last executing test programs: 16m26.16364595s ago: executing program 4 (id=121): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x5, 0x4) 16m21.833862114s ago: executing program 4 (id=138): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000280)={0x0, 0x407b, 0x8, 0x0, 0x51}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000540)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, r0, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='m', 0x1}], 0x1}, 0x40000002, 0x40c1, 0x1, {0x1}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 16m21.420346905s ago: executing program 4 (id=142): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r1, 0x407, 0x0) write$UHID_CREATE2(r1, &(0x7f00000003c0)=ANY=[], 0x1001) close_range(r0, 0xffffffffffffffff, 0x0) 16m21.120218319s ago: executing program 4 (id=147): syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x0, 0x3c, 0x4c, 0x65, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x7, 0x1, 0xd, [{@local, 0x10000}]}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e23}, 0x1}, 0x1}, 0x2000001}}}}}}}, 0x0) 16m20.881346088s ago: executing program 4 (id=149): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000000, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @multicast2, @empty}, {0x4e20, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc", "0c17d7b0eb591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "00802000003211817ada1e97297a54f5"}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x9, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x4, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000ff8500007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16m20.611855205s ago: executing program 0 (id=151): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) close(0x3) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) dup3(r1, r0, 0x80000) 16m20.291761343s ago: executing program 4 (id=152): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 16m20.026019734s ago: executing program 1 (id=154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x60, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 16m19.802585929s ago: executing program 1 (id=155): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x55) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xb6}, 0x8) 16m19.690866385s ago: executing program 1 (id=156): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0xa, 0x3, 0x3a) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20) ptrace$ARCH_GET_GS(0x1e, r1, 0x0, 0x1004) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000140)={'virt_wifi0\x00', @ifru_addrs=@phonet={0x23, 0x8, 0x40, 0xcc}}) ioctl$sock_proto_private(r0, 0x8b22, &(0x7f0000000080)) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) 16m19.288113065s ago: executing program 0 (id=157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 16m17.518938579s ago: executing program 1 (id=158): r0 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) 16m17.47365877s ago: executing program 0 (id=159): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f0000000b80)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x8841) 16m17.418098082s ago: executing program 0 (id=160): syz_emit_ethernet(0x0, 0x0, 0x0) 16m17.329860574s ago: executing program 0 (id=161): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() syz_pidfd_open(r0, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x30) pipe2$9p(&(0x7f0000000080), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 16m17.32889274s ago: executing program 1 (id=162): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x2, 0x4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 16m17.298093559s ago: executing program 0 (id=163): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x41555856, 0x0, &(0x7f0000af2000/0x3000)=nil) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r5, 0x5412, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000540)=0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x8, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200000}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) 16m16.134723657s ago: executing program 1 (id=165): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', 0x0}) 16m6.024248315s ago: executing program 32 (id=144): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000180)=r2) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 16m4.882626635s ago: executing program 33 (id=152): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 16m2.189463238s ago: executing program 34 (id=163): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x41555856, 0x0, &(0x7f0000af2000/0x3000)=nil) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r5, 0x5412, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000540)=0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x8, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200000}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) 16m0.907556189s ago: executing program 35 (id=165): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', 0x0}) 5m49.956295558s ago: executing program 2 (id=2380): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x40, &(0x7f0000000000)=0x0) io_submit(r1, 0x8e, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r0, 0x0}]) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0x5, 0x0, &(0x7f00000016c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000003c0)={0x0, 0x700}, 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_off}, {@redirect_dir_on}, {@redirect_dir_on}]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = open(0x0, 0x84242, 0x1df2a23c5997fad6) sendfile(r7, r7, &(0x7f0000000080), 0x7f03) fallocate(r2, 0x0, 0x1, 0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 5m46.959645863s ago: executing program 2 (id=2388): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) r1 = syz_io_uring_setup(0x744e, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x40000051}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x8, 0x0, 0x0, &(0x7f0000000480)={0x77359400}, 0x0, 0x0, 0x3, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000c00)=[{&(0x7f00000006c0)="5d7f9f0c37c757789144dbf58fe4fc5a9ec19136e31c639bf291049c11fd43b142387205eb76dd99417bf7dfb075081a3b41a1df501e4137a648b7f298b6e244324e5d76e12cb058e459e3ab4a0edb9ee7b07eda96b58636f10924ee28081cb25cb2c36301d1339f35f4a7a4206e4ea8b6d75161938fb5b2ba2c247ed217e7db0ab7a06fa30ae41c81db1c5950f7", 0x8e}, {0x0}, {0x0}], 0x3}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "bd69dbc7", "1d7265a045a85572"}, 0x38) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0xa4ff, 0x3, @mcast2, 0x711}}, {{0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}}, 0x108) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 5m43.560013591s ago: executing program 2 (id=2396): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x20, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfab0100000011ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000300)={0x0, 0x31fbb3e32aed6829, 0x11, "2aa9e09f9b67af006e8840630c3581d807"}, 0x0, 0x0, 0x0, 0x0}) 5m40.337674424s ago: executing program 2 (id=2402): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r1, &(0x7f00000003c0)="6bc3d624941b725be7fdcd0dac28c54e6c44ae122fc51fb3ff677b06c213d1a1b7b30222dec97ea41f3b1b52369b3326d290d1320df640fe80ffed60dbba8c74572e43e261b3f4b3b1e838a7072e59df05dff23a45593b8f134f8b5f58a7705d26324cd62d9f935cc683dd30e51e17"}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x11a21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x48880) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, 0x0) modify_ldt$read(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x801a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0x2c, 0x80001) r6 = mq_open(&(0x7f0000000780)='&\x00', 0x40, 0x101, 0x0) mq_notify(r6, &(0x7f00000001c0)={0x0, 0x3b, 0x1, @thr={0x0, 0x0}}) read(r6, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x0, 0x4, 0x40, 0xa01}) close_range(r0, 0xffffffffffffffff, 0x0) 5m39.122361405s ago: executing program 2 (id=2404): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r1, &(0x7f0000000480), 0x0, 0x10022, 0x0) 5m37.228121571s ago: executing program 2 (id=2409): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028004001200050016000200000006001800"], 0x50}}, 0x4080) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x4080b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x50205100, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000040)=ANY=[@ANYRES64=r3], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x439}}, {0x66, &(0x7f0000000200)=@string={0x66, 0x3, "a177814d987e38cfc1f8f84f1ee18b6b0f8cef5a82c5636489e0f4c7574ac37a5c0c568ceb487937a3e710b232aba0937e9aab496bb0277823cb20ab927b7d09bf607045bee02b5242f0e64f4319a1637fc387c62e0767aab6e2ca0cbb8d94000f1a4381"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0xe6, &(0x7f0000000440)=@string={0xe6, 0x3, "d10270d1496759b1cce8315d99b6b051669d0dcd2c81ff99b264d699f5eefc33e4b12c2c16306c9e5ff842d19410bc3f2c942da2f5ab5bd75f4e92fa535022efc9a0fbafbb58bd84d7877cd7376d470073b0c90da5ee760990576493dfdb16f5577608a14a60c3409b97979d16ca1ae831f911f9a43db42be11215e5009e2e40da1b517594cd30d141452174824deddb89fb9ea3cdc2e3dc1a543037c039483c20a1b1d5253de8bac3f641bdda34aa30be20a64c702c0b0e81c92fd657010bf1ad8d87ea1951ac73522318392eb22e2c73f408bbaa27f3231b2616e67a691fc47362366a"}}, {0x47, &(0x7f00000003c0)=@string={0x47, 0x3, "027013637b6ac92f9b6fbcaf81e85863bacd97082328697cd3829fcd7cde9d9796810d8361ab9592e81bf7d48264a315a22237be91577f49026399aa7050cc42e9ad3228c0"}}, {0xc2, &(0x7f0000000600)=@string={0xc2, 0x3, "9d47c86477f46a91115f6b8412042d0211c902edf913114cec33ffabe948863afd5b269857226dfc6321d5cc75e52ac0f145e3a916e5296a2452b308aaba143b4df017b06865411433fa287078b41b58c06bfef046b8e92d0216cb4a822ce3228c7cc1173bcb0186e159c2d66c59ed72dcab38e210c8bffc75c647e764d5add8a40693a53711b7e57435fab413b8d9cec09710ac487c42be53917c19301fb3d2d893ecfaf717e2993560e0a3a3eeed9b00f8e98575ec3d47d2477c5fff66eae4"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x441}}]}) 5m21.973403766s ago: executing program 36 (id=2409): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028004001200050016000200000006001800"], 0x50}}, 0x4080) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x4080b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x50205100, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000040)=ANY=[@ANYRES64=r3], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x439}}, {0x66, &(0x7f0000000200)=@string={0x66, 0x3, "a177814d987e38cfc1f8f84f1ee18b6b0f8cef5a82c5636489e0f4c7574ac37a5c0c568ceb487937a3e710b232aba0937e9aab496bb0277823cb20ab927b7d09bf607045bee02b5242f0e64f4319a1637fc387c62e0767aab6e2ca0cbb8d94000f1a4381"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0xe6, &(0x7f0000000440)=@string={0xe6, 0x3, "d10270d1496759b1cce8315d99b6b051669d0dcd2c81ff99b264d699f5eefc33e4b12c2c16306c9e5ff842d19410bc3f2c942da2f5ab5bd75f4e92fa535022efc9a0fbafbb58bd84d7877cd7376d470073b0c90da5ee760990576493dfdb16f5577608a14a60c3409b97979d16ca1ae831f911f9a43db42be11215e5009e2e40da1b517594cd30d141452174824deddb89fb9ea3cdc2e3dc1a543037c039483c20a1b1d5253de8bac3f641bdda34aa30be20a64c702c0b0e81c92fd657010bf1ad8d87ea1951ac73522318392eb22e2c73f408bbaa27f3231b2616e67a691fc47362366a"}}, {0x47, &(0x7f00000003c0)=@string={0x47, 0x3, "027013637b6ac92f9b6fbcaf81e85863bacd97082328697cd3829fcd7cde9d9796810d8361ab9592e81bf7d48264a315a22237be91577f49026399aa7050cc42e9ad3228c0"}}, {0xc2, &(0x7f0000000600)=@string={0xc2, 0x3, "9d47c86477f46a91115f6b8412042d0211c902edf913114cec33ffabe948863afd5b269857226dfc6321d5cc75e52ac0f145e3a916e5296a2452b308aaba143b4df017b06865411433fa287078b41b58c06bfef046b8e92d0216cb4a822ce3228c7cc1173bcb0186e159c2d66c59ed72dcab38e210c8bffc75c647e764d5add8a40693a53711b7e57435fab413b8d9cec09710ac487c42be53917c19301fb3d2d893ecfaf717e2993560e0a3a3eeed9b00f8e98575ec3d47d2477c5fff66eae4"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x441}}]}) 3m57.45948267s ago: executing program 7 (id=2699): chdir(&(0x7f0000000640)='./cgroup\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3m56.654909167s ago: executing program 7 (id=2701): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x20000080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0) 3m53.750005612s ago: executing program 7 (id=2711): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r1, &(0x7f00000003c0)="6bc3d624941b725be7fdcd0dac28c54e6c44ae122fc51fb3ff677b06c213d1a1b7b30222dec97ea41f3b1b52369b3326d290d1320df640fe80ffed60dbba8c74572e43e261b3f4b3b1e838a7072e59df05dff23a45593b8f134f8b5f58a7705d26324cd62d9f935cc683dd30e51e17"}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x11a21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x48880) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, 0x0) modify_ldt$read(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x801a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = mq_open(&(0x7f0000000780)='&\x00', 0x40, 0x101, 0x0) mq_notify(r6, &(0x7f00000001c0)={0x0, 0x3b, 0x1, @thr={0x0, 0x0}}) read(r6, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x0, 0x4, 0x40, 0xa01}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(r0, 0xffffffffffffffff, 0x0) 3m51.302284628s ago: executing program 7 (id=2718): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f00000029c0)=[{{&(0x7f00000006c0)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) r1 = msgget(0x3, 0xa00) msgctl$IPC_RMID(r1, 0x0) 3m49.497512675s ago: executing program 7 (id=2729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r1, 0x40045201, 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [], {0x14}}, 0x28}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000140)={0x10}) 3m49.135455397s ago: executing program 7 (id=2734): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000003980), 0x1, 0x0) write(r0, &(0x7f0000000100)="bf2e2e27038946df9f60115a37b34ca314850f3c199469f3ddf16d01331f571d7440e02f", 0x24) 2m14.698795585s ago: executing program 6 (id=2985): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40045201, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a0103"], 0x28}}, 0x0) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000380), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000140)={0x10, &(0x7f0000000000)=[{0x6, '\x00', @st={0x4, [{0xa562fa66861d4279, @svalue=0x7}, {0x3}, {0x3, @svalue=0xffffffffffff343a}, {0x3, @svalue=0x9}]}, 0xfffffc77}, {0x1e, '\x00', @st={0x4, [{0x0, @svalue=0x65c}, {0x1, @uvalue=0x3}, {0x2, @svalue=0x7fffffff}, {0x3, @uvalue=0x6}]}, 0x400}, {0x42, '\x00', @st={0x4, [{0x0, @svalue=0x2}, {0x0, @svalue=0x200}, {0x3, @svalue=0x5}, {0x2, @uvalue=0x8}]}, 0x9}]}) 2m12.607643651s ago: executing program 6 (id=2988): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x18) 2m12.311788381s ago: executing program 6 (id=2989): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x72, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500006400040000fe01907864010101ac1414aa05009078e00100e0420000030004000000110000640101000000001800000000e0000033000051020a0100ffffff0000ac1e040100000000ac1414bbfffffffe0000000000000001ac1414bb000000048d6a50e60bb14782321ddabea2d23e836af43c6e21ad96a9216a8ee07960f53d5c5a7702d503f101bb9839d48e"], 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES8=r1, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="aec50354ede57566f2e212f100fa453482279b862f563fe2636c7681f5b76f40838be730a81d0e1dea22aa483a5e15b1806336ecc6307d2ba57936d4643c92e0ce5d02f513dcdf59f83d66c4363c23e74cd847886c1b2eca663cdac688c116b839d46c84676a24b7aab1dffc4b1cffc10f28e3632d00aa9a1b35326f48ea9bad89cd037dd075c7c3fc875e05e659c14d4c00398f210d1934bb7259512a0b83b7a2499dd400e219f16bc4d35375b366826a8ed6b8c112b776fb7aa7b4a6faa351fec1019588d5ebc50c3fd80cfa"], 0x50) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4000008, 0x80000100008b}, 0x0) fsopen(&(0x7f00000000c0)='efivarfs\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0xf) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r8}}, 0x18) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)}], 0x2) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000740)={0x48}) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r0) 2m11.01025236s ago: executing program 6 (id=2993): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0xf0) 2m9.843680702s ago: executing program 6 (id=2995): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf0900000000000055090100000000000a432c279500000000000000bf91000000000000b7020000010000008500000084000000b700000000ffff0095000000000000000000c2b7"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m7.907133758s ago: executing program 6 (id=2999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ac1414aa050007008400000006000440462000000c0002800800014095"], 0x54}, 0x1, 0x0, 0x0, 0x74040017}, 0x80) 1m52.72851453s ago: executing program 37 (id=2999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ac1414aa050007008400000006000440462000000c0002800800014095"], 0x54}, 0x1, 0x0, 0x0, 0x74040017}, 0x80) 7.94060334s ago: executing program 3 (id=3255): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005480)=[{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000300)="15beab311dc1c576fadc1bda40dde1fce8e2fc158433033a8c5f0fc33560a1bd2ef2ae54e370454cff747fed4edafaff8e963047e859dff5f5ebd731a6d5c6", 0x3f}, {&(0x7f0000000600)="58ca2c5da59a2a1c638503ce798a4a88c1a315c4129813235e3f986f5b0487b83b3561e343ad34bf10ec5c0ad11d5d8a311456bf55ec516d44711966fee302713b9a430e1fe44029d98025d5935e7a9dae70cc88fc7c55a81ffd986eddf184006b5e52c90fd9db4cb993da5a96e0e4242ff2dbdecb4449ddf0adb91eaef546b0227c56e5dfe891cd978bf3804d1f5b279a5f99de3a94816d9e77b409238b4227c8c7", 0xa2}, {&(0x7f00000006c0)="99bf4ecc0337709c4af43e00b18b6358dbef2e39a4ad56ad922345a2a21e874782935653a3bf9f164ef03b1986caf7d8d80e56fb95a131ac2522714553c926200423d2f1605a9b43babd71d528b52418846c489e96b8f08d4bf027e437bb2e9f5665e764ed7581233c1f0728acdd589c480eb518f6b41833db5dd5826117efd0fc2b9a54435b60dc5c1757a39c40661e6cfbffd380bf37ec01b14b925bcf566ca8259e524f84f6ab8424b318849d2b34d7ce0cce264ae3bd1da38145d314a6038041344262048f81", 0xc8}, {&(0x7f0000000880)="6b8a8b4bf008da458d55ffb101c670290a926070dc6228c59731e5ac6d71f5b1a18423dbab6caa9b2b54a2796cb6442b9d0a86d058b0c2ab3d6e030f4a868809286c44db58154937bc0d33c20a32981d7ab01faadf8da5a12218979edf2de98119dbdafd187db0572b70590df0a2f654c326a13807650d840bf67b1e4a070739ff00828b42f91f0d9e93eba48dd522b632c8ef7b2593c8c306eb19c9cc31b5ca65767416926c672f19f7e399c139faca39466ea3ce97", 0xb6}, {&(0x7f0000000940)="d396151cbe59eb06951b2a5d5c3a5d8aa4fc1d0b4ec6ab860d85b31de07aec225bba367a97e1937bb4ae4b6294fdcff8244a93b5277d7d44e142c65ff43192d2f5c46e08a564255b97263f17a39f73dbd2609308b310eccd", 0x58}, {&(0x7f00000009c0)="24c8ea32ea5fd1ce5e51a23d6052b65d2dcf6d37b197e39070e3314ce59342c0ec95831c502936d8e654f39c6a92824cae59e2a8d6dce000cf86f3677b3553b4346202cb9767caa3ef56c710568feaef286b964fdc37469326dd0bfd6fc1b9e6a94a47e21ff1a72d4cca90b45d04dccc89d3abfcc0009faa8c2ecf0196514b240148ec10d60487ef81142367be2c475715c10267b342c75bf077576d83fdbb9826c3bad3d897f9e7b2751450033e477cdded1fbf318a7fbb388e03adb42db6204d2f4d9bb825e7b6db7d24ef60aa250a1f657f11a513e80526a17c194ea95404b049f8ea447a4887b2bd50295b9c7e8ad4150d2746eb289f", 0xf8}, {&(0x7f0000000ac0)="c63d4b68236ab1f8e3ce3baebcab6057ac2c348b3bf4249c6af2214cd27faae4fe0db6be5f82cc21", 0x28}, {&(0x7f0000000b40)="4368b423fcb5e911c71a8ef963aa6734e7537b679ac7b01096038de29b44ad655ddcd486f27df3c6265c8e79f057cb4868911418615a70c66b4d18ee02c73488a4b788d87f90204b6c269044769c84985d5e7277679b3a2d5c8c8f34111affcf4a253295573b4571a9616d3904f944990eba879f8ed386680cd5fdb6e41aff5122f44571903347811638497dee2a2ce6879cdd06383af23b45ad8962f9163a50d487c3728e0430", 0xa7}], 0x8, &(0x7f0000000c80)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x30, 0x20000000}, {0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000cc0)="f28d653cc16ce0", 0x7}, {&(0x7f0000000d00)="de3b82817df69697fe6b15affea565fbdd00455d25c82f5c5876c57fa40e8287ca59ba0b720bdebab2e8a91c6e11bec6ac58c76a613e5fb2bb0121f37f9b1ae1063af89031a041962bd7270ec08b359f2ba2f0f9e08cf55ed74fada62d5576170ef96690e472bfeac2be4a2479acdab79c17c7e3b655c1ac2723991d8525b35f1718149bba246423630c59bb1461c6c6bb7144b26513d12ebd790be672dde7f7e0d019ac25fdd2719925ddc36f059c610f3cfd114fafe463715734409305c05145e548d2506e00f50167bf8390", 