last executing test programs: 4m8.266218993s ago: executing program 3 (id=955): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x8000000003, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @loopback, 0x1}, {0xa, 0x4e20, 0x5a807add, @remote, 0x5}, r1, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xb5, @loopback, 0x8}, {0xa, 0x4e22, 0x5, @loopback, 0x8001}, r1, 0x9}}, 0x48) 4m6.403143968s ago: executing program 3 (id=959): syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x400941) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405668, &(0x7f00000004c0)={0x3, 0x2, 0x2}) 4m5.241456759s ago: executing program 3 (id=961): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x2, 0x100010, 0xffffffffffffffff, 0x10000000) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x1a, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x3000)=nil, 0x3000, 0xb, 0x1, {0x0, r2}}) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000100)={0x1, {{0xa, 0x4e1d, 0x9, @mcast1={0xff, 0x7}, 0x7}}, {{0xa, 0x4e24, 0x80, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12e, 0x7) 4m4.435894716s ago: executing program 3 (id=965): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x404, 0x7, 0x7}}}}}]}}]}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000004c0)={0x1, 0x5, 0x1, 0x0, 0x2, 0x5}, 0xc) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2e0c82, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x20, 0x30, 0x9, {0x9, 0x2d, "b8c68cd2b690e2"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x35bca55bef6d72b2, 0x13, 0x8d, "7420bf69ae676ff4b44cc200ebf075a637752135cdafe94d3372404c509fa3a0962d2142513ec6f2da020a58ff02ae91f280ed6fe7c9d1fde7dddd25bffd3cd0a61dca1f1e9626a853db8014abb4d3ecf3761162cc391fe3e819339dc0b652175d4415dcc94054a6454a9c68c839abc7429fb47b286991ed37e48d1d4b2dfbcc54dfa10d3bf0a60971a2df96ff"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xd4}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private0}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, r3, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5}) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000400)=ANY=[@ANYBLOB='b *:4\t\n', @ANYRES32=r1], 0xa) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000000)=0xfffdffc3, 0x4) sendmmsg(r5, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) syz_open_dev$vcsn(&(0x7f0000000440), 0x6, 0x222000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0x1}, 0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000680), &(0x7f00000006c0)=0x4) r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r9, &(0x7f0000000ac0)={'#! ', './file0', [{0x20, ',-\'-+'}, {0x20, '*\'!\xd6@A\xa8*\xaf\xa0\xfa\xf8\xae\x8c\x8c\xf5\xf5\x18\xea\xac\x97n\xeb\xb1\x05\x97\x06\xc0R\xf8\xa9\xb3X\x14\xc0\x9b\x86\xf0N$j\xf8\xd3A>\t93\xcb\xb2\xc3\x89\xabl\xe4\x1c\x1e\xf7v\xc2\x90G\\\x00\xf4\x99-\x1bNT\x04\x86,\a\x90\xd2+c.\xa8\x89\x0e)\xe3\xe0\xc7^\xa43\xfd\x8a\x87N \b\xf3\xbb)/\x91\x1c\x175\xbb\xdd\xc8\xa3\xd6\xf5\x14\xaabO[\x18\x1a\x96\xb0\xc0\x9e\xeeU\x9apLZ\xe5^\xb4FgX\xa5_U\xbf\xb2\x9a\x02\xb3\xa2\x14\xec\x13n\xbe\xfb\xd0\x85|\xd0W\x9bQ\xd6\xbdY\x9ar\\\xd7V\xed\x01(\x96\x93\"\xfaU\x80FcXcF\xbf\x14Bz\xedb^\t\x87\x05\x15\x0f\x8e=\xb4v\x0e(\x1d\xb00|\x94%\xefcn\fI\xce\xc7>\xae3\xdc\xd07\x98=\x8b\xff?\x9ed\xb5>\x97\xba(\x19\x87 \xf5=/\x8bv`_\x0f\n'}, {0x20, 'ext4\x00'}]}, 0x105) close(r9) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x10, 0x5, {0x5, 0xb, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3m59.241877256s ago: executing program 3 (id=978): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r4, &(0x7f0000000100)={'#! ', './file0', [{0x20, '-X-wB\xf7\xc4\xe1L\xb9\xa1\x0e\xdb\x8bj\x8c\xe7\r\bP\xd6\xf4D\x0f\xd0\xb8\xbdh-\xb3aKo~\xa7\x17\xaf\xfd\x89l\xe5\\#\x90\xbf\xba\xb7!\x8e\x17\xa0\xe2\xa5\x88O\xc7p\xdd\xf7\xd5\x17\x8d\xfb\xde>\xb5'}]}, 0x4e) r5 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) preadv(r5, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/178, 0xb2}], 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000240)={0x14, 0x69, 0x2, {0x10, 0x0, 0x4}}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@private=0xa0100fe}, @typed={0x4, 0x10}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x34}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) 3m57.44284527s ago: executing program 3 (id=982): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = memfd_create(&(0x7f0000000240)='rpc_stats_latency\x00', 0x0) dup2(r4, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r3, 0x0, 0x40000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 3m42.080312242s ago: executing program 32 (id=982): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = memfd_create(&(0x7f0000000240)='rpc_stats_latency\x00', 0x0) dup2(r4, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r3, 0x0, 0x40000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m53.786010149s ago: executing program 5 (id=1119): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xf, {"686cad21e0fd02661b37090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f360068090890e0878f0efcc5e7049b3b612c416b23240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07720936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b4a5f3090000000000000075271b060029d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f33491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146784078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34a1c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9b05000bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48ca2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a35595f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e205ef4a7c43b42aae501b20f7694a035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd6700800000082ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd2ea9762639ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359deea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e150600d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b2c2fc5d5f0da42c0456ec015f08e5247d33ae2d35623ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e938ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a893664ac70297dc8d62700000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x1000}}, 0x1006) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f070c00d1192a94010706001600377f0f6e460b09007a15b3"], 0x0}, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x130, 0x0, 0x8267, {0x6, 0x6, 0x0, '\x00', {0x1, 0x403, 0x0, 0x7, r3, r4, 0x1000, '\x00', 0x1, 0x5, 0x5, 0x3, {0x6, 0xe}, {0x10000000081, 0x3}, {0x100000002, 0x1}, {0x0, 0xff}, 0x7, 0xf, 0x6, 0x2}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r2}, 0x50) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x6, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m48.17224008s ago: executing program 5 (id=1132): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './file0', [{0x20, '-X-wB\xf7\xc4\xe1L\xb9\xa1\x0e\xdb\x8bj\x8c\xe7\r\bP\xd6\xf4D\x0f\xd0\xb8\xbdh-\xb3aKo~\xa7\x17\xaf\xfd\x89l\xe5\\#\x90\xbf\xba\xb7!\x8e\x17\xa0\xe2\xa5\x88O\xc7p\xdd\xf7\xd5\x17\x8d\xfb\xde>\xb5'}]}, 0x4e) r6 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) preadv(r6, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/178, 0xb2}], 0x1, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000040)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@private=0xa0100fe}, @typed={0x4, 0x10}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x34}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) 2m41.555981607s ago: executing program 5 (id=1150): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0, 0x0, 0x2}, 0x18) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61965b7e, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x199, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x8000]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000580)=0xc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000005b80)={{{@in=@private=0xa010100, @in6=@mcast2, 0x4e22, 0x0, 0x1, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x6}, 0x2253, 0x6e6bb0}, {{@in6=@local, 0x4d2, 0x6c}, 0x0, @in6=@private2}}, 0xe8) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r8, @ANYBLOB="08002e6628050000004d332a0ab08c", @ANYRES32=r9, @ANYBLOB], 0x44}}, 0x0) ioctl$TCSETSW2(r6, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r5, 0x5437, 0x0) 2m40.277717041s ago: executing program 5 (id=1152): socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x15, 0x5, 0x3) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x8000000003, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @loopback, 0x1}, {0xa, 0x4e20, 0x5a807add, @remote, 0x5}, r6, 0xb}}, 0x48) socket$netlink(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r6}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xb5, @loopback, 0x8}, {0xa, 0x4e22, 0x5, @loopback, 0x8001}, r6, 0x9}}, 0x48) socket$kcm(0x2, 0x3, 0x84) getsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000440), &(0x7f0000000480)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2m38.313296434s ago: executing program 5 (id=1155): setresuid(0xffffffffffffffff, 0xee00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) mount(&(0x7f0000000100)=@nullb, 0x0, &(0x7f0000000040)='gfs2meta\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1, 0x0, 0x20007fffffff}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x403, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc058560f, &(0x7f0000000040)={0x0, 0x4}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) syslog(0x3, &(0x7f0000002e00)=""/165, 0xa5) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x900, &(0x7f0000000100)=[{&(0x7f0000000080)="5c0000002d006bcd9e3fe3dc6e48ab31086b87033c0000001f03000000000000040014000d000aaf0d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000180)) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x14002, 0x2, 0x3}, 0x0, 0x0) 2m34.687236267s ago: executing program 5 (id=1164): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) write$binfmt_misc(r3, &(0x7f0000000300), 0xfdef) 2m18.55734813s ago: executing program 33 (id=1164): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) write$binfmt_misc(r3, &(0x7f0000000300), 0xfdef) 1m25.263332245s ago: executing program 0 (id=1358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) mknod(&(0x7f0000000200)='./file0\x00', 0x8000, 0xf) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) sendfile(r2, r2, 0x0, 0x6) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000800)='@', 0x1}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r10 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r10, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r9]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000000d}) epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 1m23.317596829s ago: executing program 0 (id=1364): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x118}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xf, 0x9, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a2c000000060a01010000000000000000000000090900010073797a31000000000c00034000000000000000050c010000180a01020000000000000000000000000900020073797a300000000014000380080002400000000708"], 0x1d4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "df"}]}], {0x14}}, 0x60}}, 0x840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m22.556489799s ago: executing program 0 (id=1365): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x20000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) 1m21.76804834s ago: executing program 0 (id=1368): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x1304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r7 = syz_clone(0x80002080, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, 0x0) setpgid(0x0, r7) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 1m19.833253838s ago: executing program 0 (id=1376): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x118) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r3) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r3, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1}) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)="580000001400192340834b80040d8c560a067fbc45ff00000000001f000458000b480400945f6400941b050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x4}, 0x8) 1m15.495895677s ago: executing program 0 (id=1395): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000fc0)=@newlink={0x34, 0x10, 0x1, 0x300, 0x0, {0x0, 0x0, 0x0, r1, 0x2800, 0xf9000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) 1m15.186343001s ago: executing program 34 (id=1395): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e4870"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000fc0)=@newlink={0x34, 0x10, 0x1, 0x300, 0x0, {0x0, 0x0, 0x0, r1, 0x2800, 0xf9000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) 34.177390773s ago: executing program 7 (id=1507): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @private1, 0x3, 0x9, 0x87, 0x400, 0x7, 0x2440000}) 33.343740981s ago: executing program 7 (id=1512): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(0xffffffffffffffff, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x80108907, 0x0) recvmmsg(r4, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r6, 0x40046103, &(0x7f0000000d80)={0x1, 0x68, 0xb, 0x5, 0xf6, 0x5, 0xf, 0x9, 0x8, 0xc, 0x1, "0f3c500e4c9e65ae1df6bc0e523ca32dd458e742acc6ed7779afb12887001a7c"}) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x0, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r6, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r6}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r3, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x38, &(0x7f0000000b40)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f40)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x4, 0x1a, &(0x7f0000000840)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x743c}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_val={0x18, 0x9, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x101}], &(0x7f0000000940)='syzkaller\x00', 0x4, 0x64, &(0x7f0000000980)=""/100, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x16, r6, 0x8, &(0x7f0000000a00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0x7, 0x7, 0x3}, 0x10, r10, 0xffffffffffffffff, 0x2, &(0x7f0000000e00)=[r6, r6, r11, 0x1, 0x1], &(0x7f0000000e40)=[{0x5, 0x4, 0xe, 0xb}, {0x5, 0x7, 0x4, 0xa}], 0x10, 0x5, @void, @value}, 0x94) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000000000000f8ffffff020000000800000003000000050000005242000000000000000000040000000000000000000000610500000008000000fa"]) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000000)=@x86={0x6, 0x3, 0xf8, 0x0, 0x9, 0xa, 0x3e, 0x0, 0xff, 0x3, 0x44, 0x9, 0x0, 0x8000, 0x6, 0xc2, 0x9, 0x2, 0x8, '\x00', 0x7, 0x4}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000072000040"]) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r12, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @private1, 0x3, 0x9, 0x7, 0x400, 0x7, 0x2440000}) 31.255989174s ago: executing program 7 (id=1517): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="022000000400000008000012", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000001000000000000009a98593673e8db06426f9c40e0208cbe68c49caf371e7b3936971bf878078d1be75a8c7e3bea7942c6cc0376b841a6bcdb2da40923368e7a22895f422ef5c4bff9824ab432386a6a800504fb753ea6090a9cfec9f996edbc41e431072e698adc4537089a07b8", @ANYRES32, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$unix(0x1, 0x2, 0x0) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) syz_init_net_socket$llc(0x1a, 0x801, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0xfffffffffffffffd, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'none\x00', 0x1, 0xffffffff, 0x6f}, 0x2c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xc5, 0x80012d58, 0x12d5c}}, 0x44) 29.376855595s ago: executing program 7 (id=1520): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000100), 0x4800) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) close_range(r3, 0xffffffffffffffff, 0x0) 20.270584787s ago: executing program 7 (id=1539): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xb0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x1, 0x8}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000100)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x800}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 19.585309372s ago: executing program 7 (id=1540): getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a819d562321085b863ff755641c3f1809970fcc2940e74eff05e936047caf2f317ae64d63dbdf77e344f33d6", @ANYRESDEC=r0, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x4040045) socket$tipc(0x1e, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$9p_virtio(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x804, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x101, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4, @local, 0xd8}}}, 0x32) close(r6) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='K1']) 17.181459105s ago: executing program 4 (id=1546): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/210, 0xd2}], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)=""/137, 0x89}, {0x0}], 0x2}, 0x8}], 0x1, 0x40, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x800) r2 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400070700800b0904bb06023ae504000905070020000500ce09050302100075010297060977f2acbba3673b0fc8d3950ff15b35b1b53a25c89c"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000e80)={0x44, &(0x7f0000000a00)={0x40, 0xd, 0x2, "def0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000046365608b40413868f95010201010902120001000000000904"], 0x0) syz_open_dev$admmidi(&(0x7f0000000080), 0x7, 0xe176399a87a40e23) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 15.020103115s ago: executing program 4 (id=1551): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x3, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) mmap(&(0x7f000098e000/0x4000)=nil, 0x4000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000001020000e6fb6dde0b297a9680a46332fc05dd0a00000000000073016998dac47e8ae2040cedc44cd2b1a8894551e07b59dc2b31bb709c9560422bd2034949f557f9438fad8b046afbedc27e4754b9a88992edab09f2977d0ba574994c2148fe79363f836a68ecdea1142cfd5a7f8ac969fe06b39dc83846f6536a0a5a8d86187a8bf10abe717bdcff5c5d5ddf331ab6685739a185f9f472ca3b702458532cc16772829f781e9a794f4d87f4425f1a2d2ba95dcc8a576e3eddfe8338bcd3edfb3bbd7901f7e23250ec868118ba868d5659763af94582d3f37c43505f394ae84d8237aab95c0017daa1f033beaab1b0a4af82799e967e40a135a40c099a84a81c1e03a06b0c4f04bac03bc3f6e85d888054eea25331b44ad6ceb15f216ec055f657e47b27f7d0e007e9a269e8e24ac616c7c864aa8997de23d28c28d82504b26f511342c8a08daa431d43d5e66e91dd0803fb140e8ab93b2da39150f4fee6b71fcb26ca6910d027abc87d4e45c6996067aed579e57791d454af359cbbb13d9329ab58e1c16f8fb7ae0b69607c637efd33fba57069e3fae165cb58f4e40abbcf5b3f14bb2a07c65c691262e6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getpid() write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="c40000001300e999000000000000000000000000000000000000000000000000ac14140000000000000000000000000000000000000000000200000000000000", @ANYRESHEX=r1, @ANYRES8=r3, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000008005d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000c00150000000000ee7f0000"], 0xc4}}, 0xc000004) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000200000000"], 0xb8}}, 0x0) ioctl$VT_ACTIVATE(r2, 0x4b45, 0x2) socket$unix(0x1, 0x1, 0x0) mkdir(0x0, 0x94) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) 12.2360891s ago: executing program 4 (id=1557): r0 = socket$inet6(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) close$binfmt(r2) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x59}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r1) socket$netlink(0x10, 0x3, 0xa) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000f27859c6b5f258a90e86ba6aeeec508c145d3b24447e8382e153021ab50ea012486c6017e77411a6e744e503dfad6ad5a2fb63c93fe9ff14694aa18630a7ef1ef32cf2f400d3d9029d510fc3385115e85ffaf5061e297426d687a074094a30aef2ccc54b8807a79b321398439f8614ad665632f3821ac552100a124148fd54646cc2aa74125d09eb1c9d7dd38fbaef1d258d37", @ANYRES16=r4, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r5, @ANYBLOB="2c00308014000400403a050c5baee2004ef2b6d713459a7a0c00018008000100010000000500020000000000"], 0x48}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x900, &(0x7f0000000100)=[{&(0x7f0000000080)="5c0000002d006bcd9e3fe3dc6e48ab31086b87033c0000001f03000000000000040014000d000aaf0d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000180)=0x4, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x201, 0x1000, @private2, 0x1000}, 0x1c) 10.463834458s ago: executing program 6 (id=1560): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r6, &(0x7f0000000100)={'#! ', './file0', [{0x20, '-X-wB\xf7\xc4\xe1L\xb9\xa1\x0e\xdb\x8bj\x8c\xe7\r\bP\xd6\xf4D\x0f\xd0\xb8\xbdh-\xb3aKo~\xa7\x17\xaf\xfd\x89l\xe5\\#\x90\xbf\xba\xb7!