T16838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1342.037604][T16838] Call Trace: [ 1342.037611][T16838] [ 1342.037638][T16838] dump_stack_lvl+0x189/0x250 [ 1342.037690][T16838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1342.037718][T16838] ? __pfx__printk+0x10/0x10 [ 1342.037753][T16838] ? __pfx___might_resched+0x10/0x10 [ 1342.037784][T16838] ? fs_reclaim_acquire+0x7d/0x100 [ 1342.037812][T16838] should_fail_ex+0x414/0x560 [ 1342.037850][T16838] should_failslab+0xa8/0x100 [ 1342.037884][T16838] __kmalloc_noprof+0xcb/0x4f0 [ 1342.037913][T16838] ? tomoyo_encode+0x28b/0x550 [ 1342.037944][T16838] tomoyo_encode+0x28b/0x550 [ 1342.037976][T16838] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1342.038024][T16838] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1342.038046][T16838] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1342.038071][T16838] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1342.038112][T16838] ? __lock_acquire+0xaac/0xd20 [ 1342.038161][T16838] ? __fget_files+0x2a/0x420 [ 1342.038198][T16838] ? __fget_files+0x3a0/0x420 [ 1342.038227][T16838] ? __fget_files+0x2a/0x420 [ 1342.038262][T16838] security_file_ioctl+0xcb/0x2d0 [ 1342.038289][T16838] __se_sys_ioctl+0x47/0x170 [ 1342.038317][T16838] do_syscall_64+0xf6/0x210 [ 1342.038344][T16838] ? clear_bhb_loop+0x45/0xa0 [ 1342.038370][T16838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.038390][T16838] RIP: 0033:0x7fa9b798e969 [ 1342.038409][T16838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1342.038427][T16838] RSP: 002b:00007fa9b57f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1342.038448][T16838] RAX: ffffffffffffffda RBX: 00007fa9b7bb5fa0 RCX: 00007fa9b798e969 [ 1342.038464][T16838] RDX: 0000200000000ac0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1342.038477][T16838] RBP: 00007fa9b57f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1342.038490][T16838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1342.038503][T16838] R13: 0000000000000000 R14: 00007fa9b7bb5fa0 R15: 00007ffd8babe398 [ 1342.038536][T16838] [ 1342.038558][T16838] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1342.377793][T16446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1342.572595][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1342.572614][ T30] audit: type=1326 audit(1746732456.510:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16847 comm="syz.3.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b798e969 code=0x7ffc0000 [ 1342.630071][T16446] veth0_vlan: entered promiscuous mode [ 1342.642577][ T30] audit: type=1326 audit(1746732456.510:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16847 comm="syz.3.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b798e969 code=0x7ffc0000 [ 1342.710114][ T30] audit: type=1326 audit(1746732456.550:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16847 comm="syz.3.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa9b798e969 code=0x7ffc0000 [ 1342.736083][T16446] veth1_vlan: entered promiscuous mode [ 1342.757236][T16376] veth0_vlan: entered promiscuous mode [ 1342.982295][ T30] audit: type=1326 audit(1746732456.550:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16847 comm="syz.3.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b798e969 code=0x7ffc0000 [ 1343.207886][T16855] overlayfs: invalid redirect ((null)) [ 1343.218476][ T30] audit: type=1326 audit(1746732456.550:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16847 comm="syz.3.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fa9b798e969 code=0x7ffc0000 [ 1343.223819][T16376] veth1_vlan: entered promiscuous mode [ 1343.247927][ T30] audit: type=1326 audit(1746732456.550:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16847 comm="syz.3.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b798e969 code=0x7ffc0000 [ 1343.462720][T16376] veth0_macvtap: entered promiscuous mode [ 1343.475968][T16446] veth0_macvtap: entered promiscuous mode [ 1343.495007][T16376] veth1_macvtap: entered promiscuous mode [ 1343.526910][T16446] veth1_macvtap: entered promiscuous mode [ 1343.572442][T16376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1343.594735][T16376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.615930][T16376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1343.642095][T16376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.669512][T16376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1343.683206][T16446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1343.704306][T16446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.727935][T16446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1343.754094][T16446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.779098][T16446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1343.809976][T16446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.838102][T16446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1343.892986][T16446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.914976][T16446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.946506][T16446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.964371][T16446