0xcd}, {&(0x7f0000000e00)="d314d3666ebb953ece08ce80355eba16d9fa61b5937324557c6472f7", 0x1c}, {&(0x7f0000000e40)="e50e4c34d1fbf86d1a2634e57ad44a1fadf2cad090125e8af048fd628427b33c87c6c6edf896cef9d4df7a4902cfbdd6f07b9839d461d37d5c1279c3f4cd3fc7a86e80343730616c88e0bc070e9b80b6d1aeb27e69e67a8c0907c0b26aec6ae0942a8eedb5e05bfbde15b6ac3c1be8d220c8cb6ece21a7c941c6fab95f9f1124b1c6cba4c6e8919ff476fdb26fc1e49efc036f9771c7b563786b86a6653f42e15ba280cd37", 0xa5}], 0x4, &(0x7f0000000f40)=[@assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x48, 0x20008000}, {0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000fc0)="9ea2f09897f5b457b4c6d0e4caa0511672a920abcfbf6f23425a3a48f6fd6e2051e18f4c6227f704f92ce4a67932864bcd09f5c39b5b980391505e8a60fe2cf70cceb995ffddd2abfc27b03ef4c8d4d45fcf7fd626fb319c5eef4a71cfe70f412146a60b068046df7252df220f63a3f431d0c0351a8c04abfce5f726c4025cab626503bdccc1ba1fc3aec6235b2b59c5e71d3f4859998feb7a06ab25b1c76d70", 0xa0}, {&(0x7f0000001080)="f145c82d93cedd37", 0x8}], 0x2}, {0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001100)="492a66aae181e4af210e299496500322b78b7a5e6e2298ef0b80d616d2c64c51dc1f1921807faa4b54cad9f8af27671e7a8c7926015923e8959b10ffd8d806394d128c5bdd545ef49d9e08cd38428b9b3172673543f8ce9945bc4d8a135e8db357e21a2d048f7e6cfb9183086b345547cf68dcf549f6ba52610b982845b604f258bbe30c65bff39f18bde4ec5f9f37b23da6410ae178473e5a7aab52f5df4052bbdda142b09888bf7bf2da23834432f02e5b3bc4a21e41905618b960af213ca773c604d73f806eb336e3c912afc60f8e3ee90c3a09b6fcd12126b8ef1e87ba80223eb9e78b6894d47090fc55bd5537657c3f1363369ab39eef82", 0xfa}, {&(0x7f0000001200)="fbc950efa74c54460a65fe85bea5a638a54ad275922d3568b8715f475ae28a6714ad159c7b80479e35ca076f3fb806773e4f2d0ee42eb5a1375158fdd334bf733c306fdf2cf66690e2ee4e768351f05ad4b61bf0f94ea744af7526c00c6c297402835196ebd1064667aa9464ea82351cb25304b00a51db11a28b81dc92024bbdcfacc0ce75ce1b372a515cd22f433097532cf06ff30d02cb2ebaa1ae056930192482fc734494c2c16cc59cfbff1a4af4e677d84870355509817d5260cc084ccca4f002af9d7e7e1fdd67378ec4390b", 0xcf}, {&(0x7f0000001300)="9ecf6acafd042427e7e5bd2f971ca58aaaead6ec9d8a67405cd04d1dc5bdd81cba5df5eab60f3ca7899d44645c243c2c5d61aedc7253800b8285ffc37ac67507d0d13687bfa7262c756129b3d676f9db655e793e291b60de3662a40544ef6bd279d7569a44f664592633c904a0", 0x6d}], 0x3, &(0x7f00000013c0)=[@assoc={0x18, 0x117, 0x4, 0x7fff}, @iv={0x38, 0x117, 0x2, 0x20, "6a43a4987b2e76370dc0c543c7a1bffb86edfd664dce004556a43029285e9734"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1ff}, @op={0x18}], 0xf8, 0x20000004}, {0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)="8d7a03fb4fea572923573fb6d2a272a4c0b46eda7ad7bb8f050b59498a2da88299ceba629e39e587ee78e4e3d5748121ecbf6a8c93c774d92fc94327ec7ec14630c55ab27730bdf7c440a5caa98e375358c7512be0cd16d2a69bd77b9f12a4fe2ad897ff379b4e98fb237b7767e8a1572d5ab99c727f909411619a3f5f729b031d7a96d60ec74015da63582a3b639d8587194e6ab448df1731ff5c1a93", 0x9d}, {&(0x7f0000001580)="ebf5b8913e25ad8a39c9b6301ec2f55b1c04e8da0105436eeb4c8579ea139f62cc1e1e836106cfa9c5277ea12d26a3b11f4393738b0ce89a87a6f117740817278cc2b55e57e874f3e6c6f4cd4177934b9512135180cd09ac14ebb38075ffefa394cd5343ae2db264a98a6b48d388f0bfb97e7452a39399cd50e363ace047a5f6f6569f3fe0c13f652369f5db7fa6e0fc864ad80c3db0dc7009ca0be62e92432de2ba3539a8caf2c63601", 0xaa}], 0x2, &(0x7f0000001700)=[@assoc={0x18, 0x117, 0x4, 0xa}, @op={0x18}, @iv={0x60, 0x117, 0x2, 0x47, "615513d60d1a8c43ff22b97db255a543082dfb1e26503178a31d7e177ebdd19ca76cc7d1e94af75b6373eaa164194fa24d4dcd1a1990f86d652e1af45cb0e2d824342096501e1a"}, @assoc={0x18, 0x117, 0x4, 0x7fffffff}], 0xa8, 0x24048080}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004}], 0x6, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.270343703s ago: executing program 9 (id=3258): prctl$PR_SET_THP_DISABLE(0x41, 0x3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x402) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xfe2c, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000000001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c20000907800001e0200004645b8bc5d781cb06262444c1b31541eab4ee00a7642ef50b8f7cddda247d082bd51e6772d268e6e8eeb97d8562c2239ee4c347c9a982c6b5f54abfe7370be3ef760b2683be5e7b5c530456b3e297283555c11d078ebdc1c29f8f4fb2d4ce5d7f4132f3c5e87771a90ebe30311d736a034dda5a07fec35a349190b786e536a5be5a288de940a8a00e9ae17d27bf4a6993be0da6ff36e526d25f9e383161d2800"/185], 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x81, &(0x7f0000001180)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r8, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, @in={0x2, 0x8, @local}}}, 0x118) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000002c0)) write$6lowpan_enable(r3, 0x0, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r3, 0x4004af77, &(0x7f0000000000)) 7.124532593s ago: executing program 3 (id=3260): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xe23, 0x4) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="17", 0x1d}], 0x1}, 0x8c0) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 6.972668087s ago: executing program 9 (id=3261): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r1, 0x3554000) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000003c0)={0xaea7, {{0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, 0x1, 0x4, [{{0xa, 0x4e20, 0x6, @empty, 0x1000}}, {{0xa, 0x4e24, 0x2, @remote, 0x2}}, {{0xa, 0x4e24, 0x3, @local, 0x6}}, {{0xa, 0x4e24, 0x3000000, @remote, 0x1a}}]}, 0x290) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x28c, 0x10001}) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='&'], 0x20) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 6.920017979s ago: executing program 8 (id=3262): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000081007d60b7030000000000006a0a00fefdff0000850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465c3a1f59916ffc9bf0bd09279c362f80e5cf8df265e1b40e4c8ae7a89cf8bd819b5c0c000000008da68076774bb4db2c769937000090af27db5b56024dcbbbd2cb2000ce94284673b4e8d5467e357754508535766c801100000000b290a248a120c9c6e39f3052aae80677eeba68562eaeaea5fecf298ca20f274233106e2baf69b1c60f0ce4099f366b89ab63ecf772de7b265040b6b1acbef92b2704550a4d1dd5c50b7420b58a93fe94c756008afcd0b2eb785632e0a85f02a5a6474ae549070000000000001294fba0ed5020e6477cc921fee1f6d8ad6a80d0947cd6d4a561ced23b0b4a902be6af7ec2d1ba000057f301000000000000000000000000100000aaf253886c0b9f6d4731d714ad72e5ad8530a6380ed2d29f47f96a576cd20cef7ed95157ab050000f0077e9d13d8b93eb0f2c6f8941e35e1577c10e509c9b133c849eb709df5c6ba73cccdfa3c58bc5204339b0b487f0eeed581cb202900000d322717c338033213c18a34ee0ca2cf61efb4b3797a642735d6d482ba98d252f36c54333aab1aa736369392239820f5f1557b0bf7ccb0a5a13c714e0b1a5bc3f9caff3283076cda3d0b1a2905cf7bd04f2db530abcbe44bc40528ad807970727fb819afa14aad99f93093ced7dd51995edcf53b907228fa9e83433eedb4ac88d0285594ffb0d14e71d5c57f33702f22b22417bfb38d04c8441ceec8bcaffbe800aa41307bd8325a76f395bc9a8b0c9d905979f34adddb521914f92eed3d3e9de82942a952e86bd67aff5bc2e3c1fcc00f61124dd06df4b8fd356cb365adc037e443820c05c5db160087a9cf471e0eff227f25b2c5cacebfcd55f8c81f5eb1f8d615ca27efb2193bb61665b8ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50223517a07a3484124c5563cd3700000000001825b05a580ea8cb7f85b77b35a06a895b287b47efbe220bc215aca4a65d7018a7f91c4228b35f71a7c183360ab7a7b6b7870086d851ff861ee07bbec801b79afa477ebab255c7265820456fdc3f34f9d729315d856be7ec564613d5e28cf7c405d6e2b6aeb20000b8505a36a8067cb459fab87c8de118117733d30f4fe049658a2c3edd43546ead9c7882858868cff89a49a693731140db1b7b7116060c30690a39de8b3e0eb4f5401e8354870848c546f9defe1a9c534c9030830fec3eeb5faf1d64bb8e80000000f6ff0000000000000055d843352632b829ceb5200a2cdeb63c0bc7e835e061f9ac3c052b5b6f689bf203aeb8858be07691bc83e178181fab55e6ed9e8a17819de49564d0f0c00dd507441b80cd499c39c5d03d6c00cf5be5215bae09a4f52abf8f1c1add498470a0bb9d7ab757a8b28e4accc939b3621e4c2c9e02741c51eeeaad40cf2e1c3659d83ed71fc628807739d70edda93542445e3204828c49bef648efdc2208341357dd158f411d379df9b1feffbe7c7ee80558a040fa3d5a303f36d5c1a66d9644fc0559aa0e291355ee3de6c7a705b8f7b45bb825044b9a82a6fd2f6eeb14eee0c3f71eeea9984e14c57022ef72850b6dc5fda167d6f98f6c1c73feb424b7937e3c7ca0d2525efbdac50eb94797cf3747b83b56cfea8c74dd3f957dc462e715b789934b422b7ddf3e11a6ad6ad9afd5389c728d14"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80e42, 0x0) read(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90703600000f007529e0ff065581f", 0x0, 0x104, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000005940)=@newchain={0xf34, 0x64, 0x600, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0xeb63839f27d67961}, {0x3, 0x1}, {0xb, 0xfffe}}, [@filter_kind_options=@f_route={{0xa}, {0xf04, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xea}, @TCA_ROUTE4_ACT={0x928, 0x6, [@m_xt={0xb0, 0xc, 0x0, 0x0, {{0x7}, {0x4}, {0x85, 0x6, "90701c66226beeba648414040e5bdff6ccd1cd25f222f238eca5809305e793677a4d6aa87df2f334ba1237a94842da4b6188e9bfdb51f634ec927d20ef5b01399fc406de26f9711bafd6469f22ae6141da5b281729d5288984e4829503c21b901ee027bf4a842afb05d198111b2801e1db11e291ff9aeeb82e98cad5c9d3d91865"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x138, 0x1d, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x2c7, 0x8, 0xffff, 0x6}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x951}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x4, 0x8, 0xfff, 0x8a42}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}]}, {0x99, 0x6, "dfd01a584e7f3ee761cb98e05cb99f5f355fe84e9a7d04adf90b3e5201e56ed731b352a7f822dea211319aa705a0826eaa81d9d4d3fb1d56cf4d34b3e8ab1d16806224eb64e0d966bfc873704195b3b3b911d33397f897ffde8cea6c2b1a569d4dd735ca79dd26b8a828610bd83018b3a95ef909a9ba07debee62aeada17b50f5fd77cd12bc331cbc87edb1cb493057c31b5453807"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0x158, 0x18, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6b8, 0x1ff, 0x2, 0x1000, 0xfc}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xfffffff7, 0x7, 0x1ff, 0x1}}, @TCA_DEF_DATA={0xa, 0x3, 'wpan0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1000, 0x7, 0x10000004, 0x7, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x5, 0x2, 0x92, 0x6}}]}, {0xbd, 0x6, "2b5df3b505ee61840eb5f3b0973a751e9070f93bc1b3ca3c05ff8eb291f39106fce132ac458d6e34dbcf3a7cd93068048c09b9ecfc82eb33de1141b28eb3bcc3cbb981ac74e6895dd856491b29f1b7692b0b8f38f2ebaca9b735632ffcb4fbea4887e782ede9d0c3c1f8bb9a8f535a4fcdcfc6cbc1c6d3459981db74de7c320e5bb07f0aeb33c52b5145ab7c17d52d53f9bda21f53b88e623c2cb19cda26349fdf30fe3ef100a07ab5f2e556632ed0660df9b8342c394eb439"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mirred={0x17c, 0x17, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x8001, 0x20000000, 0x1789, 0x1ff}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x29f0, 0x5, 0x0, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe3fc, 0x41a3800, 0x10000000, 0x8c85290, 0xd}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xff7e, 0x0, 0x2, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x43b, 0x6, 0x5, 0x0, 0x200}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x603b, 0xffffffffffffffff, 0x800, 0x7fff}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xe, 0x6, 0x80}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x101, 0x8, 0x2, 0xf4}, 0x2}}]}, {0x4d, 0x6, "cd84f14abb02f58c491812e372eef6314bbcd006d6fa42c12d4e9296bf17fde29b5fef302006a40172adddd4be083b5d199e632c6347c08a6838b81dd3002f5af95ac9f87732deed22"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mirred={0xd0, 0x7, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x3, 0x5, 0x18000, 0x80}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff7, 0xfffffffa, 0x1, 0x9, 0x81}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x4, 0x10000000, 0x4, 0x800}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x7fffffff, 0x5, 0x4, 0x1}, 0x2}}]}, {0x21, 0x6, "96250ae3fcf864e2bde33e3fb1365f93430cc46f060f73b069b8c89601"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0xb0, 0x6, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3, 0x4, 0x8, 0x3}, @loopback, @private=0xa010101, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xd1, 0x7, 0x80000000}, @loopback, @multicast2, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x7ff, 0x8, 0x0, 0x125}, @multicast2, @remote, 0xff, 0x1}}]}, {0xd, 0x6, "99bd79e86ef995cfd8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x134, 0x4, 0x0, 0x0, {{0x7}, {0x70, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TARG={0x35, 0x6, {0xf5, 'filter\x00', 0x5, 0x1, "6d9d4446270a558f205569"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x9d, 0x6, "09710e5ed32d77a8acb5fd750728984c35046c84370b299302450c6e6dd4960e726049f7d4059df440ccd08c7df8969a1a3c0137d7d7aae5de9d43ab9b0bb1aef88d0bc45ba2492a920c6fb52d51cf9f17e946bc5daeb595fd82bd6b90bea43833b9a84516972f635650f5326ccb88769314df2d62a6292c52077c0b52e1e4f06a4aac1eab420d80126f27d642f4863021a1d8508268093233"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0xe0, 0x12, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x101, 0x5, 0x8, 0x400, 0x10}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0xae, 0x5, 0x0, 0xa0}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x974, 0x5, 0x0, 0xe}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1ff, 0xc, 0x20000000, 0x5, 0x6}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc71}]}, {0x21, 0x6, "ca5d762a2421fd15a59b912f08c315dbb3c2549a758db3b5a03f85d712"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xd4, 0xb, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}]}]}, {0x8d, 0x6, "97a9bfe2c06ded36aecdf155178beea02f402c59659c7778913d3d3c7cc6877dc3a9ff5ea999abd93f6200695ea353ddb427fd11f36726ddd3524d43428c16bd987d1defd39047d6cd3f35fbb691f76e8bc15dbcac9d11ceb3c698efb7d7576fec9245c05bf867aabdbbe120e6524cd6646267f52785589c15c9fabc94d47a2312f5a4d43c85ffa884"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x6, 0x7}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xf, 0x10}}, @TCA_ROUTE4_ACT={0x5c0, 0x6, [@m_xt={0x5bc, 0x4, 0x0, 0x0, {{0x7}, {0x4}, {0x591, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xf34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x26}], 0xf}, 0x4) r4 = syz_open_dev$media(&(0x7f0000000080), 0x4, 0xf0381) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f00000003c0)={0x0, 0xfffffffffffffe10, 0x0, 0x0, 0x5b, 0x0, &(0x7f00000016c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 6.917483379s ago: executing program 3 (id=3263): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf0900000000000055090100000000000a432c279500000000000000bf91000000000000b7020000010000008500000084000000b700000000ffff0095000000000000000000c2b7"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x98}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.314872973s ago: executing program 8 (id=3265): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') r1 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 5.830526986s ago: executing program 5 (id=3267): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf0900000000000055090100000000000a432c279500000000000000bf91000000000000b7020000010000008500000084000000b700000000ffff0095000000000000000000c2b76257"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0) getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 5.544518786s ago: executing program 5 (id=3268): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf0900000000000055090100000000000a432c279500000000000000bf91000000000000b7020000010000008500000084000000b700000000ffff00950000000000000000"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x110}}, 0x0) getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.236801349s ago: executing program 3 (id=3269): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf0900000000000055090100000000000a432c279500000000000000bf91000000000000b7020000010000008500000084000000b700000000ffff0095000000000000000000c2b76257"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}]}], {0x14}}, 0x104}}, 0x0) getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.234485823s ago: executing program 5 (id=3270): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10002}, 0x1c, 0x0, 0x0, &(0x7f0000002140)=[@dstopts={{0x18, 0x29, 0x32, {0x6c}}}], 0x18}, 0x4040081) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg(r1, &(0x7f00000003c0)=[{{&(0x7f0000000240)=@l2tp={0x2, 0x0, @remote, 0x2}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000500)="16", 0x1}], 0x1}}, {{&(0x7f0000000140)=@in={0x2, 0x4e21, @private=0xa010100}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='S', 0x1}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="10004289000000008400000007000000"], 0x10}}], 0x2, 0xa3e4bbaf62f461ca) 4.203499397s ago: executing program 8 (id=3271): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000300)={0x0, 0xffff, 0x0, 0x0, 0x0}) process_vm_writev(r0, &(0x7f00000025c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)}, {&(0x7f0000002500)=""/9, 0x9}, {&(0x7f0000002540)=""/111, 0x6f}], 0x4, &(0x7f0000002a00)=[{&(0x7f0000002600)=""/214, 0xd6}, {&(0x7f0000002700)=""/155, 0x9b}, {&(0x7f00000027c0)=""/9, 0x9}, {&(0x7f0000002800)=""/211, 0xd3}, {&(0x7f0000002900)=""/31, 0x1f}, {&(0x7f0000002940)=""/41, 0x29}, {&(0x7f0000002980)=""/110, 0x6e}], 0x7, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000380)={[&(0x7f0000000180)='!}]\x00', &(0x7f00000001c0)='-*$$^/%{/\x81&&\x00', &(0x7f0000000200)='/dev/comedi0\x00', &(0x7f0000000240)='comedi_bond\x00', &(0x7f0000000280)='#Q*\\\'+!]{!