last executing test programs: 13m37.928167406s ago: executing program 2 (id=72): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/test/cgroup.procs\x00', 0x802, 0x0) write(r1, &(0x7f0000000240)='0', 0x1) socket$netlink(0x10, 0x3, 0x0) unshare(0x80) 13m36.528324247s ago: executing program 2 (id=74): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002"], 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fcntl$setown(r1, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0xef0, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000500)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) r5 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0xfe, 0x7fff0007}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000600), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000780)={0x20004, r6, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000007c0)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000800)={r9}) close_range(r4, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 13m31.280537067s ago: executing program 2 (id=85): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x4008040) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000019800)={0x0, 0x0, &(0x7f0000019840)={&(0x7f0000019880)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3000000000080041007278"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000194c0)={0xffffffffffffffff, 0xfca804a0, 0x4, 0x8, &(0x7f0000019540)="b8000005", &(0x7f0000019580)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r2, 0x1, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0xd6d18000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r4, &(0x7f00000004c0)=""/102392, 0x18ff8) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000195c0)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x4a}, 0xd8) close(r5) 13m30.249004961s ago: executing program 2 (id=87): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000002) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000740)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000780), 0x0, 0x0) read$msr(r2, &(0x7f00000007c0)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000004c0)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) shutdown(r3, 0x0) 13m28.262637381s ago: executing program 2 (id=88): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xa00, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0xf, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) 13m12.999038733s ago: executing program 32 (id=88): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xa00, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0xf, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) 10m24.322231122s ago: executing program 3 (id=346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000088}, 0x0) tgkill(0x0, 0x0, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000019780)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040600000100000001000000000000001800000002000004080000171300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd29, 0xfffffffc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r4, &(0x7f0000000580)=""/102392, 0x18ff8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x23, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x113, 0x6, 0x0, 0x0) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000300), 0x1) sendto$inet6(r5, &(0x7f0000000340)='l', 0x1, 0x20000010, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) syz_io_uring_setup(0x1de, &(0x7f0000019580)={0x0, 0x595d, 0x10000, 0x3, 0x10000051}, &(0x7f0000019600)=0x0, &(0x7f0000019640), &(0x7f0000019680)) syz_io_uring_submit(r7, 0x0, 0x0, &(0x7f0000019700)=@IORING_OP_PIPE={0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(0xffffffffffffffff, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 10m21.127073594s ago: executing program 3 (id=354): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001800), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000018c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000004000000000001b00000007002100626200"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010001000000000000001a0100000700210042420000300022802c000180080001000000000008000200e0a6240008000300"], 0x4c}}, 0x0) 10m13.591905005s ago: executing program 3 (id=361): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/fillfile\x00', 0x101042, 0x9d) write(r0, &(0x7f0000000180)="1f0102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8014) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0xc42, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000050000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x10, 0x70, &(0x7f00000005c0)="0000000005000000", &(0x7f0000000600)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write(r1, &(0x7f0000000580)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7bae4b9a, 0x2000007, 0x10, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000740)='100', 0x3) io_uring_setup(0x2bd2, &(0x7f0000000780)={0x0, 0x661f, 0x0, 0x1, 0x194}) epoll_create(0x7) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newlink={0x34, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x20000840) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') 10m6.824065218s ago: executing program 3 (id=374): syz_emit_ethernet(0x3e, &(0x7f0000000700)={@local, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xfffd, 0x0, 0x4000, {[@mptcp=@remove_addr={0x1e, 0x3, 0x1}]}}}}}}}, 0x0) 10m1.26030752s ago: executing program 3 (id=382): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000006380)=""/102392, 0x18ff8) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f000001f440), 0x2800) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x840, 0x0) r4 = openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x4c80, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt/trace_marker\x00', 0x1, 0x5a) 9m57.484240681s ago: executing program 3 (id=388): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x10004, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x7}, 0x50) 9m41.53996963s ago: executing program 33 (id=388): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x10004, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x7}, 0x50) 8m32.1066541s ago: executing program 4 (id=492): pipe2$9p(&(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000004740)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000004780)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000004840)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f00000048c0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000004900), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000004940)=0x6) r2 = syz_open_procfs(0x0, &(0x7f0000004980)='net/rpc\x00') r3 = openat(r2, &(0x7f00000049c0)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000004a00)=' f 127.0.0.1 2\\000\\\\00: l\\calhost\n', 0x24) 8m19.557879257s ago: executing program 4 (id=503): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) unshare(0xc040400) r3 = open$dir(0x0, 0x0, 0x2) renameat2(r3, &(0x7f0000000980)='./dev\x00', r3, 0x0, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r4, 0x0, 0x0, 0x0) 8m16.183115628s ago: executing program 4 (id=508): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r2, &(0x7f0000006380)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f000001f380)=0x7) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f000001f440), 0x2800) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x840, 0x0) r3 = openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x4c80, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt/trace_marker\x00', 0x1, 0x5a) 8m12.483747301s ago: executing program 4 (id=512): bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x2, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={r0}, 0x57) 8m10.871968084s ago: executing program 4 (id=514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000088}, 0x0) tgkill(0x0, 0x0, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000019780)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040600000100000001000000000000001800000002000004080000171300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd29, 0xfffffffc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r4, &(0x7f0000000580)=""/102392, 0x18ff8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x113, 0x6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000300), 0x1) sendto$inet6(r5, &(0x7f0000000340)='l', 0x1, 0x20000010, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) r6 = syz_io_uring_setup(0xefd, &(0x7f00000001c0)={0x0, 0xaa32, 0x10000, 0x2, 0x5b}, &(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_setup(0x1de, &(0x7f0000019580)={0x0, 0x595d, 0x10000, 0x3, 0x10000051}, &(0x7f0000019600)=0x0, &(0x7f0000019640), &(0x7f0000019680)) prlimit64(0x0, 0x7, &(0x7f00000196c0), 0x0) syz_io_uring_submit(r9, r7, r8, &(0x7f0000019700)=@IORING_OP_PIPE={0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r6, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000003c0), 0x0, 0x20044084, 0x0, 0x0) 8m9.192132684s ago: executing program 4 (id=515): pipe2$9p(&(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000004740)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000004780)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000004840)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f00000048c0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000004900), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000004940)=0x6) r2 = syz_open_procfs(0x0, &(0x7f0000004980)='net/rpc\x00') r3 = openat(r2, &(0x7f00000049c0)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000004a00)=' f 127.0.0.1 2\\000\\\\00: l\\calhost\n', 0x24) 7m54.005981077s ago: executing program 34 (id=515): pipe2$9p(&(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000004740)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000004780)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000004840)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f00000048c0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000004900), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000004940)=0x6) r2 = syz_open_procfs(0x0, &(0x7f0000004980)='net/rpc\x00') r3 = openat(r2, &(0x7f00000049c0)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000004a00)=' f 127.0.0.1 2\\000\\\\00: l\\calhost\n', 0x24) 5m51.020359613s ago: executing program 1 (id=720): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socket(0x1d, 0x2, 0x6) r0 = syz_ublk_setup_io_uring(0x22, &(0x7f00000004c0)={0x0, 0x30000000, 0x100, 0x2, 0x26a}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000080)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@any_dev={0x8, 0xfcf, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, 0x0) 5m50.197355126s ago: executing program 1 (id=721): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000003100090027bd70000000000004000000100018"], 0x24}, 0x1, 0x0, 0x0, 0x46854}, 0x4) 5m49.784030327s ago: executing program 1 (id=722): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) fcntl$setown(r1, 0x8, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0xef0, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x0, &(0x7f0000000500)}) r6 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0xfe, 0x7fff0007}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000600), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000780)={0x20004, r7, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000007c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000800)={r10}) close_range(r5, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 5m48.678300929s ago: executing program 1 (id=724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000088}, 0x0) tgkill(0x0, 0x0, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000019780)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040600000100000001000000000000001800000002000004080000171300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd29, 0xfffffffc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x23, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x113, 0x6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000300), 0x1) sendto$inet6(r4, &(0x7f0000000340)='l', 0x1, 0x20000010, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) r6 = syz_io_uring_setup(0xefd, &(0x7f00000001c0)={0x0, 0xaa32, 0x10000, 0x2, 0x5b}, &(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_setup(0x1de, &(0x7f0000019580)={0x0, 0x595d, 0x10000, 0x3, 0x10000051}, &(0x7f0000019600)=0x0, &(0x7f0000019640), &(0x7f0000019680)) prlimit64(0x0, 0x7, &(0x7f00000196c0), 0x0) syz_io_uring_submit(r9, r7, r8, &(0x7f0000019700)=@IORING_OP_PIPE={0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r6, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000003c0), 0x0, 0x20044084, 0x0, 0x0) 5m45.846569615s ago: executing program 1 (id=727): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x141102) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000680)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000006c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 5m35.520159278s ago: executing program 1 (id=741): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000680)={0xa, 0x4e24, 0x1, @loopback, 0x4}, 0x1c, 0x0}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) r4 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000480)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048170}], 0x1, 0x20008004) 5m19.113665654s ago: executing program 35 (id=741): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000680)={0xa, 0x4e24, 0x1, @loopback, 0x4}, 0x1c, 0x0}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) r4 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000480)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048170}], 0x1, 0x20008004) 4m26.206568325s ago: executing program 5 (id=834): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socket(0x1d, 0x2, 0x6) r0 = syz_ublk_setup_io_uring(0x22, &(0x7f00000004c0)={0x0, 0x30000000, 0x100, 0x2, 0x26a}, &(0x7f00000001c0)=0x0, 0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, 0x0, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}}) syz_ublk_add_dev(r0, r1, 0x0, r2, &(0x7f0000000080)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@any_dev={0x8, 0xfcf, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, 0x0) 4m25.622559084s ago: executing program 5 (id=836): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) getgid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000013540), 0x2, 0x0) read$FUSE(r1, &(0x7f0000013580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r1, &(0x7f00000155c0)={0x130, 0x0, r2, {0xffffffffffffffff, 0x80000333, 0x0, '\x00', {0x10, 0x800, 0xd, 0x7fff, 0x0, r3, 0x4000, '\x00', 0x2, 0x9, 0x9, 0x101, {0xffffffffffff800d, 0x5}, {0x5, 0x4}, {0x1, 0x9}, {0xa, 0x6}, 0x9, 0xdc44, 0x80000001, 0x1}}}, 0x130) 4m24.08093443s ago: executing program 5 (id=839): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) syz_usb_connect(0x0, 0x63, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000404c17aa4600010102030109025100010100c0320904000002080650000705010200020007058202000200090400010408066200070501020003"], 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 4m18.33210287s ago: executing program 5 (id=845): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0800000004000000040000000500010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000180000000000"], 0x50) 4m12.319924027s ago: executing program 5 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000088}, 0x0) tgkill(0x0, 0x0, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000019780)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040600000100000001000000000000001800000002000004080000171300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd29, 0xfffffffc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x800) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x23, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x113, 0x6, 0x0, 0x0) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000300), 0x1) sendto$inet6(r4, &(0x7f0000000340)='l', 0x1, 0x20000010, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) r6 = syz_io_uring_setup(0xefd, &(0x7f00000001c0)={0x0, 0xaa32, 0x10000, 0x2, 0x5b}, &(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_setup(0x1de, &(0x7f0000019580)={0x0, 0x595d, 0x10000, 0x3, 0x10000051}, &(0x7f0000019600)=0x0, &(0x7f0000019640), &(0x7f0000019680)) syz_io_uring_submit(r9, r7, r8, &(0x7f0000019700)=@IORING_OP_PIPE={0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r6, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 4m10.10946435s ago: executing program 5 (id=853): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setscheduler(0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) r1 = socket(0x10, 0x3, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10122, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m53.651383132s ago: executing program 36 (id=853): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setscheduler(0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) r1 = socket(0x10, 0x3, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10122, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m28.226341629s ago: executing program 7 (id=911): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='7', 0x1) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 3m27.923538689s ago: executing program 7 (id=912): syz_open_dev$usbfs(0x0, 0x1ff, 0x103202) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) connect$inet(r3, &(0x7f00000004c0)={0x2, 0x4, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000500)={0x84, @local, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000540)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'lc\x00', 0x22, 0xc, 0x80056}, {@rand_addr=0x64010101, 0x4e23, 0x10000, 0x1, 0x1}}, 0x44) sendmsg$sock(r1, &(0x7f00000005c0)={&(0x7f0000000600)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x30}}, 0x80, 0x0, 0x0, &(0x7f0000000680)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3m26.663272076s