last executing test programs: 24.400133505s ago: executing program 2 (id=65): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 19.627147885s ago: executing program 2 (id=75): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000480)={0x1, 0x0, [{0x7, 0x1, 0x0, 0x0, @msi={0x1, 0xe, 0xfff, 0x1}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000380)="47c30f01cf48b83f1c5e09000000000f23d80f21f835000000700f23f866ba610066ed2e3e0fc72a440f060f01c52e65440f794450000ff1d148b800000000008000000f23d00f21f835200000090f23f8", 0x51}], 0x1, 0xe4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 16.017071934s ago: executing program 4 (id=80): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 13.854681453s ago: executing program 0 (id=83): mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 12.296284095s ago: executing program 4 (id=85): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x100, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x7, 0x1, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 12.081497541s ago: executing program 0 (id=86): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00'}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x3) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001c00010029bd7000fedbdf2507000000", @ANYBLOB="0200aa060a000200aa"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) 11.234469444s ago: executing program 2 (id=88): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) write$binfmt_misc(r4, 0x0, 0x0) inotify_init() chroot(&(0x7f0000000180)='./file0\x00') socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, 0x0, 0x0) sendmmsg(r6, &(0x7f0000005280), 0x4000000000001cd, 0x1008c811) 11.096945397s ago: executing program 0 (id=90): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xb0e, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf8, 0x10, 0x9, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x7ff, 0x2, 0x1, {0x22, 0xede}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x7, 0x9}}}}}]}}]}}, 0x0) 9.781672914s ago: executing program 2 (id=92): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r3, 0x40104d01, &(0x7f0000000a00)) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) 9.19050548s ago: executing program 4 (id=96): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f00000f9000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x2000000000000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 9.15690519s ago: executing program 1 (id=97): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r1, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) syz_open_dev$loop(0x0, 0x0, 0x187540) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 8.335418633s ago: executing program 1 (id=98): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) 8.154212118s ago: executing program 4 (id=99): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000780)={[{@barrier}, {@nodioread_nolock}, {@nobarrier}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@nodelalloc}, {@resuid}, {@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000000)='gid=1\xf0nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xf9, 0x577, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x1}, 0x7) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, 0xffffffffffffffff, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000140), 0x4) llistxattr(&(0x7f0000003880)='./file0\x00', 0x0, 0x0) 7.847826406s ago: executing program 0 (id=101): r0 = inotify_init() r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x40) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e23, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}}, 0x0, 0x0, 0x4f, 0x0, "3e4641f3cce9866040f8cb5c3e0ab71972958a84663af93d3c2eb62e424b5be5390875d92be4947a277f4d830f65459a4ca20bddc220b47f0647cd8b5989b758bc6d65fa511e8d1833f9496a0c8de6e9"}, 0xd8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 7.70227529s ago: executing program 0 (id=102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x604, 0x0, 0xa, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df, 0x2e}) readv(r4, &(0x7f0000000b80)=[{&(0x7f0000000240)=""/246, 0x1c}, {0x0}], 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x280}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r6 = syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_ENUMINPUT(r6, 0xc050561a, 0x0) 6.820375005s ago: executing program 1 (id=104): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20000040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7a248000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000001c0)=0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @sliced={0x4, [0xa8, 0x0, 0x3, 0x9, 0x6e45, 0x4, 0x4, 0x3, 0xf800, 0x8000, 0xfe01, 0x3ff, 0x817e, 0x4, 0x68d, 0xd1d, 0x9, 0x1ff, 0x8, 0x9, 0x0, 0x2454, 0x2d64, 0x81, 0x3, 0xfff7, 0x8ba7, 0x6, 0x5, 0x4, 0xed3d, 0xa, 0x5, 0x0, 0xff, 0x7ff, 0x9, 0xf, 0x7, 0x5, 0x21b, 0x2dc2, 0x0, 0x0, 0xa6, 0xb4, 0x1ff], 0xc}}) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000080)={0x1, 0x100, 0x0, {0x4, 0x300, 0x0, 0x800002fc}}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000003c0)={0x1, @win={{0xd, 0x4, 0x8, 0x5}, 0x2, 0x1000000, 0x0, 0xc3, 0x0, 0x1}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 5.614691347s ago: executing program 0 (id=105): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106161154d00008000000109022400010000000009040000010300000009210000000122f80409058103"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8169, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x2, r4, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x80000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}}, 0x20}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0x4, 0x8, 0xfe, 0xfffffffe, 0x80000000, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x7, 0x9, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xfeffffff, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x4c70, 0x80000000, 0x242, 0x8, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x8, 0x6, 0x0, 0x7, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x4, 0x4, 0x0, 0xfffffffa], [0x1000, 0x9, 0x8000012f, 0x8004, 0x5, 0x5, 0x129432e7, 0x46, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x0, 0x7, 0xc2bf, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x3d, 0x1000005, 0x5bea93c7, 0xd, 0x4de, 0x0, 0x4, 0x81b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x9, 0x389, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c9368d, 0x80, 0x3], [0x4, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0xda6, 0xc, 0x4, 0x6d01, 0x2, 0x38, 0x800003, 0x200, 0x80, 0x7, 0x4, 0x2950bfb1, 0x1000, 0x400000a2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x8, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x9, 0x3, 0x0, 0x10000, 0x104, 0x37f3, 0xffff, 0xa622, 0x1, 0x5, 0x1, 0xffffffff, 0x14f, 0x4, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x4, 0x4, 0x4c8, 0x1, 0xfffff000, 0x7, 0x5, 0x7e, 0x100, 0x3173, 0x40000047, 0xb2, 0x8, 0x6, 0x10, 0x5, 0x5, 0x8, 0x30b1d693, 0x4008a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0x0, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x430}}, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x60, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFCTH_TUPLE={0x4c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8c0) syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf4ff}}, 0x0, 0x0}, 0x0) 5.410027433s ago: executing program 4 (id=106): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0x1) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x88, 0x1403, 0x5, 0x70bd21, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg0\x00'}}]}, 0x88}}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000240)=@file={0x1}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1}, 0x6e) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect(0x3, 0xa1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000200000040ba23000100010102030109028f00020100803209040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401410101020000072401010101000b2402010202100180bb00090501090002"], 0x0) close(r5) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) 5.409748553s ago: executing program 3 (id=107): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x100, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x7, 0x1, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.571968646s ago: executing program 1 (id=108): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r1, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) syz_open_dev$loop(0x0, 0x0, 0x187540) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 4.170344317s ago: executing program 1 (id=109): openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) clock_nanosleep(0x2, 0x0, &(0x7f0000000140), 0x0) 2.700141887s ago: executing program 1 (id=110): openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) clock_nanosleep(0x2, 0x0, &(0x7f0000000140), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) 2.660985468s ago: executing program 3 (id=111): openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) execve(0x0, 0x0, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20000070}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r4, &(0x7f0000000e00), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x1c3425, 0x0) 1.632069996s ago: executing program 3 (id=112): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000002c80)=[{&(0x7f0000000800)}], 0x1, 0x1) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 1.354470013s ago: executing program 3 (id=113): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x22020600) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) 1.353650953s ago: executing program 2 (id=114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) 1.272344516s ago: executing program 3 (id=115): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$unix(r3, &(0x7f0000000300)="dfc3cea65ea8693244d6f9a68d6650d9967da87723c300224018206b06e51e454fa795acac703861de9ea2da099cc6dccc0964255389a2e15909bc11f62b70d4efae8b5383ba23a5270c7cdd078873c3394086749d329ff92de97dcb25984da1cdceb4ada85f52a7c7c7fcacc4b98a0dd2da559317d06fe6e8ed9a2cf078208771e64f7553528e18b404bb1b29f73a16a0e35261a87c", 0x96, 0x84, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') read$eventfd(r5, &(0x7f0000000040), 0x8) 1.208798208s ago: executing program 4 (id=116): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000780)={[{@barrier}, {@nodioread_nolock}, {@nobarrier}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@nodelalloc}, {@resuid}, {@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000000)='gid=1\xf0nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xf9, 0x577, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x1}, 0x7) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, 0xffffffffffffffff, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000140), 0x4) llistxattr(&(0x7f0000003880)='./file0\x00', 0x0, 0x0) 888.178496ms ago: executing program 2 (id=117): bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f080c26a04883ad5c8c82b8af00", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 3 (id=118): openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) landlock_restrict_self(0xffffffffffffffff, 0xc) kernel console output (not intermixed with test programs): [ 46.972284][ T3935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.982849][ T3935] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK [ 47.773440][ T4025] sshd (4025) used greatest stack depth: 20864 bytes left syzkaller Warning: Permanently added '10.128.1.136' (ED25519) to the list of known hosts. syzkaller login: [ 73.381835][ T4261] cgroup: Unknown subsys name 'net' [ 73.515584][ T4261] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.843861][ T4261] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.209105][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.217666][ T4285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.226831][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.236370][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.240656][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.244102][ T4289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.251833][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.259378][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.268030][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.274589][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.280941][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.288900][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.295441][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.309617][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.311176][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.325052][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.325538][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.340016][ T4290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.340920][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.349145][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.355309][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.362691][ T4290] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.375956][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.383365][ T4290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.390754][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.406720][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.412600][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.414262][ T4290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.421888][ T49] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.438385][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.773868][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 76.830143][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 76.882308][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 76.978361][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 77.026258][ T4287] chnl_net:caif_netlink_parms(): no params data found [ 77.063801][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.072050][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.080115][ T4275] device bridge_slave_0 entered promiscuous mode [ 77.093033][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.100135][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.108890][ T4273] device bridge_slave_0 entered promiscuous mode [ 77.116825][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.126233][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.135445][ T4276] device bridge_slave_0 entered promiscuous mode [ 77.156933][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.164349][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.172239][ T4275] device bridge_slave_1 entered promiscuous mode [ 77.191917][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.199024][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.207884][ T4273] device bridge_slave_1 entered promiscuous mode [ 77.214948][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.222237][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.230398][ T4276] device bridge_slave_1 entered promiscuous mode [ 77.277061][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.318068][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.329071][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.347979][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.377489][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.386911][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.394447][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.402660][ T4274] device bridge_slave_0 entered promiscuous mode [ 77.412209][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.440305][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.447695][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.456169][ T4287] device bridge_slave_0 entered promiscuous mode [ 77.463815][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.474090][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.482676][ T4274] device bridge_slave_1 entered promiscuous mode [ 77.491683][ T4275] team0: Port device team_slave_0 added [ 77.510318][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.517778][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.526585][ T4287] device bridge_slave_1 entered promiscuous mode [ 77.541001][ T4275] team0: Port device team_slave_1 added [ 77.557297][ T4276] team0: Port device team_slave_0 added [ 77.583520][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.595028][ T4273] team0: Port device team_slave_0 added [ 77.603565][ T4273] team0: Port device team_slave_1 added [ 77.610436][ T4276] team0: Port device team_slave_1 added [ 77.632780][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.660144][ T4287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.672847][ T4287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.682642][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.689583][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.716847][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.743756][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.750930][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.777181][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.796272][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.803413][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.830067][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.848672][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.856196][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.886292][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.908502][ T4274] team0: Port device team_slave_0 added [ 77.914884][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.922713][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.949319][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.961901][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.968864][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.996182][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.024632][ T4287] team0: Port device team_slave_0 added [ 78.035359][ T4274] team0: Port device team_slave_1 added [ 78.064945][ T4273] device hsr_slave_0 entered promiscuous mode [ 78.072125][ T4273] device hsr_slave_1 entered promiscuous mode [ 78.080935][ T4287] team0: Port device team_slave_1 added [ 78.133188][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.140162][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.166395][ T4287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.186771][ T4276] device hsr_slave_0 entered promiscuous mode [ 78.193804][ T4276] device hsr_slave_1 entered promiscuous mode [ 78.200345][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.208378][ T4276] Cannot create hsr debugfs directory [ 78.223847][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.231871][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.257959][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.269800][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.279962][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.306667][ T4287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.332728][ T4275] device hsr_slave_0 entered promiscuous mode [ 78.339665][ T4275] device hsr_slave_1 entered promiscuous mode [ 78.346492][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.354344][ T4275] Cannot create hsr debugfs directory [ 78.360411][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.367649][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.394124][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.461328][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 78.461339][ T4291] Bluetooth: hci3: command 0x0409 tx timeout [ 78.474026][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 78.502917][ T4287] device hsr_slave_0 entered promiscuous mode [ 78.510155][ T4287] device hsr_slave_1 entered promiscuous mode [ 78.518256][ T4287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.525920][ T4287] Cannot create hsr debugfs directory [ 78.535287][ T4274] device hsr_slave_0 entered promiscuous mode [ 78.540879][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 78.547851][ T49] Bluetooth: hci1: command 0x0409 tx timeout [ 78.548068][ T4274] device hsr_slave_1 entered promiscuous mode [ 78.561306][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.569167][ T4274] Cannot create hsr debugfs directory [ 78.873430][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.884790][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.895436][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.912603][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.976834][ T4275] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.003091][ T4275] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.012592][ T4275] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.034081][ T4275] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.058902][ T4274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.068755][ T4274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.077930][ T4274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.113835][ T4274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.166880][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.219338][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.229946][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.249718][ T4276] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.268132][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.293871][ T4276] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.305363][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.315489][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.325971][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.333392][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.373697][ T4276] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.385088][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.394985][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.405606][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.414764][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.421929][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.433822][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.443816][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.456468][ T4276] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.472631][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.483823][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.498001][ T4287] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.515580][ T4287] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.526937][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.535846][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.558629][ T4287] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.569003][ T4287] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.584453][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.592630][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.601874][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.611000][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.618717][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.627548][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.636242][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.645625][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.653713][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.665026][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.675455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.685204][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.695290][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.716088][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.734429][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.743933][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.753102][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.760285][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.770117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.779637][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.788194][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.795429][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.804324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.813607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.822689][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.829793][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.838973][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.848082][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.865273][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.874957][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.884690][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.891871][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.899628][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.909221][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.926947][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.974547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.992651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.002926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.012235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.024216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.033740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.048047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.058731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.078406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.086996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.096190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.104868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.113009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.143919][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.161537][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.181829][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.190422][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.208161][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.218059][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.260384][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.277231][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.309732][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.318634][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.380282][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.409317][ T4287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.427863][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.465320][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.481427][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.516225][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.540751][ T4291] Bluetooth: hci2: command 0x041b tx timeout [ 80.540938][ T49] Bluetooth: hci4: command 0x041b tx timeout [ 80.546792][ T4291] Bluetooth: hci3: command 0x041b tx timeout [ 80.560130][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.573542][ T4287] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.617224][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.624022][ T4291] Bluetooth: hci0: command 0x041b tx timeout [ 80.624065][ T4291] Bluetooth: hci1: command 0x041b tx timeout [ 80.632960][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.652246][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.668920][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.679421][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.692898][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.700127][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.710270][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.720429][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.736954][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.744152][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.753680][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.762842][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.772206][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.779970][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.788381][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.797172][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.806593][ T4273] device veth0_vlan entered promiscuous mode [ 80.847516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.857218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.868816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.883692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.892905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.901898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.910879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.919531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.929376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.940389][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.947667][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.959047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.968195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.977271][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.984530][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.994243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.002664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.011376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.019702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.036086][ T4273] device veth1_vlan entered promiscuous mode [ 81.055353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.064955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.074257][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.093916][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.124898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.158085][ T4273] device veth0_macvtap entered promiscuous mode [ 81.176338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.187188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.195379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.203995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.213311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.222430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.243980][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.258275][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.271527][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.299652][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.308309][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.318625][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.330956][ T4273] device veth1_macvtap entered promiscuous mode [ 81.350426][ T4276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.362778][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.393340][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.411487][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.427241][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.436268][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.453131][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.466942][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.477566][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.486781][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.495872][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.504541][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.515986][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.525224][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.533460][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.541799][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.550507][ T4275] device veth0_vlan entered promiscuous mode [ 81.572875][ T4275] device veth1_vlan entered promiscuous mode [ 81.594085][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.614502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.625401][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.634972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.660271][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.684369][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.695282][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.711961][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.725022][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.732824][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.756722][ T4287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.765425][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.777697][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.787100][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.796414][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.809163][ T4274] device veth0_vlan entered promiscuous mode [ 81.819245][ T4275] device veth0_macvtap entered promiscuous mode [ 81.828585][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.845989][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.860112][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.875300][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.915710][ T4275] device veth1_macvtap entered promiscuous mode [ 81.959389][ T4274] device veth1_vlan entered promiscuous mode [ 81.967883][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.976756][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.984918][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.995280][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.005133][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.013556][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.022394][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.065132][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.076751][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.100357][ T4287] device veth0_vlan entered promiscuous mode [ 82.118270][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.127017][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.157448][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.178877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.191300][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.204352][ T4274] device veth0_macvtap entered promiscuous mode [ 82.218656][ T4274] device veth1_macvtap entered promiscuous mode [ 82.246547][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.259675][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.271688][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.279482][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.289840][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.298982][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.311129][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.320021][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.359301][ T4287] device veth1_vlan entered promiscuous mode [ 82.368184][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.379540][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.392135][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.399733][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.409663][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.417977][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.426797][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.438500][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.454706][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.467358][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.484318][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.497249][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.507390][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.530722][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.554972][ T4275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.569975][ T4275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.579781][ T4275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.590596][ T4275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.603669][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.612257][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.621651][ T49] Bluetooth: hci4: command 0x040f tx timeout [ 82.622136][ T4291] Bluetooth: hci2: command 0x040f tx timeout [ 82.627657][ T49] Bluetooth: hci3: command 0x040f tx timeout [ 82.641823][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.651021][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.700787][ T49] Bluetooth: hci0: command 0x040f tx timeout [ 82.701322][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 82.720908][ T4287] device veth0_macvtap entered promiscuous mode [ 82.730206][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.741155][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.751641][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.762116][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.773950][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.797959][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.807733][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.824582][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.835432][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.847089][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.857302][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.867096][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.875500][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.887088][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.897063][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.907371][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.916623][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.961409][ T4287] device veth1_macvtap entered promiscuous mode [ 82.988056][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.004576][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.016112][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.028303][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.039068][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.050275][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.062724][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.097460][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.109116][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.118540][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.128363][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.137462][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.148401][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.159767][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.170105][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.181069][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.192593][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.203215][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.214650][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.235816][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.254015][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.287086][ T4287] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.306288][ T4287] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.322078][ T4287] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.334046][ T4287] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.970563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 83.980529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 83.990527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 84.000565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 84.010525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 84.020528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 84.030515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 84.040512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 84.050523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 84.060537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 84.103350][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.114517][ T4276] device veth0_vlan entered promiscuous mode [ 84.148945][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.162321][ T4276] device veth1_vlan entered promiscuous mode [ 84.192073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.208070][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.218406][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.235782][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.249109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.701238][ T4291] Bluetooth: hci2: command 0x0419 tx timeout [ 84.707430][ T4291] Bluetooth: hci4: command 0x0419 tx timeout [ 84.781789][ T4291] Bluetooth: hci1: command 0x0419 tx timeout [ 85.290503][ C1] sched: RT throttling activated [ 85.294570][ T4291] Bluetooth: hci3: command 0x0419 tx timeout [ 85.306049][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 85.337264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.353137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.393301][ T4276] device veth0_macvtap entered promiscuous mode [ 85.405709][ T4276] device veth1_macvtap entered promiscuous mode [ 85.426908][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.438314][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.449307][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.469892][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.480581][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.498693][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.516950][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.528581][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.546937][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.565966][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.580112][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.597813][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.616141][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.626642][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.643523][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.657786][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.670113][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.693787][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.334467][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.369998][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.411531][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.443024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.466697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.486804][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.512761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.572631][ T4330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.595487][ T4330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.606290][ T955] cfg80211: failed to load regulatory.db [ 87.632602][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.671662][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.731255][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.740014][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.788935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.807219][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.004888][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.034680][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.186379][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.392505][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.425690][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.430156][ T4364] FAULT_INJECTION: forcing a failure. [ 88.430156][ T4364] name failslab, interval 1, probability 0, space 0, times 1 [ 88.483139][ T4364] CPU: 1 PID: 4364 Comm: syz.0.1 Not tainted syzkaller #0 [ 88.491012][ T4364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.501372][ T4364] Call Trace: [ 88.504715][ T4364] [ 88.507868][ T4364] dump_stack_lvl+0x188/0x24e [ 88.512941][ T4364] ? show_regs_print_info+0x12/0x12 [ 88.518725][ T4364] ? load_image+0x410/0x410 [ 88.523272][ T4364] ? __might_sleep+0xd0/0xd0 [ 88.528082][ T4364] ? __lock_acquire+0x7c40/0x7c40 [ 88.533173][ T4364] should_fail_ex+0x390/0x4c0 [ 88.537890][ T4364] should_failslab+0x5/0x20 [ 88.542585][ T4364] slab_pre_alloc_hook+0x59/0x300 [ 88.547639][ T4364] kmem_cache_alloc+0x56/0x2f0 [ 88.552475][ T4364] ? sk_prot_alloc+0x57/0x210 [ 88.557185][ T4364] sk_prot_alloc+0x57/0x210 [ 88.561880][ T4364] ? sk_alloc+0x20/0x330 [ 88.566150][ T4364] sk_alloc+0x36/0x330 [ 88.570242][ T4364] __vsock_create+0x3a/0x970 [ 88.574953][ T4364] vsock_create+0x12e/0x3b0 [ 88.579490][ T4364] __sock_create+0x49a/0x940 [ 88.584130][ T4364] __sys_socket+0xc4/0x190 [ 88.588575][ T4364] __x64_sys_socket+0x76/0x80 [ 88.593260][ T4364] do_syscall_64+0x4c/0xa0 [ 88.597767][ T4364] ? clear_bhb_loop+0x60/0xb0 [ 88.602446][ T4364] ? clear_bhb_loop+0x60/0xb0 [ 88.607129][ T4364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.613028][ T4364] RIP: 0033:0x7ff52cb9e159 [ 88.617722][ T4364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.637431][ T4364] RSP: 002b:00007ff52da93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 88.645853][ T4364] RAX: ffffffffffffffda RBX: 00007ff52ce25fa0 RCX: 00007ff52cb9e159 [ 88.654000][ T4364] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 88.661990][ T4364] RBP: 00007ff52cc35024 R08: 0000000000000000 R09: 0000000000000000 [ 88.670113][ T4364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.678102][ T4364] R13: 00007ff52ce26038 R14: 00007ff52ce25fa0 R15: 00007ffe308636b8 [ 88.686213][ T4364] [ 88.714894][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.723221][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.761036][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.768903][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.781292][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.834366][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.857163][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.915876][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.950653][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.955623][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.000509][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.008103][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.024351][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.178612][ T27] audit: type=1326 audit(1788284863.680:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.1.6" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec0dd9e159 code=0x0 [ 90.788388][ T4380] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 91.071536][ T4399] loop0: detected capacity change from 0 to 3904 [ 91.152104][ T4399] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 91.175924][ T4399] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 91.183735][ T4399] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 91.195135][ T4399] loop0: [ 91.241566][ T126] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.247550][ T4403] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.280537][ T4328] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 92.727576][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 92.755851][ T126] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 92.767044][ T4328] usb 5-1: Using ep0 maxpacket: 32 [ 92.775435][ T126] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 92.787210][ T4328] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.804909][ T126] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 92.835955][ T4328] usb 5-1: config 0 has no interfaces? [ 92.852101][ T4328] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 92.870609][ T126] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 92.890126][ T4328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.900246][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.948861][ T4328] usb 5-1: config 0 descriptor?? [ 92.960645][ T126] usb 1-1: Product: syz [ 92.971869][ T126] usb 1-1: Manufacturer: syz [ 92.989275][ T126] usb 1-1: SerialNumber: syz [ 93.025279][ T126] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 93.039767][ T126] imon 1-1:155.0: unable to initialize intf0, err -19 [ 93.051562][ T126] imon:imon_probe: failed to initialize context! [ 93.057951][ T126] imon 1-1:155.0: unable to register, err -19 [ 93.058503][ T4414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 93.186382][ T4328] usb 5-1: USB disconnect, device number 2 [ 94.699085][ T4430] overlayfs: overlapping lowerdir path [ 95.399851][ T4432] tty tty2: ldisc open failed (-12), clearing slot 1 [ 95.439168][ T4428] wg0 speed is unknown, defaulting to 1000 [ 95.533584][ T22] usb 1-1: USB disconnect, device number 2 [ 95.568331][ T4428] wg0 speed is unknown, defaulting to 1000 [ 95.569094][ T4435] netlink: 92 bytes leftover after parsing attributes in process `syz.1.19'. [ 95.764746][ T4428] wg0 speed is unknown, defaulting to 1000 [ 95.808862][ T4439] syz.0.22 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 96.007310][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.027236][ T4439] CPU: 1 PID: 4439 Comm: syz.0.22 Not tainted syzkaller #0 [ 96.034597][ T4439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.044936][ T4439] Call Trace: [ 96.048408][ T4439] [ 96.051472][ T4439] dump_stack_lvl+0x188/0x24e [ 96.056274][ T4439] ? ___ratelimit+0x14e/0x610 [ 96.060975][ T4439] ? show_regs_print_info+0x12/0x12 [ 96.066207][ T4439] ? load_image+0x410/0x410 [ 96.070743][ T4439] ? ___ratelimit+0x474/0x610 [ 96.075458][ T4439] ? radix_tree_cpu_dead+0x160/0x160 [ 96.080877][ T4439] dump_header+0xd8/0x820 [ 96.085264][ T4439] oom_kill_process+0x361/0x550 [ 96.090151][ T4439] out_of_memory+0xe25/0x1220 [ 96.094873][ T4439] ? mutex_lock_nested+0x10/0x10 [ 96.100117][ T4439] ? unregister_oom_notifier+0x20/0x20 [ 96.105709][ T4439] mem_cgroup_out_of_memory+0x2c0/0x390 [ 96.111396][ T4439] ? mem_cgroup_oom_trylock+0x210/0x210 [ 96.117092][ T4439] ? do_raw_spin_unlock+0x11d/0x230 [ 96.122571][ T4439] try_charge_memcg+0xc9d/0x17c0 [ 96.127690][ T4439] ? percpu_ref_put+0x180/0x180 [ 96.132676][ T4439] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 96.138549][ T4439] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 96.144570][ T4439] ? percpu_ref_tryget+0x15/0x180 [ 96.149644][ T4439] ? percpu_ref_tryget+0x15/0x180 [ 96.154876][ T4439] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 96.160771][ T4439] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 96.166622][ T4439] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 96.172469][ T4439] obj_cgroup_charge+0x36a/0x620 [ 96.177737][ T4439] ? obj_cgroup_charge+0xe9/0x620 [ 96.182977][ T4439] ? mod_objcg_mlstate+0x320/0x320 [ 96.188262][ T4439] ? percpu_ref_put+0x12/0x100 [ 96.193090][ T4439] ? percpu_ref_put+0x12/0x100 [ 96.197892][ T4439] slab_pre_alloc_hook+0x2e2/0x300 [ 96.203050][ T4439] ? slab_pre_alloc_hook+0xb1/0x300 [ 96.208290][ T4439] kmem_cache_alloc_lru+0x49/0x2e0 [ 96.213528][ T4439] ? sock_alloc_inode+0x24/0xc0 [ 96.218502][ T4439] sock_alloc_inode+0x24/0xc0 [ 96.223378][ T4439] ? sockfs_init_fs_context+0xa0/0xa0 [ 96.229850][ T4439] new_inode_pseudo+0x5f/0x1c0 [ 96.234645][ T4439] sock_create_lite+0x87/0x500 [ 96.239551][ T4439] __netlink_kernel_create+0xf7/0x7b0 [ 96.244985][ T4439] ? netlink_set_err+0x3b0/0x3b0 [ 96.250142][ T4439] ? memset+0x1e/0x40 [ 96.254691][ T4439] ? lockdep_init_map_type+0x98/0x8d0 [ 96.261443][ T4439] ? rtnetlink_net_init+0xa1/0x140 [ 96.266690][ T4439] rtnetlink_net_init+0xb0/0x140 [ 96.271840][ T4439] ? nlmsg_populate_fdb_fill+0x620/0x620 [ 96.277683][ T4439] ? rtnetlink_net_exit+0x60/0x60 [ 96.282834][ T4439] ? rtnetlink_rcv+0x20/0x20 [ 96.287645][ T4439] ops_init+0x360/0x5e0 [ 96.291844][ T4439] setup_net+0x4f2/0xbd0 [ 96.296203][ T4439] ? copy_net_ns+0x5b0/0x5b0 [ 96.300914][ T4439] ? down_read_killable+0x1cc/0x340 [ 96.306147][ T4439] copy_net_ns+0x33e/0x5b0 [ 96.310592][ T4439] create_new_namespaces+0x3ce/0x700 [ 96.315909][ T4439] ? copy_namespaces+0x55/0x410 [ 96.320786][ T4439] copy_namespaces+0x3ae/0x410 [ 96.325617][ T4439] copy_process+0x199b/0x4070 [ 96.330416][ T4439] ? copy_process+0x974/0x4070 [ 96.335243][ T4439] ? preempt_schedule_thunk+0x16/0x18 [ 96.340657][ T4439] ? idle_dummy+0x10/0x10 [ 96.345010][ T4439] ? wake_up_q+0x8c/0xc0 [ 96.349301][ T4439] kernel_clone+0x24b/0x900 [ 96.353839][ T4439] ? futex_wake_mark+0x150/0x150 [ 96.358800][ T4439] ? create_io_thread+0x170/0x170 [ 96.363857][ T4439] ? do_futex+0x2e2/0x320 [ 96.368207][ T4439] __x64_sys_clone+0x1a7/0x220 [ 96.372972][ T4439] ? __ia32_sys_vfork+0x140/0x140 [ 96.378033][ T4439] ? lock_chain_count+0x20/0x20 [ 96.382905][ T4439] ? lockdep_hardirqs_on+0x94/0x140 [ 96.388369][ T4439] do_syscall_64+0x4c/0xa0 [ 96.392802][ T4439] ? clear_bhb_loop+0x60/0xb0 [ 96.397659][ T4439] ? clear_bhb_loop+0x60/0xb0 [ 96.402345][ T4439] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.408328][ T4439] RIP: 0033:0x7ff52cb9e159 [ 96.412740][ T4439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.432640][ T4439] RSP: 002b:00007ff52da92fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 96.441053][ T4439] RAX: ffffffffffffffda RBX: 00007ff52ce25fa0 RCX: 00007ff52cb9e159 [ 96.449298][ T4439] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000648e7000 [ 96.457277][ T4439] RBP: 00007ff52cc35024 R08: 0000000000000000 R09: 0000000000000000 [ 96.465347][ T4439] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 96.473329][ T4439] R13: 00007ff52ce26038 R14: 00007ff52ce25fa0 R15: 00007ffe308636b8 [ 96.481319][ T4439] [ 96.500956][ T4439] memory: usage 96kB, limit 96kB, failcnt 40 [ 96.523740][ T4439] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 96.550616][ T4439] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 96.635412][ T4439] Memory cgroup stats for /syz0/test: [ 96.635950][ T4439] anon 0 [ 96.635950][ T4439] file 0 [ 96.635950][ T4439] kernel 98304 [ 96.635950][ T4439] kernel_stack 32768 [ 96.635950][ T4439] pagetables 8192 [ 96.635950][ T4439] sec_pagetables 0 [ 96.635950][ T4439] percpu 0 [ 96.635950][ T4439] sock 0 [ 96.635950][ T4439] vmalloc 0 [ 96.635950][ T4439] shmem 0 [ 96.635950][ T4439] zswap 0 [ 96.635950][ T4439] zswapped 0 [ 96.635950][ T4439] file_mapped 0 [ 96.635950][ T4439] file_dirty 0 [ 96.635950][ T4439] file_writeback 0 [ 96.635950][ T4439] swapcached 0 [ 96.635950][ T4439] anon_thp 0 [ 96.635950][ T4439] file_thp 0 [ 96.635950][ T4439] shmem_thp 0 [ 96.635950][ T4439] inactive_anon 0 [ 96.635950][ T4439] active_anon 0 [ 96.635950][ T4439] inactive_file 0 [ 96.635950][ T4439] active_file 0 [ 96.635950][ T4439] unevictable 0 [ 96.635950][ T4439] slab_reclaimable 5784 [ 96.635950][ T4439] slab_unreclaimable 42504 [ 96.635950][ T4439] slab 48288 [ 96.768897][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.779584][ T4439] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.22,pid=4437,uid=0 [ 96.808283][ T7] usb 2-1: config 1 interface 1 altsetting 65 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 96.814046][ T4428] infiniband syz2: set active [ 96.823824][ T7] usb 2-1: config 1 interface 1 has no altsetting 1 [ 96.826770][ T4327] wg0 speed is unknown, defaulting to 1000 [ 96.838280][ T4439] Memory cgroup out of memory: Killed process 4437 (syz.0.22) total-vm:102244kB, anon-rss:1400kB, file-rss:21832kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 97.707012][ T4428] infiniband syz2: added wg0 [ 97.786320][ T4428] rdma_rxe: unable to create cq [ 97.888520][ T4428] infiniband syz2: Couldn't create ib_mad CQ [ 97.916915][ T4428] infiniband syz2: Couldn't open port 1 [ 98.117396][ T4428] RDS/IB: syz2: added [ 98.144451][ T4428] smc: adding ib device syz2 with port count 1 [ 98.186524][ T4428] smc: ib device syz2 port 1 has pnetid [ 98.238224][ T126] wg0 speed is unknown, defaulting to 1000 [ 98.260705][ T4428] wg0 speed is unknown, defaulting to 1000 [ 100.931632][ T4428] wg0 speed is unknown, defaulting to 1000 [ 101.184724][ T4428] wg0 speed is unknown, defaulting to 1000 [ 101.469468][ T4428] wg0 speed is unknown, defaulting to 1000 [ 101.781862][ T126] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.913709][ T7] usb 2-1: string descriptor 0 read error: -32 [ 101.922919][ T7] usb 2-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 102.469314][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.481593][ T7] usb 2-1: can't set config #1, error -32 [ 102.490605][ T126] usb 4-1: Using ep0 maxpacket: 32 [ 102.563943][ T126] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 102.616862][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.628055][ T4428] wg0 speed is unknown, defaulting to 1000 [ 102.640585][ T126] usb 4-1: Product: syz [ 102.644784][ T126] usb 4-1: Manufacturer: syz [ 103.920105][ T126] usb 4-1: SerialNumber: syz [ 103.927740][ T126] usb 4-1: config 0 descriptor?? [ 103.944384][ T126] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 104.292154][ T4327] usb 2-1: USB disconnect, device number 2 [ 105.669590][ T126] gspca_topro: reg_w err -110 [ 105.720639][ T126] gspca_topro: Sensor soi763a [ 105.801481][ T126] usb 4-1: USB disconnect, device number 2 [ 106.114349][ T4522] wg0 speed is unknown, defaulting to 1000 [ 106.236595][ T4527] fuse: Bad value for 'fd' [ 107.605507][ T4543] rdma_rxe: rxe_register_device failed with error -23 [ 107.640798][ T4543] rdma_rxe: failed to add wg0 [ 107.687402][ T4543] netlink: 92 bytes leftover after parsing attributes in process `syz.4.53'. [ 109.233692][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.260891][ T4559] size and base must be multiples of 4 kiB [ 109.267063][ T4559] CPU: 1 PID: 4559 Comm: syz.3.58 Not tainted syzkaller #0 [ 109.274400][ T4559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.284562][ T4559] Call Trace: [ 109.287902][ T4559] [ 109.290902][ T4559] dump_stack_lvl+0x188/0x24e [ 109.295795][ T4559] ? __might_fault+0xa6/0x120 [ 109.300555][ T4559] ? show_regs_print_info+0x12/0x12 [ 109.305905][ T4559] ? load_image+0x410/0x410 [ 109.310537][ T4559] ? tomoyo_path_number_perm+0x5a4/0x650 [ 109.316243][ T4559] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 109.321936][ T4559] ? __might_fault+0xa6/0x120 [ 109.326857][ T4559] ? __might_fault+0xc2/0x120 [ 109.331571][ T4559] ? __might_fault+0xa6/0x120 [ 109.336544][ T4559] mtrr_add+0x8e/0xc0 [ 109.340852][ T4559] mtrr_ioctl+0x9bf/0x1140 [ 109.345425][ T4559] ? mtrr_close+0x1f0/0x1f0 [ 109.349969][ T4559] ? __fget_files+0x28/0x460 [ 109.354809][ T4559] ? mtrr_close+0x1f0/0x1f0 [ 109.359398][ T4559] proc_reg_unlocked_ioctl+0x1cb/0x2b0 [ 109.365105][ T4559] ? proc_reg_poll+0x280/0x280 [ 109.369909][ T4559] __se_sys_ioctl+0xfa/0x170 [ 109.374793][ T4559] do_syscall_64+0x4c/0xa0 [ 109.380419][ T4559] ? clear_bhb_loop+0x60/0xb0 [ 109.385449][ T4559] ? clear_bhb_loop+0x60/0xb0 [ 109.390348][ T4559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.397088][ T4559] RIP: 0033:0x7f7f0ab9e159 [ 109.402295][ T4559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.423029][ T4559] RSP: 