(\x00']}, 0x0, 0x400) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x500, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3fff}) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e20, @broadcast}}}, 0x88) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r6 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000000)={'comedi_bond\x00', [0x4, 0x0, 0x7fffffff, 0x8, 0x90000, 0x9, 0xed, 0x890, 0x280ffa, 0xfffffffb, 0x4, 0x1, 0x1030, 0x1000008, 0x4c, 0x40000009, 0xfff7ffa6, 0x3ff, 0x1ff, 0x9ea, 0x3, 0xb, 0x9, 0x101, 0x1, 0x990e, 0x5, 0x18, 0xf, 0x2000006, 0x77fd]}) socket$xdp(0x2c, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x2000000000000024, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000200)="151b00ba8d13cdea2aac8a25ec05", 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 4.141238434s ago: executing program 9 (id=3272): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xe23, 0x4) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="17", 0x1d}], 0x1}, 0x8c0) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 3.159179552s ago: executing program 8 (id=3273): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x11a21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x48880) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x801a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0x2c, 0x80001) r5 = mq_open(&(0x7f0000000780)='&\x00', 0x40, 0x101, 0x0) mq_notify(r5, &(0x7f00000001c0)={0x0, 0x3b, 0x1, @thr={0x0, 0x0}}) read(r5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x0, 0x4, 0x40, 0xa01}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(r0, 0xffffffffffffffff, 0x0) 3.158744857s ago: executing program 5 (id=3274): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf0900000000000055090100000000000a432c279500000000000000bf91000000000000b7020000010000008500000084000000b700000000ffff0095000000000000000000c2b76257"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x98}}, 0x0) getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.008067723s ago: executing program 9 (id=3275): mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) getsockopt(r0, 0x1, 0x2, &(0x7f0000000280)=""/186, &(0x7f0000000380)=0xba) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) openat$dir(0xffffff9c, &(0x7f0000000340)='./file0/file1\x00', 0x40, 0x80) 2.94043119s ago: executing program 9 (id=3276): r0 = socket$kcm(0x2, 0x3, 0x106) getpid() sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9", 0x3}], 0x1}, 0x0) 2.866945955s ago: executing program 3 (id=3277): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}}}]}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) 2.763893764s ago: executing program 5 (id=3278): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000600)=@framed={{}, [@ldst={0x7, 0x3, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x2}, 0x90) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x24202, 0x82) mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0x112) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r2, 0x7}, 0x8) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="60000000020603000000000000000000000000001400000000050001fa05000000030005e6bb000000050004000000000011000300686173683e6e65742c6e650a00000000090002"], 0x60}}, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') mount(&(0x7f0000000100)=@filename='./file0\x00', 0x0, &(0x7f0000000200)='zonefs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r3, 0x5606, 0x7fffffffffffffff) 2.67235925s ago: executing program 8 (id=3279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0xa, &(0x7f0000000040)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2b40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) chdir(&(0x7f00000001c0)='./bus\x00') syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c370c8900198401fec00000000000000000020000000000fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x10043, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000200)={0x100000001, 0x28, '\x00', 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) dup(r5) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) unshare(0x8040480) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1f00, 0x12) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}}) 2.554533836s ago: executing program 9 (id=3280): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') r1 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 2.549747189s ago: executing program 3 (id=3281): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r1, 0x3554000) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000003c0)={0xaea7, {{0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, 0x1, 0x4, [{{0xa, 0x4e20, 0x6, @empty, 0x1000}}, {{0xa, 0x4e24, 0x2, @remote, 0x2}}, {{0xa, 0x4e24, 0x3, @local, 0x6}}, {{0xa, 0x4e24, 0x3000000, @remote, 0x1a}}]}, 0x290) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x28c, 0x10001}) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)={0xfffffff9, 0xd}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 2.465862954s ago: executing program 5 (id=3282): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000026ffffff12000000040063000000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./tracefs_dir/trace\x00', &(0x7f0000000000)='tmpfs\x00', 0x42013, &(0x7f0000000200)) chdir(&(0x7f0000000180)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x180, 0x0, 0x4, 0x2, {0x80, 0x9}, {0x350, 0x20005, 0xffffffff}, {0xf4ef, 0x300}, {0x4, 0x4000002, 0x7fe}, 0x1, 0x100, 0x0, 0xe983, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8000000001000001, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="bb5dbbbbbbbbbbbbbbb3bbbb08004500005c000040020511907800000000000010004e24000000489078030000000400000296597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cbaf6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"], 0x0) syz_emit_ethernet(0x33, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x25, 0x0, 0xe000, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x11, 0x0, @opaque="8c1ea11e3115141504"}}}}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r8, 0x0, 0x0, 0x8ffff) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r9, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0xfffffffffffff18f, 0x1, 0x0, 0x2, 0x3, 0x1, 0x6, 0x7fffffff}) 0s ago: executing program 8 (id=3283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0xa, &(0x7f0000000040)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2b40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) chdir(&(0x7f00000001c0)='./bus\x00') syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c370c8900198401fec00000000000000000020000000000fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x10043, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000200)={0x100000001, 0x28, '\x00', 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) dup(r5) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) unshare(0x8040480) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1f00, 0x12) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}}) kernel console output (not intermixed with test programs): bcdDevice= 0.00 [ 892.094414][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.124818][ T10] usb 10-1: config 0 descriptor?? [ 892.466680][ T6148] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 892.730723][ T10] hid-led 0003:0FC5:B080.0011: unknown main item tag 0x5 [ 892.730763][ T10] hid-led 0003:0FC5:B080.0011: unknown main item tag 0x6 [ 892.730965][ T10] hid-led 0003:0FC5:B080.0011: unknown main item tag 0x0 [ 892.730996][ T10] hid-led 0003:0FC5:B080.0011: unknown main item tag 0x0 [ 892.731022][ T10] hid-led 0003:0FC5:B080.0011: unknown main item tag 0x0 [ 892.731047][ T10] hid-led 0003:0FC5:B080.0011: unknown main item tag 0x0 [ 892.731069][ T10] hid-led 0003:0FC5:B080.0011: unknown main item tag 0x0 [ 892.731089][ T10] hid-led 0003:0FC5:B080.0011: unknown main item tag 0x0 [ 892.731311][ T10] hid-led 0003:0FC5:B080.0011: unknown main item tag 0x0 [ 892.731338][ T10] hid-led 0003:0FC5:B080.0011: unknown main item tag 0x0 [ 893.191996][ T10] hid-led 0003:0FC5:B080.0011: probe with driver hid-led failed with error -32 [ 893.533616][T14895] netlink: 136 bytes leftover after parsing attributes in process `syz.7.2663'. [ 893.533643][T14895] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 894.883246][ T9] usb 10-1: USB disconnect, device number 2 [ 897.474518][T14964] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2686'. [ 900.041940][ T5611] Bluetooth: hci7: command 0x2016 tx timeout [ 900.880525][ T5737] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 901.041807][ T5737] usb 10-1: Using ep0 maxpacket: 8 [ 901.054740][ T5737] usb 10-1: unable to get BOS descriptor or descriptor too short [ 901.073024][ T5737] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 901.073053][ T5737] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 901.124419][ T5737] usb 10-1: New USB device found, idVendor=0582, idProduct=0052, bcdDevice= 0.40 [ 901.124450][ T5737] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.124470][ T5737] usb 10-1: Product: syz [ 901.124485][ T5737] usb 10-1: Manufacturer: syz [ 901.124499][ T5737] usb 10-1: SerialNumber: syz [ 901.258095][ T5737] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 902.167447][ T5606] Bluetooth: hci7: command 0x2016 tx timeout [ 902.241724][ T5610] usb 10-1: USB disconnect, device number 3 [ 902.461391][T15023] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2706'. [ 902.743909][T15031] serio: Serial port ptm0 [ 902.888046][T15034] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 902.888079][T15034] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 903.800485][T15037] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 904.845529][T15041] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 904.845562][T15041] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 906.888303][T15078] overlayfs: failed to clone upperpath [ 908.472227][ T989] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 908.521762][ T5727] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 908.639711][ T989] usb 6-1: config 1 has an invalid interface number: 36 but max is 0 [ 908.639739][ T989] usb 6-1: config 1 has no interface number 0 [ 908.639792][ T989] usb 6-1: config 1 interface 36 altsetting 129 bulk endpoint 0x8 has invalid maxpacket 8 [ 908.639817][ T989] usb 6-1: config 1 interface 36 has no altsetting 0 [ 908.646684][ T989] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=cc.2f [ 908.646713][ T989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.646731][ T989] usb 6-1: Product: syz [ 908.646744][ T989] usb 6-1: Manufacturer: syz [ 908.646766][ T989] usb 6-1: SerialNumber: syz [ 908.667232][T15099] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 908.713984][ T5727] usb 7-1: Using ep0 maxpacket: 16 [ 908.741339][ T5727] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 908.741362][ T5727] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.741381][ T5727] usb 7-1: Product: syz [ 908.741394][ T5727] usb 7-1: Manufacturer: syz [ 908.741408][ T5727] usb 7-1: SerialNumber: syz [ 908.806237][ T5727] usb 7-1: config 0 descriptor?? [ 908.829210][ T5727] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 909.179642][ T989] redrat3 6-1:1.36: Couldn't find all endpoints [ 909.235290][ T989] usb 6-1: USB disconnect, device number 28 [ 909.906500][ T5727] ssu100 7-1:0.0: probe with driver ssu100 failed with error -110 [ 909.973030][ T5606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 910.054174][ T5606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 910.056134][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 910.067562][ T5606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 910.072435][ T5606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 910.293833][ T36] kauditd_printk_skb: 85 callbacks suppressed [ 910.293854][ T36] audit: type=1326 audit(1785815769.304:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15100 comm="syz.6.2731" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde9ee019 code=0x7ffc0000 [ 910.293902][ T36] audit: type=1326 audit(1785815769.304:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15100 comm="syz.6.2731" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde9ee019 code=0x7ffc0000 [ 910.293937][ T36] audit: type=1326 audit(1785815769.304:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15100 comm="syz.6.2731" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde9ee019 code=0x7ffc0000 [ 910.293974][ T36] audit: type=1326 audit(1785815769.314:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15100 comm="syz.6.2731" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7effde9ee019 code=0x7ffc0000 [ 910.294057][ T36] audit: type=1326 audit(1785815769.314:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15100 comm="syz.6.2731" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde9ee019 code=0x7ffc0000 [ 910.313028][ T36] audit: type=1326 audit(1785815769.344:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15100 comm="syz.6.2731" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde9ee019 code=0x7ffc0000 [ 910.313079][ T36] audit: type=1326 audit(1785815769.344:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15100 comm="syz.6.2731" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde9ee019 code=0x7ffc0000 [ 910.313120][ T36] audit: type=1326 audit(1785815769.344:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15100 comm="syz.6.2731" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7effde9ee019 code=0x7ffc0000 [ 910.347464][ T36] audit: type=1326 audit(1785815769.344:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15100 comm="syz.6.2731" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde9ee019 code=0x7ffc0000 [ 910.347516][ T36] audit: type=1326 audit(1785815769.364:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15100 comm="syz.6.2731" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde9ee019 code=0x7ffc0000 [ 910.822736][T15132] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 910.822790][T15132] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 912.966848][ T5606] Bluetooth: hci1: command tx timeout [ 913.049628][T10347] usb 7-1: USB disconnect, device number 28 [ 914.874554][ T5610] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 915.041878][ T5606] Bluetooth: hci1: command tx timeout [ 915.101757][ T5610] usb 6-1: Using ep0 maxpacket: 32 [ 915.104917][ T5610] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 915.104947][ T5610] usb 6-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 915.104967][ T5610] usb 6-1: config 0 has no interface number 0 [ 915.105010][ T5610] usb 6-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 915.105037][ T5610] usb 6-1: config 0 interface 196 has no altsetting 0 [ 915.108719][ T5610] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 915.108750][ T5610] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.108771][ T5610] usb 6-1: Product: syz [ 915.108785][ T5610] usb 6-1: Manufacturer: syz [ 915.108799][ T5610] usb 6-1: SerialNumber: syz [ 915.727163][ T5610] usb 6-1: config 0 descriptor?? [ 915.840854][T15167] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.2751'. [ 916.073318][ T5610] ipheth 6-1:0.196: Unable to find endpoints [ 916.120870][ T5610] usb 6-1: USB disconnect, device number 29 [ 917.095247][ T5606] Bluetooth: hci1: command tx timeout [ 917.396233][T15177] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2754'. [ 917.759858][ T346] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.069159][T15186] bond0: entered promiscuous mode [ 918.069184][T15186] bond_slave_0: entered promiscuous mode [ 918.069349][T15186] bond_slave_1: entered promiscuous mode [ 918.069961][T15186] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 918.220059][T15194] serio: Serial port ptm0 [ 918.292417][T15196] serio: Serial port ptm1 [ 919.161829][ T5606] Bluetooth: hci1: command tx timeout [ 920.545916][T15199] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 920.546302][T15199] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 923.018159][ T346] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.855229][T15259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 926.347260][ T346] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.191775][T15274] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2777'. [ 928.024024][T15295] FAULT_INJECTION: forcing a failure. [ 928.024024][T15295] name failslab, interval 1, probability 0, space 0, times 0 [ 928.024058][T15295] CPU: 0 UID: 0 PID: 15295 Comm: syz.5.2783 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 928.024080][T15295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 928.024092][T15295] Call Trace: [ 928.024100][T15295] [ 928.024108][T15295] dump_stack_lvl+0xe8/0x150 [ 928.024142][T15295] should_fail_ex+0x467/0x600 [ 928.024175][T15295] should_failslab+0xa8/0x100 [ 928.024200][T15295] __kmalloc_noprof+0xfe/0x780 [ 928.024222][T15295] ? bm_register_write+0xc8/0x17f0 [ 928.024246][T15295] ? bm_register_write+0xc8/0x17f0 [ 928.024274][T15295] ? __pfx_bm_register_write+0x10/0x10 [ 928.024299][T15295] bm_register_write+0xc8/0x17f0 [ 928.024329][T15295] ? __pfx_bm_register_write+0x10/0x10 [ 928.024353][T15295] vfs_write+0x29f/0xbb0 [ 928.024384][T15295] ? __pfx_vfs_write+0x10/0x10 [ 928.024408][T15295] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 928.024434][T15295] ? lockdep_hardirqs_on+0x7a/0x110 [ 928.024458][T15295] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 928.024481][T15295] ? mutex_lock_nested+0x152/0x1d0 [ 928.024498][T15295] ? fdget_pos+0x252/0x320 [ 928.024526][T15295] ksys_write+0x156/0x270 [ 928.024551][T15295] ? __pfx_ksys_write+0x10/0x10 [ 928.024582][T15295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.024602][T15295] do_syscall_64+0x174/0x580 [ 928.024625][T15295] ? trace_irq_disable+0x3b/0x140 [ 928.024645][T15295] ? clear_bhb_loop+0x40/0x90 [ 928.024667][T15295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.024688][T15295] RIP: 0033:0x7fa1f232e019 [ 928.024707][T15295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.024722][T15295] RSP: 002b:00007fa1f0586028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 928.024742][T15295] RAX: ffffffffffffffda RBX: 00007fa1f25b5fa0 RCX: 00007fa1f232e019 [ 928.024756][T15295] RDX: 000000000000000b RSI: 0000200000000100 RDI: 0000000000000003 [ 928.024768][T15295] RBP: 00007fa1f0586090 R08: 0000000000000000 R09: 0000000000000000 [ 928.024779][T15295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.024791][T15295] R13: 00007fa1f25b6038 R14: 00007fa1f25b5fa0 R15: 00007ffcc408b538 [ 928.024823][T15295] [ 928.425726][T15288] FAULT_INJECTION: forcing a failure. [ 928.425726][T15288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 928.425763][T15288] CPU: 1 UID: 0 PID: 15288 Comm: syz.9.2778 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 928.425786][T15288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 928.425806][T15288] Call Trace: [ 928.425814][T15288] [ 928.425822][T15288] dump_stack_lvl+0xe8/0x150 [ 928.425856][T15288] should_fail_ex+0x467/0x600 [ 928.425891][T15288] _copy_to_user+0x31/0xb0 [ 928.425916][T15288] simple_read_from_buffer+0xe1/0x170 [ 928.425943][T15288] proc_fail_nth_read+0x1be/0x230 [ 928.425969][T15288] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 928.425993][T15288] ? rw_verify_area+0x250/0x4d0 [ 928.426020][T15288] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 928.426040][T15288] vfs_read+0x219/0xa90 [ 928.426070][T15288] ? __pfx_vfs_read+0x10/0x10 [ 928.426095][T15288] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 928.426120][T15288] ? lockdep_hardirqs_on+0x7a/0x110 [ 928.426144][T15288] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 928.426168][T15288] ? mutex_lock_nested+0x152/0x1d0 [ 928.426185][T15288] ? fdget_pos+0x252/0x320 [ 928.426214][T15288] ksys_read+0x156/0x270 [ 928.426239][T15288] ? __pfx_ksys_read+0x10/0x10 [ 928.426270][T15288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.426289][T15288] do_syscall_64+0x174/0x580 [ 928.426311][T15288] ? trace_irq_disable+0x3b/0x140 [ 928.426331][T15288] ? clear_bhb_loop+0x40/0x90 [ 928.426354][T15288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.426373][T15288] RIP: 0033:0x7fd2cdd1e84e [ 928.426392][T15288] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 928.426407][T15288] RSP: 002b:00007fd2cbf73fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 928.426427][T15288] RAX: ffffffffffffffda RBX: 00007fd2cbf746c0 RCX: 00007fd2cdd1e84e [ 928.426442][T15288] RDX: 000000000000000f RSI: 00007fd2cbf740a0 RDI: 0000000000000004 [ 928.426454][T15288] RBP: 00007fd2cbf74090 R08: 0000000000000000 R09: 0000000000000000 [ 928.426466][T15288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.426477][T15288] R13: 00007fd2cdfe6218 R14: 00007fd2cdfe6180 R15: 00007ffdc60bf538 [ 928.426510][T15288] [ 928.740947][ T346] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.988871][T15116] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.989092][T15116] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.989337][T15116] bridge_slave_0: entered allmulticast mode [ 929.004869][T15116] bridge_slave_0: entered promiscuous mode [ 929.017469][T15116] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.017642][T15116] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.017880][T15116] bridge_slave_1: entered allmulticast mode [ 929.044868][T15116] bridge_slave_1: entered promiscuous mode [ 929.544280][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 929.575674][T15315] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2788'. [ 930.303141][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 930.338554][ T9] usb 10-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 930.338602][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.338622][ T9] usb 10-1: Product: syz [ 930.338635][ T9] usb 10-1: Manufacturer: syz [ 930.338649][ T9] usb 10-1: SerialNumber: syz [ 930.386649][ T9] usb 10-1: config 0 descriptor?? [ 930.490868][ T9] ssu100 10-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 930.638361][T15116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.610887][T15116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.617591][ T9] ssu100 10-1:0.0: probe with driver ssu100 failed with error -110 [ 931.632431][T15317] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 931.632466][T15317] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 931.777652][T15116] team0: Port device team_slave_0 added [ 931.789646][T15116] team0: Port device team_slave_1 added [ 