last executing test programs: 15.538393066s ago: executing program 3 (id=200): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 11.415320025s ago: executing program 3 (id=209): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x42, 0x0) ioctl$COMEDI_BUFINFO(r0, 0xc02c640e, &(0x7f0000000040)={0xfffd, 0x3c97, 0x6, 0x80800001, 0x8000004, 0x3, 0x2}) 10.168677495s ago: executing program 3 (id=212): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 9.849475583s ago: executing program 0 (id=218): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 7.576055918s ago: executing program 1 (id=220): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$can_raw(0x1d, 0x3, 0x1) setxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="100000000000"], 0x2c, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x10, 0x0, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000780)={{0xa}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffd, 0x0, 0x20000000000, 0x3123, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffff9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x1, 0x2000000000, 0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x4, 0xffffffffffffffff, 0x2, 0x0, 0x80000000000, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x49, 0x20000000000, 0x0, 0x0, 0x200, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x10004, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x5, 0x80000001]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03d6b623375271, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8d90}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) setsockopt(r1, 0xfffffff9, 0xd, 0x0, 0x0) r6 = syz_open_dev$video(&(0x7f00000008c0), 0x8, 0x400) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000900)={0x9, 0x0, '\x00', {0x0, @bt={0x3, 0x7, 0x1, 0x0, 0x2, 0x6, 0x8, 0xc537, 0x8000, 0x200, 0x8, 0x5, 0xf73, 0x6, 0x1, 0x10, {0x9, 0x80000001}, 0x3, 0x1}}}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 6.544826303s ago: executing program 1 (id=221): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0xd02, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000040}, 0x40000) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002c00)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x40401d4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 6.120374642s ago: executing program 1 (id=224): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$unix(r0, 0x0, 0x0, 0x80000) r1 = socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 5.140715497s ago: executing program 2 (id=225): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x160) r0 = eventfd2(0x50, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r0, @ANYRES16], 0x15) 4.873455293s ago: executing program 2 (id=226): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000800)={r0, &(0x7f0000000380)="b40e876dc2670df7be4a4d410790c769ce2bf7568e95cd66297e700821c60a1fe84abffcdb3f91e4fc8c5043a277f331ecff11dcbd2b36da488dd532b05a95791ab4a48475d64577908b2f776463fd66e4990f115d973290b9eee0f02c412eb16c33127dc6f36be5d959993f291b3923c34d84c03a2e7c241e1b80da774b1aa61c1e0b3270162f45162b7e002b51699a72ab125ad9a3f5f9943846646a4ed788e26577350976a0f3633d9c42cc4681", &(0x7f0000000740)=""/156}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) r2 = dup(r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1, &(0x7f0000000040), 0x0, 0x20000820}, 0x890) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x20, 0xfa00, {0x0, 0x0, 0x106, 0x1}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222', 0x6c) r5 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r5, &(0x7f0000000a00), 0x0) 4.785759995s ago: executing program 0 (id=227): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='isp1301 0x2c', 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x301, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20040814) bind$netlink(r2, 0x0, 0x0) 4.608693619s ago: executing program 0 (id=228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) 4.56343905s ago: executing program 2 (id=229): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x400, 0x8}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f00000190c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2f00020b, 0x822, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.489046662s ago: executing program 0 (id=230): rmdir(0x0) capset(0x0, &(0x7f00000191c0)={0x5, 0x200003, 0x801, 0x4, 0x9}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) modify_ldt$read(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='nilfs2\x00', 0x0, &(0x7f0000000980)='norecovery') connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x4}]}, 0x34}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x63, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000190c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x81, 0x0, 0xfffff024}, {0x6}]}, 0x8) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109"], 0x0) socket(0x2, 0xa, 0x0) 2.133789558s ago: executing program 2 (id=231): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d0400000000000000000000100400000004000000000000080300000000000000"], 0x0, 0x52}, 0x28) 1.850089936s ago: executing program 2 (id=232): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) 1.771302147s ago: executing program 3 (id=233): mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) epoll_create1(0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010101, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 1.708022349s ago: executing program 1 (id=234): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x160) r0 = eventfd2(0x50, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r0, @ANYRES16], 0x15) 1.453166035s ago: executing program 2 (id=235): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) userfaultfd(0x80801) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)=0x8) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/105, 0x69}], 0x1) r2 = socket(0x10, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x4, 0x9, 0x11, 