ago: executing program 7 (id=914): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$hiddev(0x0, 0x4, 0xa100) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000b00)=@userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, "b40600"}, 0x0, 0x2, {0x0}, 0x400000}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000bc0)={0x1, 0x1, 0x4}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x6, 0x75, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000e00), 0x4000000086a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r1, 0x3554000) 3m18.126077028s ago: executing program 7 (id=921): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='7', 0x1) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 3m17.729849568s ago: executing program 7 (id=923): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000480), 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0xd3a, &(0x7f0000000380)={0x0, 0x8010001, 0x1000, 0x200004, 0x8a}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x638) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 3m15.53893654s ago: executing program 7 (id=926): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000440), 0x1, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x141102) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000680)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000006c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 2m59.168380512s ago: executing program 37 (id=926): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000440), 0x1, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x141102) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000680)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000006c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 17.444076279s ago: executing program 9 (id=1164): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='100', 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000300), 0x2204803, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 17.202431363s ago: executing program 0 (id=1165): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002"], 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) fcntl$setown(r1, 0x8, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0xef0, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0xfe, 0x7fff0007}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000600), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000780)={0x20004, r5, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000007c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000800)={r8}) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 16.406133554s ago: executing program 0 (id=1166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r4, &(0x7f0000000840)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f0000019840), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019880)={0x11, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000000010000007000000dcef1419119243d5073be73cbe6a357c1b", @ANYRES32, @ANYBLOB="00000000000000116608000010000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000"], &(0x7f0000019a00)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000019a40)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000019a80)={&(0x7f0000019ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000019b00)={&(0x7f0000019b40)=ANY=[@ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x801}, 0x800) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000019b80)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x23, 0x6e}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x27, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e21, 0x12, @private1, 0x14}, 0x1c, 0x0, 0x64}, 0x0) 14.728048913s ago: executing program 9 (id=1168): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r3, 0xffff) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x4000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000380)=0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000003c0)={0x2020}, 0x2020) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000002440), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002500)={0x38, r7, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x1c}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) sendmsg$FOU_CMD_GET(r5, &(0x7f0000002600)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="040026bd7000fcdbdf2503000000080006000a010102050002002000000014000700fe8000000000000000000000000000bb04000500050003006200000008000800ffffffff050003002b000000"], 0x54}, 0x1, 0x0, 0x0, 0x1808}, 0x4040000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000800) r8 = add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f0000002640)="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", 0x559, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000002bc0)={r8, 0x2, 0x2}, &(0x7f0000002c00)={'enc=', 'pkcs1', ' hash=', {'sha256\x00'}}, &(0x7f0000002c80)="eae2", &(0x7f0000002cc0)="9069") close_range(r1, 0xffffffffffffffff, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 12.848715113s ago: executing program 0 (id=1170): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x2, 0x1000, 0x7800010c, &(0x7f0000ffd000/0x1000)=nil) open(&(0x7f0000000080)='./file0\x00', 0x141400, 0xd2) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000300)='id_resolver\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r3, 0xc3) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xffffffffffffffff) 12.455784683s ago: executing program 6 (id=1171): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) getgid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000013540), 0x2, 0x0) read$FUSE(r1, &(0x7f0000013580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r1, &(0x7f00000155c0)={0x130, 0x0, r2, {0xffffffffffffffff, 0x80000333, 0x0, '\x00', {0x10, 0x800, 0xd, 0x7fff, 0x0, r3, 0x4000, '\x00', 0x2, 0x9, 0x9, 0x101, {0xffffffffffff800d, 0x5}, {0x5, 0x4}, {0x1, 0x9}, {0xa, 0x6}, 0x9, 0xdc44, 0x80000001, 0x1}}}, 0x130) 12.080031981s ago: executing program 8 (id=1172): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 11.994693699s ago: executing program 6 (id=1173): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) io_setup(0x2, 0x0) eventfd(0x1) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000440)=[{{&(0x7f0000000500)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0), 0x1}}], 0x3, 0x1c000) 11.103511099s ago: executing program 9 (id=1174): r0 = openat(0xffffffffffffff9c, &(0x7f0000019380)='./tracing/events/sched/filter\x00', 0x1, 0x15d) write(r0, &(0x7f00000193c0)='common_pid > 0', 0xe) 10.875832432s ago: executing program 8 (id=1175): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000195c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000019600), 0x0, 0x0) read$msr(r2, &(0x7f0000019b00)=""/102392, 0x18ff8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000032b00)='.\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x1, 0x5000003a, r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000032b40)='.\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000032b80)={0x2020}, 0x2020) 10.541492816s ago: executing program 6 (id=1176): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002"], 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) fcntl$setown(r1, 0x8, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0xef0, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x0, &(0x7f0000000500)}) r4 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0xfe, 0x7fff0007}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000600), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000780)={0x20004, r5, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000007c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000800)={r8}) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 9.307306471s ago: executing program 0 (id=1177): r0 = fsopen(&(0x7f0000000340)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xb) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/trace_clock\x00', 0x1, 0x0) 9.231945988s ago: executing program 9 (id=1178): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r2, &(0x7f0000000480)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000300)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 7.368275886s ago: executing program 9 (id=1179): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ftruncate(0xffffffffffffffff, 0xffff) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)=0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000003c0)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r2, &(0x7f0000002600)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="040026bd7000fcdbdf2503000000080006000a010102050002002000000014000700fe8000000000000000000000000000bb04000500050003006200000008000800ffffffff050003002b000000"], 0x54}, 0x1, 0x0, 0x0, 0x1808}, 0x4040000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000800) r3 = add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f0000002640)="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", 0x559, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000002bc0)={r3, 0x2, 0x2}, &(0x7f0000002c00)={'enc=', 'pkcs1', ' hash=', {'sha256\x00'}}, &(0x7f0000002c80)="eae2", &(0x7f0000002cc0)="9069") close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 7.291887444s ago: executing program 6 (id=1180): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000240)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) ioctl$BLKPG(r4, 0x80c84d0a, 0x0) 6.355991489s ago: executing program 0 (id=1181): execveat(0xffffffffffffff9c, &(0x7f000001a500)='./file2\x00', 0x0, 0x0, 0x1000) symlinkat(&(0x7f000001a580)='./file2\x00', 0xffffffffffffffff, &(0x7f000001a540)='./tracing\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x34}, 0x28) socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000180)='./md0\x00', 0x6180, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x800001000085}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000019440), 0x401, 0x0) write$UHID_INPUT(r1, &(0x7f0000019480)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f00000002c0)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f00000192c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000019300)='./tracing\x00', &(0x7f0000019340)='tracefs\x00', 0x0, 0x0) add_key(&(0x7f000001a4c0)='asymmetric\x00', 0x0, &(0x7f000001a5c0)="3081d73081ba020101300d06092a864886f70d01010b0500300d310b3009060355040313024341301e170d3230303130313030303030305a170d3330303130313030303030305a300f310d300b06035504031304557365723066301f06082a85030701010101301306072a85030202230106082a850307010102020343000440d5a777f9262f8cbdcce31f0194053d2fecb50034f5516d3b904b23286f1dc836616036ecbbb40b954e544f152105d8526644317e5dc5d126005f60d8f0c727fc300d06092a864886f70d01010b05000309000102030405060708", 0xda, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000019380)='./tracing/events/sched/filter\x00', 0x1, 0x15d) write(r3, &(0x7f00000193c0)='common_pid > 0', 0xe) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000019400)={0x1f, @none}, 0x8) listen(r4, 0x5) accept(r4, 0x0, 0x0) 4.401825076s ago: executing program 8 (id=1182): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) getgid() r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r1, &(0x7f0000013580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r1, &(0x7f00000155c0)={0x130, 0x0, r2, {0xffffffffffffffff, 0x80000333, 0x0, '\x00', {0x10, 0x800, 0xd, 0x7fff, 0x0, r3, 0x4000, '\x00', 0x2, 0x9, 0x9, 0x101, {0xffffffffffff800d, 0x5}, {0x5, 0x4}, {0x1, 0x9}, {0xa, 0x6}, 0x9, 0xdc44, 0x80000001, 0x1}}}, 0x130) 4.304009636s ago: executing program 0 (id=1183): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r3, 0xffff) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x4000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000380)=0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000003c0)={0x2020}, 0x2020) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000002440), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002500)={0x38, r7, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x1c}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) sendmsg$FOU_CMD_GET(r5, &(0x7f0000002600)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="040026bd7000fcdbdf2503000000080006000a010102050002002000000014000700fe8000000000000000000000000000bb04000500050003006200000008000800ffffffff050003002b000000"], 0x54}, 0x1, 0x0, 0x0, 0x1808}, 0x4040000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000800) r8 = add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f0000002640)="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", 0x559, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000002bc0)={r8, 0x2, 0x2}, &(0x7f0000002c00)={'enc=', 'pkcs1', ' hash=', {'sha256\x00'}}, &(0x7f0000002c80)="eae2", &(0x7f0000002cc0)="9069") close_range(r1, 0xffffffffffffffff, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 3.983894628s ago: executing program 9 (id=1184): socket$inet(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi4\x00', 0x109040, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8000, 0x2100, 0xc6, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x10000, 0xfffffffe, 0xc0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb5a9, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1.98015946s ago: executing program 8 (id=1185): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r0, &(0x7f00000003c0), 0x100) 1.97972758s ago: executing program 6 (id=1186): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a00)={0x0, 0x30b5, 0x0, 0x0, 0x3c5}, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000c80)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000d00)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000d40)=0x0) syz_ublk_setup_queues(r2, r7, &(0x7f0000000d80)={0x0, 0x1, 0x1, 0x3, 0x255}, &(0x7f0000000e00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e2e, 0x8, 0x2, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x230}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x0, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20000, 0x2, 0x20367}}], 0x1, &(0x7f0000001080)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x2, 0x0, 0x0}}, 0x0) write(r0, &(0x7f0000000100)='2', 0x1) 1.774357741s ago: executing program 8 (id=1187): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x2, 0x1000, 0x7800010c, &(0x7f0000ffd000/0x1000)=nil) open(&(0x7f0000000080)='./file0\x00', 0x141400, 0xd2) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000300)='id_resolver\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r3, 0xc3) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xffffffffffffffff) 442.478865ms ago: executing program 8 (id=1188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@getqdisc={0x24, 0x25, 0x1, 0x74bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000000900)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.688519ms ago: executing program 6 (id=1189): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002"], 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) fcntl$setown(r1, 0x8, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0xef0, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x0, &(0x7f0000000500)}) r4 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0xfe, 0x7fff0007}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000600), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000780)={0x20004, r5, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000007c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000800)={r8}) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 0s ago: executing program 2 (id=948): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000000000085000000630000001500020000000000bf01000000000000850000005600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000540)="f4b84de4116dbdfec2d408000000", 0x0, 0x200401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): ] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 377.682035][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 377.730463][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 377.770248][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.777505][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.817309][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 377.875442][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 377.932005][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 378.473956][ T6340] syz.0.418: attempt to access beyond end of device [ 378.473956][ T6340] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 378.487219][ T6340] FAT-fs (loop1): unable to read boot sector [ 379.511649][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 379.566280][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 379.595185][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 379.612577][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 379.666878][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 379.721481][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 379.778464][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 379.821538][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 379.855088][ T6236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 382.033091][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 382.050962][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 382.110116][ T6236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.036501][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.043241][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.822242][ T6415] syz.0.430: attempt to access beyond end of device [ 387.822242][ T6415] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 387.835201][ T6415] FAT-fs (loop1): unable to read boot sector [ 389.018130][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 389.033436][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 389.299475][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 389.343501][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 