931.850557][T15116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.850575][T15116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.850599][T15116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.916691][T15116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.916708][T15116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.916735][T15116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.056050][T15116] hsr_slave_0: entered promiscuous mode [ 932.057178][T15116] hsr_slave_1: entered promiscuous mode [ 932.450642][ T36] kauditd_printk_skb: 146 callbacks suppressed [ 932.450660][ T36] audit: type=1326 audit(1785815791.475:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15302 comm="syz.9.2785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cdd5e019 code=0x7ffc0000 [ 932.475860][T10347] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 932.495395][ T36] audit: type=1326 audit(1785815791.475:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15302 comm="syz.9.2785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cdd5e019 code=0x7ffc0000 [ 932.495506][ T36] audit: type=1326 audit(1785815791.485:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15302 comm="syz.9.2785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cdd5e019 code=0x7ffc0000 [ 932.499929][ T36] audit: type=1326 audit(1785815791.525:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15302 comm="syz.9.2785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cdd5e019 code=0x7ffc0000 [ 932.499962][ T36] audit: type=1326 audit(1785815791.525:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15302 comm="syz.9.2785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd2cdd5e019 code=0x7ffc0000 [ 932.499985][ T36] audit: type=1326 audit(1785815791.525:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15302 comm="syz.9.2785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cdd5e019 code=0x7ffc0000 [ 932.500008][ T36] audit: type=1326 audit(1785815791.525:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15302 comm="syz.9.2785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cdd5e019 code=0x7ffc0000 [ 932.500030][ T36] audit: type=1326 audit(1785815791.525:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15302 comm="syz.9.2785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cdd5e019 code=0x7ffc0000 [ 932.500052][ T36] audit: type=1326 audit(1785815791.525:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15302 comm="syz.9.2785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cdd5e019 code=0x7ffc0000 [ 932.500073][ T36] audit: type=1326 audit(1785815791.525:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15302 comm="syz.9.2785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd2cdd5e019 code=0x7ffc0000 [ 932.661088][T10347] usb 7-1: Using ep0 maxpacket: 16 [ 932.729952][T15339] ./file0: Can't open blockdev [ 932.763972][T10347] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 932.764002][T10347] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.764019][T10347] usb 7-1: Product: syz [ 932.764035][T10347] usb 7-1: Manufacturer: syz [ 932.764049][T10347] usb 7-1: SerialNumber: syz [ 932.812827][T10347] usb 7-1: config 0 descriptor?? [ 932.828665][T10347] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 934.378494][T10347] ssu100 7-1:0.0: probe with driver ssu100 failed with error -71 [ 934.386357][T15352] serio: Serial port ptm1 [ 934.463569][T10347] usb 7-1: USB disconnect, device number 29 [ 934.466191][ T989] usb 10-1: USB disconnect, device number 4 [ 936.561439][T12035] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 936.614637][T15368] ./file0: Can't open blockdev [ 936.725055][T12035] usb 10-1: Using ep0 maxpacket: 8 [ 936.742456][T12035] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 936.746897][T12035] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 936.746927][T12035] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 936.746946][T12035] usb 10-1: Product: syz [ 936.746955][T12035] usb 10-1: Manufacturer: syz [ 936.746963][T12035] usb 10-1: SerialNumber: syz [ 937.099439][T12035] usb 10-1: Invalid connection information received from device [ 937.241818][T15379] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2809'. [ 937.952420][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.952535][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.967070][ T1337] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 938.060992][ T346] bridge_slave_1: left allmulticast mode [ 938.061017][ T346] bridge_slave_1: left promiscuous mode [ 938.061179][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.152105][ T346] bridge_slave_0: left allmulticast mode [ 938.152131][ T346] bridge_slave_0: left promiscuous mode [ 938.152338][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.368158][T15385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.375287][T15385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.401435][ T5606] Bluetooth: hci6: command 0x2016 tx timeout [ 939.453592][T10347] usb 10-1: USB disconnect, device number 5 [ 939.784867][ T5727] hid_parser_main: 13 callbacks suppressed [ 939.784883][ T5727] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 939.784901][ T5727] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 939.784916][ T5727] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 939.784931][ T5727] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 939.784945][ T5727] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 939.784959][ T5727] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 939.784973][ T5727] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 939.784988][ T5727] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 939.785002][ T5727] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 939.785016][ T5727] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 939.939185][ T5727] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 940.123041][ T346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.132219][T12035] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 940.191314][ T346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.214069][ T346] bond0 (unregistering): Released all slaves [ 940.401336][T12035] usb 7-1: config 0 has no interfaces? [ 940.401374][T12035] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 940.401397][T12035] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.493257][T12035] usb 7-1: config 0 descriptor?? [ 940.782030][T15391] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2815'. [ 941.622035][ T5611] Bluetooth: hci6: command 0x2016 tx timeout [ 943.465561][ T43] usb 7-1: USB disconnect, device number 30 [ 943.601257][T12035] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 943.895966][T12035] usb 10-1: Using ep0 maxpacket: 32 [ 943.906071][T12035] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 943.906100][T12035] usb 10-1: config 0 has no interface number 0 [ 943.906140][T12035] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.906165][T12035] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.906200][T12035] usb 10-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 943.906222][T12035] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.923401][T12035] usb 10-1: config 0 descriptor?? [ 944.130207][T15434] openvswitch: netlink: Multiple metadata blocks provided [ 944.236925][ T5737] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 944.390413][ T5737] usb 6-1: Using ep0 maxpacket: 16 [ 944.392855][ T5737] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 944.392882][ T5737] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 944.392901][ T5737] usb 6-1: config 1 has no interface number 0 [ 944.392944][ T5737] usb 6-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 944.392966][ T5737] usb 6-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 944.393003][ T5737] usb 6-1: config 1 interface 105 has no altsetting 0 [ 944.403166][ T5737] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 944.403193][ T5737] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 944.403212][ T5737] usb 6-1: Product: syz [ 944.403225][ T5737] usb 6-1: Manufacturer: syz [ 944.403240][ T5737] usb 6-1: SerialNumber: syz [ 944.647117][ T5737] aqc111 6-1:1.105: probe with driver aqc111 failed with error -22 [ 944.708923][T12035] uclogic 0003:28BD:0094.0013: pen parameters not found [ 944.709022][T12035] uclogic 0003:28BD:0094.0013: interface is invalid, ignoring [ 944.777619][ T5611] Bluetooth: hci0: command 0x0406 tx timeout [ 944.863919][T12035] usb 10-1: USB disconnect, device number 6 [ 945.026330][ T5737] usb 6-1: USB disconnect, device number 30 [ 945.511493][T15440] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 945.513355][ T5259] 8021q: adding VLAN 0 to HW filter on device eth21 [ 946.367384][T15458] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 946.808733][T15478] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2835'. [ 947.002851][T15486] serio: Serial port ptm0 [ 947.029918][T15478] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.667693][T15498] serio: Serial port ptm1 [ 948.882052][T15500] overlayfs: failed to resolve './file0': -2 [ 949.801118][T15507] serio: Serial port ptm0 [ 950.004533][T15511] overlayfs: failed to resolve './file0': -2 [ 950.130309][ T5737] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 950.860139][ T5737] usb 7-1: Using ep0 maxpacket: 32 [ 951.011915][T15515] overlayfs: failed to clone upperpath [ 951.157098][T15517] netlink: 'syz.6.2841': attribute type 10 has an invalid length. [ 951.792903][T15528] FAULT_INJECTION: forcing a failure. [ 951.792903][T15528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.792997][T15528] CPU: 0 UID: 0 PID: 15528 Comm: syz.5.2846 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 951.793020][T15528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 951.793032][T15528] Call Trace: [ 951.793039][T15528] [ 951.793047][T15528] dump_stack_lvl+0xe8/0x150 [ 951.793079][T15528] should_fail_ex+0x467/0x600 [ 951.793115][T15528] _copy_from_user+0x2d/0xb0 [ 951.793139][T15528] __copy_msghdr+0x390/0x590 [ 951.793168][T15528] ___sys_sendmsg+0x213/0x360 [ 951.793189][T15528] ? __lock_acquire+0x683/0x2ce0 [ 951.793214][T15528] ? __pfx____sys_sendmsg+0x10/0x10 [ 951.793241][T15528] ? kstrtouint+0x6e/0xe0 [ 951.793291][T15528] ? __fget_files+0x2a/0x420 [ 951.793311][T15528] ? __fget_files+0x3a8/0x420 [ 951.793339][T15528] __sys_sendmmsg+0x279/0x4d0 [ 951.793367][T15528] ? __pfx___sys_sendmmsg+0x10/0x10 [ 951.793399][T15528] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 951.793431][T15528] ? ksys_write+0x248/0x270 [ 951.793457][T15528] ? __pfx_ksys_write+0x10/0x10 [ 951.793486][T15528] __x64_sys_sendmmsg+0xa0/0xc0 [ 951.793509][T15528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.793529][T15528] do_syscall_64+0x174/0x580 [ 951.793552][T15528] ? trace_irq_disable+0x3b/0x140 [ 951.793571][T15528] ? clear_bhb_loop+0x40/0x90 [ 951.793592][T15528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.793611][T15528] RIP: 0033:0x7fa1f232e019 [ 951.793628][T15528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.793642][T15528] RSP: 002b:00007fa1f0586028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 951.793661][T15528] RAX: ffffffffffffffda RBX: 00007fa1f25b5fa0 RCX: 00007fa1f232e019 [ 951.793675][T15528] RDX: 0000000000000001 RSI: 0000200000004480 RDI: 0000000000000003 [ 951.793708][T15528] RBP: 00007fa1f0586090 R08: 0000000000000000 R09: 0000000000000000 [ 951.793721][T15528] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 951.793732][T15528] R13: 00007fa1f25b6038 R14: 00007fa1f25b5fa0 R15: 00007ffcc408b538 [ 951.793766][T15528] [ 953.957549][T15517] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 954.003307][T15517] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 954.061521][T15517] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 954.065355][T15547] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 954.065388][T15547] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 954.136942][ T5737] usb 7-1: unable to get BOS descriptor or descriptor too short [ 954.154705][ T5737] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 954.154742][ T5737] usb 7-1: can't read configurations, error -71 [ 954.234135][T15551] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 954.311099][ T346] hsr_slave_0: left promiscuous mode [ 954.349907][ T346] hsr_slave_1: left promiscuous mode [ 954.350862][ T346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 954.350887][ T346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.412495][ T346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 954.412522][ T346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.417742][T15559] netlink: 'syz.6.2856': attribute type 1 has an invalid length. [ 954.417758][T15559] netlink: 'syz.6.2856': attribute type 2 has an invalid length. [ 954.419129][T15559] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2856'. [ 954.487100][T15562] FAULT_INJECTION: forcing a failure. [ 954.487100][T15562] name failslab, interval 1, probability 0, space 0, times 0 [ 954.487122][T15562] CPU: 0 UID: 0 PID: 15562 Comm: syz.6.2858 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 954.487135][T15562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 954.487141][T15562] Call Trace: [ 954.487146][T15562] [ 954.487150][T15562] dump_stack_lvl+0xe8/0x150 [ 954.487171][T15562] should_fail_ex+0x467/0x600 [ 954.487190][T15562] should_failslab+0xa8/0x100 [ 954.487205][T15562] kmem_cache_alloc_node_noprof+0xae/0x670 [ 954.487217][T15562] ? __alloc_skb+0x1d7/0x7a0 [ 954.487230][T15562] ? __alloc_skb+0x1d7/0x7a0 [ 954.487243][T15562] __alloc_skb+0x1d7/0x7a0 [ 954.487257][T15562] do_mq_notify+0x16f/0xf00 [ 954.487314][T15562] ? __pfx_do_mq_notify+0x10/0x10 [ 954.487330][T15562] __x64_sys_mq_notify+0x134/0x190 [ 954.487341][T15562] ? fput+0xa0/0xd0 [ 954.487352][T15562] ? __pfx___x64_sys_mq_notify+0x10/0x10 [ 954.487361][T15562] ? ksys_write+0x248/0x270 [ 954.487380][T15562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.487394][T15562] do_syscall_64+0x174/0x580 [ 954.487410][T15562] ? trace_irq_disable+0x3b/0x140 [ 954.487421][T15562] ? clear_bhb_loop+0x40/0x90 [ 954.487433][T15562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.487443][T15562] RIP: 0033:0x7effde9ee019 [ 954.487454][T15562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.487463][T15562] RSP: 002b:00007effdcc46028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f4 [ 954.487475][T15562] RAX: ffffffffffffffda RBX: 00007effdec75fa0 RCX: 00007effde9ee019 [ 954.487483][T15562] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffffff [ 954.487490][T15562] RBP: 00007effdcc46090 R08: 0000000000000000 R09: 0000000000000000 [ 954.487496][T15562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.487502][T15562] R13: 00007effdec76038 R14: 00007effdec75fa0 R15: 00007ffc749594c8 [ 954.487518][T15562] [ 954.609825][ T989] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 954.797920][ T989] usb 6-1: Using ep0 maxpacket: 16 [ 954.807755][ T989] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 954.807784][ T989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.807803][ T989] usb 6-1: Product: syz [ 954.807816][ T989] usb 6-1: Manufacturer: syz [ 954.807829][ T989] usb 6-1: SerialNumber: syz [ 954.844285][ T989] usb 6-1: config 0 descriptor?? [ 954.849436][ T989] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 954.883991][ T346] veth1_macvtap: left promiscuous mode [ 954.884104][ T346] veth0_macvtap: left promiscuous mode [ 954.905156][ T346] veth1_vlan: left promiscuous mode [ 954.905361][ T346] veth0_vlan: left promiscuous mode [ 955.810054][ T989] ssu100 6-1:0.0: probe with driver ssu100 failed with error -110 [ 955.815995][ T36] kauditd_printk_skb: 286 callbacks suppressed [ 955.816014][ T36] audit: type=1326 audit(1785815814.846:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15552 comm="syz.5.2854" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f232e019 code=0x7ffc0000 [ 955.816153][ T36] audit: type=1326 audit(1785815814.846:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15552 comm="syz.5.2854" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f232e019 code=0x7ffc0000 [ 955.816192][ T36] audit: type=1326 audit(1785815814.846:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15552 comm="syz.5.2854" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f232e019 code=0x7ffc0000 [ 955.816231][ T36] audit: type=1326 audit(1785815814.846:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15552 comm="syz.5.2854" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa1f232e019 code=0x7ffc0000 [ 955.816268][ T36] audit: type=1326 audit(1785815814.846:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15552 comm="syz.5.2854" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f232e019 code=0x7ffc0000 [ 955.816315][ T36] audit: type=1326 audit(1785815814.846:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15552 comm="syz.5.2854" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f232e019 code=0x7ffc0000 [ 955.819462][ T36] audit: type=1326 audit(1785815814.846:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15552 comm="syz.5.2854" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f232e019 code=0x7ffc0000 [ 955.819586][ T36] audit: type=1326 audit(1785815814.846:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15552 comm="syz.5.2854" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa1f232e019 code=0x7ffc0000 [ 955.859964][ T36] audit: type=1326 audit(1785815814.856:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15552 comm="syz.5.2854" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f232e019 code=0x7ffc0000 [ 955.860008][ T36] audit: type=1326 audit(1785815814.856:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15552 comm="syz.5.2854" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f232e019 code=0x7ffc0000 [ 956.450544][ T346] team0 (unregistering): Port device team_slave_1 removed [ 956.510314][ T346] team0 (unregistering): Port device team_slave_0 removed [ 956.916684][T15557] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 957.130782][ T6148] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 957.492105][T15587] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 957.492161][T15587] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 958.498620][ T989] usb 6-1: USB disconnect, device number 31 [ 959.653810][T15621] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2872'. [ 960.994071][T15633] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2875'. [ 961.964416][ T5611] Bluetooth: hci6: command 0x2016 tx timeout [ 962.097248][T15116] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 962.142620][T15116] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 962.144100][T15116] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 962.149041][T15644] ./file0: Can't open blockdev [ 962.213059][T15116] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 962.214481][T15116] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 962.501470][T15651] serio: Serial port ptm0 [ 962.566456][T15116] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 962.579621][T15116] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 962.787949][T15654] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 962.787982][T15654] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 962.966539][T15116] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 963.852289][T15116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.941812][T15116] 8021q: adding VLAN 0 to HW filter on device team0 [ 963.995481][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.004571][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.040134][ T5606] Bluetooth: hci6: command 0x2016 tx timeout [ 964.077433][T15679] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 964.077489][T15679] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 964.222604][ T3962] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.222730][ T3962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.841650][T15696] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2888'. [ 965.526721][T15699] ./file0: Can't open blockdev [ 965.587056][T15702] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 