0x40, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) readv(r5, &(0x7f0000000740)=[{&(0x7f0000000480)=""/215, 0xd7}], 0x1) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000100)="19", 0x1}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) setns(0xc9, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000c40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000940)=@bridge_setlink={0x2c0, 0x13, 0x20, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x11020, 0x400}, [@IFLA_PHYS_SWITCH_ID={0x5, 0x24, 'r'}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x4}, @IFLA_LINKINFO={0x84, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x74, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff, 0xffff8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5135038b, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x5}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1d, 0x2}}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x6f8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x6}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x1d}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x4, 0x10}}]}}}, @IFLA_VFINFO_LIST={0x1fc, 0x16, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1b, 0x2}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7fffffff, 0x7f}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4800, 0x6}}]}, {0xb0, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0xffffffa9}}, @IFLA_VF_MAC={0x28, 0x1, {0x8001, @broadcast}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x2, 0x1f8, 0x3, 0x8100}}, {0x14, 0x1, {0x7fffffff, 0xa11, 0x80000001, 0x88a8}}, {0x14, 0x1, {0x6, 0x49c, 0x1, 0x88a8}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x5, 0x2}}, @IFLA_VF_TRUST={0xc, 0x9, {0x400000, 0x3ff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x400}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7ff, 0xb9}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0x4}}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x5, 0x3}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1000, 0xf74, 0x2, 0x88a8}}, {0x14, 0x1, {0x10000, 0x30c, 0x7, 0x8100}}, {0x14, 0x1, {0x7f, 0x2c2, 0xec0, 0x8100}}]}]}, {0xa4, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x40, 0xeec, 0x1}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0x31c1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x823, 0x10}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x6}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x8}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xe, 0x4}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x0, 0x9}}, @IFLA_VF_MAC={0x28, 0x1, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}}]}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4000004}, 0x81) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r10, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x2e}}, 0x1c, 0x0}, 0x20008b88) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000a00feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0xa}}, 0x20) r11 = socket$can_bcm(0x1d, 0x2, 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_usb_connect(0x5, 0x3f, &(0x7f0000000100)=ANY=[@ANYRES8=r11], 0x0) 1.223843991s ago: executing program 1 (id=236): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 746.625452ms ago: executing program 3 (id=237): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000800)={r0, &(0x7f0000000380)="b40e876dc2670df7be4a4d410790c769ce2bf7568e95cd66297e700821c60a1fe84abffcdb3f91e4fc8c5043a277f331ecff11dcbd2b36da488dd532b05a95791ab4a48475d64577908b2f776463fd66e4990f115d973290b9eee0f02c412eb16c33127dc6f36be5d959993f291b3923c34d84c03a2e7c241e1b80da774b1aa61c1e0b3270162f45162b7e002b51699a72ab125ad9a3f5f9943846646a4ed788e26577350976a0f3633d9c42cc4681", &(0x7f0000000740)=""/156}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) r2 = dup(r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1, &(0x7f0000000040), 0x0, 0x20000820}, 0x890) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x20, 0xfa00, {0x0, 0x0, 0x106, 0x1}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222', 0x6c) r5 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r5, &(0x7f0000000a00), 0x0) 644.858285ms ago: executing program 0 (id=238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) 115.346778ms ago: executing program 1 (id=239): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x400, 0x8}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f00000190c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2f00020b, 0x822, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 673.36µs ago: executing program 3 (id=240): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d0400000000000000000000100400000004000000000000080300000000000000"], 0x0, 0x52}, 0x28) 0s ago: executing program 0 (id=241): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0xd02, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000040}, 0x40000) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002c00)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x40401d4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.174' (ED25519) to the list of known hosts. [ 73.882666][ T5765] cgroup: Unknown subsys name 'net' [ 74.015592][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.718582][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.298372][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.308804][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.316940][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.327523][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.335560][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.344218][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.352324][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.360256][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.364441][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.379502][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.387774][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.396225][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.405876][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.415852][ T5088] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.423446][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.431527][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.440960][ T5088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.448813][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.456636][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.465601][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.466751][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.481826][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.494594][ T5088] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.494621][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.862110][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 77.988953][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 78.035763][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 78.121817][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.130942][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.138456][ T5780] bridge_slave_0: entered allmulticast mode [ 78.145466][ T5780] bridge_slave_0: entered promiscuous mode [ 78.154824][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 78.180754][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.188276][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.195427][ T5780] bridge_slave_1: entered allmulticast mode [ 78.203252][ T5780] bridge_slave_1: entered promiscuous mode [ 78.278574][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.305423][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.312706][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.320586][ T5776] bridge_slave_0: entered allmulticast mode [ 78.327493][ T5776] bridge_slave_0: entered promiscuous mode [ 78.336947][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.373733][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.381587][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.389631][ T5776] bridge_slave_1: entered allmulticast mode [ 78.396639][ T5776] bridge_slave_1: entered promiscuous mode [ 78.414721][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.421970][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.431979][ T5784] bridge_slave_0: entered allmulticast mode [ 78.441941][ T5784] bridge_slave_0: entered promiscuous mode [ 78.451544][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.458765][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.465942][ T5784] bridge_slave_1: entered allmulticast mode [ 78.473687][ T5784] bridge_slave_1: entered promiscuous mode [ 78.502894][ T5780] team0: Port device team_slave_0 added [ 78.512361][ T5780] team0: Port device team_slave_1 added [ 78.572800][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.584661][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.605392][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.633591][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.640843][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.648504][ T5785] bridge_slave_0: entered allmulticast mode [ 78.655275][ T5785] bridge_slave_0: entered promiscuous mode [ 78.664381][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.676912][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.683918][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.709878][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.733832][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.741147][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.751335][ T5785] bridge_slave_1: entered allmulticast mode [ 78.758617][ T5785] bridge_slave_1: entered promiscuous mode [ 78.776357][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.783480][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.810373][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.824751][ T5784] team0: Port device team_slave_0 added [ 78.877154][ T5784] team0: Port device team_slave_1 added [ 78.895429][ T5776] team0: Port device team_slave_0 added [ 78.905597][ T5776] team0: Port device team_slave_1 added [ 78.913839][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.969311][ T5780] hsr_slave_0: entered promiscuous mode [ 78.976038][ T5780] hsr_slave_1: entered promiscuous mode [ 78.985315][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.995353][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.002785][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.028981][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.049549][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.056539][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.082965][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.105960][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.113401][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.139741][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.157471][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.165274][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.191346][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.236205][ T5785] team0: Port device team_slave_0 added [ 79.274998][ T5785] team0: Port device team_slave_1 added [ 79.295781][ T5776] hsr_slave_0: entered promiscuous mode [ 79.302127][ T5776] hsr_slave_1: entered promiscuous mode [ 79.311075][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.319047][ T5776] Cannot create hsr debugfs directory [ 79.356543][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.363581][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.390060][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.401209][ T5781] Bluetooth: hci1: command tx timeout [ 79.434854][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.443050][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.469407][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.488629][ T5781] Bluetooth: hci0: command tx timeout [ 79.506410][ T5784] hsr_slave_0: entered promiscuous