\x8e\x17\xa0\xe2\xa5\x88O\xc7p\xdd\xf7\xd5\x17\x8d\xfb\xde>\xb5'}]}, 0x4e) r7 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) preadv(r7, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/178, 0xb2}], 0x1, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000040)) write$P9_RATTACH(r0, &(0x7f0000000240)={0x14, 0x69, 0x2, {0x10, 0x0, 0x4}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@private=0xa0100fe}, @typed={0x4, 0x10}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x34}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.429024497s ago: executing program 6 (id=1561): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x548, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0xb}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x518, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x48}, @TCA_ROUTE4_TO={0x8, 0x2, 0xb5}, @TCA_ROUTE4_IIF={0x8, 0x4, r7}, @TCA_ROUTE4_POLICE={0x88, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0xffffffffffffffff, 0x636d, 0xb, 0x262, {0xd, 0x0, 0x8000, 0x3, 0x40af, 0x5}, {0x1, 0x0, 0x401, 0x0, 0xd, 0x4}, 0x375, 0xffffff00, 0x3}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x600000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x69}, @TCA_ROUTE4_IIF={0x8, 0x4, r7}, @TCA_ROUTE4_POLICE={0x45c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x200, 0x1, 0x6, 0x981, 0x1, 0x9, 0x0, 0x2, 0x5, 0x9, 0x2, 0x4, 0xe0000000, 0x1, 0xffff, 0x6, 0x8, 0x8, 0x81, 0xff, 0x0, 0xbbc, 0x1, 0x36da, 0x5, 0x8001, 0x7d08, 0x800, 0x23b5, 0x2, 0x8, 0x8, 0x2, 0x0, 0x2, 0x7, 0x1, 0x79, 0x8000, 0x4, 0x1, 0x6, 0x7fffffff, 0x80000001, 0x401, 0x2, 0x80, 0x1ddc000, 0x8, 0x80, 0xa3a9000, 0x1, 0x4, 0x7f, 0x7f, 0x0, 0x2, 0x80, 0x3a8, 0x7fff, 0x8, 0x4, 0xff, 0x3, 0x175, 0x0, 0x4, 0x2, 0x80, 0x5, 0xffff, 0x0, 0x8000, 0x0, 0x223a, 0x1, 0xfffffffe, 0x8001, 0x3, 0x8, 0xc, 0xfffff801, 0xe2, 0x3, 0xa, 0xfffffffe, 0x4, 0x6ff, 0x8, 0xfffff3a5, 0x5449, 0xfffffffc, 0x7, 0x5, 0x4, 0x2351, 0x4, 0x4, 0x400, 0x3, 0x2, 0x4, 0x200, 0xd, 0x3, 0x1, 0x3, 0x1, 0xffff, 0x8, 0x9, 0xbf9, 0xfffffffc, 0x10000, 0x9c, 0x0, 0x73, 0x7fffffff, 0x284, 0x2, 0x0, 0x4, 0x8, 0x0, 0xe, 0xffffffc0, 0x1, 0x0, 0x9, 0x3, 0xba, 0x6, 0x7ae, 0x80000001, 0x3b00, 0x3, 0x7, 0x647, 0xce0, 0xf5fa, 0x800, 0x7fff, 0x2, 0xffffffff, 0x7, 0x49, 0x3, 0x0, 0x9, 0x7be0728e, 0x8000, 0x9, 0x4, 0x0, 0x1, 0x2, 0xe, 0x200, 0x9, 0x6a50, 0x81, 0x14c9, 0x9, 0x7, 0x771cdcb5, 0x4, 0x7, 0x9, 0x0, 0x7, 0x6, 0x460, 0x100, 0x2, 0x9a63, 0x8, 0x0, 0x8, 0x0, 0x64, 0x3, 0xa, 0x3c9, 0x8, 0x36580a30, 0x401, 0x1, 0xf, 0x81, 0x6, 0x6, 0xc48, 0xfffffffe, 0x2, 0x3, 0x2, 0x3, 0xf59c, 0x7, 0xfffffff7, 0x8, 0x3, 0xaa3, 0x3, 0x9, 0x5, 0x7, 0x0, 0xff, 0xff, 0x7, 0x5, 0x800, 0x0, 0x3, 0x3, 0xea8, 0x0, 0x1ff, 0x7, 0x83, 0x0, 0x1, 0x4, 0x1, 0x4, 0x7fffffff, 0x0, 0x8, 0x4, 0x80000001, 0xe, 0x6, 0x0, 0xf851, 0x9, 0x21ea, 0x5, 0x7f, 0x6, 0x67d, 0xfffffff7, 0x5, 0x2, 0x7, 0x0, 0x7, 0x6, 0xd7, 0x9, 0x1, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9fe}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x1, 0x7, {0x5, 0x1, 0x4, 0x1ff, 0x9, 0x1}, {0xf0, 0x2, 0x5, 0x6, 0x2}, 0x8, 0x8, 0x80000001}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x52}]}}]}, 0x548}, 0x1, 0x0, 0x0, 0x4000804}, 0x20040054) 8.748777022s ago: executing program 4 (id=1563): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000100), 0x4800) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) close_range(r3, 0xffffffffffffffff, 0x0) 5.394235507s ago: executing program 2 (id=1570): syz_usb_connect(0x3, 0xa38, &(0x7f0000000900)=ANY=[@ANYBLOB="12015002ba2a0240450cbc62f42c010203010902260a030f7f60080904"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="b8010000000f01d9f6b0d79d000036660f383408c4e179287d00b8010000000f01d90fc76948b993000040b8a283b40bba000000000f300f320f01c5defa", 0x3e}], 0x1, 0x0, 0x0, 0x0) unshare(0x64000600) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000001200)={0x40000, 0x0, [0x11, 0x8, 0x8, 0xf97, 0x4, 0x2, 0x7, 0x3]}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x4d}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f00000003c0)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r3}, @exit], &(0x7f0000000480)='syzkaller\x00', 0x1, 0xe0, &(0x7f00000004c0)=""/224, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r5, 0x4008af14, &(0x7f0000000000)={0x0, 0x7}) syz_usb_connect$cdc_ecm(0x2, 0x6b, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x1, 0x31, 0x90, 0x6, [{{0x9, 0x4, 0x0, 0x66, 0x3, 0x2, 0x6, 0x0, 0x90, {{0x8, 0x24, 0x6, 0x0, 0x0, "32e1dd"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x8, 0xfff1, 0x8}, [@ncm={0x6, 0x24, 0x1a, 0x5, 0x11}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x26}, @country_functional={0x8, 0x24, 0x7, 0x2, 0x5, [0x0]}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x81, 0x16, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x81, 0xfd}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x8, 0x3, 0x8, 0x20}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44d}}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071105b000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) 5.092020215s ago: executing program 1 (id=1571): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x12) 4.893059356s ago: executing program 6 (id=1572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) mknod(&(0x7f0000000200)='./file0\x00', 0x8000, 0xf) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r1, 0x0, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r9 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x1) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="5802009400140091d491323b478925458db45602117fffefd7ff81000e226c1add024bf752e31ad096339c5e74a48d52a42b3ecbad9c50ff11025395f49d6b51602f4da57b8c63e261d39a587443ea5717", 0x51}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r8]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000400)={0xa}) epoll_pwait(r4, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 4.061387482s ago: executing program 35 (id=1540): getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a819d562321085b863ff755641c3f1809970fcc2940e74eff05e936047caf2f317ae64d63dbdf77e344f33d6", @ANYRESDEC=r0, @ANYBLOB="383fd2721051fe857195ed36fd1b373f4c1bddb52fc9847fd111f71bc1a734d599addb394ea3006f8d4f716c33cefd63af00cdfcfb944d8be808719745d6c0f8694de81e724ebf482bb784835aafc351d8b61b4e3564238d64be52bfa2ed13beb40e0f3fa9c9ea991a30e32618698eee7b138a746862f2f93b74ec76ff5e5979b8a2d5488a811de2e0ba46f9a39bee41cd5049bfa7bae1e28fe9d576792758a757c49bd8c7c6a2940216d3d0ce2910fa2a1fa67b1872053423e62ad9dfd84f7c0e164da2079d7ab86b31a74607d14d61bd620f1aeb632114688274bfaab3e19134ce2024c3aa66a8d466a508fc9cb62da4d6102ddf3f019b8b90"], 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x4040045) socket$tipc(0x1e, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$9p_virtio(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x804, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x101, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4, @local, 0xd8}}}, 0x32) close(r6) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='K1']) 3.994385895s ago: executing program 1 (id=1574): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x118}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xf, 0x9, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a2c000000060a01010000000000000000000000090900010073797a31000000000c00034000000000000000050c010000180a01020000000000000000000000000900020073797a300000000014000380080002400000000708"], 0x1d4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "df"}]}], {0x14}}, 0x60}}, 0x840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="680000001000010000000000000000", @ANYRES32, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.929340875s ago: executing program 6 (id=1575): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$packet(0x11, 0x2, 0x300) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.675874349s ago: executing program 1 (id=1576): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x20000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) 3.410556588s ago: executing program 1 (id=1577): socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x15, 0x5, 0x3) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) tkill(0x0, 0xb) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x8000000003, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @loopback, 0x1}, {0xa, 0x4e20, 0x5a807add, @remote, 0x5}, r6, 0xb}}, 0x48) socket$netlink(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r6}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xb5, @loopback, 0x8}, {0xa, 0x4e22, 0x5, @loopback, 0x8001}, r6, 0x9}}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x5) socket$kcm(0x2, 0x3, 0x84) getsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000440), &(0x7f0000000480)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 3.396346512s ago: executing program 4 (id=1578): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$kvm(0xffffff9c, 0x0, 0x480, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2}}]}, {0xffffffffffffffb9}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f200001ff070000"], 0x1, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x861}}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) epoll_create(0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RVERSION(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x974b, 0x8, 0x2, 0xffdffffa}, &(0x7f00000001c0), &(0x7f0000000040)) syz_io_uring_setup(0x2839, &(0x7f0000000300)={0x0, 0xcb7b, 0x20, 0x1, 0x2b8, 0x0, r5}, &(0x7f0000000100), &(0x7f0000000280)) write$P9_RLERRORu(r4, &(0x7f0000000200)=ANY=[], 0xfffffffffffffff6) 2.568223883s ago: executing program 6 (id=1579): r0 = syz_io_uring_setup(0x1dff, &(0x7f0000000480)={0x0, 0xe645, 0x80, 0x0, 0x298}, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x0, 0x387, 0x4, 0x2}) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df30b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b49b92aa0fcfa75afc265489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280000051e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de4a2bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xfffffffffffffd86}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.057303097s ago: executing program 1 (id=1580): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='gfs2meta\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1, 0x0, 0x20007fffffff}, 0x18) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x403, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc058560f, &(0x7f0000000040)={0x0, 0x4}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x10, 0x2, 0x0) syslog(0x3, &(0x7f0000002e00)=""/165, 0xa5) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x900, &(0x7f0000000100)=[{&(0x7f0000000080)="5c0000002d006bcd9e3fe3dc6e48ab31086b87033c0000001f03000000000000040014000d000aaf0d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x14002, 0x2, 0x3}, 0x0, 0x0) 1.939979985s ago: executing program 2 (id=1581): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df8500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x1a, 0x6, &(0x7f0000000a00)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) inotify_init1(0x0) 1.063172929s ago: executing program 4 (id=1582): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x84, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, @void, @value, @void, @value}, 0x50) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000c00)='_', 0x1}], 0x1}}], 0x1, 0x24008094) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000540)={{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, {0xa, 0x4e23, 0x10, @remote, 0xa0000000}, 0x1, {[0x7, 0xfffffffb, 0x4, 0x3af, 0x2, 0x3ff, 0x7, 0x401]}}, 0x5c) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000400)) pselect6(0x40, &(0x7f0000000500)={0x8, 0x7fffffffffffffff, 0x4, 0xfffffffffffffff7, 0x9, 0x9, 0x7ff, 0x200000000ff}, &(0x7f0000000300)={0xe0c1, 0xe156, 0x8, 0xc, 0xc004, 0xf, 0x80000000, 0x8000000000000001}, &(0x7f0000000280)={0x0, 0x4, 0x1ff, 0x8010000000000000, 0x8000000000000001, 0x6, 0x0, 0x7}, &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x2]}, 0x8}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 622.855748ms ago: executing program 6 (id=1583): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e", 0x4f}, {0x0}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)=0xe33) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x17, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="850000007200000085100000f8ffffff1832000003000000000000000000000018120000", @ANYRES32, @ANYBLOB="000000001b000000b703000000000000d2e7ffff0b000000b7000000000000008520000004000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000160000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x98282000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000001080)=[{{&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000700)="aca8d306ed5c10a635d37fa85d6803555e7167db038a11a1a335ac646f9cb199005f2d9825db3b8fe9326854d7a9b6f6c042a2bc6c63e0811c408c45c9f74c558ebebf6840152c023fe63a44c26cc9a236384fdcd5a9ad0b2103765680425e90d01bdf4126d6a34499304d1e391e21974fa9d5d3bea65fd83d00325bba4b83b5dd77bfa6f51d04c84047149dbf3d3344669a7422d7b5b6d13b76b33e9503f23124e8686229daf49286291bec4917e84bb1d807326a6487358f94d112e38b69db6114805f3dab07eeea0e83a775be255a4f404ff2a59dd24cfa5d8c86886123c3b9", 0xe1}], 0x1, 0x0, 0x0, 0xa42e5eed53a94782}}, {{&(0x7f0000000800)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000880)="219208b745ebd986a2c883bf02542a8b405b4f4a4fa23d81d9c982d9a4e74db32ec8c8da8509dd75cc5d6e36fb40de457f1eed8a60a4650340c12a55b91a843b3aed5b185c200e4098082762e2d0d73ad57a260ed893456b0a637ac4b5f81bf51ac78008424860f7b1ce738aca65a040332948942a9baa97777369b3720f50ec9b1d6ae3d02f81a29c5f63d0794e3f4720318199cd245e4b34c75b44ac744463d9e5a754d795ac457bab13244e7e53c2730150b1cbccdb9e3f4b79782f15dc49f7635e91e564025d4c466f06ba30d32b27de0e95514ba3b9e8a02fecc356920b8265445be6373872e898", 0xea}, {&(0x7f0000000980)="1277bff21481a448c8e691c9b645a6b41286206a1e8bce2de65ae88fe3796d30a0d93761716fe35ca36218c77b93cef1c2beb1b5db74eb4961c4ed5aa827bb1e25f5fbad25f6f0dd4a3b038d7fab26ebd865d1a8deb220e800bdf5e8b00ec05bb204c3efb9dbdccf47e3234ee9d650448e79aa41c2d637b40d66c51367cc7e1a136983d11e5192a9e57d0d5b206a2423cac5cdd85904832414cd13eb4f1c1fa93352f2a908814b64ed700de76556b025080dfeb06147ae9c0d0a", 0xba}, {&(0x7f0000000a40)="3425e7e2ad9440ae8f5460f998229cfced72b41e9932039ad8f4f665fd28bd78699a107ebfb11cb509be6a226435b80691f2bc98a892d21dfc125e9193b857a7dd62312af1072d5a1bfa2d22aeecb17e9bd0f9dffadf221cee7536cff2027e13cd2df266ea8e53d5831204bc7b2cfa726fe34892b559979e1d77d146b1e5c03d39b92840030ea35b79463843be5173e3094b7fd7afb2e6ae8a56b5a21fefc8bb92fea852f1f4d6e90f4b2bd7bb5fcb752fc6d0fb9d2556f87121c7a8ce85ecd1a9d9a46e1ab906900d25daf18f408e9540706567c7984b9af8d69b875a4a6ac9576665011045ebc6e4642789170dd416a5d63a2e6e8cdf", 0xf7}, {&(0x7f0000001140)="6c732e08150fc83980fd42e279d76f1f41e17814fc0abbe91e03d8c85bc0b7d19cc1f04af10f86b7d8555fcd5b4c2e038fa0fc759b262cdbaa606b5acf8799daedebc401951bd70a41fbdfc8c353b6c937bcddc880b3ec8ad7758ecbedd4aef290d9672997c4a3ea4f4ca16ee172cdba42116d314df78cfd43ceafe1f1b1676877071ac772697929131bbedd38a6336ec375009a86ef29fd0fbb4c8573e8b7607e71b6a7e951aac45df697a1c66753d21e9b33e9a60e6247102e735b1362b83d3285bf4b4244e26067a933fe97c6dbcdc42ac195017fa09a9c631fd095", 0xdd}, {&(0x7f0000000c40)="879edfe9e8b6515f965b6374be428ad521d78be8ca15ef423fcad3b9249ee6cc64e47e00bee3d701893ff25e46bbe1f0254f977cf2ec5f0cc7f9a783a54f0e232ca8a78b7cc989d6fc8886aae6ac5261b71ace4b6a5b", 0x56}, {&(0x7f0000000cc0)="9d22382760cf52175cb3e8c4b846d60efc53146350d3fec85df8ac66eccbfd134efa8f290b0252d642556cbfb4d8d46d8409ce797c290feb28fc032685365709e87fa508b966c31f3f3a2baab6929c7c027fcb97fb6fd18bdc3cd2ce035b35c1bcae90fa34b99100562d574263525a2701c279df8ee2e4822c5d67258522a4a358d5", 0x82}], 0x6, 0x0, 0x0, 0x40000}}, {{&(0x7f0000000e00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000001400)="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", 0x2d1}, {&(0x7f0000000f80)="6f1f9b0f43eba989707f225ddcae7798ffecc31475242337db3b47b0fa3b71d024012214119671fd3848842625e4abe26f3f2550ecd9a477b65fc7cee7d4b0761ab7dbac2a6d6305a324c6088bd30d5a701c97636c878f584d11513025fd0f3285a0d35a89d603ee3562679ab347289009fc87f5a6d2ec721cd04ba039df14cfb4a4c674fa2e4e05030164", 0x8b}], 0x2, 0x0, 0x0, 0x40}}], 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c002409040000000b0000000000000915000000002e0000"], &(0x7f0000000400)=""/99, 0x28, 0x63, 0x0, 0x1, 0x0, @void, @value}, 0x28) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0) fsetxattr$system_posix_acl(r6, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x18) mkdirat(r7, &(0x7f0000000580)='./file0\x00', 0x128) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x8000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r8 = creat(&(0x7f00000004c0)='./bus\x00', 0x40) write$cgroup_int(r8, &(0x7f00000003c0)=0xd9d, 0x12) 524.303947ms ago: executing program 2 (id=1584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601080000000000000000000000002400078032001240000000040800084000000002050014000000000008001240000000040900020073797a31000000000000010007000000120003006269746d61703a697000000005000100060000000000040000000000c47ac7c62a52bf2ecb47389601ce8c43a460d4b8e807a04741acef7c5b4f6b409b65fd1322fba0520305f7b937618a0ac772ab5fa7dbd09b4dabec2db56a51d5c8ea20d35ca8bf2e7a09a928b9d427873164"], 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x4085) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$sysctl(r1, &(0x7f0000000140)='2\x00', 0x2) r2 = socket(0x15, 0x5, 0x0) connect$unix(r2, &(0x7f0000000080)=@abs={0xa}, 0x6e) getsockname$packet(r2, 0x0, &(0x7f0000000240)) 303.873775ms ago: executing program 2 (id=1585): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x118}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xf, 0x9, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "df"}]}], {0x14}}, 0x74}}, 0x840) lsm_get_self_attr(0x0, &(0x7f0000000600)={0x0, 0x0, 0x11c, 0xfc, ""/252}, &(0x7f0000000540)=0x11c, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/19, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 151.266483ms ago: executing program 2 (id=1586): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x20000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) 147.544547ms ago: executing program 1 (id=1587): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000100), 0x4800) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=1588): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) unshare(0x22020400) fcntl$setstatus(r0, 0x4, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000012edfffebfa3000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x103201, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000440)={'nicvf0\x00'}) write$P9_RSTATu(r1, &(0x7f0000000080)={0x265, 0x2, 0xafd, {{0x54f, 0x124, 0x28, 0x1f00, {}, 0x0, 0x0, 0xc, 0x401, 0xffffffffffffff7d, '\nnodev{evo\x03\xd3\x8b\x92\x00'/27, 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x99\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0xac, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4@\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x009\x86Ac\x1dD\xf4\xa3\x9b\x11\x91\x93z(\x0e\x8d\x88\x9f\xc2 \xd1\x15\xac\x8e/\x18K\x9aau\x8d&w*\xb0\xf2\x04M\x8e\xf0&=\xdd\x97\xd3\xc4\'\xb3\xa52\xef\xab\x1d\x1c\xe3,\xa7\xc1\xfc#\x1a\xf4\x84\b\xe0+%P(\xb7\xc9\xbb\x859oM\x8a\xf0\xeb\x95\xfc\x0e\xcc\x99\xf7\x80\xe2'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xfd85) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000005000000000000000100000408000000000000000300000010000000000000000000000200"], 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, 0x0, 0x0, 0x16, 0x0, "240f3287a5e266bb024e6cab6d88b902e6b8e54017fbe5ecf4157063952a955785d2a4af35977a33a91e502146a3c687adb5199ae4a223a9fc478998949af6e575c078bf05f44705be786f69b2658e4d"}, 0xd8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x14, 0x2, 0x6, 0x5}, 0x14}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r4, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="01000000008d"}) kernel console output (not intermixed with test programs): _hcd [ 413.867347][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 413.867470][ T29] audit: type=1326 audit(1740833331.201:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9218 comm="syz.1.908" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13b078d169 code=0x10000 [ 415.118688][ T5135] Bluetooth: hci4: unknown advertising packet type: 0x65 [ 415.118733][ T5135] Bluetooth: hci4: Dropping invalid advertising data [ 415.132748][ T5135] Bluetooth: hci4: Malformed LE Event: 0x02 [ 416.559346][ T5878] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 417.635320][ T5876] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 417.650730][ T5878] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.669527][ T5878] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 417.690009][ T5878] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 418.115363][ T9250] openvswitch: netlink: IPv4 tun info is not correct [ 418.626596][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 418.634801][ T5878] usb 5-1: SerialNumber: syz [ 418.699374][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 418.710927][ T5876] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 418.719014][ T5876] usb 3-1: config 0 has no interface number 0 [ 418.735914][ T5876] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 418.759925][ T5876] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 418.789448][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.812305][ T9261] ip6gretap0: entered promiscuous mode [ 418.814145][ T5876] usb 3-1: config 0 descriptor?? [ 418.819566][ T9261] batadv_slave_0: entered promiscuous mode [ 418.871993][ T9261] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 418.889387][ T5876] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 418.901436][ T5878] usb 5-1: 0:2 : does not exist [ 418.907887][ T9261] Cannot create hsr debugfs directory [ 418.925294][ T5878] usb 5-1: USB disconnect, device number 16 [ 418.959387][ T9261] ip6gretap0: left promiscuous mode [ 418.967010][ T9261] batadv_slave_0: left promiscuous mode [ 419.100699][ T5877] usb 3-1: USB disconnect, device number 21 [ 419.609665][ T9269] openvswitch: netlink: IPv4 tun info is not correct [ 419.698471][ T9261] syz.0.920 (9261) used greatest stack depth: 17456 bytes left [ 420.187198][ T9273] netlink: 72 bytes leftover after parsing attributes in process `syz.0.922'. [ 420.386169][ T9277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 420.396415][ T9277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.434108][ T9306] syz.3.928 (9306): drop_caches: 2 [ 425.803972][ T9330] openvswitch: netlink: IPv4 tun info is not correct [ 426.189869][ T5879] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 426.192081][ T9331] gfs2: gfs2 mount does not exist [ 426.401658][ T5879] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.708302][ T9333] netlink: 40 bytes leftover after parsing attributes in process `syz.3.937'. [ 426.717891][ T5879] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 426.736769][ T5879] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 426.810701][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 426.818776][ T5879] usb 5-1: SerialNumber: syz [ 427.040707][ T5879] usb 5-1: 0:2 : does not exist [ 427.067336][ T5879] usb 5-1: USB disconnect, device number 17 [ 427.149500][ T5876] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 427.282487][ T9347] gfs2: gfs2 mount does not exist [ 427.808486][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 427.874811][ T5876] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1028, setting to 1024 [ 428.155041][ T9347] netlink: 40 bytes leftover after parsing attributes in process `syz.1.944'. [ 428.189253][ T5876] usb 1-1: config 0 interface 0 has no altsetting 0 [ 428.196063][ T5876] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 428.207792][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.235830][ T5876] usb 1-1: config 0 descriptor?? [ 428.249405][ T9338] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 428.474785][ T9354] Cannot find set identified by id 0 to match [ 428.627417][ T9359] netlink: 72 bytes leftover after parsing attributes in process `syz.4.948'. [ 428.714352][ T5876] elo 0003:04E7:0030.0013: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.0-1/input0 [ 428.916482][ T5876] usb 1-1: USB disconnect, device number 26 [ 430.077024][ T9369] program syz.3.951 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 431.670770][ T9385] 9pnet_fd: Insufficient options for proto=fd [ 432.374133][ T9379] gfs2: gfs2 mount does not exist [ 432.750909][ T9379] netlink: 40 bytes leftover after parsing attributes in process `syz.0.956'. [ 433.014211][ T9392] overlayfs: workdir and upperdir must be separate subtrees [ 434.375108][ T9394] gfs2: gfs2 mount does not exist [ 434.425442][ T9394] netlink: 40 bytes leftover after parsing attributes in process `syz.4.960'. [ 434.824202][ T9408] ntfs3: Unknown parameter '"a0(ddZ56t@Xfv6} WV䝑qDy63 1 [ 461.924578][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 461.933249][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 461.942872][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 461.952735][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 461.960621][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 462.105683][ T9604] openvswitch: netlink: IPv4 tun info is not correct [ 463.657448][ T9616] openvswitch: netlink: IPv4 tun info is not correct [ 464.684102][ T54] Bluetooth: hci5: command tx timeout [ 465.229639][ T9622] ntfs3: Unknown parameter '"a0(ddZ56t@Xfv6} WV䝑qDy63 [ 476.079306][ T5879] elo 0003:04E7:0030.0015: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.1-1/input0 [ 476.090857][ T80] tipc: Left network mode [ 476.276834][ T5879] usb 2-1: USB disconnect, device number 21 [ 477.898200][ T9708] openvswitch: netlink: IPv4 tun info is not correct [ 478.635088][ T9600] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 478.657733][ T9600] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 478.755503][ T9600] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 478.763908][ T9712] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1049'. [ 478.783784][ T9600] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 479.084773][ T9600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.295133][ T9600] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.337372][ T9725] tmpfs: Unknown parameter '֔CxLZwՀ@B' [ 479.755632][ T9726] FAULT_INJECTION: forcing a failure. [ 479.755632][ T9726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.834174][ T9726] CPU: 1 UID: 0 PID: 9726 Comm: syz.1.1053 Not tainted 6.14.0-rc4-syzkaller-00220-g5c44ddaf7df3 #0 [ 479.834207][ T9726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 479.834221][ T9726] Call Trace: [ 479.834228][ T9726] [ 479.834237][ T9726] dump_stack_lvl+0x241/0x360 [ 479.834269][ T9726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.834291][ T9726] ? __pfx__printk+0x10/0x10 [ 479.834325][ T9726] ? __pfx_lock_release+0x10/0x10 [ 479.834364][ T9726] should_fail_ex+0x40a/0x550 [ 479.834398][ T9726] _copy_from_iter+0x1df/0x1c40 [ 479.834428][ T9726] ? __virt_addr_valid+0x183/0x530 [ 479.834460][ T9726] ? __pfx_lock_release+0x10/0x10 [ 479.834495][ T9726] ? __alloc_skb+0x28f/0x440 [ 479.834524][ T9726] ? __pfx__copy_from_iter+0x10/0x10 [ 479.834550][ T9726] ? __virt_addr_valid+0x183/0x530 [ 479.834579][ T9726] ? __virt_addr_valid+0x183/0x530 [ 479.834607][ T9726] ? __virt_addr_valid+0x45f/0x530 [ 479.834638][ T9726] ? __phys_addr_symbol+0x2f/0x70 [ 479.834667][ T9726] ? __check_object_size+0x47a/0x730 [ 479.834706][ T9726] netlink_sendmsg+0x742/0xcb0 [ 479.834743][ T9726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.834778][ T9726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.834799][ T9726] __sock_sendmsg+0x221/0x270 [ 479.834827][ T9726] ____sys_sendmsg+0x53a/0x860 [ 479.834869][ T9726] ? __pfx_____sys_sendmsg+0x10/0x10 [ 479.834901][ T9726] ? __fget_files+0x2a/0x410 [ 479.834926][ T9726] ? __fget_files+0x2a/0x410 [ 479.834956][ T9726] __sys_sendmsg+0x269/0x350 [ 479.834995][ T9726] ? __pfx___sys_sendmsg+0x10/0x10 [ 479.835041][ T9726] ? do_sys_openat2+0x17a/0x1d0 [ 479.835090][ T9726] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 479.835122][ T9726] ? do_syscall_64+0x100/0x230 [ 479.835155][ T9726] ? do_syscall_64+0xb6/0x230 [ 479.835188][ T9726] do_syscall_64+0xf3/0x230 [ 479.835218][ T9726] ? clear_bhb_loop+0x35/0x90 [ 479.835251][ T9726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.835278][ T9726] RIP: 0033:0x7f13b078d169 [ 479.835297][ T9726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.835316][ T9726] RSP: 002b:00007f13b160b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.835339][ T9726] RAX: ffffffffffffffda RBX: 00007f13b09a6160 RCX: 00007f13b078d169 [ 479.835353][ T9726] RDX: 0000000004044040 RSI: 0000400000006040 RDI: 0000000000000003 [ 479.835367][ T9726] RBP: 00007f13b160b090 R08: 0000000000000000 R09: 0000000000000000 [ 479.835379][ T9726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.835391][ T9726] R13: 0000000000000001 R14: 00007f13b09a6160 R15: 00007ffd3ddf1668 [ 479.835428][ T9726] [ 480.184431][ T80] hsr_slave_0: left promiscuous mode [ 480.190414][ T80] hsr_slave_1: left promiscuous mode [ 480.196116][ T80] batman_adv: batadv0: Interface deactivated: dummy0 [ 480.202930][ T80] batman_adv: batadv0: Removing interface: dummy0 [ 480.210248][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.217651][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.226210][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.239181][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.264623][ T80] dummy0: left allmulticast mode [ 480.269883][ T80] dummy0: left promiscuous mode [ 480.275155][ T80] veth1_macvtap: left promiscuous mode [ 480.281600][ T80] veth0_macvtap: left promiscuous mode [ 480.287406][ T80] veth1_vlan: left promiscuous mode [ 480.293048][ T80] veth0_vlan: left promiscuous mode [ 480.399322][ T9734] overlayfs: workdir and upperdir must be separate subtrees [ 481.366491][ T80] team0 (unregistering): Port device team_slave_1 removed [ 481.926566][ T80] team0 (unregistering): Port device team_slave_0 removed [ 481.950224][ T7256] smc: removing ib device syz1 [ 483.285031][ T7252] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.292290][ T7252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.304002][ T7252] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.311212][ T7252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.436593][ T9600] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 483.463925][ T9600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 483.519970][ T1213] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 483.705014][ T1213] usb 3-1: Using ep0 maxpacket: 16 [ 484.125678][ T1213] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 484.145238][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.175869][ T1213] usb 3-1: Product: syz [ 484.183505][ T1213] usb 3-1: Manufacturer: syz [ 484.210028][ T1213] usb 3-1: SerialNumber: syz [ 484.252549][ T1213] r8152-cfgselector 3-1: Unknown version 0x0000 [ 484.258875][ T1213] r8152-cfgselector 3-1: config 0 descriptor?? [ 484.270055][ T9750] gfs2: gfs2 mount does not exist [ 484.415422][ T9757] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1062'. [ 484.559634][ T9750] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1061'. [ 484.644816][ T9600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.822966][ T9764] tmpfs: Unknown parameter '֔CxLZwՀ@B' [ 484.874484][ T1213] r8152-cfgselector 3-1: Unknown version 0x0000 [ 484.890998][ T1213] r8152-cfgselector 3-1: bad CDC descriptors [ 485.634480][ T1213] r8152-cfgselector 3-1: USB disconnect, device number 23 [ 485.881254][ T9776] overlayfs: workdir and upperdir must be separate subtrees [ 485.979508][ T5876] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 486.179329][ T5876] usb 1-1: Using ep0 maxpacket: 16 [ 486.312984][ T5876] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 486.431843][ T9782] program syz.4.1069 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 486.501166][ T5876] usb 1-1: config 0 has no interface number 0 [ 486.532209][ T5876] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.566729][ T5876] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.623400][ T5876] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 486.962783][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.010954][ T5876] usb 1-1: config 0 descriptor?? [ 487.101826][ T9600] veth0_vlan: entered promiscuous mode [ 487.144542][ T9600] veth1_vlan: entered promiscuous mode [ 487.227711][ T9600] veth0_macvtap: entered promiscuous mode [ 487.473061][ T9600] veth1_macvtap: entered promiscuous mode [ 487.497315][ T9787] program syz.4.1070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 487.672447][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.693172][ T5876] uclogic 0003:28BD:0071.0016: failed retrieving string descriptor #100: -71 [ 487.713826][ T5876] uclogic 0003:28BD:0071.0016: failed retrieving pen parameters: -71 [ 487.896723][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.917037][ T5876] uclogic 0003:28BD:0071.0016: pen probing failed: -71 [ 487.917691][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.955322][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.959138][ T5876] uclogic 0003:28BD:0071.0016: failed probing parameters: -71 [ 487.970469][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.981145][ T5876] uclogic 0003:28BD:0071.0016: probe with driver uclogic failed with error -71 [ 487.996173][ T5876] usb 1-1: USB disconnect, device number 27 [ 488.007629][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.028804][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.049278][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.094564][ T9600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.142123][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.163383][ T80] IPVS: stop unused estimator thread 0... [ 488.180404][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.197271][ T9790] FAULT_INJECTION: forcing a failure. [ 488.197271][ T9790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.199227][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.240569][ T9790] CPU: 0 UID: 0 PID: 9790 Comm: syz.4.1071 Not tainted 6.14.0-rc4-syzkaller-00220-g5c44ddaf7df3 #0 [ 488.240603][ T9790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 488.240616][ T9790] Call Trace: [ 488.240624][ T9790] [ 488.240634][ T9790] dump_stack_lvl+0x241/0x360 [ 488.240664][ T9790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.240686][ T9790] ? __pfx__printk+0x10/0x10 [ 488.240722][ T9790] ? __pfx_lock_release+0x10/0x10 [ 488.240761][ T9790] should_fail_ex+0x40a/0x550 [ 488.240797][ T9790] _copy_from_user+0x2d/0xb0 [ 488.240825][ T9790] ____sys_sendmsg+0x30b/0x860 [ 488.240868][ T9790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.240906][ T9790] ? __fget_files+0x2a/0x410 [ 488.240933][ T9790] ? __sys_sendmmsg+0x392/0x720 [ 488.240967][ T9790] ? __might_fault+0xaa/0x120 [ 488.240997][ T9790] __sys_sendmmsg+0x36a/0x720 [ 488.241043][ T9790] ? __pfx___sys_sendmmsg+0x10/0x10 [ 488.241090][ T9790] ? __pfx_lock_release+0x10/0x10 [ 488.241117][ T9790] ? kstrtouint_from_user+0x128/0x190 [ 488.241162][ T9790] ? ksys_write+0x22a/0x2b0 [ 488.241190][ T9790] ? __pfx_lock_release+0x10/0x10 [ 488.241226][ T9790] ? sb_end_write+0xe9/0x1c0 [ 488.241248][ T9790] ? vfs_write+0x7fa/0xd10 [ 488.241276][ T9790] ? __mutex_unlock_slowpath+0x227/0x800 [ 488.241336][ T9790] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 488.241369][ T9790] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 488.241400][ T9790] ? do_syscall_64+0x100/0x230 [ 488.241434][ T9790] __x64_sys_sendmmsg+0xa0/0xb0 [ 488.241469][ T9790] do_syscall_64+0xf3/0x230 [ 488.241499][ T9790] ? clear_bhb_loop+0x35/0x90 [ 488.241532][ T9790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.241560][ T9790] RIP: 0033:0x7f3cb1b8d169 [ 488.241579][ T9790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.241597][ T9790] RSP: 002b:00007f3cb29c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 488.241619][ T9790] RAX: ffffffffffffffda RBX: 00007f3cb1da5fa0 RCX: 00007f3cb1b8d169 [ 488.241635][ T9790] RDX: 0000000000000002 RSI: 0000400000006700 RDI: 0000000000000004 [ 488.241649][ T9790] RBP: 00007f3cb29c6090 R08: 0000000000000000 R09: 0000000000000000 [ 488.241662][ T9790] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 488.241675][ T9790] R13: 0000000000000000 R14: 00007f3cb1da5fa0 R15: 00007ffe1d739878 [ 488.241706][ T9790] [ 488.249134][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.541112][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.552281][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.707923][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.752171][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.117358][ T9600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.633671][ T9798] dummy0: entered promiscuous mode [ 489.638976][ T9798] macsec1: entered allmulticast mode [ 489.647177][ T9798] dummy0: entered allmulticast mode [ 489.678785][ T9802] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1074'. [ 489.713317][ T9600] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.745712][ T9600] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.789655][ T9600] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.798420][ T9600] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.010547][ T9812] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 490.057543][ T7234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.759588][ T9815] tmpfs: Unknown parameter '֔CxLZwՀ@B' [ 490.823525][ T7234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.786554][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.247264][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.368171][ T9824] gfs2: gfs2 mount does not exist [ 494.612101][ T9839] netlink: 'syz.1.1084': attribute type 1 has an invalid length. [ 494.620165][ T9839] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1084'. [ 495.224933][ T9841] veth0_to_batadv: entered promiscuous mode [ 495.252862][ T9841] veth0_to_batadv: left promiscuous mode [ 495.495323][ T9844] netlink: 'syz.2.1085': attribute type 29 has an invalid length. [ 495.603691][ T9850] openvswitch: netlink: IPv4 tun info is not correct [ 496.277572][ T5877] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 496.436976][ T9855] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1088'. [ 496.439900][ T5877] usb 6-1: Using ep0 maxpacket: 8 [ 496.457203][ T5877] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1028, setting to 1024 [ 496.499224][ T5877] usb 6-1: config 0 interface 0 has no altsetting 0 [ 496.507887][ T5877] usb 6-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 496.559455][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.576993][ T5877] usb 6-1: config 0 descriptor?? [ 496.600007][ T9846] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 497.247082][ T9865] gfs2: gfs2 mount does not exist [ 497.482456][ T9869] tmpfs: Unknown parameter '֔CxLZwՀ@B' [ 498.957289][ T5877] elo 0003:04E7:0030.0017: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.5-1/input0 [ 498.974547][ T5877] usb 6-1: USB disconnect, device number 2 [ 502.059738][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.102441][ T29] audit: type=1326 audit(1740833419.741:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9904 comm="syz.2.1104" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff09318d169 code=0x0 [ 502.390468][ T5877] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 502.473781][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1106'. [ 502.584286][ T9919] tmpfs: Unknown parameter '֔CxLZwՀ@B' [ 502.912398][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'. [ 503.150440][ T9924] input: syz1 as /devices/virtual/input/input9 [ 503.338734][ T5877] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.349174][ T5877] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 503.484096][ T9930] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1109'. [ 503.522015][ T5877] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 504.226421][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.234538][ T5877] usb 3-1: Product: syz [ 504.238746][ T5877] usb 3-1: Manufacturer: syz [ 504.260513][ T5877] usb 3-1: SerialNumber: syz [ 504.267727][ T5877] usb 3-1: can't set config #1, error -71 [ 504.279479][ T5877] usb 3-1: USB disconnect, device number 24 [ 505.258597][ T9953] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1116'. [ 505.586428][ T5135] Bluetooth: hci5: command 0x0405 tx timeout [ 505.652291][ T9947] syz.1.1114 (9947): drop_caches: 2 [ 505.816719][ T9967] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1121'. [ 505.829338][ T5878] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 505.906899][ T9970] tmpfs: Unknown parameter '֔CxLZwՀ@B' [ 506.678950][ T9967] unsupported nla_type 65024 [ 506.714067][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1123'. [ 506.802136][ T5878] usb 6-1: Using ep0 maxpacket: 16 [ 506.820017][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 59, changing to 9 [ 506.866532][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33540, setting to 1024 [ 506.910555][ T5878] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 506.949635][ T5900] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 506.979635][ T5878] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 507.019155][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.044583][ T5878] usb 6-1: config 0 descriptor?? [ 507.179848][ T5900] usb 1-1: not running at top speed; connect to a high speed hub [ 507.392726][ T5900] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 508.190777][ T5900] usb 1-1: config 1 interface 0 has no altsetting 0 [ 508.646789][ T5900] usb 1-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 508.690521][ T5878] microsoft 0003:045E:07DA.0018: No inputs registered, leaving [ 508.728421][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.819767][ T5900] usb 1-1: Product: syz [ 508.824449][ T5900] usb 1-1: Manufacturer: syz [ 508.861385][ T5900] usb 1-1: SerialNumber: syz [ 508.904598][ T5878] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 508.926752][ T5878] microsoft 0003:045E:07DA.0018: no inputs found [ 508.935675][ T5878] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway [ 509.384129][ T9999] openvswitch: netlink: IPv4 tun info is not correct [ 509.969427][ T5878] usb 6-1: USB disconnect, device number 3 [ 510.742830][ T5900] usb 1-1: can't set config #1, error -71 [ 510.778335][ T5900] usb 1-1: USB disconnect, device number 28 [ 510.918963][T10005] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1129'. [ 511.080296][T10007] gfs2: gfs2 mount does not exist [ 513.165263][ T9998] syz.2.1128 (9998): drop_caches: 2 [ 513.844483][T10030] sctp: [Deprecated]: syz.0.1139 (pid 10030) Use of struct sctp_assoc_value in delayed_ack socket option. [ 513.844483][T10030] Use struct sctp_sack_info instead [ 513.969356][ T5877] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 513.994725][T10035] openvswitch: netlink: IPv4 tun info is not correct [ 514.160959][ T5877] usb 2-1: unable to get BOS descriptor or descriptor too short [ 514.180293][ T5877] usb 2-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 514.209273][ T5877] usb 2-1: config 15 has 0 interfaces, different from the descriptor's value: 3 [ 514.235351][ T5877] usb 2-1: New USB device found, idVendor=0c45, idProduct=62bc, bcdDevice=2c.f4 [ 514.258346][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.271488][ T5877] usb 2-1: Product: syz [ 514.276846][ T5877] usb 2-1: Manufacturer: syz [ 514.286983][ T5877] usb 2-1: SerialNumber: syz [ 514.936712][T10027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.049477][T10027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.300661][T10046] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1144'. [ 515.372993][T10044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.424285][T10047] netlink: 'syz.2.1143': attribute type 3 has an invalid length. [ 515.477713][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1143'. [ 515.509250][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1143'. [ 515.715396][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 516.799255][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 516.830800][ T9] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1028, setting to 1024 [ 517.151193][T10059] gfs2: gfs2 mount does not exist [ 517.198653][ T5877] usb 2-1: USB disconnect, device number 22 [ 517.249249][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 517.340822][ T9] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 517.379777][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.435736][ T9] usb 5-1: config 0 descriptor?? [ 517.454127][T10050] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 518.095580][T10070] dummy0: entered promiscuous mode [ 518.101313][T10070] macsec1: entered allmulticast mode [ 518.106881][T10070] dummy0: entered allmulticast mode [ 518.880928][ T9] elo 0003:04E7:0030.0019: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.4-1/input0 [ 519.383006][T10075] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1151'. [ 519.399911][ T9] usb 5-1: USB disconnect, device number 19 [ 519.427495][T10073] sp0: Synchronizing with TNC [ 519.463477][T10080] netlink: 'syz.0.1148': attribute type 1 has an invalid length. [ 519.471737][T10080] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1148'. [ 520.879547][T10062] [U] ` [ 521.150787][T10093] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1156'. [ 522.013119][T10103] openvswitch: netlink: IPv4 tun info is not correct [ 523.152097][ T5877] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 524.552233][T10118] gfs2: gfs2 mount does not exist [ 525.029934][ T5877] usb 3-1: unable to get BOS descriptor or descriptor too short [ 525.039789][ T5877] usb 3-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 525.050401][ T5877] usb 3-1: config 15 has 0 interfaces, different from the descriptor's value: 3 [ 525.061399][ T5877] usb 3-1: New USB device found, idVendor=0c45, idProduct=62bc, bcdDevice=2c.f4 [ 525.086371][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.094782][ T5877] usb 3-1: Product: syz [ 525.099069][ T5877] usb 3-1: Manufacturer: syz [ 525.103691][ T5877] usb 3-1: SerialNumber: syz [ 525.144851][T10111] gfs2: gfs2 mount does not exist [ 525.278842][T10111] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1162'. [ 525.492389][T10120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.540060][T10120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.613709][T10123] Driver unsupported XDP return value 0 on prog (id 295) dev N/A, expect packet loss! [ 526.010904][T10131] openvswitch: netlink: IPv4 tun info is not correct [ 526.082705][T10133] overlayfs: workdir and upperdir must be separate subtrees [ 526.523994][ T5877] usb 3-1: USB disconnect, device number 25 [ 526.604962][T10136] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1168'. [ 527.084494][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1170'. [ 527.359265][ T5875] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 527.581001][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 527.594951][ T5875] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 527.619302][ T5875] usb 1-1: config 0 has no interface number 0 [ 527.625933][ T5875] usb 1-1: config 0 interface 41 has no altsetting 0 [ 527.659888][ T5875] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 527.679131][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.687295][ T5875] usb 1-1: Product: syz [ 527.691749][ T5875] usb 1-1: Manufacturer: syz [ 527.701889][ T5875] usb 1-1: SerialNumber: syz [ 527.950162][ T5875] usb 1-1: config 0 descriptor?? [ 527.969503][ T5875] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22 [ 528.776600][T10146] openvswitch: netlink: IPv4 tun info is not correct [ 528.843907][ T5877] usb 1-1: USB disconnect, device number 29 [ 529.062470][T10153] netlink: 'syz.1.1175': attribute type 12 has an invalid length. [ 530.489358][T10172] netlink: 194488 bytes leftover after parsing attributes in process `syz.4.1180'. [ 530.597846][T10176] openvswitch: netlink: IPv4 tun info is not correct [ 531.199211][ T5879] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 531.397803][T10181] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1184'. [ 531.407428][T10180] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1184'. [ 531.542308][ T5879] usb 2-1: unable to get BOS descriptor or descriptor too short [ 531.611662][T10183] openvswitch: netlink: IPv4 tun info is not correct [ 531.637859][ T5879] usb 2-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 531.720799][ T5879] usb 2-1: config 15 has 0 interfaces, different from the descriptor's value: 3 [ 531.835316][ T5879] usb 2-1: New USB device found, idVendor=0c45, idProduct=62bc, bcdDevice=2c.f4 [ 531.935011][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.389267][ T5879] usb 2-1: Product: syz [ 532.393523][ T5879] usb 2-1: Manufacturer: syz [ 532.398164][ T5879] usb 2-1: SerialNumber: syz [ 533.464355][T10191] openvswitch: netlink: IPv4 tun info is not correct [ 533.472175][T10168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.529778][T10168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.141875][T10215] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1192'. [ 536.199729][T10215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1192'. [ 536.247654][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1192'. [ 537.398144][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1195'. [ 537.528292][ T5878] usb 2-1: USB disconnect, device number 23 [ 537.649422][T10228] openvswitch: netlink: IPv4 tun info is not correct [ 538.398731][T10232] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1198'. [ 538.704593][T10226] openvswitch: netlink: IPv4 tun info is not correct [ 543.690878][T10268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 543.711844][T10268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 543.728393][T10268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 543.761349][T10268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 543.770621][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 543.785461][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 544.256698][T10277] openvswitch: netlink: IPv4 tun info is not correct [ 545.017788][T10278] serio: Serial port ptm0 [ 545.241381][ T25] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 545.519200][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.549239][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 545.569886][ T25] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 545.896366][ T54] Bluetooth: hci3: command tx timeout [ 545.909633][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 545.972775][ T25] usb 5-1: SerialNumber: syz [ 546.147173][T10286] gfs2: gfs2 mount does not exist [ 546.331120][ T25] usb 5-1: 0:2 : does not exist [ 546.570416][ T25] usb 5-1: USB disconnect, device number 20 [ 547.575763][T10295] gfs2: gfs2 mount does not exist [ 547.962847][ T54] Bluetooth: hci3: command tx timeout [ 548.902503][T10265] chnl_net:caif_netlink_parms(): no params data found [ 549.186644][T10265] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.222612][T10265] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.258791][T10265] bridge_slave_0: entered allmulticast mode [ 549.276303][T10265] bridge_slave_0: entered promiscuous mode [ 549.460281][T10265] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.467849][T10265] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.475392][T10265] bridge_slave_1: entered allmulticast mode [ 549.512594][T10265] bridge_slave_1: entered promiscuous mode [ 549.626146][T10265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.642624][T10265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.722892][T10265] team0: Port device team_slave_0 added [ 549.735708][T10265] team0: Port device team_slave_1 added [ 549.792434][T10265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.803057][T10265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.829043][ C0] vkms_vblank_simulate: vblank timer overrun [ 549.835587][T10265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.850086][T10265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.858511][T10265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.884518][ C0] vkms_vblank_simulate: vblank timer overrun [ 549.896092][T10265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.968921][T10265] hsr_slave_0: entered promiscuous mode [ 549.977366][T10265] hsr_slave_1: entered promiscuous mode [ 549.987318][T10265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 549.995547][T10265] Cannot create hsr debugfs directory [ 550.003208][T10315] FAULT_INJECTION: forcing a failure. [ 550.003208][T10315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.035332][T10315] CPU: 1 UID: 0 PID: 10315 Comm: syz.4.1219 Not tainted 6.14.0-rc4-syzkaller-00220-g5c44ddaf7df3 #0 [ 550.035362][T10315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 550.035376][T10315] Call Trace: [ 550.035383][T10315] [ 550.035392][T10315] dump_stack_lvl+0x241/0x360 [ 550.035423][T10315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 550.035445][T10315] ? __pfx__printk+0x10/0x10 [ 550.035484][T10315] ? snprintf+0xda/0x120 [ 550.035510][T10315] should_fail_ex+0x40a/0x550 [ 550.035546][T10315] _copy_to_user+0x31/0xb0 [ 550.035576][T10315] simple_read_from_buffer+0xca/0x150 [ 550.035612][T10315] proc_fail_nth_read+0x1e9/0x250 [ 550.035649][T10315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 550.035686][T10315] ? rw_verify_area+0x243/0x630 [ 550.035711][T10315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 550.035748][T10315] vfs_read+0x1f8/0xb40 [ 550.035775][T10315] ? fdget_pos+0x254/0x320 [ 550.035798][T10315] ? __pfx___mutex_lock+0x10/0x10 [ 550.035829][T10315] ? __pfx_vfs_read+0x10/0x10 [ 550.035858][T10315] ? __fget_files+0x2a/0x410 [ 550.035882][T10315] ? __fget_files+0x395/0x410 [ 550.035901][T10315] ? __fget_files+0x2a/0x410 [ 550.035933][T10315] ksys_read+0x18f/0x2b0 [ 550.035963][T10315] ? __pfx_ksys_read+0x10/0x10 [ 550.035990][T10315] ? do_syscall_64+0x100/0x230 [ 550.036024][T10315] ? do_syscall_64+0xb6/0x230 [ 550.036055][T10315] do_syscall_64+0xf3/0x230 [ 550.036086][T10315] ? clear_bhb_loop+0x35/0x90 [ 550.036119][T10315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.036148][T10315] RIP: 0033:0x7f3cb1b8bb7c [ 550.036166][T10315] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 550.036185][T10315] RSP: 002b:00007f3cb29c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 550.036208][T10315] RAX: ffffffffffffffda RBX: 00007f3cb1da5fa0 RCX: 00007f3cb1b8bb7c [ 550.036224][T10315] RDX: 000000000000000f RSI: 00007f3cb29c60a0 RDI: 0000000000000006 [ 550.036238][T10315] RBP: 00007f3cb29c6090 R08: 0000000000000000 R09: 0000000000000000 [ 550.036251][T10315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.036264][T10315] R13: 0000000000000000 R14: 00007f3cb1da5fa0 R15: 00007ffe1d739878 [ 550.036304][T10315] [ 550.271037][ T54] Bluetooth: hci3: command tx timeout [ 550.558479][T10320] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1221'. [ 550.704928][T10321] openvswitch: netlink: IPv4 tun info is not correct [ 552.077751][T10331] program syz.1.1224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 552.429447][ T54] Bluetooth: hci3: command tx timeout [ 552.704422][T10337] openvswitch: netlink: IPv4 tun info is not correct [ 552.986503][T10265] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 553.072969][T10265] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 553.117804][T10265] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 553.311805][T10265] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 553.461430][T10349] openvswitch: netlink: IPv4 tun info is not correct [ 554.368458][T10265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.800361][T10357] openvswitch: netlink: IPv4 tun info is not correct [ 555.492442][T10359] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722 [ 555.519454][T10359] PKCS7: Only support pkcs7_signedData type [ 555.632086][T10265] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.644203][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.651387][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.684627][T10364] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1235'. [ 555.731025][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.738188][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.230207][T10377] dummy0: entered promiscuous mode [ 556.235709][T10377] macsec1: entered allmulticast mode [ 556.241158][T10377] dummy0: entered allmulticast mode [ 557.780158][ T29] audit: type=1326 audit(1740833475.411:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10384 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b078d169 