965.587112][T15702] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 967.105169][T15719] serio: Serial port ptm0 [ 968.017217][ T5610] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 968.036590][T15721] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 968.037296][T15721] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 968.496770][ T5610] usb 7-1: config 1 has an invalid interface number: 36 but max is 0 [ 968.496841][ T5610] usb 7-1: config 1 has no interface number 0 [ 968.496939][ T5610] usb 7-1: config 1 interface 36 altsetting 129 bulk endpoint 0x8 has invalid maxpacket 8 [ 968.497002][ T5610] usb 7-1: config 1 interface 36 has no altsetting 0 [ 968.552681][ T5610] usb 7-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=cc.2f [ 968.552709][ T5610] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.552720][ T5610] usb 7-1: Product: syz [ 968.552727][ T5610] usb 7-1: Manufacturer: syz [ 968.552735][ T5610] usb 7-1: SerialNumber: syz [ 968.567917][T15720] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 968.712469][T15116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 968.840497][ T5610] redrat3 7-1:1.36: Couldn't find all endpoints [ 968.852251][ T5610] usb 7-1: USB disconnect, device number 33 [ 969.584056][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 969.623118][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 969.655072][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 969.670340][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 969.693079][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 969.929742][T15745] overlayfs: failed to clone upperpath [ 970.078601][T15747] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2901'. [ 971.184035][T15754] serio: Serial port ptm0 [ 971.438504][T15749] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2902'. [ 971.447123][T15759] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 971.447522][T15759] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 973.610823][ T5606] Bluetooth: hci2: command tx timeout [ 973.746481][T15776] netlink: 'syz.8.2907': attribute type 3 has an invalid length. [ 973.746503][T15776] netlink: 666 bytes leftover after parsing attributes in process `syz.8.2907'. [ 974.148801][T10347] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 974.315697][T10347] usb 7-1: config 1 has an invalid interface number: 36 but max is 0 [ 974.315727][T10347] usb 7-1: config 1 has no interface number 0 [ 974.315769][T10347] usb 7-1: config 1 interface 36 altsetting 129 bulk endpoint 0x8 has invalid maxpacket 8 [ 974.315796][T10347] usb 7-1: config 1 interface 36 has no altsetting 0 [ 974.323246][T10347] usb 7-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=cc.2f [ 974.323287][T10347] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.323306][T10347] usb 7-1: Product: syz [ 974.323319][T10347] usb 7-1: Manufacturer: syz [ 974.323332][T10347] usb 7-1: SerialNumber: syz [ 974.389854][T15786] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 974.713600][T10347] redrat3 7-1:1.36: Couldn't find all endpoints [ 974.741571][T10347] usb 7-1: USB disconnect, device number 34 [ 975.652601][ T5606] Bluetooth: hci2: command tx timeout [ 976.166022][T15801] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 976.234648][ T5610] IPVS: starting estimator thread 0... [ 976.328664][T15810] IPVS: using max 11 ests per chain, 26400 per kthread [ 976.639642][T10347] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 977.340221][T10347] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 977.340255][T10347] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.340275][T10347] usb 10-1: Product: syz [ 977.340290][T10347] usb 10-1: Manufacturer: syz [ 977.340305][T10347] usb 10-1: SerialNumber: syz [ 977.714017][T15826] serio: Serial port ptm0 [ 977.718734][ T5606] Bluetooth: hci2: command tx timeout [ 977.747668][T10347] rtl8150 10-1:1.0: couldn't reset the device [ 977.748013][T10347] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 977.790260][T10347] usb 10-1: USB disconnect, device number 7 [ 977.973182][T15827] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 977.973215][T15827] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 979.624343][T15835] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 979.624381][T15835] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 979.661024][T15838] serio: Serial port ptm0 [ 979.798447][ T5606] Bluetooth: hci2: command tx timeout [ 979.984364][T15843] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 979.984426][T15843] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 984.807544][T15866] overlayfs: failed to clone upperpath [ 985.812242][T15875] ./file0: Can't open blockdev [ 985.982205][T15880] serio: Serial port ptm0 [ 987.121028][T15890] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 987.121069][T15890] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 988.016653][T15741] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.016781][T15741] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.017024][T15741] bridge_slave_0: entered allmulticast mode [ 988.046685][T15741] bridge_slave_0: entered promiscuous mode [ 988.094669][T15741] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.094791][T15741] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.095119][T15741] bridge_slave_1: entered allmulticast mode [ 988.219016][T15741] bridge_slave_1: entered promiscuous mode [ 989.435403][T15916] ./file0: Can't open blockdev [ 989.504788][T15741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 989.542965][T15741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.840582][T15929] serio: Serial port ptm0 [ 989.861910][T15932] FAULT_INJECTION: forcing a failure. [ 989.861910][T15932] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 989.861939][T15932] CPU: 0 UID: 0 PID: 15932 Comm: syz.6.2947 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 989.861956][T15932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 989.861965][T15932] Call Trace: [ 989.861971][T15932] [ 989.861977][T15932] dump_stack_lvl+0xe8/0x150 [ 989.862006][T15932] should_fail_ex+0x467/0x600 [ 989.862034][T15932] prepare_alloc_pages+0x223/0x690 [ 989.862058][T15932] __alloc_frozen_pages_noprof+0x12f/0x380 [ 989.862076][T15932] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 989.862095][T15932] ? __pfx_policy_nodemask+0x10/0x10 [ 989.862115][T15932] ? smack_privileged_cred+0xb6/0x380 [ 989.862139][T15932] alloc_pages_mpol+0xce/0x280 [ 989.862157][T15932] ___kmalloc_large_node+0x4c/0x120 [ 989.862172][T15932] ? user_preparse+0x9e/0x160 [ 989.862193][T15932] __kmalloc_large_node_noprof+0x18/0x90 [ 989.862207][T15932] ? user_preparse+0x9e/0x160 [ 989.862224][T15932] __kmalloc_noprof+0x4bd/0x780 [ 989.862237][T15932] ? down_read+0x156/0x200 [ 989.862257][T15932] ? user_preparse+0x9e/0x160 [ 989.862278][T15932] user_preparse+0x9e/0x160 [ 989.862298][T15932] __key_create_or_update+0x3a9/0xa80 [ 989.862323][T15932] ? __pfx___key_create_or_update+0x10/0x10 [ 989.862343][T15932] ? lookup_user_key+0xb68/0x1150 [ 989.862366][T15932] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 989.862388][T15932] key_create_or_update+0x42/0x60 [ 989.862408][T15932] __se_sys_add_key+0x349/0x420 [ 989.862424][T15932] ? __pfx___se_sys_add_key+0x10/0x10 [ 989.862444][T15932] ? __x64_sys_add_key+0x20/0xc0 [ 989.862455][T15932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.862471][T15932] do_syscall_64+0x174/0x580 [ 989.862506][T15932] ? trace_irq_disable+0x3b/0x140 [ 989.862521][T15932] ? clear_bhb_loop+0x40/0x90 [ 989.862538][T15932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.862554][T15932] RIP: 0033:0x7effde9ee019 [ 989.862568][T15932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.862585][T15932] RSP: 002b:00007effdcc46028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 989.862600][T15932] RAX: ffffffffffffffda RBX: 00007effdec75fa0 RCX: 00007effde9ee019 [ 989.862610][T15932] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000200000000040 [ 989.862618][T15932] RBP: 00007effdcc46090 R08: ffffffffffffffff R09: 0000000000000000 [ 989.862627][T15932] R10: 00000000000052ba R11: 0000000000000246 R12: 0000000000000001 [ 989.862635][T15932] R13: 00007effdec76038 R14: 00007effdec75fa0 R15: 00007ffc749594c8 [ 989.862657][T15932] [ 989.928118][T15741] team0: Port device team_slave_0 added [ 991.536735][T15741] team0: Port device team_slave_1 added [ 991.660708][T15945] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 991.660741][T15945] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 992.644426][T15741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.644445][T15741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.644468][T15741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.653092][T15741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.653108][T15741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.653135][T15741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 993.198675][T15741] hsr_slave_0: entered promiscuous mode [ 993.207308][T15741] hsr_slave_1: entered promiscuous mode [ 993.224085][T15741] debugfs: 'hsr0' already exists in 'hsr' [ 993.224115][T15741] Cannot create hsr debugfs directory [ 993.920001][T15970] FAULT_INJECTION: forcing a failure. [ 993.920001][T15970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 993.920034][T15970] CPU: 1 UID: 0 PID: 15970 Comm: syz.5.2951 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 993.920056][T15970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 993.920068][T15970] Call Trace: [ 993.920075][T15970] [ 993.920083][T15970] dump_stack_lvl+0xe8/0x150 [ 993.920117][T15970] should_fail_ex+0x467/0x600 [ 993.920151][T15970] _copy_from_user+0x2d/0xb0 [ 993.920175][T15970] kstrtouint_from_user+0xd6/0x180 [ 993.920196][T15970] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 993.920213][T15970] ? __lock_acquire+0x683/0x2ce0 [ 993.920251][T15970] proc_fail_nth_write+0x8e/0x210 [ 993.920274][T15970] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 993.920303][T15970] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 993.920322][T15970] vfs_write+0x29f/0xbb0 [ 993.920355][T15970] ? __pfx_vfs_write+0x10/0x10 [ 993.920380][T15970] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 993.920405][T15970] ? lockdep_hardirqs_on+0x7a/0x110 [ 993.920437][T15970] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 993.920460][T15970] ? mutex_lock_nested+0x152/0x1d0 [ 993.920478][T15970] ? fdget_pos+0x252/0x320 [ 993.920506][T15970] ksys_write+0x156/0x270 [ 993.920532][T15970] ? __pfx_ksys_write+0x10/0x10 [ 993.920563][T15970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.920584][T15970] do_syscall_64+0x174/0x580 [ 993.920607][T15970] ? trace_irq_disable+0x3b/0x140 [ 993.920626][T15970] ? clear_bhb_loop+0x40/0x90 [ 993.920649][T15970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.920667][T15970] RIP: 0033:0x7fa1f22ee84e [ 993.920691][T15970] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 993.920706][T15970] RSP: 002b:00007fa1f0543fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 993.920726][T15970] RAX: ffffffffffffffda RBX: 00007fa1f05446c0 RCX: 00007fa1f22ee84e [ 993.920740][T15970] RDX: 0000000000000001 RSI: 00007fa1f05440a0 RDI: 0000000000000005 [ 993.920752][T15970] RBP: 00007fa1f0544090 R08: 0000000000000000 R09: 0000000000000000 [ 993.920764][T15970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.920775][T15970] R13: 00007fa1f25b6218 R14: 00007fa1f25b6180 R15: 00007ffcc408b538 [ 993.920807][T15970] [ 994.268395][ T3317] bridge_slave_1: left allmulticast mode [ 994.268433][ T3317] bridge_slave_1: left promiscuous mode [ 994.268690][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.445794][ T3317] bridge_slave_0: left allmulticast mode [ 994.445826][ T3317] bridge_slave_0: left promiscuous mode [ 994.446090][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.476972][ T5749] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 994.628338][ T5749] usb 7-1: Using ep0 maxpacket: 16 [ 994.629228][ T5749] usb 7-1: too many configurations: 112, using maximum allowed: 8 [ 994.630749][ T5749] usb 7-1: config 0 has no interfaces? [ 994.632009][ T5749] usb 7-1: config 0 has no interfaces? [ 994.633648][ T5749] usb 7-1: config 0 has no interfaces? [ 994.635067][ T5749] usb 7-1: config 0 has no interfaces? [ 994.636401][ T5749] usb 7-1: config 0 has no interfaces? [ 994.696200][ T5749] usb 7-1: config 0 has no interfaces? [ 994.697630][ T5749] usb 7-1: config 0 has no interfaces? [ 994.708995][ T5749] usb 7-1: config 0 has no interfaces? [ 994.722947][ T5749] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 994.722973][ T5749] usb 7-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 994.722990][ T5749] usb 7-1: Product: syz [ 994.723001][ T5749] usb 7-1: Manufacturer: syz [ 994.782130][ T5749] r8152-cfgselector 7-1: Unknown version 0x0000 [ 994.782159][ T5749] r8152-cfgselector 7-1: config 0 descriptor?? [ 995.950575][T12035] r8152-cfgselector 7-1: USB disconnect, device number 35 [ 997.751690][T16013] process '/newroot/601/file0' started with executable stack [ 998.091253][ T3317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 998.148301][ T3317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 998.170830][ T3317] bond0 (unregistering): Released all slaves [ 998.424939][ T5259] 8021q: adding VLAN 0 to HW filter on device eth21 [ 998.924856][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.924925][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.925587][ T1337] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 999.407357][ T3317] hsr_slave_0: left promiscuous mode [ 999.599027][ T3317] hsr_slave_1: left promiscuous mode [ 999.600083][ T3317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1000.499876][ T3317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.017439][T16058] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2972'. [ 1002.307838][ T3317] team0 (unregistering): Port device team_slave_1 removed [ 1002.369675][ T3317] team0 (unregistering): Port device team_slave_0 removed [ 1002.625783][ T5259] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1005.521372][T16103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1006.675622][T16125] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2990'. [ 1007.082223][ T5259] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1012.240018][T16157] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1013.146569][ T989] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1013.204972][T16182] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3003'. [ 1014.138711][ T989] usb 10-1: Using ep0 maxpacket: 32 [ 1014.143378][ T989] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1014.143473][ T989] usb 10-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1014.143498][ T989] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1014.154980][ T989] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1014.155010][ T989] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.155029][ T989] usb 10-1: Product: syz [ 1014.155043][ T989] usb 10-1: Manufacturer: syz [ 1014.155055][ T989] usb 10-1: SerialNumber: syz [ 1014.190094][ T989] usb 10-1: config 0 descriptor?? [ 1014.862415][ T989] gs_usb 10-1:0.0: Configuring for 1 interfaces [ 1015.709766][T16176] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3002'. [ 1015.718893][ T989] gs_usb 10-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1015.825906][ T989] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -22 [ 1017.774860][T16199] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3005'. [ 1018.352794][ T989] usb 10-1: USB disconnect, device number 8 [ 1019.153269][T16203] 9p: Bad value for 'wfdno' [ 1021.400512][T15741] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1021.674604][T15741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1021.698554][T15741] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1022.631314][ T6148] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1022.827289][T15741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1022.873862][T15741] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1023.782931][T15741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1023.784368][T15741] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1023.882943][T16244] netlink: 'syz.8.3012': attribute type 2 has an invalid length. [ 1023.882963][T16244] netlink: 'syz.8.3012': attribute type 5 has an invalid length. [ 1023.935213][T16245] FAULT_INJECTION: forcing a failure. [ 1023.935213][T16245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1023.935246][T16245] CPU: 0 UID: 0 PID: 16245 Comm: syz.9.3014 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1023.935270][T16245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1023.935282][T16245] Call Trace: [ 1023.935289][T16245] [ 1023.935296][T16245] dump_stack_lvl+0xe8/0x150 [ 1023.935328][T16245] should_fail_ex+0x467/0x600 [ 1023.935360][T16245] _copy_from_user+0x2d/0xb0 [ 1023.935379][T16245] io_register_bpf_filter+0x100/0x1210 [ 1023.935404][T16245] ? __pfx_io_register_bpf_filter+0x10/0x10 [ 1023.935432][T16245] ? __kasan_kmalloc+0x93/0xb0 [ 1023.935453][T16245] ? __kmalloc_cache_noprof+0x3d2/0x6b0 [ 1023.935473][T16245] ? __se_sys_io_uring_register+0xa93/0x1a20 [ 1023.935492][T16245] ? __se_sys_io_uring_register+0xa93/0x1a20 [ 1023.935518][T16245] __se_sys_io_uring_register+0xab1/0x1a20 [ 1023.935544][T16245] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 1023.935566][T16245] ? ksys_write+0x248/0x270 [ 1023.935592][T16245] ? __pfx_ksys_write+0x10/0x10 [ 1023.935621][T16245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.935648][T16245] do_syscall_64+0x174/0x580 [ 1023.935671][T16245] ? trace_irq_disable+0x3b/0x140 [ 1023.935691][T16245] ? clear_bhb_loop+0x40/0x90 [ 1023.935713][T16245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.935730][T16245] RIP: 0033:0x7fd2cdd5e019 [ 1023.935747][T16245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.935762][T16245] RSP: 002b:00007fd2cbfb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1023.935781][T16245] RAX: ffffffffffffffda RBX: 00007fd2cdfe5fa0 RCX: 00007fd2cdd5e019 [ 1023.935793][T16245] RDX: 00002000000000c0 RSI: 0000000000000025 RDI: ffffffffffffffff [ 1023.935804][T16245] RBP: 00007fd2cbfb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.935815][T16245] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1023.935824][T16245] R13: 00007fd2cdfe6038 R14: 00007fd2cdfe5fa0 R15: 00007ffdc60bf538 [ 1023.935851][T16245] [ 1024.201667][T15741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1024.708491][T15741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.842634][T15741] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.869551][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.871842][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.011692][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.011819][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.690352][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1025.742726][ T5611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1025.744385][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1025.745389][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1025.784295][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1026.050180][T16281] 9p: Bad value for 'wfdno' [ 1027.082480][T16301] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1027.082770][T16301] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1027.691026][T16148] Set syz1 is full, maxelem 65536 reached [ 1028.054908][ T5606] Bluetooth: hci1: command tx timeout [ 1028.862633][T15741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.120702][ T5606] Bluetooth: hci1: command tx timeout [ 1030.288646][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1030.383741][ T5611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1030.391718][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1030.393680][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1030.399057][ T5611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1030.720708][T16375] bond0: entered promiscuous mode [ 1030.720733][T16375] bond_slave_0: entered promiscuous mode [ 1030.720898][T16375] bond_slave_1: entered promiscuous mode [ 1030.721036][T16375] vxlan0: entered promiscuous mode [ 1030.771349][T16375] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1030.899517][T16381] 9p: Bad value for 'wfdno' [ 1031.107646][T16388] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1032.198091][ T5611] Bluetooth: hci1: command tx timeout [ 1032.406616][T14632] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.606986][ T5611] Bluetooth: hci3: command tx timeout [ 1033.217081][T16413] hsr_slave_0: left promiscuous mode [ 1033.247833][T16413] hsr_slave_1: left promiscuous mode [ 1033.873253][T14632] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.012799][T16421] bond0: entered promiscuous mode [ 1034.012822][T16421] bond_slave_0: entered promiscuous mode [ 1034.013023][T16421] bond_slave_1: entered promiscuous mode [ 1034.064980][T16421] gretap0: entered promiscuous mode [ 1034.097345][T16421] dummy0: entered promiscuous mode [ 1034.128963][T16277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.129052][T16277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.129216][T16277] bridge_slave_0: entered allmulticast mode [ 1034.135737][T16277] bridge_slave_0: entered promiscuous mode [ 1034.278605][ T5611] Bluetooth: hci1: command tx timeout [ 1034.347754][T16277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.347992][T16277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.348294][T16277] bridge_slave_1: entered allmulticast mode [ 1034.352668][T16277] bridge_slave_1: entered promiscuous mode [ 1034.640482][ T5611] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1034.677876][ T5611] Bluetooth: hci3: command tx timeout [ 1034.937859][ T36] kauditd_printk_skb: 480 callbacks suppressed [ 1034.937877][ T36] audit: type=1326 audit(1785815893.981:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16433 comm="syz.8.3041" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b46ee019 code=0x7ffc0000 [ 1034.939291][ T36] audit: type=1326 audit(1785815893.981:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16433 comm="syz.8.3041" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b46ee019 code=0x7ffc0000 [ 1034.939339][ T36] audit: type=1326 audit(1785815893.981:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16433 comm="syz.8.3041" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b46ee019 code=0x7ffc0000 [ 1034.941389][ T36] audit: type=1326 audit(1785815893.981:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16433 comm="syz.8.3041" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87b46ee019 code=0x7ffc0000 [ 1034.941439][ T36] audit: type=1326 audit(1785815893.981:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16433 comm="syz.8.3041" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b46ee019 code=0x7ffc0000 [ 1034.941480][ T36] audit: type=1326 audit(1785815893.981:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16433 comm="syz.8.3041" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b46ee019 code=0x7ffc0000 [ 1034.941772][ T36] audit: type=1326 audit(1785815893.981:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16433 comm="syz.8.3041" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b46ee019 code=0x7ffc0000 [ 1034.943769][ T36] audit: type=1326 audit(1785815893.981:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16433 comm="syz.8.3041" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b46ee019 code=0x7ffc0000 [ 1034.943816][ T36] audit: type=1326 audit(1785815893.981:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16433 comm="syz.8.3041" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f87b46ee019 code=0x7ffc0000 [ 1034.944138][ T36] audit: type=1326 audit(1785815893.981:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16433 comm="syz.8.3041" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b46ee019 code=0x7ffc0000 [ 1035.014221][T14632] bond0: (slave netdevsim1): Releasing backup interface [ 1035.242172][T14632] netdevsim netdevsim6 netdevsim1 (unregistering): left promiscuous mode [ 1035.294143][T14632] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.472123][T16277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1035.555816][T16277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1035.781495][T16438] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 1036.081938][T14632] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.151328][T16277] team0: Port device team_slave_0 added [ 1036.186101][T16277] team0: Port device team_slave_1 added [ 1036.292871][T16277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1036.292886][T16277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1036.292905][T16277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1036.357212][T16277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1036.357227][T16277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1036.357258][T16277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1036.767808][ T5611] Bluetooth: hci3: command tx timeout [ 1037.002263][T16277] hsr_slave_0: entered promiscuous mode [ 1037.024603][T16277] hsr_slave_1: entered promiscuous mode [ 1037.041539][T16277] debugfs: 'hsr0' already exists in 'hsr' [ 1037.041568][T16277] Cannot create hsr debugfs directory [ 1037.284342][T16462] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 1038.371293][T16371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.371386][T16371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.371634][T16371] bridge_slave_0: entered allmulticast mode [ 1038.380935][T16371] bridge_slave_0: entered promiscuous mode [ 1038.527395][T16371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.527496][T16371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.527725][T16371] bridge_slave_1: entered allmulticast mode [ 1038.530267][T16371] bridge_slave_1: entered promiscuous mode [ 1038.882562][ T5611] Bluetooth: hci3: command tx timeout [ 1039.458208][T16371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.463497][T16371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.357091][T14632] bridge_slave_1: left allmulticast mode [ 1041.357128][T14632] bridge_slave_1: left promiscuous mode [ 1041.357439][T14632] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.666984][ T10] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1041.844413][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1041.844455][ T10] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1041.844477][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.882193][ T10] usb 6-1: config 0 descriptor?? [ 1042.335535][ T10] hid_parser_main: 22 callbacks suppressed [ 1042.335562][ T10] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x5 [ 1042.335591][ T10] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x6 [ 1042.335615][ T10] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x0 [ 1042.335650][ T10] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x0 [ 1042.335674][ T10] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x0 [ 1042.335699][ T10] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x0 [ 1042.335725][ T10] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x0 [ 1042.335750][ T10] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x0 [ 1042.335776][ T10] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x0 [ 1042.335801][ T10] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x0 [ 1042.718084][ T10] hid-led 0003:0FC5:B080.0014: probe with driver hid-led failed with error -32 [ 1044.005676][T14632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1044.030667][T14632] bond_slave_0: left promiscuous mode [ 1044.067022][T14632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1044.086379][T14632] bond_slave_1: left promiscuous mode [ 1044.091972][T14632] bond0 (unregistering): Released all slaves [ 1044.259184][T16371] team0: Port device team_slave_0 added [ 1044.271812][T16371] team0: Port device team_slave_1 added [ 1044.468799][ T5737] usb 6-1: USB disconnect, device number 32 [ 1045.097072][ T5737] IPVS: starting estimator thread 0... [ 1045.185569][T16513] IPVS: using max 15 ests per chain, 36000 per kthread [ 1046.453542][T16523] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 1, id = 0 [ 1046.653081][T16527] FAULT_INJECTION: forcing a failure. [ 1046.653081][T16527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1046.653115][T16527] CPU: 0 UID: 0 PID: 16527 Comm: syz.5.3066 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1046.653137][T16527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1046.653148][T16527] Call Trace: [ 1046.653155][T16527] [ 1046.653163][T16527] dump_stack_lvl+0xe8/0x150 [ 1046.653197][T16527] should_fail_ex+0x467/0x600 [ 1046.653231][T16527] _copy_from_user+0x2d/0xb0 [ 1046.653254][T16527] __sys_bpf+0x2e7/0xd90 [ 1046.653283][T16527] ? __pfx___sys_bpf+0x10/0x10 [ 1046.653305][T16527] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1046.653335][T16527] ? rt_mutex_slowunlock+0x219/0x460 [ 1046.653373][T16527] ? ksys_write+0x248/0x270 [ 1046.653399][T16527] ? __pfx_ksys_write+0x10/0x10 [ 1046.653426][T16527] __x64_sys_bpf+0xba/0xd0 [ 1046.653454][T16527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.653475][T16527] do_syscall_64+0x174/0x580 [ 1046.653498][T16527] ? trace_irq_disable+0x3b/0x140 [ 1046.653517][T16527] ? clear_bhb_loop+0x40/0x90 [ 1046.653540][T16527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.653558][T16527] RIP: 0033:0x7fa1f232e019 [ 1046.653576][T16527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1046.653591][T16527] RSP: 002b:00007fa1f0586028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1046.653611][T16527] RAX: ffffffffffffffda RBX: 00007fa1f25b5fa0 RCX: 00007fa1f232e019 [ 1046.653626][T16527] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 1046.653638][T16527] RBP: 00007fa1f0586090 R08: 0000000000000000 R09: 0000000000000000 [ 1046.653650][T16527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1046.653661][T16527] R13: 00007fa1f25b6038 R14: 00007fa1f25b5fa0 R15: 00007ffcc408b538 [ 1046.653692][T16527] [ 1047.344009][T16371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1047.344027][T16371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.344193][T16371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1047.443982][T16371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.443998][T16371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.444020][T16371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.837821][T16549] serio: Serial port ptm0 [ 1048.857198][T16545] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1049.532685][T16552] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1049.532718][T16552] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1050.544879][T14632] hsr_slave_0: left promiscuous mode [ 1050.585393][T14632] hsr_slave_1: left promiscuous mode [ 1050.586555][T14632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1050.586580][T14632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.645775][T14632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1050.645795][T14632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1050.748899][T14632] veth1_macvtap: left promiscuous mode [ 1050.748979][T14632] veth0_macvtap: left promiscuous mode [ 1050.749182][T14632] veth1_vlan: left promiscuous mode [ 1050.749292][T14632] veth0_vlan: left promiscuous mode [ 1051.945996][T14632] team0 (unregistering): Port device team_slave_1 removed [ 1052.016777][T14632] team0 (unregistering): Port device team_slave_0 removed [ 1052.223889][T16371] hsr_slave_0: entered promiscuous mode [ 1052.225810][T16371] hsr_slave_1: entered promiscuous mode [ 1052.226749][T16371] debugfs: 'hsr0' already exists in 'hsr' [ 1052.226777][T16371] Cannot create hsr debugfs directory [ 1052.273456][T16565] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1053.703687][T16584] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1054.203135][T16594] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1054.203191][T16594] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1055.303211][ T5259] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1055.894690][T16277] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1055.995352][T16277] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1056.002207][T16277] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1056.051937][T16277] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1056.073642][T16277] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1056.116668][T16277] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1056.287513][T16630] serio: Serial port ptm0 [ 1056.553027][T16635] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1056.553492][T16635] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1057.968433][T16277] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1058.111230][T16277] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1058.138632][ T5259] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1059.340122][T16277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1059.534746][T16277] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.360484][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.360549][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.361229][ T1337] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1060.710776][T16710] netlink: 'syz.5.3107': attribute type 10 has an invalid length. [ 1060.991058][ T5259] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1061.005731][T16710] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.006964][T16710] bridge0: port 2(bridge_slave_1) entered listening state [ 1061.055709][T16710] bridge0: entered promiscuous mode [ 1061.057692][T16710] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1061.080621][ T7109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.080749][ T7109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.179078][ T1030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.188279][ T1030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.227124][T16277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1062.683799][T10347] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1062.825875][T10347] usb 6-1: config 1 has an invalid interface number: 36 but max is 0 [ 1062.825903][T10347] usb 6-1: config 1 has no interface number 0 [ 1062.825949][T10347] usb 6-1: config 1 interface 36 altsetting 129 bulk endpoint 0x8 has invalid maxpacket 8 [ 1062.825977][T10347] usb 6-1: config 1 interface 36 has no altsetting 0 [ 1062.828970][T10347] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=cc.2f [ 1062.829001][T10347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.829023][T10347] usb 6-1: Product: syz [ 1062.829038][T10347] usb 6-1: Manufacturer: syz [ 1062.829052][T10347] usb 6-1: SerialNumber: syz [ 1062.911511][T16731] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1063.069899][T14632] bridge_slave_1: left allmulticast mode [ 1063.069936][T14632] bridge_slave_1: left promiscuous mode [ 1063.070187][T14632] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.156750][T10347] redrat3 6-1:1.36: Couldn't find all endpoints [ 1063.176704][T10347] usb 6-1: USB disconnect, device number 33 [ 1063.295465][T14632] bridge_slave_0: left allmulticast mode [ 1063.295502][T14632] bridge_slave_0: left promiscuous mode [ 1063.295781][T14632] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.807434][ T5749] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1064.963638][ T5749] usb 6-1: Using ep0 maxpacket: 16 [ 1064.968231][ T5749] usb 6-1: config 166 has an invalid interface number: 177 but max is 1 [ 1064.968259][ T5749] usb 6-1: config 166 has an invalid interface number: 34 but max is 1 [ 1064.968272][ T5749] usb 6-1: config 166 has no interface number 0 [ 1064.968281][ T5749] usb 6-1: config 166 has no interface number 1 [ 1064.968313][ T5749] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1064.968325][ T5749] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1064.968346][ T5749] usb 6-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1064.968359][ T5749] usb 6-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1064.968375][ T5749] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1064.968389][ T5749] usb 6-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1064.968401][ T5749] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1064.968415][ T5749] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1064.968426][ T5749] usb 6-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1064.968440][ T5749] usb 6-1: config 166 interface 177 has no altsetting 0 [ 1064.968450][ T5749] usb 6-1: config 166 interface 34 has no altsetting 0 [ 1064.971587][ T5749] usb 6-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1064.971618][ T5749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.971637][ T5749] usb 6-1: Product: syz [ 1064.971651][ T5749] usb 6-1: Manufacturer: syz [ 1064.971665][ T5749] usb 6-1: SerialNumber: syz [ 1065.206108][ T5749] ums-realtek 6-1:166.177: USB Mass Storage device detected [ 1065.218418][T14632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1065.304424][T14632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1065.382365][T14632] bond0 (unregistering): Released all slaves [ 1065.410921][ T5749] ums-realtek 6-1:166.34: USB Mass Storage device detected [ 1065.602137][ T5259] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1065.705809][T16769] syzkaller0: entered promiscuous mode [ 1065.705837][T16769] syzkaller0: entered allmulticast mode [ 1065.826221][ T5749] ums-realtek 6-1:166.34: probe with driver ums-realtek failed with error -5 [ 1065.890353][ T5749] uvcvideo 6-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1065.890377][ T5749] uvcvideo 6-1:166.34: No valid video chain found. [ 1065.937466][ T5749] usb 6-1: USB disconnect, device number 34 [ 1065.997153][T10347] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1066.157916][T10347] usb 10-1: Using ep0 maxpacket: 8 [ 1066.190280][T10347] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.190307][T10347] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1066.223232][T10347] usb 10-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1066.223263][T10347] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.223284][T10347] usb 10-1: Product: syz [ 1066.223298][T10347] usb 10-1: Manufacturer: syz [ 1066.223312][T10347] usb 10-1: SerialNumber: syz [ 1066.271000][T10347] usb 10-1: config 0 descriptor?? [ 1066.345557][T10347] powermate 10-1:0.0: probe with driver powermate failed with error -22 [ 1066.646840][T16778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.647452][T16778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.746935][T16781] serio: Serial port ptm1 [ 1066.956823][T16787] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1066.957119][T16787] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1067.674235][T16769] netlink: 'syz.9.3119': attribute type 362 has an invalid length. [ 1067.737166][ T5727] usb 10-1: USB disconnect, device number 9 [ 1067.883494][T14632] hsr_slave_0: left promiscuous mode [ 1067.925938][T14632] hsr_slave_1: left promiscuous mode [ 1067.928614][T14632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.972125][T14632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.576745][T14632] team0 (unregistering): Port device team_slave_1 removed [ 1069.655215][T14632] team0 (unregistering): Port device team_slave_0 removed [ 1070.183728][ T10] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1070.387996][ T10] usb 6-1: config 1 has an invalid interface number: 36 but max is 0 [ 1070.388028][ T10] usb 6-1: config 1 has no interface number 0 [ 1070.388072][ T10] usb 6-1: config 1 interface 36 altsetting 129 bulk endpoint 0x8 has invalid maxpacket 8 [ 1070.388097][ T10] usb 6-1: config 1 interface 36 has no altsetting 0 [ 1070.390363][ T10] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=cc.2f [ 1070.390394][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.390415][ T10] usb 6-1: Product: syz [ 1070.390429][ T10] usb 6-1: Manufacturer: syz [ 1070.390442][ T10] usb 6-1: SerialNumber: syz [ 1070.442786][T16833] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1070.740080][ T10] redrat3 6-1:1.36: Couldn't find all endpoints [ 1070.775291][ T10] usb 6-1: USB disconnect, device number 35 [ 1071.973441][T16848] 9p: Bad value for 'aname' [ 1072.432934][T16277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.684778][T16277] veth0_vlan: entered promiscuous mode [ 1073.780195][T16277] veth1_vlan: entered promiscuous mode [ 1073.939559][T16869] netlink: 'syz.9.3129': attribute type 10 has an invalid length. [ 1073.947633][T16869] veth1_virt_wifi: entered promiscuous mode [ 1074.046040][T16371] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1074.209235][T16371] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1074.234255][T16371] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1074.344018][T16371] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1074.398174][T16371] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1074.546591][T16371] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1074.548401][T16371] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1074.722314][T16371] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1074.824030][T16277] veth0_macvtap: entered promiscuous mode [ 1074.988852][T16277] veth1_macvtap: entered promiscuous mode [ 1075.114946][T16277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1075.219502][T16277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1075.603066][ T5749] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1075.649485][T16896] FAULT_INJECTION: forcing a failure. [ 1075.649485][T16896] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.649518][T16896] CPU: 0 UID: 0 PID: 16896 Comm: syz.5.3137 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1075.649540][T16896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1075.649551][T16896] Call Trace: [ 1075.649557][T16896] [ 1075.649564][T16896] dump_stack_lvl+0xe8/0x150 [ 1075.649596][T16896] should_fail_ex+0x467/0x600 [ 1075.649630][T16896] should_failslab+0xa8/0x100 [ 1075.649653][T16896] __kmalloc_noprof+0xfe/0x780 [ 1075.649671][T16896] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 1075.649690][T16896] ? tomoyo_encode+0x2ad/0x570 [ 1075.649710][T16896] ? tomoyo_encode+0x2ad/0x570 [ 1075.649737][T16896] tomoyo_encode+0x2ad/0x570 [ 1075.649761][T16896] tomoyo_mount_permission+0x3a4/0x9e0 [ 1075.649782][T16896] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 1075.649807][T16896] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1075.649827][T16896] ? kasan_save_track+0x4f/0x80 [ 1075.649887][T16896] ? kasan_quarantine_put+0xbb/0x1f0 [ 1075.649908][T16896] security_sb_mount+0xe4/0x320 [ 1075.649936][T16896] path_mount+0xbc/0x1040 [ 1075.649958][T16896] ? user_path_at+0xd4/0x160 [ 1075.649981][T16896] __se_sys_mount+0x31d/0x420 [ 1075.650004][T16896] ? __pfx___se_sys_mount+0x10/0x10 [ 1075.650028][T16896] ? __x64_sys_mount+0x20/0xc0 [ 1075.650045][T16896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.650065][T16896] do_syscall_64+0x174/0x580 [ 1075.650089][T16896] ? trace_irq_disable+0x3b/0x140 [ 1075.650109][T16896] ? clear_bhb_loop+0x40/0x90 [ 1075.650132][T16896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.650150][T16896] RIP: 0033:0x7fa1f232e019 [ 1075.650169][T16896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1075.650192][T16896] RSP: 002b:00007fa1f0586028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1075.650212][T16896] RAX: ffffffffffffffda RBX: 00007fa1f25b5fa0 RCX: 00007fa1f232e019 [ 1075.650223][T16896] RDX: 0000200000000040 RSI: 0000200000000a00 RDI: 0000200000000000 [ 1075.650236][T16896] RBP: 00007fa1f0586090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.650246][T16896] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 1075.650257][T16896] R13: 00007fa1f25b6038 R14: 00007fa1f25b5fa0 R15: 00007ffcc408b538 [ 1075.650286][T16896] [ 1075.756707][ T5749] usb 10-1: config 1 has an invalid interface number: 36 but max is 0 [ 1075.756736][ T5749] usb 10-1: config 1 has no interface number 0 [ 1075.756776][ T5749] usb 10-1: config 1 interface 36 altsetting 129 bulk endpoint 0x8 has invalid maxpacket 8 [ 1075.756803][ T5749] usb 10-1: config 1 interface 36 has no altsetting 0 [ 1075.759469][ T5749] usb 10-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=cc.2f [ 1075.759496][ T5749] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.759514][ T5749] usb 10-1: Product: syz [ 1075.759537][ T5749] usb 10-1: Manufacturer: syz [ 1075.759550][ T5749] usb 10-1: SerialNumber: syz [ 1076.009710][T16892] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1076.359398][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1076.404864][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.418262][ T5749] redrat3 10-1:1.36: Couldn't find all endpoints [ 1076.453556][ T1030] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.455821][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.456295][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.505823][ T5749] usb 10-1: USB disconnect, device number 10 [ 1076.514910][T16371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.494774][T16371] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.534102][T14624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.534117][T14624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.695284][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.698783][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.746306][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.746449][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.559671][ T1018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.559694][ T1018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.567739][T16934] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1080.567837][T16934] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1081.256187][T16947] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1081.256221][T16947] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1081.322883][T16950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3016'. [ 1082.464346][T11840] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1082.632896][T11840] usb 6-1: Using ep0 maxpacket: 32 [ 1082.657476][T11840] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1082.657503][T11840] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1082.657527][T11840] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1082.693435][T11840] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1082.693464][T11840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.693484][T11840] usb 6-1: Product: syz [ 1082.693496][T11840] usb 6-1: Manufacturer: syz [ 1082.693525][T11840] usb 6-1: SerialNumber: syz [ 1082.746957][T11840] usb 6-1: config 0 descriptor?? [ 1082.810130][T16371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1083.161808][T11840] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 1083.390081][T16964] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3150'. [ 1083.455116][ T820] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1083.458800][T11840] gs_usb 6-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1083.490300][T11840] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 1083.604037][ T820] usb 10-1: Using ep0 maxpacket: 32 [ 1083.606583][ T820] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1083.606613][ T820] usb 10-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1083.606637][ T820] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1083.613037][ T820] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1083.613066][ T820] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.613085][ T820] usb 10-1: Product: syz [ 1083.613098][ T820] usb 10-1: Manufacturer: syz [ 1083.613112][ T820] usb 10-1: SerialNumber: syz [ 1083.661510][ T820] usb 10-1: config 0 descriptor?? [ 1084.752885][ T820] gs_usb 10-1:0.0: Couldn't send data format (err=-110) [ 1084.752931][ T820] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -110 [ 1085.702534][T17002] 9p: Bad value for 'wfdno' [ 1086.087903][T16371] veth0_vlan: entered promiscuous mode [ 1086.157955][T16371] veth1_vlan: entered promiscuous mode [ 1086.191539][T16371] veth0_macvtap: entered promiscuous mode [ 1086.198979][T16371] veth1_macvtap: entered promiscuous mode [ 1086.219587][T16371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1086.287407][T16371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1086.327094][T14624] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.342674][T14624] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.342906][T14624] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.343097][T14624] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.620983][T11840] usb 10-1: USB disconnect, device number 11 [ 1086.696523][ T820] usb 6-1: USB disconnect, device number 36 [ 1086.912082][ T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1086.944313][T17019] serio: Serial port ptm0 [ 1087.151436][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1087.161390][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 1087.213851][ T10] usb 4-1: config 7 has an invalid interface number: 78 but max is 0 [ 1087.213882][ T10] usb 4-1: config 7 has no interface number 0 [ 1087.213916][ T10] usb 4-1: config 7 interface 78 has no altsetting 0 [ 1087.249355][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=624c, bcdDevice=9c.ac [ 1087.249385][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.249405][ T10] usb 4-1: Product: syz [ 1087.249419][ T10] usb 4-1: Manufacturer: syz [ 1087.249433][ T10] usb 4-1: SerialNumber: syz [ 1087.258311][T17023] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1087.258344][T17023] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1087.744034][ T10] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624c [ 1087.749159][ T10] gspca_sn9c20x: Write register 1000 failed -71 [ 1087.749261][ T10] gspca_sn9c20x: Device initialization failed [ 1087.749355][ T10] gspca_sn9c20x 4-1:7.78: probe with driver gspca_sn9c20x failed with error -71 [ 1088.039424][ T10] usb 4-1: USB disconnect, device number 3 [ 1090.193763][T17049] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3163'. [ 1090.581844][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1090.665379][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1090.691626][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1090.750918][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1090.792641][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1091.884276][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.884290][ C1] bridge0: topology change detected, propagating [ 1092.926490][ T5606] Bluetooth: hci2: command tx timeout [ 1092.979235][ T36] kauditd_printk_skb: 252 callbacks suppressed [ 1092.979252][ T36] audit: type=1326 audit(1785815952.014:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17051 comm="syz.3.3165" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de56ae019 code=0x7ffc0000 [ 1092.979998][ T36] audit: type=1326 audit(1785815952.014:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17051 comm="syz.3.3165" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4de566e84e code=0x7ffc0000 [ 1092.986716][T17052] FAULT_INJECTION: forcing a failure. [ 1092.986716][T17052] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.986820][T17052] CPU: 1 UID: 0 PID: 17052 Comm: syz.3.3165 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1092.986843][T17052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1092.986855][T17052] Call Trace: [ 1092.986862][T17052] [ 1092.986869][T17052] dump_stack_lvl+0xe8/0x150 [ 1092.986904][T17052] should_fail_ex+0x467/0x600 [ 1092.986938][T17052] should_failslab+0xa8/0x100 [ 1092.986964][T17052] __kmalloc_cache_node_noprof+0xa9/0x6a0 [ 1092.986986][T17052] ? __get_vm_area_node+0x136/0x300 [ 1092.987014][T17052] ? __get_vm_area_node+0x136/0x300 [ 1092.987045][T17052] __get_vm_area_node+0x136/0x300 [ 1092.987074][T17052] __vmalloc_node_range_noprof+0x358/0x1730 [ 1092.987094][T17052] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1092.987119][T17052] ? kasan_save_track+0x3e/0x80 [ 1092.987136][T17052] ? __kasan_kmalloc+0x93/0xb0 [ 1092.987153][T17052] ? __kmalloc_cache_noprof+0x3d2/0x6b0 [ 1092.987172][T17052] ? do_seccomp+0x72e/0xd30 [ 1092.987191][T17052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.987230][T17052] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1092.987259][T17052] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1092.987276][T17052] __vmalloc_noprof+0xd2/0x120 [ 1092.987294][T17052] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1092.987316][T17052] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1092.987334][T17052] ? bpf_prog_alloc+0x2a/0x1a0 [ 1092.987355][T17052] bpf_prog_alloc+0x3c/0x1a0 [ 1092.987377][T17052] bpf_prog_create_from_user+0xa7/0x440 [ 1092.987408][T17052] ? __pfx_seccomp_check_filter+0x10/0x10 [ 1092.987433][T17052] do_seccomp+0x770/0xd30 [ 1092.987462][T17052] ? __pfx_do_seccomp+0x10/0x10 [ 1092.987488][T17052] ? __pfx_ksys_write+0x10/0x10 [ 1092.987515][T17052] ? __secure_computing+0xe7/0x2b0 [ 1092.987537][T17052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.987556][T17052] do_syscall_64+0x174/0x580 [ 1092.987580][T17052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.987599][T17052] ? clear_bhb_loop+0x40/0x90 [ 1092.987620][T17052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.987641][T17052] RIP: 0033:0x7f4de56ae019 [ 1092.987660][T17052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.987674][T17052] RSP: 002b:00007f4de3906028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1092.987693][T17052] RAX: ffffffffffffffda RBX: 00007f4de5935fa0 RCX: 00007f4de56ae019 [ 1092.987706][T17052] RDX: 0000200000000040 RSI: 000000000000001d RDI: 0000000000000001 [ 1092.987718][T17052] RBP: 00007f4de3906090 R08: 0000000000000000 R09: 0000000000000000 [ 1092.987729][T17052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1092.987740][T17052] R13: 00007f4de5936038 R14: 00007f4de5935fa0 R15: 00007ffcee100488 [ 1092.987777][T17052] [ 1092.987837][ T36] audit: type=1326 audit(1785815952.024:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17051 comm="syz.3.3165" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4de566e84e code=0x7ffc0000 [ 1092.987885][ T36] audit: type=1326 audit(1785815952.024:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17051 comm="syz.3.3165" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4de56ae019 code=0x7ffc0000 [ 1092.991310][T17052] syz.3.3165: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1092.991862][T17052] CPU: 1 UID: 0 PID: 17052 Comm: syz.3.3165 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1092.991885][T17052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1092.991896][T17052] Call Trace: [ 1092.991904][T17052] [ 1092.991911][T17052] dump_stack_lvl+0xe8/0x150 [ 1092.991943][T17052] warn_alloc+0x24c/0x270 [ 1092.991968][T17052] ? __pfx_warn_alloc+0x10/0x10 [ 1092.991997][T17052] ? __get_vm_area_node+0x2af/0x300 [ 1092.992030][T17052] __vmalloc_node_range_noprof+0x37d/0x1730 [ 1092.992050][T17052] ? kasan_save_track+0x3e/0x80 [ 1092.992068][T17052] ? __kasan_kmalloc+0x93/0xb0 [ 1092.992085][T17052] ? __kmalloc_cache_noprof+0x3d2/0x6b0 [ 1092.992104][T17052] ? do_seccomp+0x72e/0xd30 [ 1092.992124][T17052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.992160][T17052] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1092.992190][T17052] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1092.992209][T17052] __vmalloc_noprof+0xd2/0x120 [ 1092.992226][T17052] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1092.992247][T17052] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1092.992264][T17052] ? bpf_prog_alloc+0x2a/0x1a0 [ 1092.992284][T17052] bpf_prog_alloc+0x3c/0x1a0 [ 1092.992305][T17052] bpf_prog_create_from_user+0xa7/0x440 [ 1092.992333][T17052] ? __pfx_seccomp_check_filter+0x10/0x10 [ 1092.992358][T17052] do_seccomp+0x770/0xd30 [ 1092.992385][T17052] ? __pfx_do_seccomp+0x10/0x10 [ 1092.992410][T17052] ? __pfx_ksys_write+0x10/0x10 [ 1092.992435][T17052] ? __secure_computing+0xe7/0x2b0 [ 1092.992456][T17052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.992474][T17052] do_syscall_64+0x174/0x580 [ 1092.992496][T17052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.992514][T17052] ? clear_bhb_loop+0x40/0x90 [ 1092.992535][T17052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.992552][T17052] RIP: 0033:0x7f4de56ae019 [ 1092.992570][T17052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.992586][T17052] RSP: 002b:00007f4de3906028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1092.992604][T17052] RAX: ffffffffffffffda RBX: 00007f4de5935fa0 RCX: 00007f4de56ae019 [ 1092.992618][T17052] RDX: 0000200000000040 RSI: 000000000000001d RDI: 0000000000000001 [ 1092.992629][T17052] RBP: 00007f4de3906090 R08: 0000000000000000 R09: 0000000000000000 [ 1092.992641][T17052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1092.992651][T17052] R13: 00007f4de5936038 R14: 00007f4de5935fa0 R15: 00007ffcee100488 [ 1092.992679][T17052] [ 1093.004308][ T5737] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1093.031745][T17052] Mem-Info: [ 1093.031764][T17052] active_anon:1495 inactive_anon:20562 isolated_anon:0 [ 1093.031764][T17052] active_file:27016 inactive_file:35598 isolated_file:0 [ 1093.031764][T17052] unevictable:768 dirty:79 writeback:0 [ 1093.031764][T17052] slab_reclaimable:12566 slab_unreclaimable:111390 [ 1093.031764][T17052] mapped:36092 shmem:9641 pagetables:1835 [ 1093.031764][T17052] sec_pagetables:0 bounce:0 [ 1093.031764][T17052] kernel_misc_reclaimable:0 [ 1093.031764][T17052] free:1276762 free_pcp:8036 free_cma:0 [ 1093.031819][T17052] Node 0 active_anon:5980kB inactive_anon:82248kB active_file:107868kB inactive_file:142392kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144368kB dirty:312kB writeback:0kB shmem:37028kB kernel_stack:14444kB pagetables:7208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1093.031876][T17052] Node 1 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1093.032603][T17052] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1093.032664][T17052] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 1093.032696][T17052] Node 0 DMA32 free:1151068kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5980kB inactive_anon:82248kB active_file:107868kB inactive_file:142392kB unevictable:1536kB writepending:312kB zspages:408kB present:3129332kB managed:2560556kB mlocked:0kB bounce:0kB free_pcp:32136kB local_pcp:3968kB free_cma:0kB [ 1093.032754][T17052] lowmem_reserve[]: 0 0 1 1 1 [ 1093.032782][T17052] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1852kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 1093.032835][T17052] lowmem_reserve[]: 0 0 0 0 0 [ 1093.032880][T17052] Node 1 Normal free:3940620kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1093.032935][T17052] lowmem_reserve[]: 0 0 0 0 0 [ 1093.032964][T17052] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1093.033072][T17052] Node 0 DMA32: 233*4kB (UME) 590*8kB (UME) 441*16kB (UME) 690*32kB (UME) 426*64kB (UME) 162*128kB (UM) 89*256kB (UM) 36*512kB (UM) 11*1024kB (UM) 8*2048kB (ME) 244*4096kB (UM) = 1151076kB [ 1093.033210][T17052] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1093.033309][T17052] Node 1 Normal: 1*4kB (U) 1*8kB (M) 8*16kB (UM) 8*32kB (UM) 10*64kB (UM) 6*128kB (UM) 2*256kB (M) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3940620kB [ 1093.033451][T17052] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1093.033466][T17052] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1093.033481][T17052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1093.033496][T17052] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1093.033512][T17052] 72258 total pagecache pages [ 