mode [ 79.513030][ T5784] hsr_slave_1: entered promiscuous mode [ 79.519539][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.527274][ T5784] Cannot create hsr debugfs directory [ 79.557979][ T5781] Bluetooth: hci2: command tx timeout [ 79.562164][ T5783] Bluetooth: hci3: command tx timeout [ 79.666520][ T5785] hsr_slave_0: entered promiscuous mode [ 79.672888][ T5785] hsr_slave_1: entered promiscuous mode [ 79.679499][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.687072][ T5785] Cannot create hsr debugfs directory [ 79.958876][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.992360][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.022758][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.035609][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.085676][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.103834][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.122164][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.134330][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.242901][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.253521][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.266681][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.311735][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.355234][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.385868][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.396586][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.407508][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.444345][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.471818][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.523606][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.531082][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.550650][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.583136][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.590448][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.639627][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.662951][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.701801][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.709178][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.747545][ T1331] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.754783][ T1331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.783045][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.815337][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.846425][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.853757][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.887269][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.894572][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.981228][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.027748][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.034951][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.082072][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.121377][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.128710][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.185087][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.354742][ T5780] veth0_vlan: entered promiscuous mode [ 81.376025][ T5780] veth1_vlan: entered promiscuous mode [ 81.474500][ T5780] veth0_macvtap: entered promiscuous mode [ 81.480723][ T5783] Bluetooth: hci1: command tx timeout [ 81.502114][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.518920][ T5780] veth1_macvtap: entered promiscuous mode [ 81.558432][ T5783] Bluetooth: hci0: command tx timeout [ 81.583361][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.637901][ T5783] Bluetooth: hci3: command tx timeout [ 81.640144][ T5781] Bluetooth: hci2: command tx timeout [ 81.651775][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.689663][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.698892][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.710753][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.720666][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.768845][ T5776] veth0_vlan: entered promiscuous mode [ 81.789160][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.805754][ T5776] veth1_vlan: entered promiscuous mode [ 81.836523][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.920418][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.945671][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.994558][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.006311][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.013295][ T5776] veth0_macvtap: entered promiscuous mode [ 82.073117][ T5776] veth1_macvtap: entered promiscuous mode [ 82.098590][ T5784] veth0_vlan: entered promiscuous mode [ 82.113228][ T5785] veth0_vlan: entered promiscuous mode [ 82.184527][ T5784] veth1_vlan: entered promiscuous mode [ 82.222171][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.233267][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.245843][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.273313][ T5785] veth1_vlan: entered promiscuous mode [ 82.332966][ T5785] veth0_macvtap: entered promiscuous mode [ 82.351608][ T5785] veth1_macvtap: entered promiscuous mode [ 82.395781][ T5784] veth0_macvtap: entered promiscuous mode [ 82.475580][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.487140][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.500272][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.512651][ T5784] veth1_macvtap: entered promiscuous mode [ 