002b:00007f7f0bae2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.431574][ T4559] RAX: ffffffffffffffda RBX: 00007f7f0ae25fa0 RCX: 00007f7f0ab9e159 [ 109.440069][ T4559] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000003 [ 109.448676][ T4559] RBP: 00007f7f0ac35024 R08: 0000000000000000 R09: 0000000000000000 [ 109.458803][ T4559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.467088][ T4559] R13: 00007f7f0ae26038 R14: 00007f7f0ae25fa0 R15: 00007fffb92d4d48 [ 109.475332][ T4559] [ 109.501834][ T4559] netlink: 'syz.3.58': attribute type 4 has an invalid length. [ 109.662242][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 109.705966][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.716785][ T7] usb 5-1: config 1 interface 1 altsetting 65 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 109.730593][ T7] usb 5-1: config 1 interface 1 has no altsetting 1 [ 109.744417][ T7] usb 5-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 109.761570][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.772156][ T7] usb 5-1: Product: syz [ 109.777073][ T7] usb 5-1: Manufacturer: syz [ 109.782842][ T7] usb 5-1: SerialNumber: syz [ 110.850176][ T4569] netlink: 56 bytes leftover after parsing attributes in process `syz.3.60'. [ 113.404424][ T7] usb 5-1: can't set config #1, error -71 [ 113.444840][ T7] usb 5-1: USB disconnect, device number 3 [ 113.731903][ T4588] trusted_key: encrypted_key: insufficient parameters specified [ 115.396466][ T4606] size and base must be multiples of 4 kiB [ 115.403228][ T4606] CPU: 1 PID: 4606 Comm: syz.4.70 Not tainted syzkaller #0 [ 115.410766][ T4606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.420855][ T4606] Call Trace: [ 115.424249][ T4606] [ 115.427230][ T4606] dump_stack_lvl+0x188/0x24e [ 115.432170][ T4606] ? __might_fault+0xa6/0x120 [ 115.437208][ T4606] ? show_regs_print_info+0x12/0x12 [ 115.442972][ T4606] ? load_image+0x410/0x410 [ 115.447728][ T4606] ? tomoyo_path_number_perm+0x5a4/0x650 [ 115.453716][ T4606] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 115.460190][ T4606] ? __might_fault+0xa6/0x120 [ 115.465159][ T4606] ? __might_fault+0xc2/0x120 [ 115.469988][ T4606] ? __might_fault+0xa6/0x120 [ 115.474803][ T4606] mtrr_add+0x8e/0xc0 [ 115.479190][ T4606] mtrr_ioctl+0x9bf/0x1140 [ 115.483813][ T4606] ? mtrr_close+0x1f0/0x1f0 [ 115.488355][ T4606] ? __fget_files+0x28/0x460 [ 115.492988][ T4606] ? mtrr_close+0x1f0/0x1f0 [ 115.497622][ T4606] proc_reg_unlocked_ioctl+0x1cb/0x2b0 [ 115.503773][ T4606] ? proc_reg_poll+0x280/0x280 [ 115.508862][ T4606] __se_sys_ioctl+0xfa/0x170 [ 115.513850][ T4606] do_syscall_64+0x4c/0xa0 [ 115.518485][ T4606] ? clear_bhb_loop+0x60/0xb0 [ 115.524675][ T4606] ? clear_bhb_loop+0x60/0xb0 [ 115.529669][ T4606] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.536370][ T4606] RIP: 0033:0x7f053139e159 [ 115.541951][ T4606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.566395][ T4606] RSP: 002b:00007f053221f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.576763][ T4606] RAX: ffffffffffffffda RBX: 00007f0531625fa0 RCX: 00007f053139e159 [ 115.585565][ T4606] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000003 [ 115.594067][ T4606] RBP: 00007f0531435024 R08: 0000000000000000 R09: 0000000000000000 [ 115.602153][ T4606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.610160][ T4606] R13: 00007f0531626038 R14: 00007f0531625fa0 R15: 00007ffebf681178 [ 115.618802][ T4606] [ 115.629843][ T4606] netlink: 'syz.4.70': attribute type 4 has an invalid length. [ 116.296442][ T4611] netlink: 56 bytes leftover after parsing attributes in process `syz.0.72'. [ 117.312089][ T4622] rdma_rxe: rxe_register_device failed with error -23 [ 118.192747][ T4622] rdma_rxe: failed to add wg0 [ 118.197058][ T4626] netlink: 92 bytes leftover after parsing attributes in process `syz.0.74'. [ 119.143752][ T126] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.133241][ T4640] size and base must be multiples of 4 kiB [ 122.139832][ T4640] CPU: 1 PID: 4640 Comm: syz.0.81 Not tainted syzkaller #0 [ 122.147378][ T4640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.157750][ T4640] Call Trace: [ 122.161185][ T4640] [ 122.164314][ T4640] dump_stack_lvl+0x188/0x24e [ 122.169036][ T4640] ? __might_fault+0xa6/0x120 [ 122.173768][ T4640] ? show_regs_print_info+0x12/0x12 [ 122.179031][ T4640] ? load_image+0x410/0x410 [ 122.183987][ T4640] ? tomoyo_path_number_perm+0x5a4/0x650 [ 122.189756][ T4640] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 122.195443][ T4640] ? __might_fault+0xa6/0x120 [ 122.200165][ T4640] ? __might_fault+0xc2/0x120 [ 122.205156][ T4640] ? __might_fault+0xa6/0x120 [ 122.210237][ T4640] mtrr_add+0x8e/0xc0 [ 122.214255][ T4640] mtrr_ioctl+0x9bf/0x1140 [ 122.218703][ T4640] ? mtrr_close+0x1f0/0x1f0 [ 122.223255][ T4640] ? __fget_files+0x28/0x460 [ 122.228129][ T4640] ? mtrr_close+0x1f0/0x1f0 [ 122.232749][ T4640] proc_reg_unlocked_ioctl+0x1cb/0x2b0 [ 122.238461][ T4640] ? proc_reg_poll+0x280/0x280 [ 122.243666][ T4640] __se_sys_ioctl+0xfa/0x170 [ 122.248646][ T4640] do_syscall_64+0x4c/0xa0 [ 122.253172][ T4640] ? clear_bhb_loop+0x60/0xb0 [ 122.257967][ T4640] ? clear_bhb_loop+0x60/0xb0 [ 122.262849][ T4640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.269322][ T4640] RIP: 0033:0x7ff52cb9e159 [ 122.273948][ T4640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.294722][ T4640] RSP: 002b:00007ff52da93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.303620][ T4640] RAX: ffffffffffffffda RBX: 00007ff52ce25fa0 RCX: 00007ff52cb9e159 [ 122.312075][ T4640] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000003 [ 122.320150][ T4640] RBP: 00007ff52cc35024 R08: 0000000000000000 R09: 0000000000000000 [ 122.328540][ T4640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.336719][ T4640] R13: 00007ff52ce26038 R14: 00007ff52ce25fa0 R15: 00007ffe308636b8 [ 122.344930][ T4640] [ 122.359879][ T4640] netlink: 'syz.0.81': attribute type 4 has an invalid length. [ 125.693869][ T4657] kAFS: No cell specified [ 126.397335][ T4664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.86'. [ 126.417543][ T4654] netlink: 56 bytes leftover after parsing attributes in process `syz.3.84'. [ 128.141505][ T4679] wg0 speed is unknown, defaulting to 1000 [ 128.340881][ T4326] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.341063][ T4683] Zero length message leads to an empty skb [ 128.540959][ T4326] usb 1-1: Using ep0 maxpacket: 8 [ 128.549098][ T4326] usb 1-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.616798][ T4326] usb 1-1: config 1 interface 0 has no altsetting 0 [ 128.659485][ T4326] usb 1-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 128.697999][ T4326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.735656][ T4326] usb 1-1: Product: syz [ 128.742758][ T4326] usb 1-1: Manufacturer: syz [ 128.747515][ T4326] usb 1-1: SerialNumber: syz [ 129.079738][ T4326] usbhid 1-1:1.0: can't add hid device: -71 [ 129.228875][ T4326] usbhid: probe of 1-1:1.0 failed with error -71 [ 129.399715][ T4326] usb 1-1: USB disconnect, device number 4 [ 129.730118][ T4695] loop4: detected capacity change from 0 to 1024 [ 129.774972][ T4695] ======================================================= [ 129.774972][ T4695] WARNING: The mand mount option has been deprecated and [ 129.774972][ T4695] and is ignored by this kernel. Remove the mand [ 129.774972][ T4695] option from the mount to silence this warning. [ 129.774972][ T4695] ======================================================= [ 129.940155][ T4695] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 129.973123][ T4695] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.125918][ T4705] size and base must be multiples of 4 kiB [ 130.191544][ T4705] CPU: 0 PID: 4705 Comm: syz.2.92 Not tainted syzkaller #0 [ 130.198819][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.209342][ T4705] Call Trace: [ 130.212729][ T4705] [ 130.215680][ T4705] dump_stack_lvl+0x188/0x24e [ 130.220404][ T4705] ? __might_fault+0xa6/0x120 [ 130.220913][ T4695] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.99: lblock 0 mapped to illegal pblock 0 (length 1) [ 130.225096][ T4705] ? show_regs_print_info+0x12/0x12 [ 130.225137][ T4705] ? load_image+0x410/0x410 [ 130.225162][ T4705] ? tomoyo_path_number_perm+0x5a4/0x650 [ 130.254030][ T4705] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 130.259777][ T4705] ? __might_fault+0xa6/0x120 [ 130.264455][ T4705] ? __might_fault+0xc2/0x120 [ 130.269219][ T4705] ? __might_fault+0xa6/0x120 [ 130.273927][ T4705] mtrr_add+0x8e/0xc0 [ 130.278017][ T4705] mtrr_ioctl+0x9bf/0x1140 [ 130.282462][ T4705] ? mtrr_close+0x1f0/0x1f0 [ 130.286993][ T4705] ? __fget_files+0x28/0x460 [ 130.291602][ T4705] ? mtrr_close+0x1f0/0x1f0 [ 130.296305][ T4705] proc_reg_unlocked_ioctl+0x1cb/0x2b0 [ 130.302390][ T4705] ? proc_reg_poll+0x280/0x280 [ 130.307208][ T4705] __se_sys_ioctl+0xfa/0x170 [ 130.311827][ T4705] do_syscall_64+0x4c/0xa0 [ 130.316660][ T4705] ? clear_bhb_loop+0x60/0xb0 [ 130.321631][ T4705] ? clear_bhb_loop+0x60/0xb0 [ 130.326443][ T4705] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.332369][ T4705] RIP: 0033:0x7f6d9619e159 [ 130.336814][ T4705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.356622][ T4705] RSP: 002b:00007f6d97047028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.365055][ T4705] RAX: ffffffffffffffda RBX: 00007f6d96426180 RCX: 00007f6d9619e159 [ 130.373147][ T4705] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000005 [ 130.381120][ T4705] RBP: 00007f6d96235024 R08: 0000000000000000 R09: 0000000000000000 [ 130.389091][ T4705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.397078][ T4705] R13: 00007f6d96426218 R14: 00007f6d96426180 R15: 00007ffc6d018e78 [ 130.405238][ T4705] [ 130.410545][ T4714] netlink: 16 bytes leftover after parsing attributes in process `syz.3.100'. [ 130.443593][ T4710] netlink: 'syz.2.92': attribute type 4 has an invalid length. [ 132.452449][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 132.496914][ T4725] trusted_key: encrypted_key: insufficient parameters specified [ 133.607481][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.615841][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.634094][ T4737] rdma_rxe: rxe_register_device failed with error -23 [ 133.826409][ T4737] rdma_rxe: failed to add wg0 [ 133.898685][ T4737] netlink: 92 bytes leftover after parsing attributes in process `syz.4.106'. [ 135.256020][ T4326] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 135.630682][ T27] audit: type=1800 audit(1788284910.110:3): pid=4747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.111" name="memory_backed" dev="configfs" ino=87540 res=0 errno=0 [ 136.168364][ T4326] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.180104][ T4326] usb 5-1: config 1 interface 1 altsetting 65 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 136.192056][ T4326] usb 5-1: config 1 interface 1 has no altsetting 1 [ 136.242892][ T4326] usb 5-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 136.260575][ T27] audit: type=1800 audit(1788284910.120:4): pid=4747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.111" name="power" dev="configfs" ino=87541 res=0 errno=0 [ 136.290657][ T4326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.300850][ T4326] usb 5-1: Product: syz [ 136.305052][ T4326] usb 5-1: Manufacturer: syz [ 136.319916][ T4326] usb 5-1: SerialNumber: syz [ 136.510641][ T4278] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 136.567120][ T4326] usb 5-1: 1:65 : no or invalid class specific endpoint descriptor [ 136.835839][ T4326] usb 5-1: USB disconnect, device number 4 [ 136.850750][ T4278] usb 1-1: Using ep0 maxpacket: 16 [ 136.859609][ T4278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.878903][ T4760] loop4: detected capacity change from 0 to 1024 [ 136.883977][ T4278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.090166][ T4760] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 137.807002][ T4278] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 137.816489][ T4278] usb 1-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 137.826525][ T4278] usb 1-1: Manufacturer: syz [ 137.831911][ T4760] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.833177][ T4278] usb 1-1: config 0 descriptor?? [ 138.888587][ T4774] ------------[ cut here ]------------ [ 138.894494][ T4774] failed to allocate ring buffer on CPU 1 [ 138.900291][ T4774] WARNING: CPU: 0 PID: 4774 at kernel/trace/ring_buffer.c:5860 trace_rb_cpu_prepare+0x349/0x3c0 [ 138.910783][ T4774] Modules linked in: [ 138.914673][ T4774] CPU: 0 PID: 4774 Comm: syz.1.110 Not tainted syzkaller #0 [ 138.921996][ T4774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.932275][ T4774] RIP: 0010:trace_rb_cpu_prepare+0x349/0x3c0 [ 138.938341][ T4774] Code: f0 48 0f ab 08 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d6 01 fd ff 48 c7 c7 e0 72 90 8a 44 89 f6 e8 17 89 c8 ff <0f> 0b b8 f4 ff ff ff eb d4 e8 b9 01 fd ff 0f 0b e9 07 fd ff ff e8 [ 138.958075][ T4774] RSP: 0018:ffffc900062b7a98 EFLAGS: 00010246 [ 138.964156][ T4774] RAX: 4c2edb72a0c2e500 RBX: dffffc0000000000 RCX: 0000000000080000 [ 138.972139][ T4774] RDX: ffffc9000ed21000 RSI: 000000000005a636 RDI: 000000000005a637 [ 138.980120][ T4774] RBP: ffff888029060e08 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 138.988107][ T4774] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: ffff88801d73c0b0 [ 138.996211][ T4774] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888029060e08 [ 139.004397][ T4774] FS: 00007fec0ecfd6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 139.013342][ T4774] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.019911][ T4774] CR2: 0000001b2fd22ff8 CR3: 000000002f544000 CR4: 00000000003506f0 [ 139.027956][ T4774] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 139.036151][ T4774] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 139.044178][ T4774] Call Trace: [ 139.047458][ T4774] [ 139.050399][ T4774] ? rb_get_reader_page+0xcd0/0xcd0 [ 139.055783][ T4774] cpuhp_invoke_callback+0x481/0x7e0 [ 139.061115][ T4774] ? __cpuhp_state_add_instance_cpuslocked+0x10b/0x600 [ 139.067992][ T4774] ? rb_get_reader_page+0xcd0/0xcd0 [ 139.073250][ T4774] ? mutex_lock_nested+0x10/0x10 [ 139.078192][ T4774] cpuhp_issue_call+0x452/0x7f0 [ 139.083090][ T4774] ? _find_next_bit+0x87/0x130 [ 139.087863][ T4774] __cpuhp_state_add_instance_cpuslocked+0x229/0x600 [ 139.094615][ T4774] __cpuhp_state_add_instance+0x21/0x30 [ 139.100264][ T4774] __ring_buffer_alloc+0x336/0x5d0 [ 139.105417][ T4774] allocate_trace_buffers+0x70/0x2b0 [ 139.110744][ T4774] ? __raw_spin_lock_init+0x41/0x100 [ 139.116130][ T4774] trace_array_create+0x2d6/0xcb0 [ 139.121184][ T4774] ? instance_mkdir+0xb9/0x120 [ 139.125955][ T4774] instance_mkdir+0xc8/0x120 [ 139.130661][ T4774] tracefs_syscall_mkdir+0xb7/0x110 [ 139.135963][ T4774] vfs_mkdir+0x386/0x570 [ 139.140299][ T4774] do_mkdirat+0x1d8/0x440 [ 139.144905][ T4774] ? vfs_mkdir+0x570/0x570 [ 139.149329][ T4774] __x64_sys_mkdirat+0x85/0x90 [ 139.154304][ T4774] do_syscall_64+0x4c/0xa0 [ 139.158721][ T4774] ? clear_bhb_loop+0x60/0xb0 [ 139.163644][ T4774] ? clear_bhb_loop+0x60/0xb0 [ 139.168342][ T4774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.174271][ T4774] RIP: 0033:0x7fec0dd9e159 [ 139.178684][ T4774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.198444][ T4774] RSP: 002b:00007fec0ecfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 139.207191][ T4774] RAX: ffffffffffffffda RBX: 00007fec0e026090 RCX: 00007fec0dd9e159 [ 139.215298][ T4774] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 139.223486][ T4774] RBP: 00007fec0de35024 R08: 0000000000000000 R09: 0000000000000000 [ 139.231760][ T4774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.239990][ T4774] R13: 00007fec0e026128 R14: 00007fec0e026090 R15: 00007ffd1b53fa38 [ 139.248393][ T4774] [ 139.251477][ T4774] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 139.258917][ T4774] CPU: 0 PID: 4774 Comm: syz.1.110 Not tainted syzkaller #0 [ 139.266479][ T4774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.276805][ T4774] Call Trace: [ 139.280271][ T4774] [ 139.283192][ T4774] dump_stack_lvl+0x188/0x24e [ 139.287899][ T4774] ? memcpy+0x3c/0x60 [ 139.291897][ T4774] ? show_regs_print_info+0x12/0x12 [ 139.297233][ T4774] ? load_image+0x410/0x410 [ 139.302015][ T4774] panic+0x2d3/0x710 [ 139.305907][ T4774] ? bpf_jit_dump+0xd0/0xd0 [ 139.310558][ T4774] __warn+0x2f8/0x4f0 [ 139.314782][ T4774] ? trace_rb_cpu_prepare+0x349/0x3c0 [ 139.320601][ T4774] ? trace_rb_cpu_prepare+0x349/0x3c0 [ 139.325976][ T4774] report_bug+0x2ba/0x4f0 [ 139.330322][ T4774] ? trace_rb_cpu_prepare+0x349/0x3c0 [ 139.335702][ T4774] handle_bug+0x3a/0x70 [ 139.339849][ T4774] exc_invalid_op+0x16/0x40 [ 139.344356][ T4774] asm_exc_invalid_op+0x16/0x20 [ 139.349296][ T4774] RIP: 0010:trace_rb_cpu_prepare+0x349/0x3c0 [ 139.355281][ T4774] Code: f0 48 0f ab 08 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d6 01 fd ff 48 c7 c7 e0 72 90 8a 44 89 f6 e8 17 89 c8 ff <0f> 0b b8 f4 ff ff ff eb d4 e8 b9 01 fd ff 0f 0b e9 07 fd ff ff e8 [ 139.374885][ T4774] RSP: 0018:ffffc900062b7a98 EFLAGS: 00010246 [ 139.380944][ T4774] RAX: 4c2edb72a0c2e500 RBX: dffffc0000000000 RCX: 0000000000080000 [ 139.388922][ T4774] RDX: ffffc9000ed21000 RSI: 000000000005a636 RDI: 000000000005a637 [ 139.397259][ T4774] RBP: ffff888029060e08 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 139.405426][ T4774] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: ffff88801d73c0b0 [ 139.413754][ T4774] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888029060e08 [ 139.421911][ T4774] ? trace_rb_cpu_prepare+0x349/0x3c0 [ 139.427389][ T4774] ? rb_get_reader_page+0xcd0/0xcd0 [ 139.432692][ T4774] cpuhp_invoke_callback+0x481/0x7e0 [ 139.438146][ T4774] ? __cpuhp_state_add_instance_cpuslocked+0x10b/0x600 [ 139.445159][ T4774] ? rb_get_reader_page+0xcd0/0xcd0 [ 139.450805][ T4774] ? mutex_lock_nested+0x10/0x10 [ 139.455764][ T4774] cpuhp_issue_call+0x452/0x7f0 [ 139.460631][ T4774] ? _find_next_bit+0x87/0x130 [ 139.465587][ T4774] __cpuhp_state_add_instance_cpuslocked+0x229/0x600 [ 139.472273][ T4774] __cpuhp_state_add_instance+0x21/0x30 [ 139.477829][ T4774] __ring_buffer_alloc+0x336/0x5d0 [ 139.482948][ T4774] allocate_trace_buffers+0x70/0x2b0 [ 139.488794][ T4774] ? __raw_spin_lock_init+0x41/0x100 [ 139.494177][ T4774] trace_array_create+0x2d6/0xcb0 [ 139.499734][ T4774] ? instance_mkdir+0xb9/0x120 [ 139.504525][ T4774] instance_mkdir+0xc8/0x120 [ 139.509212][ T4774] tracefs_syscall_mkdir+0xb7/0x110 [ 139.514693][ T4774] vfs_mkdir+0x386/0x570 [ 139.519062][ T4774] do_mkdirat+0x1d8/0x440 [ 139.523673][ T4774] ? vfs_mkdir+0x570/0x570 [ 139.528091][ T4774] __x64_sys_mkdirat+0x85/0x90 [ 139.532945][ T4774] do_syscall_64+0x4c/0xa0 [ 139.537557][ T4774] ? clear_bhb_loop+0x60/0xb0 [ 139.542327][ T4774] ? clear_bhb_loop+0x60/0xb0 [ 139.547008][ T4774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.552916][ T4774] RIP: 0033:0x7fec0dd9e159 [ 139.557405][ T4774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.577291][ T4774] RSP: 002b:00007fec0ecfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 139.585864][ T4774] RAX: ffffffffffffffda RBX: 00007fec0e026090 RCX: 00007fec0dd9e159 [ 139.593844][ T4774] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 139.601815][ T4774] RBP: 00007fec0de35024 R08: 0000000000000000 R09: 0000000000000000 [ 139.609795][ T4774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.617863][ T4774] R13: 00007fec0e026128 R14: 00007fec0e026090 R15: 00007ffd1b53fa38 [ 139.625866][ T4774] [ 139.629294][ T4774] Kernel Offset: disabled [ 139.633687][ T4774] Rebooting in 86400 seconds..