1093.033522][T17052] 7 pages in swap cache [ 1093.033528][T17052] Free swap = 123316kB [ 1093.033535][T17052] Total swap = 124996kB [ 1093.033542][T17052] 2097051 pages RAM [ 1093.033548][T17052] 0 pages HighMem/MovableOnly [ 1093.033632][T17052] 424834 pages reserved [ 1093.033638][T17052] 0 pages cma reserved [ 1093.040332][ T36] audit: type=1326 audit(1785815952.074:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17051 comm="syz.3.3165" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4de566e84e code=0x7ffc0000 [ 1093.040597][ T36] audit: type=1326 audit(1785815952.074:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17051 comm="syz.3.3165" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4de566e84e code=0x7ffc0000 [ 1093.040845][ T36] audit: type=1326 audit(1785815952.074:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17051 comm="syz.3.3165" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4de566e84e code=0x7ffc0000 [ 1093.046327][ T36] audit: type=1326 audit(1785815952.074:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17051 comm="syz.3.3165" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de56ae019 code=0x7ffc0000 [ 1093.202044][ T5737] usb 6-1: Using ep0 maxpacket: 32 [ 1093.205441][ T5737] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1093.205472][ T5737] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1093.205505][ T5737] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1093.263620][ T5737] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1093.263659][ T5737] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.263832][ T5737] usb 6-1: Product: syz [ 1093.263849][ T5737] usb 6-1: Manufacturer: syz [ 1093.263863][ T5737] usb 6-1: SerialNumber: syz [ 1093.624536][ T5737] usb 6-1: config 0 descriptor?? [ 1093.757020][T17088] overlayfs: missing 'lowerdir' [ 1094.034925][ T5737] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 1094.086777][T17094] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1094.086845][T17094] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1094.231198][T17078] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3168'. [ 1094.237491][ T5737] gs_usb 6-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1094.412330][ T5737] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 1094.505516][T17102] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3172'. [ 1095.048611][ T5606] Bluetooth: hci2: command tx timeout [ 1097.243013][ T5606] Bluetooth: hci2: command tx timeout [ 1098.125280][ T6148] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1099.326872][ T5606] Bluetooth: hci2: command tx timeout [ 1099.386431][ T10] usb 6-1: USB disconnect, device number 37 [ 1099.708767][T17141] 9p: Bad value for 'wfdno' [ 1101.065597][T17166] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3182'. [ 1101.069213][T17125] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3175'. [ 1101.902734][ T69] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.369352][T17125] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3175'. [ 1102.663993][ T31] IPVS: starting estimator thread 0... [ 1102.755662][T17201] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 1, id = 0 [ 1102.761544][T17196] IPVS: using max 11 ests per chain, 26400 per kthread [ 1104.806019][T17215] 9p: Bad value for 'wfdno' [ 1105.024051][ T69] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.378104][T17224] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1105.391956][T17224] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1106.726372][T17248] serio: Serial port ptm0 [ 1106.742003][ T36] audit: type=1326 audit(1785815965.785:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17221 comm="syz.8.3191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b46ee019 code=0x7ffc0000 [ 1106.742348][ T36] audit: type=1326 audit(1785815965.785:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17221 comm="syz.8.3191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f87b46ee019 code=0x7ffc0000 [ 1106.743096][ T36] audit: type=1326 audit(1785815965.785:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17221 comm="syz.8.3191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b46ee019 code=0x7ffc0000 [ 1106.748613][ T36] audit: type=1326 audit(1785815965.785:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17221 comm="syz.8.3191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f87b46ee019 code=0x7ffc0000 [ 1106.748659][ T36] audit: type=1326 audit(1785815965.785:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17221 comm="syz.8.3191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b46ee019 code=0x7ffc0000 [ 1106.749128][ T36] audit: type=1326 audit(1785815965.785:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17221 comm="syz.8.3191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f87b46ee019 code=0x7ffc0000 [ 1106.864373][T17251] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1106.864426][T17251] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1107.285404][ T69] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.084313][T17275] 9p: Bad value for 'wfdno' [ 1109.415227][ T69] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.985810][T12035] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 1110.236809][T12035] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1110.236863][T12035] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1110.236886][T12035] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.240876][T12035] usb 6-1: config 0 descriptor?? [ 1110.754671][T17295] serio: Serial port ptm0 [ 1110.801915][T12035] hid_parser_main: 13 callbacks suppressed [ 1110.801940][T12035] hid-led 0003:0FC5:B080.0015: unknown main item tag 0x5 [ 1110.801971][T12035] hid-led 0003:0FC5:B080.0015: unknown main item tag 0x6 [ 1110.801998][T12035] hid-led 0003:0FC5:B080.0015: unknown main item tag 0x0 [ 1110.802032][T12035] hid-led 0003:0FC5:B080.0015: unknown main item tag 0x0 [ 1110.802058][T12035] hid-led 0003:0FC5:B080.0015: unknown main item tag 0x0 [ 1110.802084][T12035] hid-led 0003:0FC5:B080.0015: unknown main item tag 0x0 [ 1110.802110][T12035] hid-led 0003:0FC5:B080.0015: unknown main item tag 0x0 [ 1110.802136][T12035] hid-led 0003:0FC5:B080.0015: unknown main item tag 0x0 [ 1110.802161][T12035] hid-led 0003:0FC5:B080.0015: unknown main item tag 0x0 [ 1110.802186][T12035] hid-led 0003:0FC5:B080.0015: unknown main item tag 0x0 [ 1110.886444][T17296] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1110.886478][T17296] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1111.276160][T12035] hid-led 0003:0FC5:B080.0015: probe with driver hid-led failed with error -32 [ 1111.456653][T17053] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.456721][T17053] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.456890][T17053] bridge_slave_0: entered allmulticast mode [ 1111.471326][T17053] bridge_slave_0: entered promiscuous mode [ 1111.497745][T17053] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.497969][T17053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.498217][T17053] bridge_slave_1: entered allmulticast mode [ 1111.509155][T17053] bridge_slave_1: entered promiscuous mode [ 1111.685135][T17053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.716356][T17053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1112.112192][T17053] team0: Port device team_slave_0 added [ 1112.868409][ T10] usb 6-1: USB disconnect, device number 38 [ 1112.938497][T17053] team0: Port device team_slave_1 added [ 1114.496178][T17338] 9p: Bad value for 'wfdno' [ 1114.914274][T17053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.914291][T17053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.914335][T17053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1114.920531][T17053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1114.920548][T17053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.920575][T17053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.324537][T17345] serio: Serial port ptm0 [ 1115.642462][T17347] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1115.642522][T17347] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1116.216852][T17053] hsr_slave_0: entered promiscuous mode [ 1116.225529][T17053] hsr_slave_1: entered promiscuous mode [ 1116.229834][T17053] debugfs: 'hsr0' already exists in 'hsr' [ 1116.229864][T17053] Cannot create hsr debugfs directory [ 1118.043765][ T69] bridge_slave_1: left allmulticast mode [ 1118.043814][ T69] bridge_slave_1: left promiscuous mode [ 1118.044086][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.263169][ T69] bridge_slave_0: left allmulticast mode [ 1118.263203][ T69] bridge_slave_0: left promiscuous mode [ 1118.275595][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.764293][T17378] 9p: Bad value for 'wfdno' [ 1121.073005][T17388] serio: Serial port ptm0 [ 1121.807459][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.809494][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.810277][ T1337] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1122.930378][T12035] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1123.031706][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.080378][T12035] usb 6-1: Using ep0 maxpacket: 16 [ 1123.085960][T12035] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1123.085991][T12035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.086010][T12035] usb 6-1: Product: syz [ 1123.086024][T12035] usb 6-1: Manufacturer: syz [ 1123.086037][T12035] usb 6-1: SerialNumber: syz [ 1123.133123][T12035] usb 6-1: config 0 descriptor?? [ 1123.170139][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1123.187091][T12035] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1123.299095][ T69] bond0 (unregistering): Released all slaves [ 1124.120699][T12035] ssu100 6-1:0.0: probe with driver ssu100 failed with error -110 [ 1124.133846][ T36] audit: type=1326 audit(1785815983.176:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17400 comm="syz.5.3237" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f232e019 code=0x7ffc0000 [ 1124.133899][ T36] audit: type=1326 audit(1785815983.176:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17400 comm="syz.5.3237" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f232e019 code=0x7ffc0000 [ 1124.133936][ T36] audit: type=1326 audit(1785815983.176:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17400 comm="syz.5.3237" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f232e019 code=0x7ffc0000 [ 1124.135701][ T36] audit: type=1326 audit(1785815983.176:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17400 comm="syz.5.3237" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f232e019 code=0x7ffc0000 [ 1124.135751][ T36] audit: type=1326 audit(1785815983.176:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17400 comm="syz.5.3237" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f232e019 code=0x7ffc0000 [ 1124.135793][ T36] audit: type=1326 audit(1785815983.176:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17400 comm="syz.5.3237" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa1f232e019 code=0x7ffc0000 [ 1124.135830][ T36] audit: type=1326 audit(1785815983.176:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17400 comm="syz.5.3237" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f232e019 code=0x7ffc0000 [ 1124.135866][ T36] audit: type=1326 audit(1785815983.176:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17400 comm="syz.5.3237" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f232e019 code=0x7ffc0000 [ 1124.135901][ T36] audit: type=1326 audit(1785815983.176:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17400 comm="syz.5.3237" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f232e019 code=0x7ffc0000 [ 1124.137830][ T36] audit: type=1326 audit(1785815983.176:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17400 comm="syz.5.3237" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fa1f232e019 code=0x7ffc0000 [ 1124.786115][T17422] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3243'. [ 1125.793252][T11840] usb 6-1: USB disconnect, device number 39 [ 1126.193084][T17433] serio: Serial port ptm0 [ 1126.453868][T17439] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1126.453914][T17439] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1128.111207][T17450] 9p: Bad value for 'wfdno' [ 1129.329787][ T5259] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1130.232769][ T69] hsr_slave_0: left promiscuous mode [ 1130.272462][ T69] hsr_slave_1: left promiscuous mode [ 1130.275146][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1130.275176][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1130.322094][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1130.322124][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.456092][ T69] veth1_macvtap: left promiscuous mode [ 1130.456213][ T69] veth0_macvtap: left promiscuous mode [ 1130.456494][ T69] veth1_vlan: left promiscuous mode [ 1130.456693][ T69] veth0_vlan: left promiscuous mode [ 1132.861032][ T69] team0 (unregistering): Port device team_slave_1 removed [ 1132.927312][ T69] team0 (unregistering): Port device team_slave_0 removed [ 1133.134401][ T5259] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1134.563924][T17549] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1137.537643][T12035] ------------[ cut here ]------------ [ 1137.537657][T12035] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1137.537678][T12035] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x3bc/0x560, CPU#1: kworker/1:7/12035 [ 1137.537744][T12035] Modules linked in: [ 1137.537762][T12035] CPU: 1 UID: 0 PID: 12035 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1137.537783][T12035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1137.537794][T12035] Workqueue: events drm_fb_helper_damage_work [ 1137.537876][T12035] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560 [ 1137.537896][T12035] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 e5 eb b2 fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49 [ 1137.537909][T12035] RSP: 0018:ffffc90006fcf7e0 EFLAGS: 00010246 [ 1137.537922][T12035] RAX: 1ffff11004cf8c00 RBX: 0000000000000000 RCX: 0000000000000000 [ 1137.537934][T12035] RDX: ffffffff8be26d60 RSI: ffffffff8be44020 RDI: ffffffff8fbb2550 [ 1137.537946][T12035] RBP: ffffc90006fcf8c8 R08: 0000000000000000 R09: 0000000000000000 [ 1137.537957][T12035] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: ffffffff8be44020 [ 1137.537970][T12035] R13: ffff8880267c6000 R14: ffffffff8fbb2550 R15: ffffffff8be26d60 [ 1137.537983][T12035] FS: 0000000000000000(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 1137.537998][T12035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1137.538010][T12035] CR2: 0000001b3420fff8 CR3: 000000003a982000 CR4: 00000000003526f0 [ 1137.538027][T12035] Call Trace: [ 1137.538045][T12035] [ 1137.538058][T12035] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1137.538079][T12035] ? rt_spin_unlock+0x157/0x200 [ 1137.538099][T12035] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1137.538129][T12035] ? rt_spin_unlock+0x163/0x200 [ 1137.538150][T12035] ? drm_vblank_get+0x147/0x280 [ 1137.538173][T12035] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1137.538194][T12035] drm_fb_helper_damage_work+0x6cf/0xf00 [ 1137.538225][T12035] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1137.538266][T12035] ? process_scheduled_works+0xa20/0x14e0 [ 1137.538293][T12035] ? rcu_is_watching+0x15/0xb0 [ 1137.538317][T12035] ? process_scheduled_works+0xa20/0x14e0 [ 1137.538337][T12035] process_scheduled_works+0xa8e/0x14e0 [ 1137.538385][T12035] ? __pfx_process_scheduled_works+0x10/0x10 [ 1137.538413][T12035] ? assign_work+0x3cf/0x5d0 [ 1137.538445][T12035] worker_thread+0xa47/0xfb0 [ 1137.538481][T12035] ? __kthread_parkme+0x71/0x1f0 [ 1137.538513][T12035] kthread+0x388/0x470 [ 1137.538537][T12035] ? __pfx_worker_thread+0x10/0x10 [ 1137.538555][T12035] ? __pfx_kthread+0x10/0x10 [ 1137.538580][T12035] ret_from_fork+0x514/0xb70 [ 1137.538612][T12035] ? __pfx_ret_from_fork+0x10/0x10 [ 1137.538639][T12035] ? __switch_to+0xc89/0x1420 [ 1137.538667][T12035] ? __pfx_kthread+0x10/0x10 [ 1137.538695][T12035] ret_from_fork_asm+0x1a/0x30 [ 1137.538733][T12035] [ 1137.538743][T12035] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1137.538758][T12035] CPU: 1 UID: 0 PID: 12035 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1137.538781][T12035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1137.538792][T12035] Workqueue: events drm_fb_helper_damage_work [ 1137.538817][T12035] Call Trace: [ 1137.538824][T12035] [ 1137.538832][T12035] vpanic+0x56c/0xa60 [ 1137.538853][T12035] ? __pfx__printk+0x10/0x10 [ 1137.538876][T12035] ? __pfx_vpanic+0x10/0x10 [ 1137.538892][T12035] ? is_bpf_text_address+0x292/0x2b0 [ 1137.538914][T12035] ? is_bpf_text_address+0x26/0x2b0 [ 1137.538944][T12035] panic+0xc5/0xd0 [ 1137.538962][T12035] ? __pfx_panic+0x10/0x10 [ 1137.538992][T12035] ? ret_from_fork_asm+0x1a/0x30 [ 1137.539016][T12035] __warn+0x315/0x4c0 [ 1137.539034][T12035] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 1137.539066][T12035] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 1137.539087][T12035] __report_bug+0x276/0x570 [ 1137.539184][T12035] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 1137.539209][T12035] ? __pfx___report_bug+0x10/0x10 [ 1137.539242][T12035] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1137.539266][T12035] ? lockdep_hardirqs_on+0x7a/0x110 [ 1137.539289][T12035] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1137.539316][T12035] report_bug_entry+0x19a/0x290 [ 1137.539340][T12035] ? drm_crtc_wait_one_vblank+0x51a/0x560 [ 1137.539361][T12035] ? drm_crtc_wait_one_vblank+0x51f/0x560 [ 1137.539381][T12035] handle_bug+0xce/0x200 [ 1137.539408][T12035] exc_invalid_op+0x1a/0x50 [ 1137.539433][T12035] asm_exc_invalid_op+0x1a/0x20 [ 1137.539450][T12035] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560 [ 1137.539473][T12035] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 e5 eb b2 fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49 [ 1137.539505][T12035] RSP: 0018:ffffc90006fcf7e0 EFLAGS: 00010246 [ 1137.539521][T12035] RAX: 1ffff11004cf8c00 RBX: 0000000000000000 RCX: 0000000000000000 [ 1137.539534][T12035] RDX: ffffffff8be26d60 RSI: ffffffff8be44020 RDI: ffffffff8fbb2550 [ 1137.539547][T12035] RBP: ffffc90006fcf8c8 R08: 0000000000000000 R09: 0000000000000000 [ 1137.539559][T12035] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: ffffffff8be44020 [ 1137.539572][T12035] R13: ffff8880267c6000 R14: ffffffff8fbb2550 R15: ffffffff8be26d60 [ 1137.539608][T12035] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1137.539629][T12035] ? rt_spin_unlock+0x157/0x200 [ 1137.539649][T12035] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1137.539677][T12035] ? rt_spin_unlock+0x163/0x200 [ 1137.539699][T12035] ? drm_vblank_get+0x147/0x280 [ 1137.539723][T12035] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1137.539746][T12035] drm_fb_helper_damage_work+0x6cf/0xf00 [ 1137.539778][T12035] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1137.539819][T12035] ? process_scheduled_works+0xa20/0x14e0 [ 1137.539846][T12035] ? rcu_is_watching+0x15/0xb0 [ 1137.539871][T12035] ? process_scheduled_works+0xa20/0x14e0 [ 1137.539892][T12035] process_scheduled_works+0xa8e/0x14e0 [ 1137.539942][T12035] ? __pfx_process_scheduled_works+0x10/0x10 [ 1137.539965][T12035] ? assign_work+0x3cf/0x5d0 [ 1137.539985][T12035] worker_thread+0xa47/0xfb0 [ 1137.540012][T12035] ? __kthread_parkme+0x71/0x1f0 [ 1137.540067][T12035] kthread+0x388/0x470 [ 1137.540086][T12035] ? __pfx_worker_thread+0x10/0x10 [ 1137.540101][T12035] ? __pfx_kthread+0x10/0x10 [ 1137.540121][T12035] ret_from_fork+0x514/0xb70 [ 1137.540144][T12035] ? __pfx_ret_from_fork+0x10/0x10 [ 1137.540163][T12035] ? __switch_to+0xc89/0x1420 [ 1137.540183][T12035] ? __pfx_kthread+0x10/0x10 [ 1137.540203][T12035] ret_from_fork_asm+0x1a/0x30 [ 1137.540229][T12035] [ 1137.540733][T12035] Kernel Offset: disabled