389.389510][ T6236] device veth0_vlan entered promiscuous mode [ 389.396859][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 389.449910][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 389.524846][ T6236] device veth1_vlan entered promiscuous mode [ 389.617339][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 389.638720][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 389.683668][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 389.724250][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 389.777363][ T6236] device veth0_macvtap entered promiscuous mode [ 389.846878][ T6236] device veth1_macvtap entered promiscuous mode [ 389.966911][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.012800][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.054097][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.104895][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.155952][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.215483][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.263942][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.317676][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.345717][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.379434][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.414621][ T6236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.451829][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 390.470920][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 390.504013][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 390.543343][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 390.651700][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.692951][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.742790][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.789351][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.822909][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.882963][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.936342][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.977058][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.019681][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.040473][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.087201][ T6236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.172933][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 391.213170][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 391.227427][ T6236] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.242804][ T6236] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.251582][ T6236] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.282714][ T6236] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.524744][ T6452] netlink: 48 bytes leftover after parsing attributes in process `syz.5.440'. [ 391.562847][ T4377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.570754][ T4377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.651341][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 391.682164][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.712783][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.736762][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 391.839712][ T6458] netlink: 36 bytes leftover after parsing attributes in process `syz.4.441'. [ 393.960351][ T6471] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 398.373410][ T6489] FAULT_INJECTION: forcing a failure. [ 398.373410][ T6489] name failslab, interval 1, probability 0, space 0, times 0 [ 398.433083][ T6489] CPU: 1 PID: 6489 Comm: syz.6.450 Not tainted syzkaller #0 [ 398.440454][ T6489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 398.450565][ T6489] Call Trace: [ 398.453949][ T6489] [ 398.456996][ T6489] dump_stack_lvl+0x188/0x24e [ 398.461815][ T6489] ? show_regs_print_info+0x12/0x12 [ 398.467116][ T6489] ? load_image+0x410/0x410 [ 398.471672][ T6489] ? kasan_set_track+0x60/0x70 [ 398.476529][ T6489] ? __kasan_slab_alloc+0x6b/0x80 [ 398.481571][ T6489] ? slab_post_alloc_hook+0x4b/0x490 [ 398.486888][ T6489] ? kmem_cache_alloc+0x18b/0x2f0 [ 398.491933][ T6489] ? dst_alloc+0x101/0x160 [ 398.496470][ T6489] ? ip_route_output_key_hash_rcu+0x14e4/0x2410 [ 398.502752][ T6489] ? ip_route_output_key_hash+0x1ef/0x330 [ 398.508505][ T6489] should_fail_ex+0x390/0x4c0 [ 398.513266][ T6489] should_failslab+0x5/0x20 [ 398.517830][ T6489] slab_pre_alloc_hook+0x59/0x300 [ 398.522871][ T6489] ? ref_tracker_alloc+0x14f/0x490 [ 398.528037][ T6489] __kmem_cache_alloc_node+0x4f/0x270 [ 398.533428][ T6489] ? ref_tracker_alloc+0x14f/0x490 [ 398.538565][ T6489] kmalloc_trace+0x26/0xe0 [ 398.543015][ T6489] ref_tracker_alloc+0x14f/0x490 [ 398.547992][ T6489] ? ref_tracker_dir_print+0x150/0x150 [ 398.553475][ T6489] ? __kasan_slab_alloc+0x6b/0x80 [ 398.558532][ T6489] ? slab_post_alloc_hook+0x67/0x490 [ 398.563877][ T6489] ? slab_pre_alloc_hook+0x59/0x300 [ 398.569110][ T6489] ? rcu_is_watching+0x11/0xa0 [ 398.573972][ T6489] dst_init+0xb1/0x400 [ 398.578074][ T6489] dst_alloc+0x12a/0x160 [ 398.582344][ T6489] ip_route_output_key_hash_rcu+0x14e4/0x2410 [ 398.588452][ T6489] ? ip_route_output_key_hash_rcu+0x1201/0x2410 [ 398.594880][ T6489] ? ip_route_output_key_hash+0x139/0x330 [ 398.600618][ T6489] ip_route_output_key_hash+0x1ef/0x330 [ 398.606179][ T6489] ? kfree+0x30/0x1a0 [ 398.610177][ T6489] ? ip_route_input_rcu+0x3110/0x3110 [ 398.615566][ T6489] ? ip_cmsg_send+0x9a5/0xa50 [ 398.620275][ T6489] ip_route_output_flow+0x26/0x150 [ 398.625467][ T6489] ? security_sk_classify_flow+0x77/0x90 [ 398.631155][ T6489] raw_sendmsg+0xf7c/0x1940 [ 398.635727][ T6489] ? compat_raw_ioctl+0x60/0x60 [ 398.640663][ T6489] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 398.647191][ T6489] ? aa_sock_msg_perm+0x94/0x150 [ 398.652205][ T6489] ? sock_rps_record_flow+0x19/0x3f0 [ 398.657539][ T6489] ? inet_sendmsg+0x7a/0x2a0 [ 398.662164][ T6489] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 398.667553][ T6489] ? inet_send_prepare+0x250/0x250 [ 398.672705][ T6489] ____sys_sendmsg+0x5ed/0x9a0 [ 398.677598][ T6489] ? __lock_acquire+0x7ea0/0x7ea0 [ 398.682684][ T6489] ? __sys_sendmsg_sock+0x30/0x30 [ 398.687732][ T6489] ? __import_iovec+0x306/0x510 [ 398.692698][ T6489] ? import_iovec+0x6f/0xa0 [ 398.697270][ T6489] ___sys_sendmsg+0x2a2/0x360 [ 398.702070][ T6489] ? __sys_sendmsg+0x2a0/0x2a0 [ 398.706987][ T6489] __se_sys_sendmsg+0x1c3/0x2b0 [ 398.711885][ T6489] ? __x64_sys_sendmsg+0x80/0x80 [ 398.716855][ T6489] ? lockdep_hardirqs_on+0x94/0x140 [ 398.722069][ T6489] do_syscall_64+0x4c/0xa0 [ 398.726507][ T6489] ? clear_bhb_loop+0x60/0xb0 [ 398.731287][ T6489] ? clear_bhb_loop+0x60/0xb0 [ 398.736011][ T6489] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.741923][ T6489] RIP: 0033:0x7f09a1f9fb19 [ 398.746405][ T6489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.766599][ T6489] RSP: 002b:00007f09a2dd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.775127][ T6489] RAX: ffffffffffffffda RBX: 00007f09a2225fa0 RCX: 00007f09a1f9fb19 [ 398.783125][ T6489] RDX: 0000000000000000 RSI: 0000200000000b80 RDI: 0000000000000004 [ 398.791134][ T6489] RBP: 00007f09a2037b70 R08: 0000000000000000 R09: 0000000000000000 [ 398.799120][ T6489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.807107][ T6489] R13: 00007f09a2226038 R14: 00007f09a2225fa0 R15: 00007ffcd9243918 [ 398.815122][ T6489] [ 398.942808][ T6489] memory allocation failure, unreliable refcount tracker. [ 400.814457][ T6495] Bluetooth: ISO socket layer initialized [ 400.957703][ T6499] netlink: 36 bytes leftover after parsing attributes in process `syz.6.453'. [ 402.727802][ T26] audit: type=1326 audit(1794256741.226:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.1.455" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d6079fb19 code=0x0 [ 412.069282][ T6550] Driver unsupported XDP return value 0 on prog (id 28) dev N/A, expect packet loss! [ 412.649532][ T6558] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 412.715580][ T6558] overlayfs: failed to look up (tracing) for ino (-66) [ 414.625921][ T6561] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.810647][ T6589] netlink: 36 bytes leftover after parsing attributes in process `syz.5.467'. [ 440.817058][ T6671] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 440.884792][ T6671] overlayfs: failed to look up (tracing) for ino (-66) [ 446.277416][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.283826][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.768344][ T26] audit: type=1326 audit(1794256785.266:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.6.502" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f09a1f9fb19 code=0x0 [ 448.041087][ T6702] netlink: 6 bytes leftover after parsing attributes in process `syz.6.502'. [ 448.050078][ T6702] netlink: 6 bytes leftover after parsing attributes in process `syz.6.502'. [ 450.192207][ T6721] netlink: 36 bytes leftover after parsing attributes in process `syz.4.514'. [ 454.635423][ T6740] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 457.917047][ T6762] netlink: 36 bytes leftover after parsing attributes in process `syz.0.525'. [ 463.018047][ T6794] ptp ptp0: new virtual clock ptp1 [ 463.045159][ T6794] ptp ptp0: new virtual clock ptp2 [ 463.083172][ T6794] ptp ptp0: new virtual clock ptp3 [ 463.969694][ T6794] ptp ptp0: new virtual clock ptp4 [ 463.982880][ T6794] failed to create ptp aux_worker -4 [ 464.043046][ T6813] netlink: 36 bytes leftover after parsing attributes in process `syz.5.537'. [ 468.783515][ T6837] rxe_eth0 speed is unknown, defaulting to 1000 [ 469.057532][ T4690] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.003300][ T4290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 470.012487][ T4290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 470.020901][ T4290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 470.038883][ T4290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 470.047794][ T4290] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 470.055290][ T4290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 470.105347][ T4690] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.249872][ T6854] netlink: 36 bytes leftover after parsing attributes in process `syz.6.548'. [ 470.434100][ T4690] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.523214][ T6851] rxe_eth0 speed is unknown, defaulting to 1000 [ 470.715970][ T4690] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.714147][ T4294] Bluetooth: hci2: command 0x0409 tx timeout [ 475.319829][ T4294] Bluetooth: hci2: command 0x041b tx timeout [ 475.461546][ T6851] chnl_net:caif_netlink_parms(): no params data found [ 476.154604][ T6851] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.170268][ T6851] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.259676][ T6851] device bridge_slave_0 entered promiscuous mode [ 477.103051][ T6851] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.110414][ T6851] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.082087][ T4294] Bluetooth: hci2: command 0x040f tx timeout [ 478.137426][ T6851] device bridge_slave_1 entered promiscuous mode [ 478.195299][ T6901] netlink: 36 bytes leftover after parsing attributes in process `syz.1.558'. [ 478.462136][ T6851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.904753][ T6851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.294922][ T6851] team0: Port device team_slave_0 added [ 479.323726][ T6851] team0: Port device team_slave_1 added [ 479.422268][ T6925] CIFS: Attempting to mount \\127.0.0.1\share [ 479.429230][ T6925] CIFS: VFS: No username specified [ 480.114081][ T4294] Bluetooth: hci2: command 0x0419 tx timeout [ 480.963789][ T6851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.970837][ T6851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.256831][ T6930] qrtr: Invalid version 0 [ 482.149582][ T6934] FAULT_INJECTION: forcing a failure. [ 482.149582][ T6934] name failslab, interval 1, probability 0, space 0, times 0 [ 482.172744][ T6934] CPU: 1 PID: 6934 Comm: syz.1.559 Not tainted syzkaller #0 [ 482.180114][ T6934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 482.190219][ T6934] Call Trace: [ 482.193538][ T6934] [ 482.196508][ T6934] dump_stack_lvl+0x188/0x24e [ 482.201256][ T6934] ? show_regs_print_info+0x12/0x12 [ 482.206517][ T6934] ? load_image+0x410/0x410 [ 482.211110][ T6934] ? __might_sleep+0xd0/0xd0 [ 482.215830][ T6934] ? __lock_acquire+0x7ea0/0x7ea0 [ 482.220911][ T6934] ? __crypto_alloc_tfm+0x12c/0x480 [ 482.226230][ T6934] should_fail_ex+0x390/0x4c0 [ 482.230969][ T6934] should_failslab+0x5/0x20 [ 482.235515][ T6934] slab_pre_alloc_hook+0x59/0x300 [ 482.240574][ T6934] ? skcipher_init_tfm_simple+0x5f/0x90 [ 482.246158][ T6934] ? init_skcipher_req+0x83/0x1b0 [ 482.251274][ T6934] __kmem_cache_alloc_node+0x4f/0x270 [ 482.256691][ T6934] ? init_skcipher_req+0x83/0x1b0 [ 482.261744][ T6934] __kmalloc+0xa3/0x240 [ 482.265935][ T6934] init_skcipher_req+0x83/0x1b0 [ 482.270822][ T6934] encrypted_read+0x2f5/0xe10 [ 482.275559][ T6934] ? encrypted_destroy+0x40/0x40 [ 482.280552][ T6934] ? __mod_lruvec_page_state+0xa1/0x410 [ 482.286230][ T6934] ? __might_sleep+0xd0/0xd0 [ 482.290852][ T6934] ? read_lock_is_recursive+0x10/0x10 [ 482.296265][ T6934] ? rcu_is_watching+0x11/0xa0 [ 482.301071][ T6934] ? down_read+0x1a8/0x2d0 [ 482.305517][ T6934] ? encrypted_destroy+0x40/0x40 [ 482.310487][ T6934] keyctl_read_key+0x25b/0x450 [ 482.315313][ T6934] __se_sys_keyctl+0x17f/0x870 [ 482.320111][ T6934] ? __x64_sys_keyctl+0xc0/0xc0 [ 482.324989][ T6934] ? do_futex+0x2e2/0x320 [ 482.329412][ T6934] ? __ia32_sys_get_robust_list+0x100/0x100 [ 482.335334][ T6934] ? __fdget+0x18e/0x200 [ 482.339678][ T6934] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 482.345694][ T6934] ? lock_chain_count+0x20/0x20 [ 482.350587][ T6934] ? lockdep_hardirqs_on+0x94/0x140 [ 482.355811][ T6934] ? __x64_sys_keyctl+0x1c/0xc0 [ 482.360698][ T6934] do_syscall_64+0x4c/0xa0 [ 482.365244][ T6934] ? clear_bhb_loop+0x60/0xb0 [ 482.369983][ T6934] ? clear_bhb_loop+0x60/0xb0 [ 482.374699][ T6934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 482.380639][ T6934] RIP: 0033:0x7f2d6079fb19 [ 482.385087][ T6934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.404726][ T6934] RSP: 002b:00007f2d616c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 482.413167][ T6934] RAX: ffffffffffffffda RBX: 00007f2d60a25fa0 RCX: 00007f2d6079fb19 [ 482.421165][ T6934] RDX: 0000200000000240 RSI: 000000003edd7fc1 RDI: 000000000000000b [ 482.429287][ T6934] RBP: 00007f2d60837b70 R08: 0000000000000000 R09: 0000000000000000 [ 482.437295][ T6934] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 482.445300][ T6934] R13: 00007f2d60a26038 R14: 00007f2d60a25fa0 R15: 00007fff4b580bb8 [ 482.453322][ T6934] [ 482.483955][ T6851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.542398][ T4690] device hsr_slave_0 left promiscuous mode [ 482.557565][ T4690] device hsr_slave_1 left promiscuous mode [ 482.586953][ T4690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.606944][ T4690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.642771][ T6934] trusted_key: encrypted_key: failed to allocate request for cbc(aes) [ 482.720026][ T4690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.739277][ T4690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.823257][ T4690] device bridge_slave_1 left promiscuous mode [ 482.829592][ T4690] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.878954][ T4690] device bridge_slave_0 left promiscuous mode [ 482.904615][ T4690] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.041121][ T4690] device veth1_macvtap left promiscuous mode [ 483.053208][ T4690] device veth0_macvtap left promiscuous mode [ 483.059391][ T4690] device veth1_vlan left promiscuous mode [ 483.525191][ T4690] device veth0_vlan left promiscuous mode [ 485.072737][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 485.274550][ T7] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 9 [ 485.314270][ T7] usb 2-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00 [ 485.333311][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.351742][ T7] usb 2-1: Product: syz [ 485.356117][ T7] usb 2-1: Manufacturer: syz [ 485.360755][ T7] usb 2-1: SerialNumber: syz [ 485.387247][ T6953] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 485.409230][ T7] digi_acceleport 2-1:1.0: Digi 2 port USB adapter converter detected [ 485.442509][ T7] usb 2-1: Digi 2 port USB adapter converter now attached to ttyUSB0 [ 485.469781][ T7] usb 2-1: Digi 2 port USB adapter converter now attached to ttyUSB1 [ 485.491140][ T7] usb 2-1: Digi 2 port USB adapter converter now attached to ttyUSB2 [ 487.048565][ T4281] usb 2-1: USB disconnect, device number 5 [ 487.096604][ T4281] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0 [ 487.125668][ T4281] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1 [ 487.164287][ T4281] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2 [ 487.181400][ T6974] capability: warning: `syz.1.572' uses deprecated v2 capabilities in a way that may be insecure [ 487.203861][ T4281] digi_acceleport 2-1:1.0: device disconnected [ 487.662773][ T6978] qrtr: Invalid version 0 [ 488.994287][ T4293] Bluetooth: hci1: command 0x0406 tx timeout [ 489.637268][ T4690] team0 (unregistering): Port device team_slave_1 removed [ 489.685826][ T4690] team0 (unregistering): Port device team_slave_0 removed [ 489.745937][ T4690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.794625][ T4690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.461373][ T4690] bond0 (unregistering): Released all slaves [ 490.851637][ T6851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.910032][ T6851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.094156][ T6851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.576874][ T6948] netlink: 36 bytes leftover after parsing attributes in process `syz.0.568'. [ 491.851753][ T6851] device hsr_slave_0 entered promiscuous mode [ 491.879945][ T6851] device hsr_slave_1 entered promiscuous mode [ 491.903499][ T6851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 491.932700][ T6851] Cannot create hsr debugfs directory [ 492.232839][ T6998] rxe_eth0 speed is unknown, defaulting to 1000 [ 493.548267][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.6.582'. [ 493.565956][ T6851] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 493.612429][ T6851] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 493.675453][ T6851] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 493.735387][ T6851] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 494.004157][ T7017] qrtr: Invalid version 0 [ 495.235719][ T6851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.303237][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 495.320439][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 495.367963][ T6851] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.395323][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 495.434338][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 495.454849][ T4377] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.462123][ T4377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.584822][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 495.596548][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 495.709803][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 496.893320][ T4377] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.900522][ T4377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.908848][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 497.041080][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 497.051165][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 497.085453][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 497.120453][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 498.233935][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 498.273790][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 498.293046][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 498.334335][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 498.363821][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 498.375202][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 498.411789][ T6851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 500.369503][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 500.403640][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 500.454480][ T6851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.973250][ T7076] netlink: 36 bytes leftover after parsing attributes in process `syz.6.588'. [ 505.260585][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 505.307334][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 505.387866][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 505.397157][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 505.432763][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 505.471715][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 505.492342][ T6851] device veth0_vlan entered promiscuous mode [ 505.528084][ T6851] device veth1_vlan entered promiscuous mode [ 505.662383][ T6851] device veth0_macvtap entered promiscuous mode [ 505.832993][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 505.842411][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 505.871953][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 505.902496][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 505.977171][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 507.044968][ T7122] FAULT_INJECTION: forcing a failure. [ 507.044968][ T7122] name failslab, interval 1, probability 0, space 0, times 0 [ 507.141602][ T7122] CPU: 1 PID: 7122 Comm: syz.5.601 Not tainted syzkaller #0 [ 507.148991][ T7122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 507.159098][ T7122] Call Trace: [ 507.162418][ T7122] [ 507.165388][ T7122] dump_stack_lvl+0x188/0x24e [ 507.170130][ T7122] ? show_regs_print_info+0x12/0x12 [ 507.175392][ T7122] ? load_image+0x410/0x410 [ 507.179965][ T7122] ? __might_sleep+0xd0/0xd0 [ 507.184690][ T7122] ? __lock_acquire+0x7ea0/0x7ea0 [ 507.189780][ T7122] should_fail_ex+0x390/0x4c0 [ 507.194520][ T7122] should_failslab+0x5/0x20 [ 507.199072][ T7122] slab_pre_alloc_hook+0x59/0x300 [ 507.204151][ T7122] ? __lock_acquire+0x7ea0/0x7ea0 [ 507.209235][ T7122] ? crypto_create_tfm_node+0x73/0x380 [ 507.214748][ T7122] __kmem_cache_alloc_node+0x4f/0x270 [ 507.220177][ T7122] ? crypto_create_tfm_node+0x73/0x380 [ 507.225685][ T7122] __kmalloc_node+0xa2/0x240 [ 507.230331][ T7122] crypto_create_tfm_node+0x73/0x380 [ 507.235667][ T7122] ? crypto_alg_mod_lookup+0x1a9/0x570 [ 507.241308][ T7122] crypto_alloc_tfm_node+0x177/0x360 [ 507.246652][ T7122] init_skcipher_req+0x23/0x1b0 [ 507.251567][ T7122] encrypted_read+0x2f5/0xe10 [ 507.256349][ T7122] ? encrypted_destroy+0x40/0x40 [ 507.261357][ T7122] ? __mod_lruvec_page_state+0xa1/0x410 [ 507.266976][ T7122] ? __might_sleep+0xd0/0xd0 [ 507.271616][ T7122] ? read_lock_is_recursive+0x10/0x10 [ 507.277052][ T7122] ? rcu_is_watching+0x11/0xa0 [ 507.281897][ T7122] ? down_read+0x1a8/0x2d0 [ 507.286366][ T7122] ? encrypted_destroy+0x40/0x40 [ 507.291363][ T7122] keyctl_read_key+0x25b/0x450 [ 507.296190][ T7122] __se_sys_keyctl+0x17f/0x870 [ 507.301011][ T7122] ? __x64_sys_keyctl+0xc0/0xc0 [ 507.305906][ T7122] ? do_futex+0x310/0x320 [ 507.310302][ T7122] ? __ia32_sys_get_robust_list+0x100/0x100 [ 507.316244][ T7122] ? __fdget+0x18e/0x200 [ 507.320592][ T7122] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 507.326642][ T7122] ? lock_chain_count+0x20/0x20 [ 507.331590][ T7122] ? lockdep_hardirqs_on+0x94/0x140 [ 507.336844][ T7122] ? __x64_sys_keyctl+0x1c/0xc0 [ 507.341752][ T7122] do_syscall_64+0x4c/0xa0 [ 507.346236][ T7122] ? clear_bhb_loop+0x60/0xb0 [ 507.350986][ T7122] ? clear_bhb_loop+0x60/0xb0 [ 507.355733][ T7122] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.361684][ T7122] RIP: 0033:0x7fe70cf9fb19 [ 507.366143][ T7122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.385814][ T7122] RSP: 002b:00007fe70ded6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 507.394287][ T7122] RAX: ffffffffffffffda RBX: 00007fe70d225fa0 RCX: 00007fe70cf9fb19 [ 507.402399][ T7122] RDX: 0000200000000240 RSI: 000000001f879f88 RDI: 000000000000000b [ 507.410442][ T7122] RBP: 00007fe70d037b70 R08: 0000000000000000 R09: 0000000000000000 [ 507.418459][ T7122] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 507.426476][ T7122] R13: 00007fe70d226038 R14: 00007fe70d225fa0 R15: 00007fff5edd2348 [ 507.434520][ T7122] [ 507.801088][ T6851] device veth1_macvtap entered promiscuous mode [ 507.810080][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.816578][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.955630][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.039289][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.092777][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.111404][ T7122] trusted_key: encrypted_key: failed to load cbc(aes) transform (-12) [ 508.147053][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.099305][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.141614][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.197009][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.151503][ T7138] syz.0.605: attempt to access beyond end of device [ 510.151503][ T7138] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 510.164324][ T7138] FAT-fs (loop1): unable to read boot sector [ 510.282640][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.302642][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.322708][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.358813][ T6851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.386083][ T7131] netlink: 36 bytes leftover after parsing attributes in process `syz.6.604'. [ 510.473820][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 510.490585][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 510.542212][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.572623][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.622628][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.646013][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.676536][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.717639][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.748095][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.782959][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.842672][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.252695][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.284117][ T6851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.305829][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 512.328569][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 512.368073][ T6851] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.403365][ T6851] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.412150][ T6851] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.480328][ T6851] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.823092][ T5127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.830985][ T5127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.871775][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 512.908894][ T5142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.961632][ T5142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.018166][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 514.971483][ T7172] overlayfs: invalid redirect ((null)) [ 515.586542][ T7186] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 515.599616][ T7188] netlink: 36 bytes leftover after parsing attributes in process `syz.1.617'. [ 517.008308][ T4294] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 517.018270][ T4294] CPU: 1 PID: 4294 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 517.025840][ T4294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 517.036075][ T4294] Workqueue: hci1 hci_rx_work [ 517.040871][ T4294] Call Trace: [ 517.044196][ T4294] [ 517.047146][ T4294] dump_stack_lvl+0x188/0x24e [ 517.051862][ T4294] ? show_regs_print_info+0x12/0x12 [ 517.057121][ T4294] ? load_image+0x410/0x410 [ 517.061773][ T4294] sysfs_create_dir_ns+0x26a/0x290 [ 517.066996][ T4294] ? __lock_acquire+0x7ea0/0x7ea0 [ 517.072051][ T4294] ? sysfs_warn_dup+0xa0/0xa0 [ 517.076780][ T4294] ? do_raw_spin_unlock+0x11d/0x230 [ 517.082046][ T4294] kobject_add_internal+0x617/0xca0 [ 517.087434][ T4294] kobject_add+0x160/0x230 [ 517.091922][ T4294] ? kobject_init+0x1c0/0x1c0 [ 517.096658][ T4294] ? __raw_spin_lock_init+0x41/0x100 [ 517.101997][ T4294] ? klist_children_get+0x50/0x50 [ 517.107155][ T4294] ? get_device_parent+0x121/0x3e0 [ 517.112366][ T4294] device_add+0x470/0x1050 [ 517.117110][ T4294] hci_conn_add_sysfs+0xd1/0x1e0 [ 517.122390][ T4294] hci_conn_complete_evt+0x973/0x15f0 [ 517.127825][ T4294] ? hci_inquiry_result_evt+0x520/0x520 [ 517.133413][ T4294] ? __skb_clone+0x446/0x6c0 [ 517.138071][ T4294] ? skb_pull_data+0xec/0x1f0 [ 517.142824][ T4294] hci_event_packet+0x66a/0xe60 [ 517.147760][ T4294] ? hci_inquiry_result_evt+0x520/0x520 [ 517.153598][ T4294] ? bis_list+0x280/0x280 [ 517.157957][ T4294] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 517.163883][ T4294] ? kcov_remote_start+0x50f/0x810 [ 517.169104][ T4294] ? lockdep_hardirqs_on+0x94/0x140 [ 517.174369][ T4294] ? hci_send_to_monitor+0x9c/0x4a0 [ 517.179628][ T4294] hci_rx_work+0x3eb/0xd40 [ 517.184157][ T4294] ? _raw_spin_unlock+0x40/0x40 [ 517.189063][ T4294] ? process_one_work+0x7b4/0x1160 [ 517.194288][ T4294] process_one_work+0x8ab/0x1160 [ 517.199293][ T4294] ? worker_detach_from_pool+0x240/0x240 [ 517.205107][ T4294] ? _raw_spin_lock_irq+0xb7/0xf0 [ 517.210174][ T4294] ? _raw_spin_lock_irqsave+0x100/0x100 [ 517.215776][ T4294] ? wq_worker_running+0x97/0x190 [ 517.220818][ T4294] worker_thread+0xaf5/0x12a0 [ 517.225543][ T4294] kthread+0x29d/0x330 [ 517.229687][ T4294] ? worker_clr_flags+0x1a0/0x1a0 [ 517.234731][ T4294] ? kthread_blkcg+0xd0/0xd0 [ 517.239339][ T4294] ret_from_fork+0x1f/0x30 [ 517.243807][ T4294] [ 517.252503][ T4294] kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 517.269985][ T4294] Bluetooth: hci1: failed to register connection device [ 517.302959][ T6741] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 517.525079][ T6741] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 517.562762][ T6741] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 517.588289][ T6741] usb 1-1: config 0 interface 0 has no altsetting 0 [ 517.634724][ T6741] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 517.699592][ T6741] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 517.740200][ T6741] usb 1-1: Product: syz [ 517.750334][ T6741] usb 1-1: Manufacturer: syz [ 517.777497][ T6741] usb 1-1: SerialNumber: syz [ 517.839515][ T6741] usb 1-1: config 0 descriptor?? [ 517.877316][ T6741] hub 1-1:0.0: bad descriptor, ignoring hub [ 517.939638][ T6741] hub: probe of 1-1:0.0 failed with error -5 [ 517.996914][ T6741] usb 1-1: selecting invalid altsetting 0 [ 518.344074][ T6741] usb 1-1: USB disconnect, device number 3 [ 519.073081][ T4294] Bluetooth: hci1: command 0x0409 tx timeout [ 522.462092][ T4294] Bluetooth: hci1: command 0x041b tx timeout [ 524.559455][ T4294] Bluetooth: hci1: command 0x040f tx timeout [ 534.921820][ T7300] netlink: 36 bytes leftover after parsing attributes in process `syz.1.629'. [ 547.648866][ T7405] ip_tables: iptables: counters copy to user failed while replacing table [ 548.900282][ T7402] netlink: 36 bytes leftover after parsing attributes in process `syz.7.656'. [ 552.776528][ T7442] usb usb7: usbfs: process 7442 (syz.1.674) did not claim interface 0 before use [ 555.815279][ T7462] FAULT_INJECTION: forcing a failure. [ 555.815279][ T7462] name failslab, interval 1, probability 0, space 0, times 0 [ 555.829245][ T7464] netlink: 36 bytes leftover after parsing attributes in process `syz.0.679'. [ 556.792398][ T7462] CPU: 1 PID: 7462 Comm: syz.7.677 Not tainted syzkaller #0 [ 556.799803][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 556.810079][ T7462] Call Trace: [ 556.813413][ T7462] [ 556.816402][ T7462] dump_stack_lvl+0x188/0x24e [ 556.821220][ T7462] ? show_regs_print_info+0x12/0x12 [ 556.826524][ T7462] ? load_image+0x410/0x410 [ 556.831093][ T7462] ? __lock_acquire+0x7ea0/0x7ea0 [ 556.836191][ T7462] should_fail_ex+0x390/0x4c0 [ 556.840930][ T7462] should_failslab+0x5/0x20 [ 556.845477][ T7462] slab_pre_alloc_hook+0x59/0x300 [ 556.850537][ T7462] kmem_cache_alloc+0x56/0x2f0 [ 556.855343][ T7462] ? jffs2_prealloc_raw_node_refs+0xf4/0x7f0 [ 556.861504][ T7462] jffs2_prealloc_raw_node_refs+0xf4/0x7f0 [ 556.867611][ T7462] jffs2_scan_medium+0x1859/0x6f20 [ 556.872817][ T7462] ? jffs2_do_link+0x910/0x910 [ 556.877722][ T7462] ? jffs2_sum_init+0xb3/0x210 [ 556.882549][ T7462] ? rcu_is_watching+0x11/0xa0 [ 556.887392][ T7462] ? jffs2_sum_init+0xb3/0x210 [ 556.892182][ T7462] ? __kmalloc+0xe4/0x240 [ 556.896541][ T7462] ? jffs2_sum_init+0x10e/0x210 [ 556.901419][ T7462] jffs2_do_mount_fs+0x76c/0x22b0 [ 556.906510][ T7462] ? __raw_spin_lock_init+0x41/0x100 [ 556.911832][ T7462] jffs2_do_fill_super+0x551/0xc50 [ 556.916992][ T7462] ? jffs2_reconfigure+0x310/0x310 [ 556.922136][ T7462] mtd_get_sb+0xcb/0x2b0 [ 556.926778][ T7462] ? mtd_get_sb_by_nr+0x7c/0xa0 [ 556.931673][ T7462] get_tree_mtd+0x5e2/0x760 [ 556.936243][ T7462] ? jffs2_reconfigure+0x310/0x310 [ 556.941415][ T7462] ? mtd_proc_show+0x270/0x270 [ 556.946309][ T7462] ? apparmor_capable+0x12c/0x190 [ 556.951366][ T7462] ? bpf_lsm_capable+0x5/0x10 [ 556.956208][ T7462] ? security_capable+0x85/0xb0 [ 556.961109][ T7462] vfs_get_tree+0x88/0x270 [ 556.965642][ T7462] do_new_mount+0x247/0xa50 [ 556.970181][ T7462] __se_sys_mount+0x2e3/0x3d0 [ 556.974892][ T7462] ? __x64_sys_mount+0xc0/0xc0 [ 556.979811][ T7462] ? lockdep_hardirqs_on+0x94/0x140 [ 556.985036][ T7462] ? __x64_sys_mount+0x1c/0xc0 [ 556.989828][ T7462] do_syscall_64+0x4c/0xa0 [ 556.994272][ T7462] ? clear_bhb_loop+0x60/0xb0 [ 556.998979][ T7462] ? clear_bhb_loop+0x60/0xb0 [ 557.003678][ T7462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 557.009626][ T7462] RIP: 0033:0x7f91f7f9fb19 [ 557.014078][ T7462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.034063][ T7462] RSP: 002b:00007f91f8f1c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 557.042657][ T7462] RAX: ffffffffffffffda RBX: 00007f91f8225fa0 RCX: 00007f91f7f9fb19 [ 557.050667][ T7462] RDX: 0000200000000340 RSI: 0000200000000300 RDI: 00002000000002c0 [ 557.058674][ T7462] RBP: 00007f91f8037b70 R08: 0000000000000000 R09: 0000000000000000 [ 557.066721][ T7462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.074728][ T7462] R13: 00007f91f8226038 R14: 00007f91f8225fa0 R15: 00007ffe2e694068 [ 557.082758][ T7462] [ 568.355914][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.362287][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 syzkaller syzkaller login: [ 575.474848][ T7568] netlink: 36 bytes leftover after parsing attributes in process `syz.1.692'. [ 578.682773][ T7588] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 580.653188][ T7599] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 580.660273][ T7599] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 580.703670][ T7599] vhci_hcd vhci_hcd.0: Device attached [ 580.882652][ T6741] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 582.302734][ T7593] vhci_hcd: vhci_device speed not set [ 582.717943][ T7593] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 582.754635][ T6741] usb 6-1: config 0 has no interfaces? [ 582.760211][ T6741] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 582.952689][ T6741] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.541505][ T6741] usb 6-1: config 0 descriptor?? [ 583.663661][ T6741] usb 6-1: can't set config #0, error -71 [ 583.684385][ T7600] vhci_hcd: connection reset by peer [ 583.692836][ T6741] usb 6-1: USB disconnect, device number 2 [ 583.705512][ T5136] vhci_hcd: stop threads [ 583.710372][ T5136] vhci_hcd: release socket [ 584.544271][ T5136] vhci_hcd: disconnect device [ 584.642922][ T7622] netlink: 36 bytes leftover after parsing attributes in process `syz.5.713'. [ 589.488197][ T7593] vhci_hcd: vhci_device speed not set [ 590.942130][ T7658] netlink: 'syz.1.721': attribute type 24 has an invalid length. [ 593.672869][ T7671] netlink: 36 bytes leftover after parsing attributes in process `syz.1.724'. [ 596.993239][ T4293] Bluetooth: hci2: command 0x0406 tx timeout syzkaller syzkaller login: [ 602.164184][ T7729] netlink: 36 bytes leftover after parsing attributes in process `syz.5.737'. [ 609.247855][ T7774] tmpfs: Unknown parameter 'usrquota' [ 612.928656][ T7784] netlink: 40 bytes leftover after parsing attributes in process `syz.7.746'. [ 621.734240][ T7841] netlink: 16 bytes leftover after parsing attributes in process `syz.5.759'. [ 624.867604][ T4294] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 625.002937][ T4290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 625.231897][ T4290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 625.242932][ T4290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 625.250679][ T4290] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 625.259655][ T4290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 627.734024][ T4293] Bluetooth: hci3: command 0x0409 tx timeout [ 627.749144][ T2954] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.825285][ T7871] rxe_eth0 speed is unknown, defaulting to 1000 [ 628.031506][ T2954] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.336577][ T2954] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.772045][ T2954] bond0: (slave netdevsim0): Releasing backup interface [ 629.477302][ T2954] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.583013][ T7898] netlink: 40 bytes leftover after parsing attributes in process `syz.0.761'. [ 629.797450][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.803874][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.806080][ T4293] Bluetooth: hci3: command 0x041b tx timeout [ 631.882784][ T4293] Bluetooth: hci3: command 0x040f tx timeout [ 631.937160][ T7871] chnl_net:caif_netlink_parms(): no params data found [ 634.024235][ T4293] Bluetooth: hci3: command 0x0419 tx timeout [ 634.369431][ T7871] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.390701][ T7871] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.414921][ T7871] device bridge_slave_0 entered promiscuous mode [ 635.686012][ T7871] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.071895][ T7871] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.081273][ T7871] device bridge_slave_1 entered promiscuous mode [ 637.247873][ T7871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.902815][ T7959] vivid-000: kernel_thread() failed [ 638.725732][ T7871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.109327][ T7963] netlink: 36 bytes leftover after parsing attributes in process `syz.5.785'. [ 639.298724][ T7871] team0: Port device team_slave_0 added [ 639.361518][ T7871] team0: Port device team_slave_1 added [ 639.514902][ T7871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.522307][ T7871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.961022][ T7871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.897363][ T7871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.913509][ T7871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.027217][ T7871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.406726][ T7871] device hsr_slave_0 entered promiscuous mode [ 643.444611][ T7871] device hsr_slave_1 entered promiscuous mode [ 643.494947][ T7871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 643.508442][ T7871] Cannot create hsr debugfs directory [ 645.213448][ T2954] device hsr_slave_0 left promiscuous mode [ 645.220216][ T2954] device hsr_slave_1 left promiscuous mode [ 645.272130][ T2954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.316484][ T2954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.361862][ T2954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.404151][ T2954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.463786][ T2954] device bridge_slave_1 left promiscuous mode [ 645.494831][ T2954] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.552275][ T2954] device bridge_slave_0 left promiscuous mode [ 645.585227][ T2954] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.952289][ T2954] device veth1_macvtap left promiscuous mode [ 645.977941][ T2954] device veth0_macvtap left promiscuous mode [ 646.002402][ T2954] device veth1_vlan left promiscuous mode [ 646.049139][ T2954] device veth0_vlan left promiscuous mode [ 648.089759][ T2954] team0 (unregistering): Port device team_slave_1 removed [ 648.182144][ T2954] team0 (unregistering): Port device team_slave_0 removed [ 648.257281][ T2954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.321680][ T2954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.840605][ T2954] bond0 (unregistering): Released all slaves [ 648.989805][ T8017] netlink: 36 bytes leftover after parsing attributes in process `syz.6.798'. [ 650.225664][ T7871] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 650.282946][ T7871] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 650.302297][ T7871] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 650.331867][ T7871] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 650.396224][ T8056] FAULT_INJECTION: forcing a failure. [ 650.396224][ T8056] name failslab, interval 1, probability 0, space 0, times 0 [ 650.440193][ T8056] CPU: 0 PID: 8056 Comm: syz.7.805 Not tainted syzkaller #0 [ 650.447564][ T8056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 650.457682][ T8056] Call Trace: [ 650.461004][ T8056] [ 650.463984][ T8056] dump_stack_lvl+0x188/0x24e [ 650.468691][ T8056] ? show_regs_print_info+0x12/0x12 [ 650.473925][ T8056] ? load_image+0x410/0x410 [ 650.478461][ T8056] ? __might_sleep+0xd0/0xd0 [ 650.483097][ T8056] ? __lock_acquire+0x7ea0/0x7ea0 [ 650.488186][ T8056] should_fail_ex+0x390/0x4c0 [ 650.492901][ T8056] should_failslab+0x5/0x20 [ 650.497444][ T8056] slab_pre_alloc_hook+0x59/0x300 [ 650.502513][ T8056] ? sample_init_net+0x61/0x190 [ 650.507498][ T8056] __kmem_cache_alloc_node+0x4f/0x270 [ 650.512920][ T8056] ? sample_init_net+0x61/0x190 [ 650.517810][ T8056] kmalloc_trace+0x26/0xe0 [ 650.522270][ T8056] sample_init_net+0x61/0x190 [ 650.527003][ T8056] ops_init+0x360/0x5e0 [ 650.531198][ T8056] setup_net+0x4f2/0xbd0 [ 650.535489][ T8056] ? copy_net_ns+0x5b0/0x5b0 [ 650.540116][ T8056] ? copy_net_ns+0x324/0x5b0 [ 650.544739][ T8056] ? down_read_killable+0x1cc/0x340 [ 650.549972][ T8056] copy_net_ns+0x33e/0x5b0 [ 650.554423][ T8056] create_new_namespaces+0x3ce/0x700 [ 650.559762][ T8056] unshare_nsproxy_namespaces+0x116/0x160 [ 650.565530][ T8056] ksys_unshare+0x4f6/0x8e0 [ 650.570135][ T8056] ? sighand_ctor+0x40/0x40 [ 650.574669][ T8056] ? lock_chain_count+0x20/0x20 [ 650.579645][ T8056] ? syscall_enter_from_user_mode+0x21/0x80 [ 650.585587][ T8056] __x64_sys_unshare+0x34/0x40 [ 650.590384][ T8056] do_syscall_64+0x4c/0xa0 [ 650.594841][ T8056] ? clear_bhb_loop+0x60/0xb0 [ 650.599586][ T8056] ? clear_bhb_loop+0x60/0xb0 [ 650.604316][ T8056] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 650.610250][ T8056] RIP: 0033:0x7f91f7f9fb19 [ 650.614701][ T8056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.634351][ T8056] RSP: 002b:00007f91f8f1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 650.642816][ T8056] RAX: ffffffffffffffda RBX: 00007f91f8225fa0 RCX: 00007f91f7f9fb19 [ 650.650827][ T8056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 650.658853][ T8056] RBP: 00007f91f8037b70 R08: 0000000000000000 R09: 0000000000000000 [ 650.666946][ T8056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.674946][ T8056] R13: 00007f91f8226038 R14: 00007f91f8225fa0 R15: 00007ffe2e694068 [ 650.682973][ T8056] [ 652.333491][ T7871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.420576][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 652.443408][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 652.452689][ T6741] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 652.496220][ T7871] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.516354][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 652.554197][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 652.672708][ T6741] usb 7-1: Using ep0 maxpacket: 8 [ 652.674167][ T4690] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.685060][ T4690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.687753][ T6741] usb 7-1: config 0 has no interfaces? [ 652.734772][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 652.738794][ T6741] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 652.778435][ T6741] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.811214][ T6741] usb 7-1: Product: syz [ 652.832277][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 652.840955][ T6741] usb 7-1: Manufacturer: syz [ 652.845985][ T6741] usb 7-1: SerialNumber: syz [ 652.856034][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 652.900583][ T6741] usb 7-1: config 0 descriptor?? [ 652.917424][ T4690] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.924616][ T4690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.952994][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 652.977416][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 653.005535][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 653.028278][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 653.057424][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 653.087938][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 653.143835][ T128] usb 7-1: USB disconnect, device number 3 [ 653.161077][ T7871] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 653.210308][ T7871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 654.879165][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 654.905749][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 654.943372][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 654.977043][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 655.013740][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 655.047571][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 658.519759][ T8095] netlink: 36 bytes leftover after parsing attributes in process `syz.5.811'. [ 660.081313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 660.098009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 660.129844][ T7871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.968776][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 663.993627][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 664.187928][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 664.215302][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 664.324685][ T7871] device veth0_vlan entered promiscuous mode [ 664.333829][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 664.410771][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 667.050271][ T7871] device veth1_vlan entered promiscuous mode [ 668.652704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 668.735330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 668.765461][ T7871] device veth0_macvtap entered promiscuous mode [ 669.549115][ T7871] device veth1_macvtap entered promiscuous mode [ 669.562907][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 669.604233][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 669.647959][ T7871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.740780][ T7871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.772745][ T7871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.795901][ T7871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.822582][ T7871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.841665][ T7871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.862551][ T7871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.892557][ T7871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.902450][ T7871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.272717][ T7871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.347932][ T7871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.524083][ T8176] netlink: 104 bytes leftover after parsing attributes in process `syz.6.826'. [ 670.548055][ T7871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.577458][ T7871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.615960][ T7871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.651207][ T7871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.672464][ T7871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.694451][ T7871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.453552][ T7871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.464162][ T7871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.474226][ T7871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.485105][ T7871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.516050][ T7871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.536342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 671.557807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 671.591046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 671.633831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 671.683298][ T8179] netlink: 36 bytes leftover after parsing attributes in process `syz.0.823'. [ 671.712095][ T7871] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.742735][ T7871] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.751516][ T7871] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.805280][ T7871] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.070646][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.108464][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.153741][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 673.601312][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.680576][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.707539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 676.827147][ T8232] netlink: 36 bytes leftover after parsing attributes in process `syz.8.838'. [ 680.042885][ T128] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 680.266146][ T128] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 680.292606][ T128] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 768 [ 680.352588][ T128] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 680.448516][ T128] usb 6-1: New USB device found, idVendor=174c, idProduct=46aa, bcdDevice= 1.00 [ 680.492549][ T128] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.500614][ T128] usb 6-1: Product: syz [ 680.572551][ T128] usb 6-1: Manufacturer: syz [ 680.577230][ T128] usb 6-1: SerialNumber: syz [ 680.633600][ T128] usb-storage 6-1:1.0: USB Mass Storage device detected [ 680.714354][ T128] scsi host1: usb-storage 6-1:1.0 [ 680.850654][ T128] usb 6-1: USB disconnect, device number 3 [ 691.243043][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.249432][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 701.694543][ T8393] ip_tables: iptables: counters copy to user failed while replacing table [ 708.897481][ T8436] comedi comedi3: das16m1: I/O port conflict (0x500,8) [ 711.950878][ T4290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 711.962281][ T4290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 711.970357][ T4290] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 711.978320][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 711.987083][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 711.998909][ T4294] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 712.051105][ T8444] rxe_eth0 speed is unknown, defaulting to 1000 [ 713.549589][ T8444] chnl_net:caif_netlink_parms(): no params data found [ 714.032760][ T4294] Bluetooth: hci4: command 0x0409 tx timeout [ 715.080806][ T8444] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.134323][ T8444] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.156496][ T8444] device bridge_slave_0 entered promiscuous mode [ 716.620101][ T4294] Bluetooth: hci4: command 0x041b tx timeout [ 716.649782][ T7081] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.737644][ T8478] FAULT_INJECTION: forcing a failure. [ 716.737644][ T8478] name failslab, interval 1, probability 0, space 0, times 0 [ 716.771910][ T8478] CPU: 1 PID: 8478 Comm: syz.7.883 Not tainted syzkaller #0 [ 716.779283][ T8478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 716.789405][ T8478] Call Trace: [ 716.792760][ T8478] [ 716.795741][ T8478] dump_stack_lvl+0x188/0x24e [ 716.800487][ T8478] ? show_regs_print_info+0x12/0x12 [ 716.805755][ T8478] ? load_image+0x410/0x410 [ 716.810334][ T8478] ? __might_sleep+0xd0/0xd0 [ 716.814977][ T8478] ? __lock_acquire+0x7ea0/0x7ea0 [ 716.820071][ T8478] should_fail_ex+0x390/0x4c0 [ 716.824800][ T8478] should_failslab+0x5/0x20 [ 716.829327][ T8478] slab_pre_alloc_hook+0x59/0x300 [ 716.834390][ T8478] ? __lock_acquire+0x7ea0/0x7ea0 [ 716.839463][ T8478] ? copy_cgroup_ns+0x2c2/0x610 [ 716.844399][ T8478] __kmem_cache_alloc_node+0x4f/0x270 [ 716.849786][ T8478] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 716.855787][ T8478] ? copy_cgroup_ns+0x2c2/0x610 [ 716.860658][ T8478] kmalloc_trace+0x26/0xe0 [ 716.865090][ T8478] copy_cgroup_ns+0x2c2/0x610 [ 716.869809][ T8478] create_new_namespaces+0x335/0x700 [ 716.875119][ T8478] unshare_nsproxy_namespaces+0x116/0x160 [ 716.880864][ T8478] ksys_unshare+0x4f6/0x8e0 [ 716.885391][ T8478] ? sighand_ctor+0x40/0x40 [ 716.889966][ T8478] ? lock_chain_count+0x20/0x20 [ 716.894861][ T8478] ? syscall_enter_from_user_mode+0x21/0x80 [ 716.900807][ T8478] __x64_sys_unshare+0x34/0x40 [ 716.905607][ T8478] do_syscall_64+0x4c/0xa0 [ 716.910052][ T8478] ? clear_bhb_loop+0x60/0xb0 [ 716.914759][ T8478] ? clear_bhb_loop+0x60/0xb0 [ 716.919458][ T8478] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 