code=0x7ffc0000 [ 557.802464][T10265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.886908][ T29] audit: type=1326 audit(1740833475.411:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10384 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b078d169 code=0x7ffc0000 [ 557.977417][ T29] audit: type=1326 audit(1740833475.421:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10384 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f13b078d169 code=0x7ffc0000 [ 558.000683][T10388] FAULT_INJECTION: forcing a failure. [ 558.000683][T10388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.049350][T10388] CPU: 1 UID: 0 PID: 10388 Comm: syz.4.1240 Not tainted 6.14.0-rc4-syzkaller-00220-g5c44ddaf7df3 #0 [ 558.049383][T10388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 558.049396][T10388] Call Trace: [ 558.049404][T10388] [ 558.049412][T10388] dump_stack_lvl+0x241/0x360 [ 558.049442][T10388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.049463][T10388] ? __pfx__printk+0x10/0x10 [ 558.049504][T10388] ? __pfx_lock_release+0x10/0x10 [ 558.049543][T10388] should_fail_ex+0x40a/0x550 [ 558.049579][T10388] _copy_from_user+0x2d/0xb0 [ 558.049608][T10388] ucma_write+0x17d/0x420 [ 558.049647][T10388] ? __pfx_ucma_write+0x10/0x10 [ 558.049678][T10388] ? bpf_lsm_file_permission+0x9/0x10 [ 558.049706][T10388] ? rw_verify_area+0x243/0x630 [ 558.049732][T10388] ? __pfx_ucma_write+0x10/0x10 [ 558.049765][T10388] vfs_write+0x29f/0xd10 [ 558.049795][T10388] ? __mutex_unlock_slowpath+0x227/0x800 [ 558.049829][T10388] ? __pfx_vfs_write+0x10/0x10 [ 558.049853][T10388] ? do_sys_openat2+0x17a/0x1d0 [ 558.049878][T10388] ? __fget_files+0x2a/0x410 [ 558.049901][T10388] ? __fget_files+0x395/0x410 [ 558.049921][T10388] ? __fget_files+0x2a/0x410 [ 558.049952][T10388] ksys_write+0x18f/0x2b0 [ 558.049981][T10388] ? __pfx_ksys_write+0x10/0x10 [ 558.050009][T10388] ? do_syscall_64+0x100/0x230 [ 558.050041][T10388] ? do_syscall_64+0xb6/0x230 [ 558.050073][T10388] do_syscall_64+0xf3/0x230 [ 558.050102][T10388] ? clear_bhb_loop+0x35/0x90 [ 558.050134][T10388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.050161][T10388] RIP: 0033:0x7f3cb1b8d169 [ 558.050179][T10388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.050197][T10388] RSP: 002b:00007f3cb29c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 558.050220][T10388] RAX: ffffffffffffffda RBX: 00007f3cb1da5fa0 RCX: 00007f3cb1b8d169 [ 558.050236][T10388] RDX: 0000000000000018 RSI: 00004000000001c0 RDI: 0000000000000003 [ 558.050249][T10388] RBP: 00007f3cb29c6090 R08: 0000000000000000 R09: 0000000000000000 [ 558.050263][T10388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.050276][T10388] R13: 0000000000000000 R14: 00007f3cb1da5fa0 R15: 00007ffe1d739878 [ 558.050307][T10388] [ 558.064695][ T29] audit: type=1326 audit(1740833475.421:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10384 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b078d169 code=0x7ffc0000 [ 558.604030][ T29] audit: type=1326 audit(1740833475.421:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10384 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f13b078d169 code=0x7ffc0000 [ 558.951076][ T29] audit: type=1326 audit(1740833475.421:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10384 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b078d169 code=0x7ffc0000 [ 558.973853][ T29] audit: type=1326 audit(1740833475.421:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10384 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f13b078d169 code=0x7ffc0000 [ 559.068275][ T29] audit: type=1326 audit(1740833475.421:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10384 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b078d169 code=0x7ffc0000 [ 559.128090][T10404] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 559.391914][ T29] audit: type=1326 audit(1740833475.421:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10384 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f13b078d169 code=0x7ffc0000 [ 559.394470][T10265] veth0_vlan: entered promiscuous mode [ 559.783290][ T29] audit: type=1326 audit(1740833475.421:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10384 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b078d169 code=0x7ffc0000 [ 559.918121][T10265] veth1_vlan: entered promiscuous mode [ 560.022967][T10265] veth0_macvtap: entered promiscuous mode [ 560.042842][T10265] veth1_macvtap: entered promiscuous mode [ 560.084319][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.159253][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.199106][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.254659][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.289560][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.336520][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.370865][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.402923][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.413269][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.424117][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.546540][T10417] openvswitch: netlink: IPv4 tun info is not correct [ 561.167791][T10419] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1250'. [ 561.224325][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 561.244429][T10265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.274191][T10415] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 561.282628][T10415] macsec2: entered promiscuous mode [ 561.288034][T10415] macsec2: entered allmulticast mode [ 561.294536][T10415] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 561.335487][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.389123][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.410942][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.425316][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.435715][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.446696][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.477439][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.526780][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.557760][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.601884][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.842193][T10432] openvswitch: netlink: IPv4 tun info is not correct [ 562.618631][T10265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.758834][T10265] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.777634][T10265] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.787945][T10265] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.796862][T10265] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.918346][T10439] Cannot find set identified by id 0 to match [ 563.399542][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.112740][ T7234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.134118][ T7234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.216173][ T7234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.255595][ T7234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.819694][T10455] openvswitch: netlink: IPv4 tun info is not correct [ 566.189366][T10457] openvswitch: netlink: IPv4 tun info is not correct [ 566.229148][ T5879] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 566.889116][ T5879] usb 1-1: Using ep0 maxpacket: 8 [ 566.895997][ T5879] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1028, setting to 1024 [ 566.919126][ T5879] usb 1-1: config 0 interface 0 has no altsetting 0 [ 566.925923][ T5879] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 566.953890][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.983367][ T5879] usb 1-1: config 0 descriptor?? [ 566.990212][T10446] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 566.999758][T10465] tipc: Started in network mode [ 567.004713][T10465] tipc: Node identity 1, cluster identity 8 [ 567.037847][T10465] tipc: Node number set to 1 [ 567.323301][T10469] program syz.2.1265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 567.562999][T10472] dummy0: entered promiscuous mode [ 567.570882][T10472] macsec1: entered allmulticast mode [ 567.576490][T10472] dummy0: entered allmulticast mode [ 568.412946][ T5879] elo 0003:04E7:0030.001A: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.0-1/input0 [ 568.499417][ T5879] usb 1-1: USB disconnect, device number 30 [ 568.871237][ T1213] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 569.072156][ T1213] usb 3-1: Using ep0 maxpacket: 8 [ 569.083094][ T1213] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1028, setting to 1024 [ 569.125084][ T1213] usb 3-1: config 0 interface 0 has no altsetting 0 [ 569.145389][ T1213] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 569.194826][ T1213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.246151][ T1213] usb 3-1: config 0 descriptor?? [ 569.259813][T10476] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 569.907617][T10495] openvswitch: netlink: IPv4 tun info is not correct [ 569.929090][T10498] openvswitch: netlink: IPv4 tun info is not correct [ 570.405810][ T1213] elo 0003:04E7:0030.001B: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.2-1/input0 [ 571.012310][T10509] program syz.1.1276 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 571.015423][ T5879] usb 3-1: USB disconnect, device number 26 [ 572.739492][T10537] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1285'. [ 573.017053][T10543] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1289'. [ 574.749838][ T5876] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 575.053981][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 575.110088][ T5876] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1028, setting to 1024 [ 575.125917][ T5876] usb 3-1: config 0 interface 0 has no altsetting 0 [ 575.142814][ T5876] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 575.169121][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.220181][ T5876] usb 3-1: config 0 descriptor?? [ 575.229463][T10565] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 575.363517][T10571] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1297'. [ 575.454511][T10576] openvswitch: netlink: IPv4 tun info is not correct [ 576.182522][ T5876] elo 0003:04E7:0030.001C: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.2-1/input0 [ 576.369532][T10585] netlink: 'syz.6.1301': attribute type 10 has an invalid length. [ 576.379273][T10585] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1301'. [ 576.382667][ T1213] usb 3-1: USB disconnect, device number 27 [ 576.388688][T10585] batadv0: entered promiscuous mode [ 576.401225][T10585] batadv0: entered allmulticast mode [ 576.407319][T10585] bridge0: port 3(batadv0) entered blocking state [ 576.437996][T10585] bridge0: port 3(batadv0) entered disabled state [ 576.461569][T10585] bridge0: port 3(batadv0) entered blocking state [ 576.468147][T10585] bridge0: port 3(batadv0) entered forwarding state [ 576.560148][T10585] batman_adv: batadv0: Adding interface: dummy0 [ 576.566468][T10585] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.591755][ C0] vkms_vblank_simulate: vblank timer overrun [ 576.612291][T10585] batman_adv: batadv0: Interface activated: dummy0 [ 576.623977][T10590] batadv0: mtu less than device minimum [ 576.637410][T10590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 576.650744][T10590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 576.663627][T10590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 576.676381][T10590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 576.689170][T10590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 576.701862][T10590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 576.714636][T10590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 576.727344][T10590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 576.802049][ T7250] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 576.811595][ T7250] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 577.279073][T10601] gfs2: gfs2 mount does not exist [ 578.014960][T10611] gfs2: gfs2 mount does not exist [ 578.545438][T10610] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1309'. [ 578.582308][T10615] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1310'. [ 578.770237][T10621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 578.866687][T10624] netlink: 'syz.0.1311': attribute type 39 has an invalid length. [ 580.472256][T10651] Cannot find set identified by id 0 to match [ 581.329800][T10653] fuse: Bad value for 'fd' [ 581.709829][T10657] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1324'. [ 581.715882][T10655] net_ratelimit: 11 callbacks suppressed [ 581.715906][T10655] openvswitch: netlink: IPv4 tun info is not correct [ 582.220015][T10664] openvswitch: netlink: IPv4 tun info is not correct [ 583.002849][T10663] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 583.329271][ T25] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 583.509296][ T5900] IPVS: starting estimator thread 0... [ 583.519171][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 583.589880][ T25] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 583.622263][ T25] usb 1-1: config 0 has no interface number 0 [ 583.628393][ T25] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 583.639637][ T1213] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 583.647412][T10679] IPVS: using max 29 ests per chain, 69600 per kthread [ 583.661386][ T25] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 583.670801][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.681887][ T25] usb 1-1: config 0 descriptor?? [ 583.704052][ T25] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 583.818904][ T1213] usb 5-1: unable to get BOS descriptor or descriptor too short [ 583.838195][ T1213] usb 5-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 583.859688][ T1213] usb 5-1: config 15 has 1 interface, different from the descriptor's value: 3 [ 583.881415][ T1213] usb 5-1: New USB device found, idVendor=0c45, idProduct=62bc, bcdDevice=2c.f4 [ 583.909364][ T1213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.927834][ T1213] usb 5-1: Product: syz [ 583.930806][T10534] usb 1-1: USB disconnect, device number 31 [ 583.938032][ T1213] usb 5-1: Manufacturer: syz [ 583.946612][ T1213] usb 5-1: SerialNumber: syz [ 584.004209][T10684] gfs2: gfs2 mount does not exist [ 584.659617][T10685] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1334'. [ 584.928409][T10691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.961459][T10689] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1335'. [ 584.971264][T10689] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1335'. [ 585.388543][T10691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.525153][T10696] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1336'. [ 585.913366][ T5135] Bluetooth: hci5: command 0x0405 tx timeout [ 585.928204][T10702] FAULT_INJECTION: forcing a failure. [ 585.928204][T10702] name failslab, interval 1, probability 0, space 0, times 0 [ 585.941054][T10702] CPU: 1 UID: 0 PID: 10702 Comm: syz.0.1338 Not tainted 6.14.0-rc4-syzkaller-00220-g5c44ddaf7df3 #0 [ 585.941075][T10702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 585.941084][T10702] Call Trace: [ 585.941089][T10702] [ 585.941095][T10702] dump_stack_lvl+0x241/0x360 [ 585.941118][T10702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 585.941133][T10702] ? __pfx__printk+0x10/0x10 [ 585.941158][T10702] ? fs_reclaim_acquire+0x93/0x130 [ 585.941178][T10702] ? __pfx___might_resched+0x10/0x10 [ 585.941199][T10702] should_fail_ex+0x40a/0x550 [ 585.941224][T10702] should_failslab+0xac/0x100 [ 585.941249][T10702] __kmalloc_noprof+0xdd/0x4c0 [ 585.941263][T10702] ? tomoyo_encode+0x26f/0x540 [ 585.941282][T10702] tomoyo_encode+0x26f/0x540 [ 585.941301][T10702] tomoyo_realpath_from_path+0x59e/0x5e0 [ 585.941326][T10702] tomoyo_path_number_perm+0x239/0x770 [ 585.941348][T10702] ? __lock_acquire+0x1397/0x2100 [ 585.941371][T10702] ? tomoyo_path_number_perm+0x209/0x770 [ 585.941394][T10702] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 585.941443][T10702] ? __fget_files+0x2a/0x410 [ 585.941461][T10702] ? __fget_files+0x2a/0x410 [ 585.941479][T10702] security_file_ioctl+0xc6/0x2a0 [ 585.941504][T10702] __se_sys_ioctl+0x46/0x170 [ 585.941525][T10702] do_syscall_64+0xf3/0x230 [ 585.941547][T10702] ? clear_bhb_loop+0x35/0x90 [ 585.941571][T10702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.941591][T10702] RIP: 0033:0x7fc1dc78d169 [ 585.941604][T10702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.941617][T10702] RSP: 002b:00007fc1dd58b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.941633][T10702] RAX: ffffffffffffffda RBX: 00007fc1dc9a6080 RCX: 00007fc1dc78d169 [ 585.941644][T10702] RDX: 0000400000000200 RSI: 00000000c0845657 RDI: 0000000000000006 [ 585.941654][T10702] RBP: 00007fc1dd58b090 R08: 0000000000000000 R09: 0000000000000000 [ 585.941664][T10702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.941672][T10702] R13: 0000000000000000 R14: 00007fc1dc9a6080 R15: 00007ffc82b33488 [ 585.941694][T10702] [ 585.941736][T10702] ERROR: Out of memory at tomoyo_realpath_from_path. [ 585.979900][T10703] 9pnet_fd: Insufficient options for proto=fd [ 586.032377][T10702] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1338'. [ 586.870634][ T1213] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62bc [ 586.907499][ T1213] gspca_sn9c20x: Write register 1000 failed -71 [ 586.931461][ T1213] gspca_sn9c20x: Device initialization failed [ 586.969773][ T1213] gspca_sn9c20x 5-1:15.0: probe with driver gspca_sn9c20x failed with error -71 [ 587.030807][ T1213] usb 5-1: USB disconnect, device number 21 [ 587.038953][T10716] FAULT_INJECTION: forcing a failure. [ 587.038953][T10716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.092937][T10716] CPU: 1 UID: 0 PID: 10716 Comm: syz.4.1343 Not tainted 6.14.0-rc4-syzkaller-00220-g5c44ddaf7df3 #0 [ 587.092968][T10716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 587.092980][T10716] Call Trace: [ 587.092988][T10716] [ 587.092997][T10716] dump_stack_lvl+0x241/0x360 [ 587.093027][T10716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 587.093051][T10716] ? __pfx__printk+0x10/0x10 [ 587.093088][T10716] ? snprintf+0xda/0x120 [ 587.093114][T10716] should_fail_ex+0x40a/0x550 [ 587.093149][T10716] _copy_to_user+0x31/0xb0 [ 587.093179][T10716] simple_read_from_buffer+0xca/0x150 [ 587.093216][T10716] proc_fail_nth_read+0x1e9/0x250 [ 587.093252][T10716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 587.093290][T10716] ? rw_verify_area+0x243/0x630 [ 587.093314][T10716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 587.093350][T10716] vfs_read+0x1f8/0xb40 [ 587.093378][T10716] ? fdget_pos+0x254/0x320 [ 587.093403][T10716] ? __pfx___mutex_lock+0x10/0x10 [ 587.093432][T10716] ? __pfx_vfs_read+0x10/0x10 [ 587.093460][T10716] ? __fget_files+0x2a/0x410 [ 587.093485][T10716] ? __fget_files+0x395/0x410 [ 587.093505][T10716] ? __fget_files+0x2a/0x410 [ 587.093537][T10716] ksys_read+0x18f/0x2b0 [ 587.093567][T10716] ? __pfx_ksys_read+0x10/0x10 [ 587.093591][T10716] ? trace_sys_enter+0x74/0x120 [ 587.093623][T10716] ? rcu_is_watching+0x15/0xb0 [ 587.093645][T10716] ? trace_sys_enter+0x25/0x120 [ 587.093682][T10716] do_syscall_64+0xf3/0x230 [ 587.093751][T10716] ? clear_bhb_loop+0x35/0x90 [ 587.093785][T10716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.093813][T10716] RIP: 0033:0x7f3cb1b8bb7c [ 587.093831][T10716] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 