82.962987][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.050539][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.066601][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.076388][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.115135][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.137457][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.155231][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.166865][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.186829][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.239857][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.285690][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.296536][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.308822][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.325779][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.354232][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.528841][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.545040][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.555322][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.558164][ T5781] Bluetooth: hci1: command tx timeout [ 83.582540][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.606780][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.617598][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.628220][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.638738][ T5781] Bluetooth: hci0: command tx timeout [ 83.645140][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.658898][ T5843] i2c i2c-0: new_device: Instantiated device isp1301 at 0x2c [ 83.669630][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.693963][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.717876][ T5781] Bluetooth: hci3: command tx timeout [ 83.724147][ T5783] Bluetooth: hci2: command tx timeout [ 83.752468][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.763405][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.777326][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.787877][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.803773][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.815565][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.833048][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.896442][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.910951][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.927384][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.936715][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.271088][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.406564][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.820533][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.874110][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.917101][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.935522][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.937299][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.983166][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.015277][ T5853] 9pnet_fd: Insufficient options for proto=fd [ 85.026122][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.046522][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.107292][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.127043][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.772047][ T5781] Bluetooth: hci1: command tx timeout [ 85.781647][ T5781] Bluetooth: hci0: command tx timeout [ 85.814236][ T5783] Bluetooth: hci3: command tx timeout [ 85.822364][ T5783] Bluetooth: hci2: command tx timeout [ 89.252858][ T5887] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-002c' [ 89.319129][ T5887] CPU: 0 PID: 5887 Comm: syz.1.14 Not tainted syzkaller #0 [ 89.326427][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.336530][ T5887] Call Trace: [ 89.339847][ T5887] [ 89.342903][ T5887] dump_stack_lvl+0x18c/0x250 [ 89.347641][ T5887] ? show_regs_print_info+0x20/0x20 [ 89.352883][ T5887] ? load_image+0x420/0x420 [ 89.357454][ T5887] sysfs_create_dir_ns+0x26e/0x2a0 [ 89.362604][ T5887] ? __lock_acquire+0x7d80/0x7d80 [ 89.367766][ T5887] ? sysfs_warn_dup+0xa0/0xa0 [ 89.372504][ T5887] ? do_raw_spin_unlock+0x121/0x230 [ 89.377754][ T5887] kobject_add_internal+0x617/0xc90 [ 89.383008][ T5887] kobject_add+0x164/0x240 [ 89.387562][ T5887] ? kobject_init+0x1d0/0x1d0 [ 89.392307][ T5887] ? class_to_subsys+0xb6/0x120 [ 89.397220][ T5887] ? get_device_parent+0xbc/0x390 [ 89.402311][ T5887] device_add+0x3fa/0xc40 [ 89.406704][ T5887] i2c_new_client_device+0xa72/0x10a0 [ 89.412152][ T5887] ? i2c_dev_irq_from_resources+0x230/0x230 [ 89.418184][ T5887] ? rcu_is_watching+0x15/0xb0 [ 89.423016][ T5887] ? new_device_store+0x135/0x520 [ 89.428093][ T5887] new_device_store+0x24e/0x520 [ 89.432988][ T5887] ? __virt_addr_valid+0x10c/0x380 [ 89.438421][ T5887] ? __i2c_check_addr_busy+0x150/0x150 [ 89.443943][ T5887] ? sysfs_kf_write+0x187/0x2a0 [ 89.448923][ T5887] ? sysfs_kf_read+0x360/0x360 [ 89.453729][ T5887] kernfs_fop_write_iter+0x3a4/0x520 [ 89.459072][ T5887] vfs_write+0x474/0x9a0 [ 89.463378][ T5887] ? file_end_write+0x250/0x250 [ 89.468277][ T5887] ? __fget_files+0x3fc/0x460 [ 89.472996][ T5887] ? __fdget_pos+0x2a3/0x330 [ 89.477705][ T5887] ? ksys_write+0x74/0x260 [ 89.482419][ T5887] ksys_write+0x151/0x260 [ 89.486771][ T5887] ? __ia32_sys_read+0x90/0x90 [ 89.491556][ T5887] ? lockdep_hardirqs_on+0x98/0x150 [ 89.496783][ T5887] do_syscall_64+0x55/0xb0 [ 89.501214][ T5887] ? clear_bhb_loop+0x40/0x90 [ 89.505904][ T5887] ? clear_bhb_loop+0x40/0x90 [ 89.510593][ T5887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.516497][ T5887] RIP: 0033:0x7f2ec5d9e0d9 [ 89.520941][ T5887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.540645][ T5887] RSP: 002b:00007f2ec3ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 89.549076][ T5887] RAX: ffffffffffffffda RBX: 00007f2ec6025fa0 RCX: 00007f2ec5d9e0d9 [ 89.557060][ T5887] RDX: 000000000000000c RSI: 0000200000000100 RDI: 0000000000000004 [ 89.565046][ T5887] RBP: 00007f2ec5e35024 R08: 0000000000000000 R09: 0000000000000000 [ 89.573038][ T5887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.581021][ T5887] R13: 00007f2ec6026038 R14: 00007f2ec6025fa0 R15: 00007fffdade7bb8 [ 89.589030][ T5887] [ 89.610447][ T5891] 9pnet_fd: Insufficient options for proto=fd [ 89.636489][ T5887] kobject: kobject_add_internal failed for 0-002c with -EEXIST, don't try to register things with the same name in the same directory. [ 89.846840][ T5887] i2c i2c-0: Failed to register