716.925373][ T8478] RIP: 0033:0x7f91f7f9fb19 [ 716.929799][ T8478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.949419][ T8478] RSP: 002b:00007f91f8f1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 716.957858][ T8478] RAX: ffffffffffffffda RBX: 00007f91f8225fa0 RCX: 00007f91f7f9fb19 [ 716.965842][ T8478] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 716.973839][ T8478] RBP: 00007f91f8037b70 R08: 0000000000000000 R09: 0000000000000000 [ 716.981818][ T8478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.989795][ T8478] R13: 00007f91f8226038 R14: 00007f91f8225fa0 R15: 00007ffe2e694068 [ 716.997792][ T8478] [ 717.045459][ T8444] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.072576][ T8444] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.080956][ T8444] device bridge_slave_1 entered promiscuous mode [ 718.384828][ T7081] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.480764][ T8444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.616085][ T7081] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.672054][ T8444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.682932][ T4294] Bluetooth: hci4: command 0x040f tx timeout [ 719.800708][ T7081] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.927572][ T8444] team0: Port device team_slave_0 added [ 719.993527][ T8444] team0: Port device team_slave_1 added [ 720.145056][ T8444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.192881][ T8444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.260139][ T8444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.355097][ T8444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.362118][ T8444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.490369][ T8444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.665819][ T8444] device hsr_slave_0 entered promiscuous mode [ 720.733095][ T8444] device hsr_slave_1 entered promiscuous mode [ 720.752640][ T8444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 720.752938][ T4294] Bluetooth: hci4: command 0x0419 tx timeout [ 720.782950][ T8444] Cannot create hsr debugfs directory [ 729.684248][ T8444] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 730.878850][ T8444] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 731.073221][ T8444] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 731.154258][ T8444] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 732.810888][ T8444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.054333][ T8444] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.062688][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 734.083417][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 734.182865][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 734.191625][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 735.683247][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.690414][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.879378][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 735.909360][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 735.950575][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.957801][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.132760][ T7081] device hsr_slave_0 left promiscuous mode [ 736.194070][ T7081] device hsr_slave_1 left promiscuous mode [ 736.211984][ T7081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.256516][ T7081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.304619][ T7081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 736.312112][ T7081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.420025][ T7081] device bridge_slave_1 left promiscuous mode [ 736.458900][ T7081] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.575463][ T7081] device bridge_slave_0 left promiscuous mode [ 736.581686][ T7081] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.325629][ T7081] device veth1_macvtap left promiscuous mode [ 737.333203][ T7081] device veth0_macvtap left promiscuous mode [ 737.421090][ T7081] device veth1_vlan left promiscuous mode [ 737.462711][ T7081] device veth0_vlan left promiscuous mode [ 742.528969][ T128] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 742.802591][ T128] usb 1-1: Using ep0 maxpacket: 8 [ 742.814132][ T128] usb 1-1: device descriptor read/all, error -71 [ 743.850529][ T7081] team0 (unregistering): Port device team_slave_1 removed [ 745.453659][ T7081] team0 (unregistering): Port device team_slave_0 removed [ 745.582063][ T7081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.703755][ T7081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 747.315780][ T7081] bond0 (unregistering): Released all slaves [ 748.485529][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 748.503736][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 748.523301][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 748.592662][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 748.619776][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 748.680884][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 748.730188][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 748.742117][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 748.751455][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 748.788687][ T8444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 748.823942][ T8444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 748.874154][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 748.882732][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 748.904002][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 749.786130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 749.812797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 749.852906][ T8444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.331239][ T4294] Bluetooth: hci3: command 0x0406 tx timeout [ 751.640633][ T4368] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 751.822741][ T4368] usb 7-1: Using ep0 maxpacket: 8 [ 751.831721][ T4368] usb 7-1: config 0 has no interfaces? [ 751.912314][ T4368] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 752.028805][ T4368] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.145889][ T4368] usb 7-1: Product: syz [ 752.202187][ T4368] usb 7-1: Manufacturer: syz [ 752.271783][ T4368] usb 7-1: SerialNumber: syz [ 752.418617][ T4368] usb 7-1: config 0 descriptor?? [ 752.676970][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.683377][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.735212][ T4368] usb 7-1: USB disconnect, device number 4 [ 754.223304][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 754.243722][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 754.277011][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 754.360269][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 754.371806][ T8444] device veth0_vlan entered promiscuous mode [ 754.379157][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 754.389187][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 754.403640][ T8444] device veth1_vlan entered promiscuous mode [ 754.448016][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 754.457086][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 754.485005][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 754.524907][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 756.032160][ T8444] device veth0_macvtap entered promiscuous mode [ 756.086621][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 756.098609][ T8444] device veth1_macvtap entered promiscuous mode [ 756.145203][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 756.192572][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.202453][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 756.252575][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.262451][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 756.322571][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.352574][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 756.382622][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.402535][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 756.422568][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.445209][ T8444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.463642][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 756.476146][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 756.510421][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 756.532562][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.542430][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 756.581586][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.615851][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 756.632566][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.657216][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 756.682595][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.703120][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 756.732356][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.762935][ T8444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.776868][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 756.831328][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 756.875254][ T8444] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.902616][ T8444] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.911475][ T8444] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.945123][ T8444] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.187574][ T5140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.202570][ T5140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.224529][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 757.299960][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.308397][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.337071][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 761.892552][ T4368] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 762.082680][ T4368] usb 7-1: Using ep0 maxpacket: 8 [ 762.263831][ T4368] usb 7-1: config 0 has no interfaces? [ 763.098001][ T4368] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 763.107411][ T4368] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.115509][ T4368] usb 7-1: Product: syz [ 763.119752][ T4368] usb 7-1: Manufacturer: syz [ 763.133482][ T4368] usb 7-1: config 0 descriptor?? [ 763.140555][ T4368] usb 7-1: can't set config #0, error -71 [ 763.172931][ T4368] usb 7-1: USB disconnect, device number 5 [ 764.484239][ T8802] trusted_key: encrypted_key: insufficient parameters specified [ 765.085321][ T4293] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 765.102868][ T4293] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 765.115064][ T4293] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 765.123928][ T4293] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 765.131511][ T4293] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 765.162684][ T4293] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 765.461001][ T8805] rxe_eth0 speed is unknown, defaulting to 1000 [ 767.233743][ T4294] Bluetooth: hci5: command 0x0409 tx timeout [ 767.372840][ T5140] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.912636][ T4294] Bluetooth: hci5: command 0x041b tx timeout [ 771.746524][ T5140] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.915445][ T5140] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.952655][ T4294] Bluetooth: hci5: command 0x040f tx timeout [ 771.953023][ T4368] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 772.884048][ T5140] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.932963][ T4368] usb 1-1: Using ep0 maxpacket: 8 [ 772.941803][ T4368] usb 1-1: config 0 has no interfaces? [ 772.950469][ T8805] chnl_net:caif_netlink_parms(): no params data found [ 772.969969][ T4368] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 772.994405][ T8859] trusted_key: encrypted_key: insufficient parameters specified [ 773.020373][ T4368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.043135][ T4368] usb 1-1: Product: syz [ 773.047385][ T4368] usb 1-1: Manufacturer: syz [ 773.059483][ T4368] usb 1-1: SerialNumber: syz [ 773.088256][ T4368] usb 1-1: config 0 descriptor?? [ 773.354270][ T7] usb 1-1: USB disconnect, device number 6 [ 773.432888][ T8805] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.440056][ T8805] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.484076][ T8805] device bridge_slave_0 entered promiscuous mode [ 773.529520][ T8805] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.581302][ T8805] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.599952][ T8805] device bridge_slave_1 entered promiscuous mode [ 774.082622][ T4294] Bluetooth: hci5: command 0x0419 tx timeout [ 774.669670][ T8805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.756048][ T8805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.807843][ T8805] team0: Port device team_slave_0 added [ 777.945631][ T8805] team0: Port device team_slave_1 added [ 778.028890][ T8805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.072674][ T8805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.172906][ T8805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.286782][ T8805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.303545][ T8805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.411250][ T8805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 778.693867][ T8902] trusted_key: encrypted_key: insufficient parameters specified [ 778.998413][ T8805] device hsr_slave_0 entered promiscuous mode [ 779.091600][ T8805] device hsr_slave_1 entered promiscuous mode [ 779.113136][ T8805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 779.120810][ T8805] Cannot create hsr debugfs directory [ 782.162571][ T4288] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 792.841500][ T5140] device hsr_slave_0 left promiscuous mode [ 792.924100][ T5140] device hsr_slave_1 left promiscuous mode [ 792.934205][ T5140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.941687][ T5140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.993332][ T5140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.000810][ T5140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.048353][ T5140] device bridge_slave_1 left promiscuous mode [ 793.062830][ T5140] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.091952][ T5140] device bridge_slave_0 left promiscuous mode [ 793.112871][ T5140] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.954484][ T5140] device veth1_macvtap left promiscuous mode [ 793.960641][ T5140] device veth0_macvtap left promiscuous mode [ 793.992248][ T5140] device veth1_vlan left promiscuous mode [ 795.401934][ T5140] device veth0_vlan left promiscuous mode [ 795.662898][ T7] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 795.852565][ T7] usb 10-1: Using ep0 maxpacket: 8 [ 795.859794][ T7] usb 10-1: config 0 has no interfaces? [ 795.885172][ T7] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 795.920327][ T7] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.929558][ T7] usb 10-1: Product: syz [ 795.942599][ T7] usb 10-1: Manufacturer: syz [ 795.947360][ T7] usb 10-1: SerialNumber: syz [ 795.985140][ T7] usb 10-1: config 0 descriptor?? [ 796.050671][ T9003] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1001'. [ 796.343669][ T7] usb 10-1: USB disconnect, device number 2 [ 798.778613][ T5140] team0 (unregistering): Port device team_slave_1 removed [ 799.013643][ T5140] team0 (unregistering): Port device team_slave_0 removed [ 799.192168][ T5140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.351822][ T5140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.693072][ T5140] bond0 (unregistering): Released all slaves [ 804.423759][ T9028] vivid-000: kernel_thread() failed [ 805.142004][ T8805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 805.195487][ T8805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 805.274398][ T8805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 805.342177][ T8805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 805.824364][ T8805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.896472][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 807.902024][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 808.165331][ T8805] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.176375][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 808.233733][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 808.252735][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.259881][ T5126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.679925][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 809.703900][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 809.824477][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 809.856275][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.863487][ T5126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.893071][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 811.503217][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 811.544994][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 811.584784][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 811.621122][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 811.641246][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 811.700968][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 811.727114][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 811.743297][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 811.779883][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 811.794759][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 811.815953][ T8805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 813.435556][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 813.458255][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 813.655896][ T8805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 