587.093852][T10716] RSP: 002b:00007f3cb29c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 587.093875][T10716] RAX: ffffffffffffffda RBX: 00007f3cb1da5fa0 RCX: 00007f3cb1b8bb7c [ 587.093890][T10716] RDX: 000000000000000f RSI: 00007f3cb29c60a0 RDI: 0000000000000004 [ 587.093904][T10716] RBP: 00007f3cb29c6090 R08: 0000000000000000 R09: 0000000000000000 [ 587.093916][T10716] R10: 0000400000000240 R11: 0000000000000246 R12: 0000000000000001 [ 587.093930][T10716] R13: 0000000000000000 R14: 00007f3cb1da5fa0 R15: 00007ffe1d739878 [ 587.093960][T10716] [ 587.635686][T10724] netlink: 'syz.4.1345': attribute type 1 has an invalid length. [ 587.650496][T10724] netlink: 'syz.4.1345': attribute type 11 has an invalid length. [ 587.673309][T10724] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1345'. [ 587.934041][T10727] program syz.1.1346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 588.388316][T10733] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1348'. [ 592.251972][T10745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 592.261871][T10745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.608162][ T1213] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 593.956217][T10758] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1356'. [ 593.965824][T10758] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1356'. [ 594.172761][ T1213] usb 2-1: device descriptor read/64, error -71 [ 594.549222][ T1213] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 594.651678][T10760] program syz.0.1358 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 594.784604][ T1213] usb 2-1: Using ep0 maxpacket: 8 [ 594.855694][ T1213] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1028, setting to 1024 [ 594.948748][ T1213] usb 2-1: config 0 interface 0 has no altsetting 0 [ 594.984636][ T1213] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 595.026087][ T1213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.107160][ T1213] usb 2-1: config 0 descriptor?? [ 595.163859][T10756] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 595.291124][T10765] netlink: 194488 bytes leftover after parsing attributes in process `syz.4.1359'. [ 595.970087][T10771] program syz.2.1361 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 595.993087][T10770] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1362'. [ 596.097016][ T1213] elo 0003:04E7:0030.001D: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.1-1/input0 [ 596.352028][ T5900] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 596.494444][ T1213] usb 2-1: USB disconnect, device number 25 [ 596.550750][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 596.571023][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 596.599366][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 596.740845][ T5900] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 596.883348][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.148823][ T5900] usb 5-1: Product: syz [ 597.192334][ T5900] usb 5-1: Manufacturer: syz [ 597.258227][ T5900] usb 5-1: SerialNumber: syz [ 597.296518][ T5900] usb 5-1: config 0 descriptor?? [ 597.361303][ T5900] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 597.396369][ T5900] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 597.735602][T10773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.758823][T10773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.794351][T10773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.009857][T10799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 598.020266][T10799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.631051][ T5900] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 598.649909][T10773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.662600][ T5900] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 598.702436][ T5900] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 598.723863][ T5900] em28xx 5-1:0.0: No AC97 audio processor [ 598.829229][ T1213] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 598.848735][ T25] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 599.009257][ T1213] usb 2-1: Using ep0 maxpacket: 8 [ 599.014869][T10805] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1374'. [ 599.028971][ T25] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 599.038181][ T1213] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1028, setting to 1024 [ 599.055132][T10805] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.1374'. [ 599.064521][ T25] usb 3-1: config 0 has no interface number 0 [ 599.072645][ T1213] usb 2-1: config 0 interface 0 has no altsetting 0 [ 599.079515][ T25] usb 3-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 599.099244][ T1213] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 599.111348][ T25] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 599.124082][ T1213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.138054][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.158980][ T1213] usb 2-1: config 0 descriptor?? [ 599.166643][ T25] usb 3-1: Product: syz [ 599.172755][T10795] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 599.180944][ T25] usb 3-1: Manufacturer: syz [ 599.189557][ T25] usb 3-1: SerialNumber: syz [ 599.200046][ T25] usb 3-1: config 0 descriptor?? [ 599.421862][ T25] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 599.454372][ T25] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 599.466624][ T25] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 599.556552][T10813] program syz.6.1377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 599.559668][ T25] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 600.001910][ T25] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 600.080248][ T1213] elo 0003:04E7:0030.001E: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.1-1/input0 [ 600.185216][ T25] usb 3-1: USB disconnect, device number 28 [ 600.223844][ T1213] usb 2-1: USB disconnect, device number 26 [ 600.243622][ T25] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 600.243998][ T5876] usb 5-1: USB disconnect, device number 22 [ 600.290043][ T5876] em28xx 5-1:0.0: Disconnecting em28xx [ 600.300340][ T25] keyspan 3-1:0.133: device disconnected [ 600.329566][ T5876] em28xx 5-1:0.0: Freeing device [ 600.445913][ T7256] smc: removing ib device syz0 [ 600.457734][T10817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1379'. [ 601.060266][T10824] program syz.2.1381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 601.912588][T10831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 601.935486][T10835] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1385'. [ 603.319121][ T5876] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 603.362443][T10856] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1392'. [ 603.485514][ T5876] usb 5-1: unable to get BOS descriptor or descriptor too short [ 603.494834][ T5876] usb 5-1: config 247 has an invalid interface number: 141 but max is 0 [ 603.503613][ T5876] usb 5-1: config 247 has no interface number 0 [ 603.511874][ T5876] usb 5-1: config 247 interface 141 has no altsetting 0 [ 603.523480][ T5876] usb 5-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 603.543037][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.551198][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 603.583179][ T5876] usb 5-1: Product: ခ [ 603.587851][ T5876] usb 5-1: Manufacturer: 䐊 [ 603.599143][ T5876] usb 5-1: SerialNumber: ᓉᄌ켳㺪漏즔䰖餟ȝ℻ [ 603.896946][ T5876] hso 5-1:247.141: Not our interface [ 604.089879][ T7256] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.679849][ T7256] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.749334][ T5926] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 604.890742][ T7256] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.955042][ T5926] usb 7-1: config index 0 descriptor too short (expected 80, got 53) [ 604.963570][ T5926] usb 7-1: config 8 has an invalid interface number: 223 but max is 0 [ 604.987833][ T5926] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 605.013058][ T5926] usb 7-1: config 8 has no interface number 0 [ 605.022211][ T7256] team0: Port device netdevsim0 removed [ 605.025897][ T5926] usb 7-1: config 8 interface 223 altsetting 0 endpoint 0xC has invalid maxpacket 54048, setting to 64 [ 605.051784][ T5926] usb 7-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 605.060303][ T7256] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.090745][ T5926] usb 7-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 605.114533][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.136446][ T5926] usb 7-1: Product: syz [ 605.145274][ T5926] usb 7-1: Manufacturer: syz [ 605.158409][ T5926] usb 7-1: SerialNumber: syz [ 605.178731][T10871] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 605.278407][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 605.289111][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 605.297637][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 605.315449][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 605.324448][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 605.340980][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 605.359417][T10534] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 605.426832][ T7256] bridge_slave_1: left allmulticast mode [ 605.436950][ T5926] usb 7-1: USB disconnect, device number 2 [ 605.437000][ T1213] usb 5-1: USB disconnect, device number 23 [ 605.442941][ T7256] bridge_slave_1: left promiscuous mode [ 605.458355][ T7256] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.500264][ T7256] bridge_slave_0: left allmulticast mode [ 605.506023][ T7256] bridge_slave_0: left promiscuous mode [ 605.520860][ T7256] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.549834][T10534] usb 3-1: Using ep0 maxpacket: 8 [ 605.558835][T10534] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1028, setting to 1024 [ 605.577599][T10534] usb 3-1: config 0 interface 0 has no altsetting 0 [ 605.584380][T10534] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 605.593850][T10534] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.652007][T10534] usb 3-1: config 0 descriptor?? [ 605.661647][T10877] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 605.840827][ T5135] Bluetooth: hci4: unexpected event 0x33 length: 2 < 10 [ 605.860797][T10894] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1405'. [ 605.881463][T10894] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1405'. [ 605.890647][T10894] netlink: 'syz.4.1405': attribute type 6 has an invalid length. [ 605.898945][T10894] netlink: 'syz.4.1405': attribute type 5 has an invalid length. [ 605.907429][T10894] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1405'. [ 606.940392][T10534] elo 0003:04E7:0030.001F: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.2-1/input0 [ 607.244532][T10905] FAULT_INJECTION: forcing a failure. [ 607.244532][T10905] name failslab, interval 1, probability 0, space 0, times 0 [ 607.289260][T10905] CPU: 1 UID: 0 PID: 10905 Comm: syz.4.1409 Not tainted 6.14.0-rc4-syzkaller-00220-g5c44ddaf7df3 #0 [ 607.289291][T10905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 607.289304][T10905] Call Trace: [ 607.289310][T10905] [ 607.289319][T10905] dump_stack_lvl+0x241/0x360 [ 607.289346][T10905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.289365][T10905] ? __pfx__printk+0x10/0x10 [ 607.289396][T10905] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 607.289416][T10905] ? __pfx___might_resched+0x10/0x10 [ 607.289442][T10905] should_fail_ex+0x40a/0x550 [ 607.289473][T10905] should_failslab+0xac/0x100 [ 607.289502][T10905] __kmalloc_node_noprof+0xe1/0x4d0 [ 607.289520][T10905] ? crypto_create_tfm_node+0x88/0x3d0 [ 607.289545][T10905] crypto_create_tfm_node+0x88/0x3d0 [ 607.289571][T10905] crypto_alloc_tfm_node+0x161/0x360 [ 607.289599][T10905] kdf_alloc+0x1e/0x100 [ 607.289623][T10905] __keyctl_dh_compute+0x58e/0xf50 [ 607.289659][T10905] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 607.289694][T10905] ? __pfx___might_resched+0x10/0x10 [ 607.289729][T10905] ? __might_fault+0xaa/0x120 [ 607.289759][T10905] keyctl_dh_compute+0x107/0x160 [ 607.289786][T10905] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 607.289816][T10905] ? sb_end_write+0xe9/0x1c0 [ 607.289834][T10905] ? vfs_write+0x7fa/0xd10 [ 607.289859][T10905] __se_sys_keyctl+0x3f3/0x910 [ 607.289891][T10905] ? __pfx___se_sys_keyctl+0x10/0x10 [ 607.289918][T10905] ? do_sys_openat2+0x17a/0x1d0 [ 607.289939][T10905] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 607.289964][T10905] ? __fget_files+0x2a/0x410 [ 607.289996][T10905] ? __fget_files+0x2a/0x410 [ 607.290025][T10905] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 607.290056][T10905] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 607.290083][T10905] ? do_syscall_64+0x100/0x230 [ 607.290111][T10905] ? __x64_sys_keyctl+0x20/0xc0 [ 607.290142][T10905] do_syscall_64+0xf3/0x230 [ 607.290167][T10905] ? clear_bhb_loop+0x35/0x90 [ 607.290197][T10905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.290222][T10905] RIP: 0033:0x7f3cb1b8d169 [ 607.290239][T10905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.290255][T10905] RSP: 002b:00007f3cb29c6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 607.290275][T10905] RAX: ffffffffffffffda RBX: 00007f3cb1da5fa0 RCX: 00007f3cb1b8d169 [ 607.290288][T10905] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000017 [ 607.290299][T10905] RBP: 00007f3cb29c6090 R08: 0000400000000140 R09: 0000000000000000 [ 607.290311][T10905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.290322][T10905] R13: 0000000000000000 R14: 00007f3cb1da5fa0 R15: 00007ffe1d739878 [ 607.290348][T10905] [ 607.290442][T10905] could not allocate digest TFM handle sha256-avx [ 607.401443][ T5135] Bluetooth: hci0: command tx timeout [ 607.726213][T10910] FAULT_INJECTION: forcing a failure. [ 607.726213][T10910] name failslab, interval 1, probability 0, space 0, times 0 [ 607.756770][T10910] CPU: 1 UID: 0 PID: 10910 Comm: syz.4.1411 Not tainted 6.14.0-rc4-syzkaller-00220-g5c44ddaf7df3 #0 [ 607.756804][T10910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 607.756817][T10910] Call Trace: [ 607.756824][T10910] [ 607.756832][T10910] dump_stack_lvl+0x241/0x360 [ 607.756861][T10910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.756882][T10910] ? __pfx__printk+0x10/0x10 [ 607.756928][T10910] should_fail_ex+0x40a/0x550 [ 607.756961][T10910] should_failslab+0xac/0x100 [ 607.757027][T10910] ? skb_clone+0x20c/0x390 [ 607.757045][T10910] kmem_cache_alloc_noprof+0x70/0x380 [ 607.757085][T10910] skb_clone+0x20c/0x390 [ 607.757109][T10910] __netlink_deliver_tap+0x3c4/0x7f0 [ 607.757144][T10910] ? netlink_deliver_tap+0x2e/0x1b0 [ 607.757165][T10910] netlink_deliver_tap+0x19d/0x1b0 [ 607.757189][T10910] netlink_unicast+0x7c4/0x990 [ 607.757230][T10910] ? __pfx_netlink_unicast+0x10/0x10 [ 607.757259][T10910] ? __virt_addr_valid+0x45f/0x530 [ 607.757291][T10910] ? __phys_addr_symbol+0x2f/0x70 [ 607.757322][T10910] ? __check_object_size+0x47a/0x730 [ 607.757361][T10910] netlink_sendmsg+0x8de/0xcb0 [ 607.757397][T10910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 607.757434][T10910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 607.757455][T10910] __sock_sendmsg+0x221/0x270 [ 607.757485][T10910] ____sys_sendmsg+0x53a/0x860 [ 607.757528][T10910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 607.757559][T10910] ? __fget_files+0x2a/0x410 [ 607.757584][T10910] ? __fget_files+0x2a/0x410 [ 607.757616][T10910] __sys_sendmsg+0x269/0x350 [ 607.757655][T10910] ? __pfx___sys_sendmsg+0x10/0x10 [ 607.757702][T10910] ? do_sys_openat2+0x17a/0x1d0 [ 607.757759][T10910] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 607.757798][T10910] ? do_syscall_64+0x100/0x230 [ 607.757832][T10910] ? do_syscall_64+0xb6/0x230 [ 607.757864][T10910] do_syscall_64+0xf3/0x230 [ 607.757892][T10910] ? clear_bhb_loop+0x35/0x90 [ 607.757927][T10910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.757956][T10910] RIP: 0033:0x7f3cb1b8d169 [ 607.757982][T10910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.758000][T10910] RSP: 002b:00007f3cb29c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.758023][T10910] RAX: ffffffffffffffda RBX: 00007f3cb1da5fa0 RCX: 00007f3cb1b8d169 [ 607.758038][T10910] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 607.758052][T10910] RBP: 00007f3cb29c6090 R08: 0000000000000000 R09: 0000000000000000 [ 607.758065][T10910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.758077][T10910] R13: 0000000000000000 R14: 00007f3cb1da5fa0 R15: 00007ffe1d739878 [ 607.758110][T10910] [ 608.094262][T10908] openvswitch: netlink: IPv4 tun info is not correct [ 608.347885][ T7256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.366640][ T7256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.376875][ T7256] bond0 (unregistering): Released all slaves [ 608.461780][ T9] usb 3-1: USB disconnect, device number 29 [ 608.632498][T10919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1415'. [ 608.666205][T10919] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1415'. [ 608.676861][T10919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1415'. [ 608.687060][T10919] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1415'. [ 608.696133][T10919] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1415'. [ 608.713918][T10883] chnl_net:caif_netlink_parms(): no params data found [ 609.649116][ T5135] Bluetooth: hci0: command tx timeout [ 610.885457][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 611.007329][T10883] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.264648][T10883] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.272413][T10883] bridge_slave_0: entered allmulticast mode [ 611.280014][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 611.362654][T10883] bridge_slave_0: entered promiscuous mode [ 611.373192][T10883] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.380686][T10883] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.388325][T10883] bridge_slave_1: entered allmulticast mode [ 611.396004][ T9] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1028, setting to 1024 [ 611.407278][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 611.416443][ T9] usb 7-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 611.427948][T10883] bridge_slave_1: entered promiscuous mode [ 611.440343][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.454856][T10947] vcan0: entered allmulticast mode [ 611.464526][T10945] sp0: Synchronizing with TNC [ 611.498890][ T9] usb 7-1: config 0 descriptor?? [ 611.521688][T10942] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 611.592515][ T7256] hsr_slave_0: left promiscuous mode [ 611.612651][ T7256] hsr_slave_1: left promiscuous mode [ 611.633818][ T7256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.645334][ T7256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.719298][ T5135] Bluetooth: hci0: command tx timeout [ 611.754076][ T7256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.044610][ T7256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.295379][ T7256] veth1_macvtap: left promiscuous mode [ 612.329139][ T7256] veth0_macvtap: left promiscuous mode [ 612.521651][ T9] elo 0003:04E7:0030.0020: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.6-1/input0 [ 612.562314][ T7256] veth1_vlan: left promiscuous mode [ 612.567693][ T7256] veth0_vlan: left promiscuous mode [ 612.762166][T10960] program