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.991559][T16446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1344.011015][T16376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1344.070872][T16376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.084880][T16376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1344.104175][T16376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.136415][T16376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1344.157660][T16376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.189042][T16376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1344.223382][T16446] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.274404][T16446] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.283149][T16446] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.305329][T16446] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.495266][T16376] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.544767][T16376] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.554000][T16376] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.562874][T16376] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.155076][T16888] input: syz1 as /devices/virtual/input/input43 [ 1346.124277][T11197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1346.190056][T11197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1346.372100][T16898] xt_ipcomp: unknown flags 12 [ 1346.518504][ T3426] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1346.672394][ T6246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1346.738174][ T6246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1346.839924][ T30] audit: type=1326 audit(1746732460.780:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16899 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b798e969 code=0x7ffc0000 [ 1346.913704][ T6246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1346.948048][ T30] audit: type=1326 audit(1746732460.780:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16899 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b798e969 code=0x7ffc0000 [ 1346.977101][ T6246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1347.058710][ T30] audit: type=1326 audit(1746732460.810:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16899 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa9b798e969 code=0x7ffc0000 [ 1347.101843][ T6244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1347.138891][ T6244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1347.142982][ T30] audit: type=1326 audit(1746732460.810:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16899 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b798e969 code=0x7ffc0000 [ 1348.053761][ T30] audit: type=1326 audit(1746732460.810:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16899 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b798e969 code=0x7ffc0000 [ 1348.254750][ T30] audit: type=1326 audit(1746732460.810:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16899 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fa9b798e969 code=0x7ffc0000 [ 1348.356720][ T30] audit: type=1326 audit(1746732460.810:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16899 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b798e969 code=0x7ffc0000 [ 1348.438653][ T30] audit: type=1326 audit(1746732460.810:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16899 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b798e969 code=0x7ffc0000 [ 1349.562070][ T6244] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.568427][T16935] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2657'. [ 1349.586423][T16935] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2657'. [ 1349.614225][T16935] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2657'. [ 1349.623751][T16935] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2657'. [ 1349.717976][T16938] overlayfs: invalid redirect ((null)) [ 1349.876369][ T6244] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.155546][ T6244] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.268016][ T6244] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.421634][ T6244] bridge_slave_1: left allmulticast mode [ 1350.428199][ T6244] bridge_slave_1: left promiscuous mode [ 1350.437091][ T6244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.450724][ T6244] bridge_slave_0: left allmulticast mode [ 1350.457026][ T6244] bridge_slave_0: left promiscuous mode [ 1350.462787][ T6244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.779288][ T6244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1350.790700][ T6244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1350.804485][ T6244] bond0 (unregistering): Released all slaves [ 1351.093832][ T6244] hsr_slave_0: left promiscuous mode [ 1351.101695][ T6244] hsr_slave_1: left promiscuous mode [ 1351.112905][ T6244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1351.122131][ T6244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1351.136181][ T6244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1351.143630][ T6244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1351.182401][ T6244] veth1_macvtap: left promiscuous mode [ 1351.230286][ T6244] veth0_macvtap: left promiscuous mode [ 1351.244514][ T6244] veth1_vlan: left promiscuous mode [ 1351.249863][ T6244] veth0_vlan: left promiscuous mode [ 1351.663017][T16982] input: syz1 as /devices/virtual/input/input44 [ 1352.438122][T15780] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1352.904679][T16992] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1352.917541][T16992] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1352.984841][T16994] input: syz1 as /devices/virtual/input/input45 [ 1353.655686][T16992] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1353.665420][T16992] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1353.709337][T16992] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1353.911190][T16999] overlay: filesystem on ./file0 not supported as upperdir [ 1354.139390][ T6244] team0 (unregistering): Port device team_slave_1 removed [ 1354.186806][ T6244] team0 (unregistering): Port device team_slave_0 removed [ 1355.407336][T17016] overlayfs: invalid redirect ((null)) [ 1355.775707][T13538] Bluetooth: hci2: command tx timeout [ 1356.431494][T17021] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2668'. [ 1357.017036][T17024] overlayfs: invalid redirect ((null)) [ 1357.801234][T16991] chnl_net:caif_netlink_parms(): no params data found [ 1357.831557][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1357.842908][T13538] Bluetooth: hci2: command tx timeout [ 1357.884682][T17033] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2670'. [ 1357.924230][T17033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2670'. [ 1358.151196][T17033] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2670'. [ 1358.188383][T17033] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2670'. [ 1359.372620][T17048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2673'. [ 1359.994246][T13538] Bluetooth: hci2: command tx timeout [ 1360.931436][T17070] Bluetooth: MGMT ver 1.23 [ 1361.155298][T16991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.162671][T16991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.200558][T16991] bridge_slave_0: entered allmulticast mode [ 1361.221912][T16991] bridge_slave_0: entered promiscuous mode [ 1361.332859][T16991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.349545][T16991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.369545][T16991] bridge_slave_1: entered allmulticast mode [ 1361.406069][T16991] bridge_slave_1: entered promiscuous mode [ 1361.763890][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.786751][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.004489][T16991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1362.046913][T16991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1362.064459][T13538] Bluetooth: hci2: command tx timeout [ 1362.312721][T16991] team0: Port device team_slave_0 added [ 1362.344737][T16991] team0: Port device team_slave_1 added [ 1362.610808][T16991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1363.336960][T16991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.424150][T16991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1363.456132][T16991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1363.463115][T16991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1364.458722][T16991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1364.505487][ T1332] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1366.438897][ T5818] syz_tun (unregistering): left allmulticast mode [ 1366.631206][T16991] hsr_slave_0: entered promiscuous mode [ 1366.704955][T16991] hsr_slave_1: entered promiscuous mode [ 1366.740168][T16991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1366.758344][T16991] Cannot create hsr debugfs directory [ 1367.087444][ T3545] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.323627][ T3545] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.877961][T17136] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2691'. [ 1367.887182][T17136] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2691'. [ 1367.904163][T17136] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2691'. [ 1367.934337][T17136] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2691'. [ 1367.981577][ T3545] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.105409][ T3545] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.331098][T16992] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1368.344839][T16992] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1368.356093][T16992] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1368.368371][T16992] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1368.378277][T16992] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1370.466259][T13538] Bluetooth: hci0: command tx timeout [ 1370.644497][ T6245] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1370.861147][T17169] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2696'. [ 1371.498905][ T3545] dvmrp1 (unregistering): left allmulticast mode [ 1371.600491][T17175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2697'. [ 1372.372038][ T3545] bond0 (unregistering): Released all slaves [ 1372.394765][ T3545] bond1 (unregistering): Released all slaves [ 1372.447623][T17171] vlan2: entered promiscuous mode [ 1372.452874][T17171] vlan2: entered allmulticast mode [ 1372.458100][T17171] hsr_slave_1: entered allmulticast mode [ 1372.544934][T13538] Bluetooth: hci0: command tx timeout [ 1372.932637][T17189] FAULT_INJECTION: forcing a failure. [ 1372.932637][T17189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1372.945940][T17189] CPU: 1 UID: 0 PID: 17189 Comm: syz.2.2701 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1372.945969][T17189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1372.945983][T17189] Call Trace: [ 1372.945992][T17189] [ 1372.946001][T17189] dump_stack_lvl+0x189/0x250 [ 1372.946037][T17189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1372.946065][T17189] ? __pfx__printk+0x10/0x10 [ 1372.946111][T17189] should_fail_ex+0x414/0x560 [ 1372.946148][T17189] _copy_to_user+0x31/0xb0 [ 1372.946179][T17189] simple_read_from_buffer+0xe1/0x170 [ 1372.946213][T17189] proc_fail_nth_read+0x1df/0x250 [ 1372.946237][T17189] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1372.946261][T17189] ? rw_verify_area+0x258/0x650 [ 1372.946287][T17189] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1372.946309][T17189] vfs_read+0x1fd/0x980 [ 1372.946342][T17189] ? __pfx___mutex_lock+0x10/0x10 [ 1372.946366][T17189] ? __pfx_vfs_read+0x10/0x10 [ 1372.946394][T17189] ? __fget_files+0x2a/0x420 [ 1372.946429][T17189] ? __fget_files+0x3a0/0x420 [ 1372.946459][T17189] ? __fget_files+0x2a/0x420 [ 1372.946505][T17189] ksys_read+0x145/0x250 [ 1372.946535][T17189] ? __pfx_ksys_read+0x10/0x10 [ 1372.946566][T17189] ? do_syscall_64+0xba/0x210 [ 1372.946595][T17189] do_syscall_64+0xf6/0x210 [ 1372.946620][T17189] ? clear_bhb_loop+0x45/0xa0 [ 1372.946646][T17189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.946666][T17189] RIP: 0033:0x7f2672d8d37c [ 1372.946697][T17189] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1372.946714][T17189] RSP: 002b:00007f2673c87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1372.946735][T17189] RAX: ffffffffffffffda RBX: 00007f2672fb5fa0 RCX: 00007f2672d8d37c [ 1372.946750][T17189] RDX: 000000000000000f RSI: 00007f2673c870a0 RDI: 0000000000000004 [ 1372.946763][T17189] RBP: 00007f2673c87090 R08: 0000000000000000 R09: 0000000000000000 [ 1372.946775][T17189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1372.946787][T17189] R13: 0000000000000000 R14: 00007f2672fb5fa0 R15: 00007ffc69b321b8 [ 1372.946820][T17189] [ 1373.294017][T17147] chnl_net:caif_netlink_parms(): no params data found [ 1373.377324][ T3545] hsr_slave_0: left promiscuous mode [ 1373.391012][ T3545] hsr_slave_1: left promiscuous mode [ 1373.489187][ T3545] veth1_macvtap: left promiscuous mode [ 1373.502906][ T3545] veth0_macvtap: left promiscuous mode [ 1373.508697][T14788] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1373.528746][ T3545] veth1_vlan: left promiscuous mode [ 1373.534791][ T3545] veth0_vlan: left promiscuous mode [ 1373.675179][T14788] usb 3-1: Using ep0 maxpacket: 32 [ 1373.687736][T14788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1373.712090][T14788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1373.755827][T14788] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1373.824982][T14788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.856819][T14788] usb 3-1: config 0 descriptor?? [ 1373.881651][T14788] hub 3-1:0.0: USB hub found [ 1374.093505][T14788] hub 3-1:0.0: 1 port detected [ 1374.624608][T13538] Bluetooth: hci0: command tx timeout [ 1374.866517][T17212] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2702'. [ 1376.001700][T17218] overlayfs: invalid redirect ((null)) [ 1376.380056][T14788] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 1376.516628][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1376.716284][T13538] Bluetooth: hci0: command tx timeout [ 1376.749409][T17147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.758382][T17147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.774694][T17147] bridge_slave_0: entered allmulticast mode [ 1376.782487][T17147] bridge_slave_0: entered promiscuous mode [ 1376.791322][T17147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.798489][T17147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.806891][T17147] bridge_slave_1: entered allmulticast mode [ 1376.814646][T17147] bridge_slave_1: entered promiscuous mode [ 1377.185864][ T24] usb 3-1: USB disconnect, device number 60 [ 1377.498923][T17147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1377.723966][T16991] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1378.787150][T17147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1379.052969][T17240] input: syz1 as /devices/virtual/input/input47 [ 1380.035846][T16991] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1380.289962][T17147] team0: Port device team_slave_0 added [ 1380.465406][T16991] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1380.489556][T17147] team0: Port device team_slave_1 added [ 