814.116294][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.123344][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.285306][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 814.305187][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 816.404916][ T9092] vivid-000: kernel_thread() failed [ 817.325770][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 817.391666][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 819.164625][ T8805] device veth0_vlan entered promiscuous mode [ 819.178191][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 819.204159][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 819.277955][ T8805] device veth1_vlan entered promiscuous mode [ 819.956093][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 819.983517][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 820.018542][ T8805] device veth0_macvtap entered promiscuous mode [ 820.048165][ T8805] device veth1_macvtap entered promiscuous mode [ 820.146590][ T8805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.182720][ T8805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.222609][ T8805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.252568][ T8805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.282638][ T8805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.322647][ T8805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.323170][ T6741] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 820.357537][ T8805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.382711][ T8805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.409356][ T8805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.429552][ T8805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.461987][ T8805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 820.484927][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 820.501789][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 820.543182][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 820.556118][ T6741] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 820.585852][ T6741] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 820.603386][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 820.631991][ T6741] usb 7-1: Product: syz [ 820.642118][ T6741] usb 7-1: Manufacturer: syz [ 820.650848][ T8805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.671973][ T6741] usb 7-1: SerialNumber: syz [ 820.694228][ T6741] usb 7-1: config 0 descriptor?? [ 820.710670][ T8805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.741036][ T8805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.805018][ T8805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.862535][ T8805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.918264][ T8805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.800010][ T9122] gadgetfs: bound to dummy_udc driver [ 822.535573][ T8805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.621456][ T8805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.697231][ T8805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.979357][ T9111] gadgetfs: suspended from state 2 [ 824.154173][ T4386] usb 7-1: USB disconnect, device number 6 [ 824.181200][ T8805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.199751][ T6741] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 824.265107][ T8805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 824.326738][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 824.536167][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 828.624743][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1040'. [ 828.798730][ T4294] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 828.832989][ T4290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 828.842009][ T4294] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 828.850435][ T4294] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 828.859040][ T4294] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 828.866837][ T4290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 829.053363][ T9155] rxe_eth0 speed is unknown, defaulting to 1000 [ 830.823585][ T9179] CIFS: Attempting to mount \\1#7.0.0.1\Ë7Ì [ 830.831698][ T9179] CIFS: VFS: No username specified [ 830.913420][ T4294] Bluetooth: hci2: command 0x0409 tx timeout [ 832.992623][ T4294] Bluetooth: hci2: command 0x041b tx timeout [ 834.955525][ T9155] chnl_net:caif_netlink_parms(): no params data found [ 835.072596][ T4294] Bluetooth: hci2: command 0x040f tx timeout [ 835.856245][ T9155] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.902341][ T9155] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.959846][ T9155] device bridge_slave_0 entered promiscuous mode [ 836.034920][ T9155] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.075206][ T9155] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.142279][ T9155] device bridge_slave_1 entered promiscuous mode [ 836.545181][ T9155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.640328][ T9155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.672699][ T4294] Bluetooth: hci4: command 0x0406 tx timeout [ 837.017704][ T9155] team0: Port device team_slave_0 added [ 837.096660][ T9155] team0: Port device team_slave_1 added [ 837.152926][ T4294] Bluetooth: hci2: command 0x0419 tx timeout [ 837.976243][ T9155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 838.002818][ T9155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.102697][ T9155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.437919][ T9155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.462581][ T9155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.332642][ T9155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.798709][ T9245] FAULT_INJECTION: forcing a failure. [ 841.798709][ T9245] name failslab, interval 1, probability 0, space 0, times 0 [ 842.183773][ T9245] CPU: 1 PID: 9245 Comm: syz.9.1049 Not tainted syzkaller #0 [ 842.191258][ T9245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 842.201374][ T9245] Call Trace: [ 842.204697][ T9245] [ 842.207673][ T9245] dump_stack_lvl+0x188/0x24e [ 842.212451][ T9245] ? show_regs_print_info+0x12/0x12 [ 842.217716][ T9245] ? load_image+0x410/0x410 [ 842.222288][ T9245] ? __might_sleep+0xd0/0xd0 [ 842.226935][ T9245] ? __lock_acquire+0x7ea0/0x7ea0 [ 842.232021][ T9245] should_fail_ex+0x390/0x4c0 [ 842.236765][ T9245] should_failslab+0x5/0x20 [ 842.241327][ T9245] slab_pre_alloc_hook+0x59/0x300 [ 842.246408][ T9245] ? memcg_list_lru_alloc+0x22d/0xb00 [ 842.251929][ T9245] __kmem_cache_alloc_node+0x4f/0x270 [ 842.257450][ T9245] ? memcg_list_lru_alloc+0x22d/0xb00 [ 842.262902][ T9245] __kmalloc+0xa3/0x240 [ 842.267109][ T9245] memcg_list_lru_alloc+0x22d/0xb00 [ 842.272419][ T9245] ? slab_pre_alloc_hook+0xb1/0x300 [ 842.277671][ T9245] ? memcg_reparent_list_lrus+0x850/0x850 [ 842.283459][ T9245] ? get_obj_cgroup_from_current+0xd0/0x280 [ 842.289487][ T9245] ? get_obj_cgroup_from_current+0xd0/0x280 [ 842.295449][ T9245] slab_pre_alloc_hook+0x2ad/0x300 [ 842.300611][ T9245] ? slab_pre_alloc_hook+0xb1/0x300 [ 842.305864][ T9245] kmem_cache_alloc_lru+0x49/0x2e0 [ 842.311026][ T9245] ? __d_alloc+0x2e/0x6e0 [ 842.315417][ T9245] __d_alloc+0x2e/0x6e0 [ 842.319623][ T9245] ? d_alloc_pseudo+0xe/0x70 [ 842.324272][ T9245] d_alloc_pseudo+0x19/0x70 [ 842.328837][ T9245] alloc_file_pseudo+0xe0/0x200 [ 842.333750][ T9245] ? alloc_empty_file_noaccount+0x80/0x80 [ 842.339531][ T9245] ? memcpy+0x3c/0x60 [ 842.343619][ T9245] ? alloc_anon_inode+0x22e/0x300 [ 842.348777][ T9245] dma_buf_export+0x3a8/0x990 [ 842.353588][ T9245] system_heap_allocate+0xd84/0x13a0 [ 842.358949][ T9245] ? system_heap_create+0x100/0x100 [ 842.364208][ T9245] ? __might_fault+0xa6/0x120 [ 842.368952][ T9245] ? __might_fault+0xa6/0x120 [ 842.373697][ T9245] dma_heap_ioctl+0x46e/0x630 [ 842.378442][ T9245] ? dma_heap_init+0xb0/0xb0 [ 842.383112][ T9245] ? bpf_lsm_file_ioctl+0x5/0x10 [ 842.388109][ T9245] ? security_file_ioctl+0x7c/0xa0 [ 842.393280][ T9245] ? dma_heap_init+0xb0/0xb0 [ 842.397939][ T9245] __se_sys_ioctl+0xfa/0x170 [ 842.402599][ T9245] do_syscall_64+0x4c/0xa0 [ 842.407082][ T9245] ? clear_bhb_loop+0x60/0xb0 [ 842.411819][ T9245] ? clear_bhb_loop+0x60/0xb0 [ 842.416570][ T9245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 842.422519][ T9245] RIP: 0033:0x7fb11cf9fb19 [ 842.426977][ T9245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.446636][ T9245] RSP: 002b:00007fb11df5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 842.455104][ T9245] RAX: ffffffffffffffda RBX: 00007fb11d225fa0 RCX: 00007fb11cf9fb19 [ 842.463125][ T9245] RDX: 0000200000010340 RSI: 000000004008af00 RDI: 0000000000000004 [ 842.471150][ T9245] RBP: 00007fb11d037b70 R08: 0000000000000000 R09: 0000000000000000 [ 842.479169][ T9245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.487186][ T9245] R13: 00007fb11d226038 R14: 00007fb11d225fa0 R15: 00007ffdd39955c8 [ 842.495224][ T9245] [ 843.453738][ T9155] device hsr_slave_0 entered promiscuous mode [ 843.463173][ T9155] device hsr_slave_1 entered promiscuous mode [ 843.471269][ T9155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 843.479454][ T9155] Cannot create hsr debugfs directory [ 855.022317][ T9155] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 855.232043][ T9155] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 855.308981][ T9335] netlink: 'syz.8.1074': attribute type 1 has an invalid length. [ 855.435490][ T9335] 8021q: adding VLAN 0 to HW filter on device bond1 [ 855.493784][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1074'. [ 855.802989][ T9336] device macvlan2 entered promiscuous mode [ 856.067135][ T9345] block device autoloading is deprecated and will be removed. [ 856.345959][ T9338] bond1: (slave ip6gretap1): making interface the new active one [ 856.394164][ T9338] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 856.433057][ T9155] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 856.488341][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 857.705685][ T9155] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 860.913159][ T9371] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1081'. [ 862.788375][ T4408] device hsr_slave_0 left promiscuous mode [ 863.081402][ T4408] device hsr_slave_1 left promiscuous mode [ 863.182736][ T4408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.279851][ T4408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.282574][ T5077] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 866.300638][ T4408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 866.328759][ T4408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.422166][ T4408] device bridge_slave_1 left promiscuous mode [ 866.432877][ T4408] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.495951][ T5077] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 866.513068][ T4408] device bridge_slave_0 left promiscuous mode [ 866.519353][ T4408] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.542546][ T5077] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 866.550757][ T5077] usb 10-1: Product: syz [ 866.572912][ T5077] usb 10-1: Manufacturer: syz [ 866.582836][ T5077] usb 10-1: SerialNumber: syz [ 866.622123][ T5077] usb 10-1: config 0 descriptor?? [ 866.863312][ T4408] device veth1_macvtap left promiscuous mode [ 867.635032][ T9400] gadgetfs: bound to dummy_udc driver [ 868.410537][ T4408] device veth0_macvtap left promiscuous mode [ 868.433191][ T4408] device veth1_vlan left promiscuous mode [ 868.461894][ T4408] device veth0_vlan left promiscuous mode [ 868.662647][ T7] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 868.672710][ C0] gadgetfs: connected [ 868.679395][ T9389] gadgetfs: suspended from state 3 [ 868.684759][ T9389] gadgetfs: disconnected [ 868.692303][ T7807] usb 10-1: USB disconnect, device number 3 [ 874.350392][ T9426] trusted_key: encrypted_key: key user:syz not found [ 875.566008][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.587283][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.811009][ T9435] CacheFiles: Failed to register: -95 [ 875.933542][ T9437] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4277] was attempted by ""[9437] [ 876.125041][ T4408] team0 (unregistering): Port device team_slave_1 removed [ 877.165461][ T4408] team0 (unregistering): Port device team_slave_0 removed [ 877.216729][ T4408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 877.262316][ T4408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 877.797108][ T4408] bond0 (unregistering): Released all slaves [ 877.881767][ T9155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 877.893528][ T9427] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1093'. [ 878.111636][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 878.125756][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 878.166254][ T9155] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.193886][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 878.203288][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 878.232909][ T4684] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.240073][ T4684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.303816][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 878.323375][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 878.363166][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 878.392110][ T4684] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.399338][ T4684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.459431][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 878.556764][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 879.307786][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 879.323997][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 879.333054][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 879.341811][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 879.361911][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 879.417958][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 879.432339][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 879.477010][ T9155] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 879.523449][ T9155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 879.666060][ T9203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 879.700436][ T9203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 880.528353][ T9460] trusted_key: encrypted_key: key user:syz not found [ 883.305601][ T9487] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1108'. [ 884.783506][ T4293] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 884.804273][ T4293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 884.815860][ T4293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 884.824379][ T4293] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 884.832082][ T4293] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 884.839698][ T4293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 884.958527][ T9503] rxe_eth0 speed is unknown, defaulting to 1000 [ 887.404264][ T4293] Bluetooth: hci2: command 0x0409 tx timeout [ 888.815405][ T9524] trusted_key: encrypted_key: key user:syz not found [ 888.815664][ T9524] FAULT_INJECTION: forcing a failure. [ 888.815664][ T9524] name fail_futex, interval 1, probability 0, space 0, times 1 [ 888.922693][ T9524] CPU: 0 PID: 9524 Comm: syz.9.1114 Not tainted syzkaller #0 [ 888.930152][ T9524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 888.940248][ T9524] Call Trace: [ 888.943563][ T9524] [ 888.946542][ T9524] dump_stack_lvl+0x188/0x24e [ 888.951292][ T9524] ? show_regs_print_info+0x12/0x12 [ 888.956551][ T9524] ? load_image+0x410/0x410 [ 888.961114][ T9524] ? __lock_acquire+0x142d/0x7ea0 [ 888.966233][ T9524] should_fail_ex+0x390/0x4c0 [ 888.970976][ T9524] get_futex_key+0x1a6/0xe70 [ 888.975598][ T9524] ? verify_lock_unused+0x140/0x140 [ 888.980835][ T9524] ? futex_setup_timer+0xc0/0xc0 [ 888.985921][ T9524] ? verify_lock_unused+0x140/0x140 [ 888.991227][ T9524] futex_wake+0x123/0x4f0 [ 888.995596][ T9524] ? futex_wake_mark+0x150/0x150 [ 889.000579][ T9524] do_futex+0x2e2/0x320 [ 889.004788][ T9524] ? __ia32_sys_get_robust_list+0x100/0x100 [ 889.010726][ T9524] ? __might_fault+0xc2/0x120 [ 889.015449][ T9524] mm_release+0x20a/0x330 [ 889.019850][ T9524] ? exit_robust_list+0x2ce/0x2f0 [ 889.024913][ T9524] ? exit_mm_release+0x30/0x30 [ 889.029750][ T9524] ? lockdep_hardirqs_on+0x94/0x140 [ 889.034991][ T9524] exit_mm+0xa0/0x350 [ 889.039108][ T9524] ? sysctl_delayacct+0x220/0x220 [ 889.044182][ T9524] ? do_exit+0x2570/0x2570 [ 889.048639][ T9524] ? mm_trace_rss_stat+0xa7/0x250 [ 889.053711][ T9524] ? sync_mm_rss+0x211/0x350 [ 889.058346][ T9524] do_exit+0x958/0x2570 [ 889.062551][ T9524] ? cgroup_freezing+0x1c/0x340 [ 889.067454][ T9524] ? put_task_struct+0x80/0x80 [ 889.072256][ T9524] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 889.078455][ T9524] ? lock_chain_count+0x20/0x20 [ 889.083350][ T9524] do_group_exit+0x229/0x2e0 [ 889.087984][ T9524] ? lockdep_hardirqs_on+0x94/0x140 [ 889.093211][ T9524] get_signal+0x1259/0x1340 [ 889.097832][ T9524] arch_do_signal_or_restart+0xc4/0x1310 [ 889.103541][ T9524] ? __se_sys_keyctl+0x17f/0x870 [ 889.108512][ T9524] ? do_futex+0x310/0x320 [ 889.112897][ T9524] ? get_sigframe_size+0x10/0x10 [ 889.117871][ T9524] ? __ia32_sys_get_robust_list+0x100/0x100 [ 889.123814][ T9524] ? exit_to_user_mode_loop+0x3b/0x110 [ 889.129361][ T9524] exit_to_user_mode_loop+0x70/0x110 [ 889.134680][ T9524] exit_to_user_mode_prepare+0xee/0x180 [ 889.140269][ T9524] syscall_exit_to_user_mode+0x16/0x40 [ 889.145768][ T9524] do_syscall_64+0x58/0xa0 [ 889.150234][ T9524] ? clear_bhb_loop+0x60/0xb0 [ 889.155035][ T9524] ? clear_bhb_loop+0x60/0xb0 [ 889.159745][ T9524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 889.165670][ T9524] RIP: 0033:0x7fb11cf9fb19 [ 889.170117][ T9524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.189754][ T9524] RSP: 002b:00007fb11df5d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 889.198284][ T9524] RAX: fffffffffffffe00 RBX: 00007fb11d225fa8 RCX: 00007fb11cf9fb19 [ 889.206307][ T9524] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb11d225fa8 [ 889.214304][ T9524] RBP: 00007fb11d225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 889.222322][ T9524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 889.230321][ T9524] R13: 00007fb11d226038 R14: 00007ffdd39954e0 R15: 00007ffdd39955c8 [ 889.238339][ T9524] [ 889.472666][ T4293] Bluetooth: hci2: command 0x041b tx timeout [ 891.392588][ T9503] chnl_net:caif_netlink_parms(): no params data found [ 891.499524][ T9547] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1119'. [ 892.456312][ T4293] Bluetooth: hci2: command 0x040f tx timeout [ 893.876758][ T9503] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.943819][ T9503] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.972673][ T9503] device bridge_slave_0 entered promiscuous mode [ 894.023344][ T9503] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.030587][ T9503] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.063880][ T9503] device bridge_slave_1 entered promiscuous mode [ 894.334784][ T9503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 894.387326][ T9503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.512699][ T4293] Bluetooth: hci2: command 0x0419 tx timeout [ 895.295847][ T9503] team0: Port device team_slave_0 added [ 895.568541][ T9503] team0: Port device team_slave_1 added [ 897.475010][ T9503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.482027][ T9503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.519974][ T9592] trusted_key: encrypted_key: key user:syz not found [ 897.621763][ T9503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.770807][ T9503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.800629][ T9503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.910805][ T9503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 900.586761][ T9602] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1130'. [ 901.186182][ T9503] device hsr_slave_0 entered promiscuous mode [ 901.348015][ T9503] device hsr_slave_1 entered promiscuous mode [ 902.021471][ T9503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 902.037002][ T9503] Cannot create hsr debugfs directory [ 903.182103][ T9633] tipc: Started in network mode [ 903.202726][ T9633] tipc: Node identity 4e5f90bf61e8, cluster identity 4711 [ 903.210381][ T9633] tipc: Enabled bearer , priority 0 [ 904.102336][ T9635] trusted_key: encrypted_key: key user:syz not found [ 904.169158][ T9623] tipc: Disabling bearer [ 907.923235][ T9] device hsr_slave_0 left promiscuous mode [ 909.317479][ T9] device hsr_slave_1 left promiscuous mode [ 909.336390][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 909.413610][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 909.437159][ T9] device bridge_slave_1 left promiscuous mode [ 909.447442][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.505544][ T9] device bridge_slave_0 left promiscuous mode [ 909.512803][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.775482][ T9687] trusted_key: encrypted_key: key user:syz not found [ 914.393848][ T9] team0 (unregistering): Port device team_slave_1 removed [ 915.285395][ T9705] input: syz0 as /devices/virtual/input/input9 [ 915.359209][ T9] team0 (unregistering): Port device team_slave_0 removed [ 916.113054][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 917.304758][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 918.783673][ T9] bond0 (unregistering): Released all slaves [ 920.637526][ T9699] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1142'. [ 921.984539][ T9764] EXT4-fs (sda1): shut down requested (0) [ 923.186878][ T9503] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 923.245208][ T9503] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 923.296109][ T9503] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 923.335432][ T9503] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 923.683552][ T9503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 923.786370][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 923.795857][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 923.826304][ T9503] 8021q: adding VLAN 0 to HW filter on device team0 [ 923.835343][ T9787] FAULT_INJECTION: forcing a failure. [ 923.835343][ T9787] name failslab, interval 1, probability 0, space 0, times 0 [ 923.913482][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 923.923517][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 923.940565][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.947826][ T5126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.071493][ T9795] trusted_key: encrypted_key: key user:syz not found [ 924.153115][ T9787] CPU: 1 PID: 9787 Comm: syz.9.1164 Not tainted syzkaller #0 [ 924.167300][ T9787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 924.177412][ T9787] Call Trace: [ 924.180738][ T9787] [ 924.183715][ T9787] dump_stack_lvl+0x188/0x24e [ 924.188465][ T9787] ? show_regs_print_info+0x12/0x12 [ 924.193730][ T9787] ? load_image+0x410/0x410 [ 924.198299][ T9787] ? __might_sleep+0xd0/0xd0 [ 924.203132][ T9787] ? __lock_acquire+0x7ea0/0x7ea0 [ 924.208279][ T9787] should_fail_ex+0x390/0x4c0 [ 924.213027][ T9787] should_failslab+0x5/0x20 [ 924.217603][ T9787] slab_pre_alloc_hook+0x59/0x300 [ 924.223114][ T9787] ? p9_client_prepare_req+0x587/0xf60 [ 924.228722][ T9787] __kmem_cache_alloc_node+0x4f/0x270 [ 924.234005][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 924.242209][ T9787] ? p9_client_prepare_req+0x587/0xf60 [ 924.247724][ T9787] __kmalloc+0xa3/0x240 [ 924.251932][ T9787] p9_client_prepare_req+0x587/0xf60 [ 924.257303][ T9787] ? idr_preload_end+0x200/0x200 [ 924.262306][ T9787] ? rcu_is_watching+0x11/0xa0 [ 924.267153][ T9787] p9_client_rpc+0x18f/0xbf0 [ 924.271809][ T9787] ? idr_get_free+0x8a0/0xa10 [ 924.276563][ T9787] ? p9_fid_create+0x220/0x220 [ 924.281392][ T9787] ? lock_chain_count+0x20/0x20 [ 924.286325][ T9787] ? rcu_is_watching+0x11/0xa0 [ 924.291118][ T9787] ? trace_9p_fid_ref+0x9e/0x220 [ 924.296084][ T9787] p9_client_attach+0x178/0x3d0 [ 924.300967][ T9787] ? p9_client_begin_disconnect+0x50/0x50 [ 924.306711][ T9787] ? v9fs_session_init+0xfb7/0x1780 [ 924.311985][ T9787] ? __kmem_cache_free+0xb6/0x200 [ 924.317025][ T9787] v9fs_session_init+0x1215/0x1780 [ 924.322166][ T9787] ? v9fs_show_options+0x610/0x610 [ 924.327333][ T9787] v9fs_mount+0xcc/0xb60 [ 924.331596][ T9787] ? end_current_label_crit_section+0x170/0x170 [ 924.337853][ T9787] ? trace_xrep_findroot_block+0x280/0x280 [ 924.343676][ T9787] legacy_get_tree+0xe6/0x180 [ 924.348435][ T9787] ? trace_xrep_findroot_block+0x280/0x280 [ 924.354262][ T9787] vfs_get_tree+0x88/0x270 [ 924.358699][ T9787] do_new_mount+0x247/0xa50 [ 924.363222][ T9787] __se_sys_mount+0x2e3/0x3d0 [ 924.368452][ T9787] ? __x64_sys_mount+0xc0/0xc0 [ 924.373254][ T9787] ? lockdep_hardirqs_on+0x94/0x140 [ 924.378475][ T9787] ? __x64_sys_mount+0x1c/0xc0 [ 924.383270][ T9787] do_syscall_64+0x4c/0xa0 [ 924.387725][ T9787] ? clear_bhb_loop+0x60/0xb0 [ 924.392447][ T9787] ? clear_bhb_loop+0x60/0xb0 [ 924.397177][ T9787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 924.403119][ T9787] RIP: 0033:0x7fb11cf9fb19 [ 924.407637][ T9787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.427356][ T9787] RSP: 002b:00007fb11df5d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 924.435794][ T9787] RAX: ffffffffffffffda RBX: 00007fb11d225fa0 RCX: 00007fb11cf9fb19 [ 924.443788][ T9787] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000000000000000 [ 924.451774][ T9787] RBP: 00007fb11d037b70 R08: 0000200000000340 R09: 0000000000000000 [ 924.459758][ T9787] R10: 0000000002204803 R11: 0000000000000246 R12: 0000000000000000 [ 924.467744][ T9787] R13: 00007fb11d226038 R14: 00007fb11d225fa0 R15: 00007ffdd39955c8 [ 924.475740][ T9787] [ 924.540177][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 926.041894][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.049118][ T5126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.646679][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 927.799275][ T7282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 927.873661][ T7282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 927.919556][ T7282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 927.964838][ T7282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 927.990220][ T7282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 928.000903][ T7282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 928.042661][ T7282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 928.091096][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 928.118006][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 928.164859][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 928.194561][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 928.236142][ T9503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 928.340962][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 928.351150][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 928.398174][ T9503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.464162][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 928.486211][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 928.539185][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 928.554536][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 928.586725][ T9503] device veth0_vlan entered promiscuous mode [ 928.597558][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 928.615805][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 928.655377][ T9503] device veth1_vlan entered promiscuous mode [ 928.771609][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 928.830825][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 928.869905][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 928.893371][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 928.937815][ T9503] device veth0_macvtap entered promiscuous mode [ 929.257537][ T9503] device veth1_macvtap entered promiscuous mode [ 929.813936][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 929.879642][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.971745][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 930.012539][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.055857][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 930.071254][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.102319][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 930.134013][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.154445][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 930.182440][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.404029][ T9503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 930.580602][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 930.639213][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 931.664864][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 931.703825][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.745295][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 931.796896][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.868167][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.592464][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.607388][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.656858][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.687580][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.722100][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.741855][ T9503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.508377][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 934.753981][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 934.974491][ T9503] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.059971][ T9503] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.110084][ T9503] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.119355][ T9503] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.996670][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.024480][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.722364][ T5126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 938.770378][ T5126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.880295][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 938.909402][ T5136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 938.920444][ T5136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.954172][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 939.130875][ T9918] FAULT_INJECTION: forcing a failure. [ 939.130875][ T9918] name failslab, interval 1, probability 0, space 0, times 0 [ 939.195536][ T9918] CPU: 0 PID: 9918 Comm: syz.6.1186 Not tainted syzkaller #0 [ 939.203000][ T9918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 939.213195][ T9918] Call Trace: [ 939.216517][ T9918] [ 939.219522][ T9918] dump_stack_lvl+0x188/0x24e [ 939.224292][ T9918] ? show_regs_print_info+0x12/0x12 [ 939.229565][ T9918] ? load_image+0x410/0x410 [ 939.234134][ T9918] ? __might_sleep+0xd0/0xd0 [ 939.238776][ T9918] ? __lock_acquire+0x7ea0/0x7ea0 [ 939.243871][ T9918] should_fail_ex+0x390/0x4c0 [ 939.248613][ T9918] should_failslab+0x5/0x20 [ 939.253162][ T9918] slab_pre_alloc_hook+0x59/0x300 [ 939.258259][ T9918] ? __fget_files+0x28/0x460 [ 939.262908][ T9918] ? io_req_prep_async+0x266/0x680 [ 939.268169][ T9918] __kmem_cache_alloc_node+0x4f/0x270 [ 939.273598][ T9918] ? io_req_prep_async+0x266/0x680 [ 939.278768][ T9918] __kmalloc+0xa3/0x240 [ 939.282958][ T9918] ? io_file_get_normal+0xfd/0x370 [ 939.288090][ T9918] ? io_uring_cmd_done+0x2f0/0x2f0 [ 939.293216][ T9918] io_req_prep_async+0x266/0x680 [ 939.298172][ T9918] io_queue_sqe_fallback+0x55/0x1a0 [ 939.303406][ T9918] io_submit_sqes+0x1ae5/0x1db0 [ 939.308370][ T9918] __se_sys_io_uring_enter+0x342/0x21c0 [ 939.313987][ T9918] ? check_vma_flags+0x4c0/0x4c0 [ 939.318988][ T9918] ? common_file_perm+0x171/0x1c0 [ 939.324074][ T9918] ? __x64_sys_io_uring_enter+0xf0/0xf0 [ 939.329702][ T9918] ? vm_mmap_pgoff+0x212/0x2d0 [ 939.334557][ T9918] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 939.340622][ T9918] ? lock_chain_count+0x20/0x20 [ 939.345547][ T9918] ? __x64_sys_io_uring_enter+0x1d/0xf0 [ 939.351157][ T9918] do_syscall_64+0x4c/0xa0 [ 939.355640][ T9918] ? clear_bhb_loop+0x60/0xb0 [ 939.360380][ T9918] ? clear_bhb_loop+0x60/0xb0 [ 939.365116][ T9918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 939.371049][ T9918] RIP: 0033:0x7f09a1f9fb19 [ 939.375489][ T9918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.395119][ T9918] RSP: 002b:00007f09a2dd7f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 939.403554][ T9918] RAX: ffffffffffffffda RBX: 0000200000001080 RCX: 00007f09a1f9fb19 [ 939.411567][ T9918] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 939.419644][ T9918] RBP: 00000000000000e8 R08: 0000000000000000 R09: 0000000000000008 [ 939.427635][ T9918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000e00 [ 939.435626][ T9918] R13: 0000200000000e08 R14: 0000000000000e26 R15: 0000000000000000 [ 939.443622][ T9918] [ 941.036186][ T7282] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.854516][ T9932] device syzkaller0 entered promiscuous mode SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 942.770509][ T7282] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.357609][ T7282] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.744308][ T7282] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.900316][ T7282] device hsr_slave_0 left promiscuous mode [ 944.913628][ T7282] device hsr_slave_1 left promiscuous mode [ 944.920005][ T7282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 944.929268][ T7282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.937754][ T7282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 944.945528][ T7282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.953574][ T7282] device bridge_slave_1 left promiscuous mode [ 944.959831][ T7282] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.969500][ T7282] device bridge_slave_0 left promiscuous mode [ 944.976183][ T7282] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.010819][ T7282] device veth1_macvtap left promiscuous mode [ 945.017458][ T7282] device veth0_macvtap left promiscuous mode [ 945.024803][ T7282] device veth1_vlan left promiscuous mode [ 945.030665][ T7282] device veth0_vlan left promiscuous mode [ 945.615643][ T7282] team0 (unregistering): Port device team_slave_1 removed [ 945.663440][ T7282] team0 (unregistering): Port device team_slave_0 removed [ 945.708240][ T7282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.753849][ T7282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 946.091238][ T7282] bond0 (unregistering): Released all slaves [ 946.668072][ T7282] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.741414][ T7282] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.800714][ T7282] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.882034][ T7282] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.040154][ T7282] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.137532][ T7282] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.212611][ T7282] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.312620][ T7282] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.564487][ T7282] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.692081][ T7282] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.837173][ T7282] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.919679][ T7282] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.415993][ T7282] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.472013][ T7282] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.548048][ T7282] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.623779][ T7282] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.709889][ T7282] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0