syz.2.1423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 613.564498][T10534] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 613.759507][T10534] usb 3-1: Using ep0 maxpacket: 32 [ 613.789192][ T5135] Bluetooth: hci0: command tx timeout [ 613.814365][T10534] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 613.830368][T10534] usb 3-1: config 0 has no interface number 0 [ 613.847953][T10534] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 613.875603][T10534] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.910076][T10534] usb 3-1: Product: syz [ 613.914331][T10534] usb 3-1: Manufacturer: syz [ 613.918964][T10534] usb 3-1: SerialNumber: syz [ 613.952421][T10534] usb 3-1: config 0 descriptor?? [ 613.991269][T10534] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 614.211971][T10534] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 614.242554][T10534] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 614.419571][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 7 [ 614.491216][ T7256] team0 (unregistering): Port device team_slave_1 removed [ 614.610735][ T7256] team0 (unregistering): Port device team_slave_0 removed [ 614.648854][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 614.657579][T10534] usb 3-1: USB disconnect, device number 30 [ 614.667829][T10534] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 614.702508][T10534] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 614.718927][T10534] quatech2 3-1:0.51: device disconnected [ 615.515643][T10883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.616005][T10980] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1428'. [ 615.630428][T10883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.633351][ T1213] usb 7-1: USB disconnect, device number 3 [ 615.789625][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 616.350576][T10988] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1430'. [ 616.855573][T10995] program syz.6.1433 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 617.276193][T10883] team0: Port device team_slave_0 added [ 617.291512][T10883] team0: Port device team_slave_1 added [ 617.373382][T10883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.391879][T10883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.467272][T10883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.493224][T10883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.500409][T10883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.527759][T10883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.653740][T10883] hsr_slave_0: entered promiscuous mode [ 617.670074][T10883] hsr_slave_1: entered promiscuous mode [ 617.676261][T10883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 617.684669][T10883] Cannot create hsr debugfs directory [ 617.709607][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 617.835653][T11000] program syz.2.1434 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 618.294790][ T7256] IPVS: stop unused estimator thread 0... [ 618.408090][T11002] : renamed from bridge_slave_0 (while UP) [ 618.691347][ T5900] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 618.805374][T10883] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 618.851084][T10883] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 618.894515][ T5900] usb 7-1: unable to get BOS descriptor or descriptor too short [ 618.908756][T10883] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 618.933575][T10883] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 618.940040][ T5900] usb 7-1: not running at top speed; connect to a high speed hub [ 618.987075][ T5900] usb 7-1: config 106 has an invalid interface number: 33 but max is 0 [ 619.022749][ T5900] usb 7-1: config 106 has no interface number 0 [ 619.044802][ T5900] usb 7-1: config 106 interface 33 has no altsetting 0 [ 619.069550][ T5900] usb 7-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice= 9.b9 [ 619.086161][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.104286][ T5900] usb 7-1: Product: syz [ 619.112806][ T5900] usb 7-1: Manufacturer: syz [ 619.122403][ T5900] usb 7-1: SerialNumber: syz [ 619.252255][T10883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.301471][T10883] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.313365][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1437'. [ 619.330355][ T7250] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.337568][ T7250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.346332][ T5900] ums-sddr55 7-1:106.33: USB Mass Storage device detected [ 619.376857][ T7250] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.384125][ T7250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.402124][ T5900] ums-sddr55 7-1:106.33: Quirks match for vid 07c4 pid a103: 8 [ 619.476319][ T5900] usb 7-1: USB disconnect, device number 4 [ 619.531256][T10883] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 620.104259][ T5926] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 620.225307][T11025] program syz.6.1440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 620.269451][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 620.801002][T10883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.867637][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1439'. [ 622.268521][T10883] veth0_vlan: entered promiscuous mode [ 622.294780][T10883] veth1_vlan: entered promiscuous mode [ 622.346716][T10883] veth0_macvtap: entered promiscuous mode [ 622.401312][T10883] veth1_macvtap: entered promiscuous mode [ 622.443312][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.474054][T11046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 622.479398][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.510439][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.529209][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.569356][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.599331][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.629292][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.658899][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.689337][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.708740][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.731202][T10883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.104826][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.209207][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.240054][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.367042][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.474559][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.549552][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.569627][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.604469][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.638436][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.649729][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.679766][T10883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.752871][T11053] netlink: 194488 bytes leftover after parsing attributes in process `syz.2.1446'. [ 623.766124][T10883] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.780345][T10883] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.814084][T10883] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.848596][T10883] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.151929][T11058] openvswitch: netlink: IPv4 tun info is not correct [ 624.201303][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.216167][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.549877][ T7234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.589598][ T7234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.634745][T11063] FAULT_INJECTION: forcing a failure. [ 624.634745][T11063] name failslab, interval 1, probability 0, space 0, times 0 [ 624.669260][T11063] CPU: 0 UID: 0 PID: 11063 Comm: syz.4.1449 Not tainted 6.14.0-rc4-syzkaller-00220-g5c44ddaf7df3 #0 [ 624.669291][T11063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 624.669304][T11063] Call Trace: [ 624.669312][T11063] [ 624.669321][T11063] dump_stack_lvl+0x241/0x360 [ 624.669350][T11063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 624.669371][T11063] ? __pfx__printk+0x10/0x10 [ 624.669418][T11063] should_fail_ex+0x40a/0x550 [ 624.669454][T11063] should_failslab+0xac/0x100 [ 624.669492][T11063] ? skb_clone+0x20c/0x390 [ 624.669511][T11063] kmem_cache_alloc_noprof+0x70/0x380 [ 624.669550][T11063] skb_clone+0x20c/0x390 [ 624.669576][T11063] __netlink_deliver_tap+0x3c4/0x7f0 [ 624.669611][T11063] ? netlink_deliver_tap+0x2e/0x1b0 [ 624.669631][T11063] netlink_deliver_tap+0x19d/0x1b0 [ 624.669655][T11063] netlink_unicast+0x7c4/0x990 [ 624.669695][T11063] ? __pfx_netlink_unicast+0x10/0x10 [ 624.669724][T11063] ? __virt_addr_valid+0x45f/0x530 [ 624.669754][T11063] ? __phys_addr_symbol+0x2f/0x70 [ 624.669782][T11063] ? __check_object_size+0x47a/0x730 [ 624.669818][T11063] netlink_sendmsg+0x8de/0xcb0 [ 624.669854][T11063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.669891][T11063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.669913][T11063] __sock_sendmsg+0x221/0x270 [ 624.669942][T11063] ____sys_sendmsg+0x53a/0x860 [ 624.669982][T11063] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.670013][T11063] ? __fget_files+0x2a/0x410 [ 624.670037][T11063] ? __fget_files+0x2a/0x410 [ 624.670068][T11063] __sys_sendmsg+0x269/0x350 [ 624.670107][T11063] ? __pfx___sys_sendmsg+0x10/0x10 [ 624.670153][T11063] ? do_sys_openat2+0x17a/0x1d0 [ 624.670209][T11063] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 624.670240][T11063] ? do_syscall_64+0x100/0x230 [ 624.670271][T11063] ? do_syscall_64+0xb6/0x230 [ 624.670300][T11063] do_syscall_64+0xf3/0x230 [ 624.670327][T11063] ? clear_bhb_loop+0x35/0x90 [ 624.670359][T11063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.670386][T11063] RIP: 0033:0x7f3cb1b8d169 [ 624.670404][T11063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.670421][T11063] RSP: 002b:00007f3cb29c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.670443][T11063] RAX: ffffffffffffffda RBX: 00007f3cb1da5fa0 RCX: 00007f3cb1b8d169 [ 624.670459][T11063] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 624.670472][T11063] RBP: 00007f3cb29c6090 R08: 0000000000000000 R09: 0000000000000000 [ 624.670484][T11063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.670496][T11063] R13: 0000000000000000 R14: 00007f3cb1da5fa0 R15: 00007ffe1d739878 [ 624.670526][T11063] [ 624.986045][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.328054][T11071] mmap: syz.4.1454 (11071) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 626.331241][T11083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 628.833593][T11119] tmpfs: Unknown parameter '֔CxLZwՀ@B' [ 629.852213][T11126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1469'. [ 629.900125][T11131] program syz.6.1471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 631.206278][ T5926] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 631.415323][ T5926] usb 7-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 631.629480][ T5926] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 631.700601][T11146] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1476'. [ 631.710335][T11146] openvswitch: netlink: Flow key attr not present in new flow. [ 632.139170][ T5926] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 632.154772][ T5926] usb 7-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 632.163977][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.188722][ T5926] usb 7-1: Product: syz [ 632.211683][ T5926] usb 7-1: Manufacturer: syz [ 632.219695][ T5926] usb 7-1: SerialNumber: syz [ 632.231605][T11143] ALSA: mixer_oss: invalid OSS volume '' [ 632.252621][ T5926] usb 7-1: config 0 descriptor?? [ 633.020020][ T51] usb 7-1: USB disconnect, device number 5 [ 634.995993][T11181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1483'. [ 635.006485][T11181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1483'. [ 635.914715][T11186] program syz.6.1485 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 636.633110][T11191] ALSA: mixer_oss: invalid OSS volume '' [ 637.178766][T11207] gfs2: gfs2 mount does not exist [ 638.676646][T11205] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1492'. [ 639.159420][ T5900] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 639.245160][T11224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1498'. [ 639.255128][T11224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1498'. [ 639.843213][ T5900] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 639.869121][ T5900] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.877200][ T5900] usb 8-1: Product: syz [ 639.896549][ T5900] usb 8-1: Manufacturer: syz [ 639.909135][ T5900] usb 8-1: SerialNumber: syz [ 639.916132][ T5900] usb 8-1: config 0 descriptor?? [ 639.931864][ T5900] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 002 [ 640.140121][T11220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.150223][T11220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.644745][ T5900] i2c i2c-1: failure reading functionality [ 640.652415][ T5900] i2c i2c-1: connected i2c-tiny-usb device [ 640.708097][ T5900] usb 8-1: USB disconnect, device number 2 [ 641.183113][T11236] program syz.1.1500 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 641.876606][T11239] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1501'. [ 641.886194][T11239] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1501'. [ 642.622086][T11249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1504'. [ 642.637799][T11249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1504'. [ 643.297843][T11250] netlink: 228 bytes leftover after parsing attributes in process `syz.7.1503'. [ 643.307455][T11250] openvswitch: netlink: Flow key attr not present in new flow. [ 643.602728][T11242] ALSA: mixer_oss: invalid OSS volume '' [ 644.878399][ T5875] IPVS: starting estimator thread 0... [ 644.999142][T11259] IPVS: using max 21 ests per chain, 50400 per kthread [ 645.221920][T11265] program syz.2.1508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 645.984538][ T5875] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 646.277225][ T5875] usb 7-1: Using ep0 maxpacket: 8 [ 646.423670][ T5875] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1028, setting to 1024 [ 646.559873][ T5875] usb 7-1: config 0 interface 0 has no altsetting 0 [ 646.566592][ T5875] usb 7-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 646.642089][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.660083][ T5875] usb 7-1: config 0 descriptor?? [ 646.666503][T11268] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 646.684269][T11273] SET target dimension over the limit! [ 646.749851][T11273] netlink: 268 bytes leftover after parsing attributes in process `syz.7.1512'. [ 647.503186][ T5875] usbhid 7-1:0.0: can't add hid device: -71 [ 647.523725][ T5875] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 647.554436][ T5875] usb 7-1: USB disconnect, device number 6 [ 647.950785][T11285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 647.960867][T11285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.384538][T11303] openvswitch: netlink: IPv4 tun info is not correct [ 651.609112][ T5900] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 651.792499][ T5900] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 651.920296][ T5900] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 651.977029][ T5900] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 652.022304][T11318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 652.032361][T11318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.090023][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 652.098536][ T5900] usb 5-1: SerialNumber: syz [ 652.642230][ T5900] usb 5-1: 0:2 : does not exist [ 652.693686][ T5900] usb 5-1: USB disconnect, device number 25 [ 653.587515][T11329] gfs2: gfs2 mount does not exist [ 653.879212][T11330] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1527'. [ 655.836691][T11349] openvswitch: netlink: IPv4 tun info is not correct [ 656.543872][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 656.600581][T11350] FAULT_INJECTION: forcing a failure. [ 656.600581][T11350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 656.644249][T11350] CPU: 0 UID: 0 PID: 11350 Comm: syz.6.1534 Not tainted 6.14.0-rc4-syzkaller-00220-g5c44ddaf7df3 #0 [ 656.644282][T11350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 656.644296][T11350] Call Trace: [ 656.644304][T11350] [ 656.644313][T11350] dump_stack_lvl+0x241/0x360 [ 656.644342][T11350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 656.644364][T11350] ? __pfx__printk+0x10/0x10 [ 656.644398][T11350] ? __pfx_lock_release+0x10/0x10 [ 656.644436][T11350] should_fail_ex+0x40a/0x550 [ 656.644471][T11350] strncpy_from_user+0x36/0x270 [ 656.644505][T11350] bpf_raw_tp_link_attach+0x1ef/0x700 [ 656.644548][T11350] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 656.644599][T11350] ? __fget_files+0x2a/0x410 [ 656.644625][T11350] ? fput+0x21b/0x290 [ 656.644650][T11350] bpf_raw_tracepoint_open+0x177/0x1f0 [ 656.644683][T11350] __sys_bpf+0x3b9/0x820 [ 656.644712][T11350] ? __pfx___sys_bpf+0x10/0x10 [ 656.644752][T11350] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 656.644784][T11350] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 656.644815][T11350] ? do_syscall_64+0x100/0x230 [ 656.644849][T11350] __x64_sys_bpf+0x7c/0x90 [ 656.644875][T11350] do_syscall_64+0xf3/0x230 [ 656.644904][T11350] ? clear_bhb_loop+0x35/0x90 [ 656.644938][T11350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.644966][T11350] RIP: 0033:0x7f38b1b8d169 [ 656.644984][T11350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.645002][T11350] RSP: 002b:00007f38b29ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 656.645024][T11350] RAX: ffffffffffffffda RBX: 00007f38b1da5fa0 RCX: 00007f38b1b8d169 [ 656.645040][T11350] RDX: 0000000000000010 RSI: 0000400000000080 RDI: 0000000000000011 [ 656.645054][T11350] RBP: 00007f38b29ba090 R08: 0000000000000000 R09: 0000000000000000 [ 656.645067][T11350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.645080][T11350] R13: 0000000000000000 R14: 00007f38b1da5fa0 R15: 00007fff5fbe1f58 [ 656.645110][T11350] [ 656.850898][ C0] vkms_vblank_simulate: vblank timer overrun [ 657.021105][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 657.029857][ T9] usb 2-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 657.040182][ T9] usb 2-1: config 15 has 1 interface, different from the descriptor's value: 3 [ 657.062731][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=62bc, bcdDevice=2c.f4 [ 657.073874][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.082095][ T9] usb 2-1: Product: syz [ 657.086287][ T9] usb 2-1: Manufacturer: syz [ 657.093390][ T9] usb 2-1: SerialNumber: syz [ 658.016873][T11358] netlink: 'syz.2.1537': attribute type 1 has an invalid length. [ 658.025906][T11358] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1537'. [ 658.620701][T11359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.678665][T11359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.017294][T11367] netlink: 'syz.6.1538': attribute type 1 has an invalid length. [ 659.025512][T11367] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1538'. [ 659.531372][ T9] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62bc [ 659.554384][ T9] gspca_sn9c20x: Write register 1000 failed -71 [ 659.569330][ T9] gspca_sn9c20x: Device