1380.580948][T16991] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1380.950079][T17147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1380.954684][T17253] fuse: Bad value for 'rootmode' [ 1380.964082][T17147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1381.008422][T17253] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2713'. [ 1381.057795][T17147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1381.117946][T17147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1381.148970][T17147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1381.185003][T17147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1381.389002][T17147] hsr_slave_0: entered promiscuous mode [ 1381.406383][T17262] overlayfs: invalid redirect ((null)) [ 1381.431193][T17147] hsr_slave_1: entered promiscuous mode [ 1381.437846][T17147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1381.449266][T17147] Cannot create hsr debugfs directory [ 1381.525580][T11782] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1381.632206][T17269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2716'. [ 1382.034490][T11782] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 1382.042716][T11782] usb 4-1: config 0 has no interface number 0 [ 1382.072059][T11782] usb 4-1: config 0 interface 146 has no altsetting 0 [ 1382.164619][T15780] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1382.186768][T11782] usb 4-1: New USB device found, idVendor=19d2, idProduct=ffcd, bcdDevice=76.d4 [ 1382.554321][T11782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.634681][T11782] usb 4-1: Product: syz [ 1382.657369][T11782] usb 4-1: Manufacturer: syz [ 1382.662028][T11782] usb 4-1: SerialNumber: syz [ 1382.695558][T11782] usb 4-1: config 0 descriptor?? [ 1382.970664][T11782] option 4-1:0.146: GSM modem (1-port) converter detected [ 1382.990317][T16991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1382.997089][ T52] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1383.022156][T11782] usb 4-1: USB disconnect, device number 64 [ 1383.308634][T11782] option 4-1:0.146: device disconnected [ 1383.668508][T16991] 8021q: adding VLAN 0 to HW filter on device team0 [ 1383.719645][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.726884][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1383.746198][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.753348][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1383.794406][ T52] usb 3-1: Using ep0 maxpacket: 32 [ 1383.806011][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1383.843327][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1383.862386][ T52] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1383.872619][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.894916][T17147] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1383.903224][ T52] usb 3-1: config 0 descriptor?? [ 1383.911816][T17147] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1383.927162][ T52] hub 3-1:0.0: USB hub found [ 1383.949347][T17147] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1383.974954][T17147] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1384.129373][ T52] hub 3-1:0.0: 1 port detected [ 1384.159626][T17147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1384.218905][T17147] 8021q: adding VLAN 0 to HW filter on device team0 [ 1384.250133][T11197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.257369][T11197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1384.284025][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 1384.291293][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1384.428043][T16991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1385.476279][ T52] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 1385.487387][ T52] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 1385.513954][ T52] usbhid 3-1:0.0: can't add hid device: -32 [ 1385.527947][T16991] veth0_vlan: entered promiscuous mode [ 1385.530742][ T52] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1385.599864][T16991] veth1_vlan: entered promiscuous mode [ 1385.646264][T16991] veth0_macvtap: entered promiscuous mode [ 1385.666044][T16991] veth1_macvtap: entered promiscuous mode [ 1385.673070][T17308] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2718'. [ 1385.896176][T16991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1385.906854][T16991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.917493][T16991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1385.928224][T16991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.938371][T16991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1386.271292][T16991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.282960][T16991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1386.293397][T16991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1386.303911][T16991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.335195][T16991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1386.359792][T16991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.381563][T16991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1386.425902][T16991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.473617][T16991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1386.581218][T16991] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.611505][T16991] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.652689][T16991] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.704709][T16991] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.074511][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1387.130230][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1387.141793][T17147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1387.197647][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1387.221996][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1387.516069][T17340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2725'. [ 1387.680029][T11782] usb 3-1: USB disconnect, device number 61 [ 1387.909269][ T3545] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1388.643734][T17344] overlayfs: invalid redirect ((null)) [ 1388.913271][T17352] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2727'. [ 1390.692412][ T3545] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.906719][ T3545] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.330070][T17147] veth0_vlan: entered promiscuous mode [ 1391.363198][T17147] veth1_vlan: entered promiscuous mode [ 1391.412079][ T3545] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.414907][T17377] Process accounting resumed [ 1391.459122][T17147] veth0_macvtap: entered promiscuous mode [ 1391.473078][T17147] veth1_macvtap: entered promiscuous mode [ 1391.505188][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1391.516113][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.535136][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1391.545742][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.557370][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1391.567936][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.577887][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1391.588885][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.600191][T17147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1391.625854][ T3545] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.666349][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1391.682163][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.693854][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1391.705539][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.715402][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1391.725883][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.735748][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1391.746600][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.760106][T17147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1391.773802][T17147] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.783022][T17147] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.793382][T17147] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.802780][T17147] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.962797][ T3545] bridge_slave_1: left allmulticast mode [ 1391.970588][ T3545] bridge_slave_1: left promiscuous mode [ 1391.976706][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.986283][ T3545] bridge_slave_0: left allmulticast mode [ 1391.991932][ T3545] bridge_slave_0: left promiscuous mode [ 1391.998960][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.309807][ T3545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1392.320997][ T3545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1392.331210][ T3545] bond0 (unregistering): Released all slaves [ 1392.369222][ T3426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.386406][ T3426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.491073][T15780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.501058][T15780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1393.158604][T17390] syz_tun: entered allmulticast mode [ 1393.178137][T17388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2734'. [ 1393.234106][T17392] Process accounting resumed [ 1393.302150][T17401] trusted_key: encrypted_key: key user:syz not found [ 1393.543071][T17388] syz_tun (unregistering): left allmulticast mode [ 1393.769419][T17408] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2689'. [ 1394.244412][T17406] vlan2: entered promiscuous mode [ 1394.249670][T17406] vlan2: entered allmulticast mode [ 1394.254910][T17406] hsr_slave_1: entered allmulticast mode [ 1394.360843][T17412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2735'. [ 1394.444236][ T1332] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1395.041506][T16992] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1395.050783][T16992] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1395.059346][T16992] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1395.079528][T16992] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1395.094280][T16992] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1395.107806][ T3545] hsr_slave_0: left promiscuous mode [ 1395.139598][T17410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2735'. [ 