initialization failed [ 659.603578][ T9] gspca_sn9c20x 2-1:15.0: probe with driver gspca_sn9c20x failed with error -71 [ 659.649351][ T9] usb 2-1: USB disconnect, device number 27 [ 660.545515][T11380] vivid-008: disconnect [ 660.710919][T11380] vivid-008: reconnect [ 662.145944][T11392] openvswitch: netlink: IPv4 tun info is not correct [ 662.369614][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 662.559381][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 662.575730][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 662.590293][ T9] usb 5-1: config 7 has an invalid interface number: 187 but max is 6 [ 662.609153][ T9] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 7 [ 662.626147][ T9] usb 5-1: config 7 has no interface number 0 [ 662.632518][ T9] usb 5-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 662.651045][ T9] usb 5-1: config 7 interface 187 has no altsetting 0 [ 662.672700][ T9] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 662.698603][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.729232][ T9] usb 5-1: Product: syz [ 662.733465][ T9] usb 5-1: Manufacturer: syz [ 662.738108][ T9] usb 5-1: SerialNumber: syz [ 662.768200][T11394] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 663.085619][ T9] usb 5-1: Limiting number of CPorts to U8_MAX [ 663.108603][ T9] usb 5-1: Unknown endpoint type found, address 0x07 [ 663.143332][ T9] usb 5-1: Not enough endpoints found in device, aborting! [ 663.331283][T11391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.357967][T11391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.408023][ T5875] usb 5-1: USB disconnect, device number 26 [ 664.371144][T11408] overlayfs: failed to resolve './bus': -2 [ 664.670732][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1553'. [ 665.821869][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 665.831934][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.029917][ T5135] Bluetooth: hci3: command 0x0405 tx timeout [ 668.925965][T11445] openvswitch: netlink: IPv4 tun info is not correct [ 668.942852][ T51] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 669.811433][T11428] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1557'. [ 669.837289][ T51] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 669.876406][ T51] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 669.918709][ T51] usb 3-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 669.959167][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.983854][T11440] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 670.011620][ T51] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 671.041858][ T5878] usb 3-1: USB disconnect, device number 31 [ 671.276284][T11461] xt_l2tp: invalid flags combination: c [ 674.099134][ T5878] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 674.333751][ T5878] usb 3-1: unable to get BOS descriptor or descriptor too short [ 674.526412][ T5878] usb 3-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 674.552657][T11486] program syz.6.1572 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 674.698753][ T5878] usb 3-1: config 15 has 1 interface, different from the descriptor's value: 3 [ 674.744659][ T5878] usb 3-1: New USB device found, idVendor=0c45, idProduct=62bc, bcdDevice=2c.f4 [ 674.919174][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.927240][ T5878] usb 3-1: Product: syz [ 674.943306][ T5878] usb 3-1: Manufacturer: syz [ 674.947973][ T5878] usb 3-1: SerialNumber: syz [ 675.514651][T11496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.523752][T11496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.770214][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 676.803074][T11506] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1578'. [ 676.816162][T11506] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1578'. [ 676.941117][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 676.954356][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 676.972914][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 676.983258][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 676.990929][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 677.089621][T11512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 677.099257][ T5878] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62bc [ 677.125024][ T5878] gspca_sn9c20x: Write register 1000 failed -71 [ 677.146033][ T5878] gspca_sn9c20x: Device initialization failed [ 677.281964][T11515] gfs2: gfs2 mount does not exist [ 677.403800][ T5878] gspca_sn9c20x 3-1:15.0: probe with driver gspca_sn9c20x failed with error -71 [ 677.415733][ T5878] usb 3-1: USB disconnect, device number 32 [ 677.572988][T11517] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1580'. [ 678.645355][T11531] overlayfs: failed to resolve './file1': -2 [ 678.758008][T11535] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1585'. [ 678.786551][T11304] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.823681][T11509] chnl_net:caif_netlink_parms(): no params data found [ 678.919399][T11304] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.099893][ T54] Bluetooth: hci0: command tx timeout [ 679.111399][T11304] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.169465][ T30] INFO: task kworker/u8:17:7243 blocked for more than 143 seconds. [ 679.188828][ T30] Not tainted 6.14.0-rc4-syzkaller-00220-g5c44ddaf7df3 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 679.219930][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 679.287439][ T30] task:kworker/u8:17 state:D stack:20472 pid:7243 tgid:7243 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 679.339440][ T30] Workqueue: events_unbound netfs_write_collection_worker [ 679.346658][ T30] Call Trace: [ 679.369597][ T30] [ 679.372607][ T30] __schedule+0x18bc/0x4c40 [ 679.377200][ T30] ? __pfx___schedule+0x10/0x10 [ 679.431048][ T30] ? __pfx_lock_release+0x10/0x10 [ 679.449426][ T30] ? schedule+0x90/0x320 [ 679.453752][ T30] ? wq_worker_sleeping+0x66/0x240 [ 679.480658][ T30] ? schedule+0x90/0x320 [ 679.484987][ T30] schedule+0x14b/0x320 [ 679.522814][ T30] bit_wait+0x12/0xd0 [ 679.526847][ T30] __wait_on_bit+0xb0/0x2f0 [ 679.559273][ T30] ? __pfx_bit_wait+0x10/0x10 [ 679.564049][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 679.577858][ T30] ? __pfx_bit_wait+0x10/0x10 [ 679.589308][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 679.597112][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 679.617333][ T30] ? __pfx_validate_chain+0x10/0x10 [ 679.629068][ T30] ? __pfx_validate_chain+0x10/0x10 [ 679.634335][ T30] netfs_retry_writes+0x16e/0x19b0 [ 679.639584][ T30] ? __pfx_validate_chain+0x10/0x10 [ 679.644815][ T30] ? mark_lock+0x9a/0x360 [ 679.659114][ T30] ? __lock_acquire+0x1397/0x2100 [ 679.664228][ T30] ? __pfx_netfs_retry_writes+0x10/0x10 [ 679.670102][ T30] ? look_up_lock_class+0x77/0x170 [ 679.675265][ T30] ? register_lock_class+0x102/0x980 [ 679.689121][ T30] ? __pfx_register_lock_class+0x10/0x10 [ 679.696679][ T30] netfs_write_collection_worker+0x2f90/0x3bb0 [ 679.703120][ T30] ? process_scheduled_works+0x9c6/0x18e0 [ 679.708892][ T30] process_scheduled_works+0xabe/0x18e0 [ 679.719072][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 679.725134][ T30] ? assign_work+0x364/0x3d0 [ 679.739159][ T30] worker_thread+0x870/0xd30 [ 679.743855][ T30] ? __kthread_parkme+0x169/0x1d0 [ 679.748924][ T30] ? __pfx_worker_thread+0x10/0x10 [ 679.754143][ T30] kthread+0x7a9/0x920 [ 679.758263][ T30] ? __pfx_kthread+0x10/0x10 [ 679.769045][ T30] ? __pfx_worker_thread+0x10/0x10 [ 679.774220][ T30] ? __pfx_kthread+0x10/0x10 [ 679.778847][ T30] ? __pfx_kthread+0x10/0x10 [ 679.789378][ T30] ? __pfx_kthread+0x10/0x10 [ 679.794039][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 679.812723][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 679.817998][ T30] ? __pfx_kthread+0x10/0x10 [ 679.825091][ T30] ret_from_fork+0x4b/0x80 [ 679.832038][ T30] ? __pfx_kthread+0x10/0x10 [ 679.836726][ T30] ret_from_fork_asm+0x1a/0x30 [ 679.852054][ T30] [ 679.855286][ T30] [ 679.855286][ T30] Showing all locks held in the system: [ 679.885244][ T30] 2 locks held by rcu_exp_gp_kthr/19: [ 679.909224][ T30] #0: ffff8880b863e7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 679.939174][ T30] #1: ffff8880b8628948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 679.977226][ T30] 1 lock held by khungtaskd/30: [ 679.982240][ T30] #0: ffffffff8eb38fa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 680.004043][ T30] 2 locks held by getty/5580: [ 680.008785][ T30] #0: ffff88814e18c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 680.038635][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 680.069048][ T30] 3 locks held by kworker/0:4/5876: [ 680.074329][ T30] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 680.109360][ T30] #1: ffffc9000410fc60 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 680.149177][ T30] #2: ffffffff8eb3e340 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 680.181283][ T30] 3 locks held by kworker/0:6/5878: [ 680.186545][ T30] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 680.239095][ T30] #1: ffffc9000412fc60 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 680.279545][ T30] #2: ffffffff8eb3e478 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820 [ 680.309198][ T30] 2 locks held by kworker/u8:17/7243: [ 680.314673][ T30] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 680.358096][ T30] #1: ffffc9000438fc60 ((work_completion)(&rreq->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 680.394942][ T30] 1 lock held by syz.5.1164/10117: [ 680.400172][ T30] #0: ffff888056028500 (&ctx->wb_lock){+.+.}-{4:4}, at: netfs_writepages+0xcf/0x9e0 [ 680.420321][ T30] 3 locks held by syz-executor/10265: [ 680.425751][ T30] #0: ffff88807a6d0d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 680.445489][ T30] #1: ffff88807a6d0078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60d/0x1260 [ 680.457884][ T30] #2: ffff88807c157b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x71/0x690 [ 680.474632][ T30] 7 locks held by kworker/u8:2/11304: [ 680.484153][ T30] #0: ffff88801bef3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 680.499022][ T30] #1: ffffc9000402fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 680.529480][ T30] #2: ffffffff8feb6a90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 680.546779][ T30] #3: ffff88807da260e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 680.557068][ T30] #4: ffff88807da25250 (&devlink->lock_key#8){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 680.568115][ T30] #5: ffffffff8fec32c8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xa4/0x620 [ 680.577188][ T30] #6: ffffffff8eb3e478 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820 [ 680.588195][ T30] 3 locks held by syz.4.1582/11526: [ 680.593739][ T30] #0: ffff888033bd8d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 680.603785][ T30] #1: ffff888033bd8078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60d/0x1260 [ 680.613563][ T30] #2: ffff888028020338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x71/0x690 [ 680.623202][ T30] [ 680.625559][ T30] ============================================= [ 680.625559][ T30] [ 680.634230][ T30] NMI backtrace for cpu 1 [ 680.634245][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc4-syzkaller-00220-g5c44ddaf7df3 #0 [ 680.634267][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 680.634279][ T30] Call Trace: [ 680.634286][ T30] [ 680.634295][ T30] dump_stack_lvl+0x241/0x360 [ 680.634323][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 680.634343][ T30] ? __pfx__printk+0x10/0x10 [ 680.634384][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 680.634412][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 680.634431][ T30] ? _printk+0xd5/0x120 [ 680.634456][ T30] ? __pfx__printk+0x10/0x10 [ 680.634482][ T30] ? __wake_up_klogd+0xcc/0x110 [ 680.634507][ T30] ? __pfx__printk+0x10/0x10 [ 680.634538][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 680.634566][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 680.634591][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 680.634620][ T30] watchdog+0x1058/0x10a0 [ 680.634649][ T30] ? watchdog+0x1ea/0x10a0 [ 680.634682][ T30] ? __pfx_watchdog+0x10/0x10 [ 680.634710][ T30] kthread+0x7a9/0x920 [ 680.634738][ T30] ? __pfx_kthread+0x10/0x10 [ 680.634770][ T30] ? __pfx_watchdog+0x10/0x10 [ 680.634798][ T30] ? __pfx_kthread+0x10/0x10 [ 680.634824][ T30] ? __pfx_kthread+0x10/0x10 [ 680.634856][ T30] ? __pfx_kthread+0x10/0x10 [ 680.634882][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 680.634904][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 680.634930][ T30] ? __pfx_kthread+0x10/0x10 [ 680.634959][ T30] ret_from_fork+0x4b/0x80 [ 680.634984][ T30] ? __pfx_kthread+0x10/0x10 [ 680.635012][ T30] ret_from_fork_asm+0x1a/0x30 [ 680.635048][ T30] [ 680.635056][ T30] Sending NMI from CPU 1 to CPUs 0: [ 680.805463][ C0] NMI backtrace for cpu 0 [ 680.805479][ C0] CPU: 0 UID: 0 PID: 5878 Comm: kworker/0:6 Not tainted 6.14.0-rc4-syzkaller-00220-g5c44ddaf7df3 #0 [ 680.805500][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 680.805511][ C0] Workqueue: events drain_vmap_area_work [ 680.805542][ C0] RIP: 0010:__lock_acquire+0x6e/0x2100 [ 680.805568][ C0] Code: c0 0f 85 f8 16 00 00 45 31 f6 83 3d bb 3f 9f 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 80 3c 30 00 <74> 12 4c 89 ff e8 48 b9 89 00 48 be 00 00 00 00 00 fc ff df 49 8b [ 680.805584][ C0] RSP: 0018:ffffc9000412f2d0 EFLAGS: 00000046 [ 680.805598][ C0] RAX: 1ffffffff3509aa2 RBX: 0000000000000000 RCX: 0000000000000000 [ 680.805610][ C0] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: ffffffff9a84d510 [ 680.805622][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 [ 680.805632][ C0] R10: dffffc0000000000 R11: fffffbfff20778af R12: ffff888031361e00 [ 680.805645][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff9a84d510 [ 680.805657][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 680.805671][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 680.805683][ C0] CR2: 00007f13b15ead58 CR3: 000000000e938000 CR4: 00000000003526f0 [ 680.805698][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 680.805708][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 680.805719][ C0] Call Trace: [ 680.805725][ C0] [ 680.805732][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 680.805752][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 680.805776][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 680.805801][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 680.805821][ C0] ? nmi_handle+0x14f/0x5a0 [ 680.805845][ C0] ? nmi_handle+0x2a/0x5a0 [ 680.805869][ C0] ? __lock_acquire+0x6e/0x2100 [ 680.805891][ C0] ? default_do_nmi+0x63/0x160 [ 680.805916][ C0] ? exc_nmi+0x123/0x1f0 [ 680.805932][ C0] ? end_repeat_nmi+0xf/0x53 [ 680.805961][ C0] ? __lock_acquire+0x6e/0x2100 [ 680.805985][ C0] ? __lock_acquire+0x6e/0x2100 [ 680.806008][ C0] ? __lock_acquire+0x6e/0x2100 [ 680.806030][ C0] [ 680.806036][ C0] [ 680.806042][ C0] ? __asan_memset+0x23/0x50 [ 680.806067][ C0] lock_acquire+0x1ed/0x550 [ 680.806095][ C0] ? debug_check_no_obj_freed+0x234/0x580 [ 680.806122][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 680.806146][ C0] ? __lock_acquire+0x1397/0x2100 [ 680.806174][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 680.806194][ C0] ? debug_check_no_obj_freed+0x234/0x580 [ 680.806217][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 680.806241][ C0] debug_check_no_obj_freed+0x234/0x580 [ 680.806268][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 680.806294][ C0] ? page_ext_get+0x20/0x2a0 [ 680.806317][ C0] ? page_ext_get+0x1d6/0x2a0 [ 680.806343][ C0] free_frozen_pages+0x4c2/0x10e0 [ 680.806367][ C0] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 680.806390][ C0] __apply_to_page_range+0x806/0xde0 [ 680.806410][ C0] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 680.806435][ C0] ? __pfx___apply_to_page_range+0x10/0x10 [ 680.806458][ C0] kasan_release_vmalloc+0xa5/0xd0 [ 680.806479][ C0] purge_vmap_node+0x22f/0x8d0 [ 680.806504][ C0] ? __purge_vmap_area_lazy+0x2d9/0xae0 [ 680.806528][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 680.806548][ C0] ? __pfx_purge_vmap_node+0x10/0x10 [ 680.806571][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 680.806591][ C0] ? __pfx_do_flush_tlb_all+0x10/0x10 [ 680.806619][ C0] ? __pfx_do_flush_tlb_all+0x10/0x10 [ 680.806647][ C0] __purge_vmap_area_lazy+0x708/0xae0 [ 680.806673][ C0] ? process_scheduled_works+0x9c6/0x18e0 [ 680.806694][ C0] drain_vmap_area_work+0x27/0x40 [ 680.806716][ C0] process_scheduled_works+0xabe/0x18e0 [ 680.806747][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 680.806771][ C0] ? assign_work+0x364/0x3d0 [ 680.806791][ C0] worker_thread+0x870/0xd30 [ 680.806815][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 680.806837][ C0] ? __kthread_parkme+0x169/0x1d0 [ 680.806860][ C0] ? __pfx_worker_thread+0x10/0x10 [ 680.806881][ C0] kthread+0x7a9/0x920 [ 680.806918][ C0] ? __pfx_kthread+0x10/0x10 [ 680.806944][ C0] ? __pfx_worker_thread+0x10/0x10 [ 680.806964][ C0] ? __pfx_kthread+0x10/0x10 [ 680.806987][ C0] ? __pfx_kthread+0x10/0x10 [ 680.807011][ C0] ? __pfx_kthread+0x10/0x10 [ 680.807033][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 680.807052][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 680.807073][ C0] ? __pfx_kthread+0x10/0x10 [ 680.807103][ C0] ret_from_fork+0x4b/0x80 [ 680.807124][ C0] ? __pfx_kthread+0x10/0x10 [ 680.807147][ C0] ret_from_fork_asm+0x1a/0x30 [ 680.807172][ C0] [ 680.809415][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 680.809435][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc4-syzkaller-00220-g5c44ddaf7df3 #0 [ 680.809462][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 680.809477][ T30] Call Trace: [ 680.809488][ T30] [ 680.809498][ T30] dump_stack_lvl+0x241/0x360 [ 680.809529][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 680.809554][ T30] ? __pfx__printk+0x10/0x10 [ 680.809586][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 680.809627][ T30] ? vscnprintf+0x5d/0x90 [ 680.809655][ T30] panic+0x349/0x880 [ 680.809691][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 680.809720][ T30] ? __pfx_panic+0x10/0x10 [ 680.809750][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 680.809777][ T30] ? __irq_work_queue_local+0x137/0x410 [ 680.809813][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 680.809845][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 680.809870][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 680.809899][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 680.809929][ T30] watchdog+0x1097/0x10a0 [ 680.809963][ T30] ? watchdog+0x1ea/0x10a0 [ 680.810000][ T30] ? __pfx_watchdog+0x10/0x10 [ 680.810033][ T30] kthread+0x7a9/0x920 [ 680.810064][ T30] ? __pfx_kthread+0x10/0x10 [ 680.810098][ T30] ? __pfx_watchdog+0x10/0x10 [ 680.810131][ T30] ? __pfx_kthread+0x10/0x10 [ 680.810161][ T30] ? __pfx_kthread+0x10/0x10 [ 680.810197][ T30] ? __pfx_kthread+0x10/0x10 [ 680.810229][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 680.810256][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 680.810284][ T30] ? __pfx_kthread+0x10/0x10 [ 680.810319][ T30] ret_from_fork+0x4b/0x80 [ 680.810354][ T30] ? __pfx_kthread+0x10/0x10 [ 680.810387][ T30] ret_from_fork_asm+0x1a/0x30 [ 680.810428][ T30] [ 681.449727][ T30] Kernel Offset: disabled [ 681.454056][ T30] Rebooting in 86400 seconds..