1395.173547][ T3545] hsr_slave_1: left promiscuous mode [ 1395.321243][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1395.352316][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1395.946237][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1395.963651][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1396.352440][ T3545] veth1_macvtap: left promiscuous mode [ 1396.366115][ T3545] veth0_macvtap: left promiscuous mode [ 1396.378769][ T3545] veth1_vlan: left promiscuous mode [ 1396.390337][ T3545] veth0_vlan: left promiscuous mode [ 1397.187340][T16992] Bluetooth: hci2: command tx timeout [ 1397.440388][T17439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2740'. [ 1398.291915][T17445] overlayfs: conflicting lowerdir path [ 1399.030054][ T3545] team0 (unregistering): Port device team_slave_1 removed [ 1399.089672][ T3545] team0 (unregistering): Port device team_slave_0 removed [ 1399.184337][ T24] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] SMP KASAN PTI [ 1399.196270][ T24] KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f] [ 1399.204680][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1399.216560][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1399.226603][ T24] Workqueue: events l2cap_info_timeout [ 1399.232064][ T24] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 1399.237958][ T24] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 1399.257572][ T24] RSP: 0018:ffffc900001e7848 EFLAGS: 00010206 [ 1399.263653][ T24] RAX: dffffc0000000000 RBX: ffffffff8930c968 RCX: 53716f3ac2c8d100 [ 1399.271631][ T24] RDX: 0000000000000000 RSI: ffffffff8930c968 RDI: 000000000000004b [ 1399.279594][ T24] RBP: ffffffff8a5b7225 R08: 0000000000000001 R09: 0000000000000000 [ 1399.287641][ T24] R10: dffffc0000000000 R11: ffffffff8a5b71e0 R12: 0000000000000000 [ 1399.295607][ T24] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 1399.303568][ T24] FS: 0000000000000000(0000) GS:ffff8881261fe000(0000) knlGS:0000000000000000 [ 1399.312495][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1399.319075][ T24] CR2: 0000200000023000 CR3: 0000000079686000 CR4: 00000000003526f0 [ 1399.327040][ T24] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1399.335009][ T24] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1399.343089][ T24] Call Trace: [ 1399.346364][ T24] [ 1399.349287][ T24] __kasan_check_byte+0x12/0x40 [ 1399.354140][ T24] lock_acquire+0x8d/0x360 [ 1399.358549][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 1399.363749][ T24] ? __cancel_work+0x254/0x2e0 [ 1399.368510][ T24] lock_sock_nested+0x48/0x100 [ 1399.373276][ T24] ? l2cap_sock_ready_cb+0x45/0x140 [ 1399.378478][ T24] l2cap_sock_ready_cb+0x45/0x140 [ 1399.383524][ T24] l2cap_conn_start+0x750/0xe40 [ 1399.388381][ T24] ? __pfx_l2cap_conn_start+0x10/0x10 [ 1399.393747][ T24] ? l2cap_info_timeout+0x60/0xa0 [ 1399.398789][ T24] ? __pfx___mutex_lock+0x10/0x10 [ 1399.403896][ T24] ? process_scheduled_works+0x9ec/0x17a0 [ 1399.409621][ T24] l2cap_info_timeout+0x68/0xa0 [ 1399.414470][ T24] ? process_scheduled_works+0x9ec/0x17a0 [ 1399.420186][ T24] process_scheduled_works+0xadb/0x17a0 [ 1399.425734][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 1399.431714][ T24] worker_thread+0x8a0/0xda0 [ 1399.436314][ T24] kthread+0x70e/0x8a0 [ 1399.440377][ T24] ? __pfx_worker_thread+0x10/0x10 [ 1399.445482][ T24] ? __pfx_kthread+0x10/0x10 [ 1399.450060][ T24] ? __pfx_kthread+0x10/0x10 [ 1399.454643][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 1399.459842][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 1399.465039][ T24] ? __pfx_kthread+0x10/0x10 [ 1399.469619][ T24] ret_from_fork+0x4b/0x80 [ 1399.474032][ T24] ? __pfx_kthread+0x10/0x10 [ 1399.478648][ T24] ret_from_fork_asm+0x1a/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1399.483419][ T24] [ 1399.486459][ T24] Modules linked in: [ 1399.491816][ T24] ---[ end trace 0000000000000000 ]--- [ 1399.504919][T16992] Bluetooth: hci2: command tx timeout [ 1399.511454][ T24] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 1399.524516][ T24] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 1399.544997][ T24] RSP: 0018:ffffc900001e7848 EFLAGS: 00010206 [ 1399.650152][ T24] RAX: dffffc0000000000 RBX: ffffffff8930c968 RCX: 53716f3ac2c8d100 [ 1399.679132][ T24] RDX: 0000000000000000 RSI: ffffffff8930c968 RDI: 000000000000004b [ 1399.690747][ T24] RBP: ffffffff8a5b7225 R08: 0000000000000001 R09: 0000000000000000 [ 1399.698988][ T24] R10: dffffc0000000000 R11: ffffffff8a5b71e0 R12: 0000000000000000 [ 1399.707102][ T24] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 1399.715157][ T24] FS: 0000000000000000(0000) GS:ffff8881261fe000(0000) knlGS:0000000000000000 [ 1399.724345][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1399.731110][ T24] CR2: 0000200000024000 CR3: 0000000079686000 CR4: 00000000003526f0 [ 1399.739705][ T24] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1399.747798][ T24] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1399.755856][ T24] Kernel panic - not syncing: Fatal exception [ 1399.762233][ T24] Kernel Offset: disabled [ 1399.766547][ T24] Rebooting in 86400 seconds..