i2c client isp1301 at 0x2c (-17) [ 91.287854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.633508][ T9] cfg80211: failed to load regulatory.db [ 97.161545][ T5929] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-002c' [ 97.179811][ T5929] CPU: 1 PID: 5929 Comm: syz.0.27 Not tainted syzkaller #0 [ 97.187086][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.197195][ T5929] Call Trace: [ 97.200498][ T5929] [ 97.203544][ T5929] dump_stack_lvl+0x18c/0x250 [ 97.208276][ T5929] ? show_regs_print_info+0x20/0x20 [ 97.213501][ T5929] ? load_image+0x420/0x420 [ 97.218040][ T5929] sysfs_create_dir_ns+0x26e/0x2a0 [ 97.223177][ T5929] ? __lock_acquire+0x7d80/0x7d80 [ 97.228224][ T5929] ? sysfs_warn_dup+0xa0/0xa0 [ 97.232930][ T5929] ? do_raw_spin_unlock+0x121/0x230 [ 97.238152][ T5929] kobject_add_internal+0x617/0xc90 [ 97.243377][ T5929] kobject_add+0x164/0x240 [ 97.247835][ T5929] ? kobject_init+0x1d0/0x1d0 [ 97.252529][ T5929] ? class_to_subsys+0xb6/0x120 [ 97.257390][ T5929] ? get_device_parent+0xbc/0x390 [ 97.262435][ T5929] device_add+0x3fa/0xc40 [ 97.266782][ T5929] i2c_new_client_device+0xa72/0x10a0 [ 97.272182][ T5929] ? i2c_dev_irq_from_resources+0x230/0x230 [ 97.278116][ T5929] ? rcu_is_watching+0x15/0xb0 [ 97.283007][ T5929] ? new_device_store+0x135/0x520 [ 97.288075][ T5929] new_device_store+0x24e/0x520 [ 97.292955][ T5929] ? __virt_addr_valid+0x10c/0x380 [ 97.298090][ T5929] ? __i2c_check_addr_busy+0x150/0x150 [ 97.303579][ T5929] ? sysfs_kf_write+0x187/0x2a0 [ 97.308450][ T5929] ? sysfs_kf_read+0x360/0x360 [ 97.313327][ T5929] kernfs_fop_write_iter+0x3a4/0x520 [ 97.318650][ T5929] vfs_write+0x474/0x9a0 [ 97.322937][ T5929] ? file_end_write+0x250/0x250 [ 97.327839][ T5929] ? __fget_files+0x3fc/0x460 [ 97.332591][ T5929] ? __fdget_pos+0x2a3/0x330 [ 97.337215][ T5929] ? ksys_write+0x74/0x260 [ 97.341665][ T5929] ksys_write+0x151/0x260 [ 97.346111][ T5929] ? __ia32_sys_read+0x90/0x90 [ 97.350905][ T5929] ? lockdep_hardirqs_on+0x98/0x150 [ 97.356134][ T5929] do_syscall_64+0x55/0xb0 [ 97.360566][ T5929] ? clear_bhb_loop+0x40/0x90 [ 97.365527][ T5929] ? clear_bhb_loop+0x40/0x90 [ 97.370227][ T5929] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.376131][ T5929] RIP: 0033:0x7fd44a39e0d9 [ 97.380562][ T5929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.400183][ T5929] RSP: 002b:00007fd44b34c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 97.408710][ T5929] RAX: ffffffffffffffda RBX: 00007fd44a625fa0 RCX: 00007fd44a39e0d9 [ 97.416714][ T5929] RDX: 000000000000000c RSI: 0000200000000100 RDI: 0000000000000004 [ 97.424704][ T5929] RBP: 00007fd44a435024 R08: 0000000000000000 R09: 0000000000000000 [ 97.432706][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.440870][ T5929] R13: 00007fd44a626038 R14: 00007fd44a625fa0 R15: 00007ffc3fcab4e8 [ 97.448880][ T5929] [ 97.533047][ T5929] kobject: kobject_add_internal failed for 0-002c with -EEXIST, don't try to register things with the same name in the same directory. [ 97.571551][ T5929] i2c i2c-0: Failed to register i2c client isp1301 at 0x2c (-17) [ 99.230842][ T5943] netlink: 20 bytes leftover after parsing attributes in process `syz.1.31'. [ 103.332991][ T5972] No source specified [ 108.480387][ T6020] capability: warning: `syz.2.59' uses 32-bit capabilities (legacy support in use) [ 110.082047][ T6029] NILFS (nbd2): device size too small [ 110.992816][ T5813] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.386020][ T5813] usb 3-1: Using ep0 maxpacket: 32 [ 111.696822][ T5813] usb 3-1: device descriptor read/all, error -71 [ 116.721138][ T6070] NILFS (nbd0): device size too small [ 117.187951][ T42] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.508068][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 117.659962][ T42] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 117.786195][ T42] usb 1-1: can't read configurations, error -61 [ 118.216626][ T42] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 118.529110][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 118.624555][ T42] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 118.725673][ T42] usb 1-1: can't read configurations, error -61 [ 118.827274][ T42] usb usb1-port1: attempt power cycle [ 119.438536][ T42] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.600031][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 119.701553][ T42] usb 1-1: device descriptor read/all, error -71 [ 127.366688][ T6129] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 127.859700][ T6141] NILFS (nbd0): device size too small [ 129.322078][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.628391][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 131.647634][ T8] usb 1-1: device descriptor read/all, error -71 [ 133.258028][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.267358][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.193806][ T6179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.102'. [ 138.285938][ T6178] NILFS (nbd3): device size too small [ 139.619799][ T5813] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 139.967945][ T5813] usb 4-1: Using ep0 maxpacket: 32 [ 140.072633][ T5813] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 140.159669][ T5813] usb 4-1: can't read configurations, error -61 [ 140.439423][ T5813] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 140.867938][ T5813] usb 4-1: Using ep0 maxpacket: 32 [ 140.962988][ T5813] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 141.016736][ T5813] usb 4-1: can't read configurations, error -61 [ 141.054656][ T5813] usb usb4-port1: attempt power cycle [ 143.175094][ T6205] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 148.536834][ T6236] NILFS (nbd0): device size too small [ 149.039865][ T5814] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 151.079770][ T6241] netlink: 20 bytes leftover after parsing attributes in process `syz.2.120'. [ 152.120043][ T5814] usb 1-1: Using ep0 maxpacket: 32 [ 152.218121][ T5814] usb 1-1: device descriptor read/all, error -71 [ 154.637763][ T5814] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 155.219908][ T6267] netlink: 20 bytes leftover after parsing attributes in process `syz.0.130'. [ 156.220110][ T5814] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 156.247863][ T5814] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 156.267846][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.314776][ T6257] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 156.349280][ T5814] opticon 2-1:1.0: opticon converter detected [ 156.390379][ T5814] usb 2-1: opticon converter now attached to ttyUSB0 [ 157.962253][ T6285] NILFS (nbd0): device size too small [ 159.268699][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 160.477748][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 161.252872][ T6285] syz.0.131 uses obsolete (PF_INET,SOCK_PACKET) [ 161.361054][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 161.584481][ T9] usb 1-1: can't read configurations, error -61 [ 161.611594][ T2181] usb 2-1: USB disconnect, device number 2 [ 162.027193][ T2181] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 162.041874][ T2181] opticon 2-1:1.0: device disconnected [ 162.188092][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 163.270330][ T6305] jffs2: notice: (6305) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 163.618464][ T6308] netlink: 128 bytes leftover after parsing attributes in process `syz.0.141'. [ 163.637522][ T6308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.937782][ T5813] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 164.152426][ T5813] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 164.167799][ T9] usb 1-1: device descriptor read/64, error -71 [ 164.167878][ T5813] usb 4-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 164.200427][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.224425][ T6314] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 164.238834][ T5813] opticon 4-1:1.0: opticon converter detected [ 164.281436][ T5813] usb 4-1: opticon converter now attached to ttyUSB0 [ 164.320059][ T9] usb usb1-port1: attempt power cycle [ 164.785433][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 164.878451][ T9] usb 1-1: device descriptor read/8, error -71 [ 165.177791][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 165.228586][ T9] usb 1-1: device descriptor read/8, error -71 [ 165.360320][ T9] usb usb1-port1: unable to enumerate USB device [ 166.653155][ T5814] usb 4-1: USB disconnect, device number 5 [ 166.697780][ T5814] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 166.730398][ T5814] opticon 4-1:1.0: device disconnected [ 166.847598][ T6330] NILFS (nbd2): device size too small [ 167.237861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 167.258205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 168.087768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 168.827034][ T6339] jffs2: notice: (6339) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 168.903242][ T5833] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 169.113133][ T5833] usb 3-1: Using ep0 maxpacket: 32 [ 169.180062][ T5833] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 169.188036][ T5833] usb 3-1: can't read configurations, error -61 [ 169.358295][ T5833] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 169.547744][ T5833] usb 3-1: Using ep0 maxpacket: 32 [ 169.555989][ T5833] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 169.564775][ T5833] usb 3-1: can't read configurations, error -61 [ 169.571700][ T5833] usb usb3-port1: attempt power cycle [ 170.109129][ T6368] 9pnet_fd: Insufficient options for proto=fd [ 170.209066][ T6371] jffs2: notice: (6371) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 170.288552][ T6373] batman_adv: batadv0: Adding interface: veth0 [ 170.294803][ T6373] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.334451][ T6373] batman_adv: batadv0: Interface activated: veth0 [ 170.453278][ T6379] smc: net device lo applied user defined pnetid SYZ0 [ 171.337880][ T6384] program syz.2.167 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.519046][ T6389] NILFS (nbd0): device size too small [ 171.927892][ T5854] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 172.227891][ T5854] usb 1-1: Using ep0 maxpacket: 32 [ 172.334546][ T5854] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 172.437488][ T5854] usb 1-1: can't read configurations, error -61 [ 172.803334][ T5854] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 173.168077][ T5854] usb 1-1: Using ep0 maxpacket: 32 [ 173.266765][ T5854] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 173.380704][ T5854] usb 1-1: can't read configurations, error -61 [ 173.485741][ T5854] usb usb1-port1: attempt power cycle [ 174.548218][ T5854] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 174.650487][ T6402] jffs2: notice: (6402) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 174.797766][ T5854] usb 1-1: device not accepting address 16, error -71 [ 175.708986][ T6410] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-002c' [ 175.768636][ T6410] CPU: 1 PID: 6410 Comm: syz.1.176 Not tainted syzkaller #0 [ 175.776102][ T6410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.786289][ T6410] Call Trace: [ 175.789606][ T6410] [ 175.792579][ T6410] dump_stack_lvl+0x18c/0x250 [ 175.797319][ T6410] ? show_regs_print_info+0x20/0x20 [ 175.802572][ T6410] ? load_image+0x420/0x420 [ 175.807169][ T6410] sysfs_create_dir_ns+0x26e/0x2a0 [ 175.812333][ T6410] ? __lock_acquire+0x7d80/0x7d80 [ 175.817405][ T6410] ? sysfs_warn_dup+0xa0/0xa0 [ 175.822133][ T6410] ? do_raw_spin_unlock+0x121/0x230 [ 175.827397][ T6410] kobject_add_internal+0x617/0xc90 [ 175.832658][ T6410] kobject_add+0x164/0x240 [ 175.837134][ T6410] ? kobject_init+0x1d0/0x1d0 [ 175.841867][ T6410] ? class_to_subsys+0xb6/0x120 [ 175.846774][ T6410] ? get_device_parent+0xbc/0x390 [ 175.851844][ T6410] device_add+0x3fa/0xc40 [ 175.856227][ T6410] i2c_new_client_device+0xa72/0x10a0 [ 175.861754][ T6410] ? i2c_dev_irq_from_resources+0x230/0x230 [ 175.867706][ T6410] ? new_device_store+0x135/0x520 [ 175.872803][ T6410] new_device_store+0x24e/0x520 [ 175.877758][ T6410] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 175.883433][ T6410] ? __i2c_check_addr_busy+0x150/0x150 [ 175.888939][ T6410] ? sysfs_kf_write+0x187/0x2a0 [ 175.893814][ T6410] ? sysfs_kf_read+0x360/0x360 [ 175.898592][ T6410] kernfs_fop_write_iter+0x3a4/0x520 [ 175.903916][ T6410] vfs_write+0x474/0x9a0 [ 175.908209][ T6410] ? file_end_write+0x250/0x250 [ 175.913097][ T6410] ? __fget_files+0x3fc/0x460 [ 175.917806][ T6410] ? __fdget_pos+0x2a3/0x330 [ 175.922502][ T6410] ? ksys_write+0x74/0x260 [ 175.926938][ T6410] ksys_write+0x151/0x260 [ 175.931296][ T6410] ? __ia32_sys_read+0x90/0x90 [ 175.936352][ T6410] ? lockdep_hardirqs_on+0x98/0x150 [ 175.941584][ T6410] do_syscall_64+0x55/0xb0 [ 175.946107][ T6410] ? clear_bhb_loop+0x40/0x90 [ 175.950797][ T6410] ? clear_bhb_loop+0x40/0x90 [ 175.955490][ T6410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.961489][ T6410] RIP: 0033:0x7f2ec5d9e0d9 [ 175.966006][ T6410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.985804][ T6410] RSP: 002b:00007f2ec3ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.994237][ T6410] RAX: ffffffffffffffda RBX: 00007f2ec6025fa0 RCX: 00007f2ec5d9e0d9 [ 176.002309][ T6410] RDX: 000000000000000c RSI: 0000200000000100 RDI: 0000000000000003 [ 176.010379][ T6410] RBP: 00007f2ec5e35024 R08: 0000000000000000 R09: 0000000000000000 [ 176.018542][ T6410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.026541][ T6410] R13: 00007f2ec6026038 R14: 00007f2ec6025fa0 R15: 00007fffdade7bb8 [ 176.034573][ T6410] [ 176.083284][ T6410] kobject: kobject_add_internal failed for 0-002c with -EEXIST, don't try to register things with the same name in the same directory. [ 176.125642][ T6410] i2c i2c-0: Failed to register i2c client isp1301 at 0x2c (-17) [ 178.980427][ T6443] batman_adv: batadv0: Adding interface: veth0 [ 179.008176][ T6443] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.108613][ T6443] batman_adv: batadv0: Interface activated: veth0 [ 179.547317][ T6453] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 180.603205][ T6461] smc: net device lo applied user defined pnetid SYZ0 [ 182.847584][ T6483] batman_adv: batadv0: Adding interface: veth0 [ 182.917870][ T6483] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.943640][ T6483] batman_adv: batadv0: Interface activated: veth0 [ 182.963564][ T6481] netlink: 128 bytes leftover after parsing attributes in process `syz.0.198'. [ 182.996498][ T6481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.547904][ T42] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 183.948329][ T42] usb 1-1: device descriptor read/64, error -71 [ 184.048307][ T6499] NILFS (nbd2): device size too small [ 184.599672][ T42] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 185.897753][ T42] usb 1-1: device descriptor read/64, error -71 [ 186.023081][ T42] usb usb1-port1: attempt power cycle [ 186.067767][ T5854] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 186.287795][ T5854] usb 3-1: Using ep0 maxpacket: 32 [ 186.349265][ T5854] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 186.368255][ T5854] usb 3-1: can't read configurations, error -61 [ 186.578380][ T5854] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 186.817820][ T5854] usb 3-1: Using ep0 maxpacket: 32 [ 186.866778][ T5854] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 186.886704][ T5854] usb 3-1: can't read configurations, error -61 [ 186.910746][ T5854] usb usb3-port1: attempt power cycle [ 188.911504][ T6538] NILFS (nbd2): device size too small [ 189.358082][ T5814] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 190.927802][ T5814] usb 3-1: Using ep0 maxpacket: 32 [ 190.995069][ T5814] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 191.008198][ T5814] usb 3-1: can't read configurations, error -61 [ 191.297185][ T5814] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 192.254930][ T6553] batman_adv: batadv0: Adding interface: veth0 [ 192.292543][ T6553] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.340509][ T6553] batman_adv: batadv0: Interface activated: veth0 [ 192.397786][ T5814] usb 3-1: device not accepting address 11, error -71 [ 192.423605][ T5814] usb usb3-port1: attempt power cycle [ 194.313282][ T6578] NILFS (nbd0): device size too small [ 194.603794][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.653779][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.498045][ T5854] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 195.917953][ T5854] usb 1-1: Using ep0 maxpacket: 32 [ 196.579717][ T5854] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 196.593201][ T5854] usb 1-1: can't read configurations, error -61 [ 196.767785][ T5854] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 196.920661][ T6584] jffs2: notice: (6584) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 196.989744][ T5854] usb 1-1: Using ep0 maxpacket: 32 [ 197.012033][ T5854] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 197.313972][ T5854] usb 1-1: can't read configurations, error -61 [ 197.876639][ T5854] usb usb1-port1: attempt power cycle [ 198.792864][ T6596] netlink: 128 bytes leftover after parsing attributes in process `syz.2.235'. [ 198.812012][ T6596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.978977][ T6614] jffs2: notice: (6614) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 199.066541][ T5776] ------------[ cut here ]------------ [ 199.072794][ T5776] kernel BUG at fs/jffs2/nodelist.c:462! [ 199.089531][ T5776] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 199.095675][ T5776] CPU: 0 PID: 5776 Comm: syz-executor Not tainted syzkaller #0 [ 199.103836][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.113909][ T5776] RIP: 0010:jffs2_del_ino_cache+0x2b8/0x2c0 [ 199.119826][ T5776] Code: 08 ff e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 72 00 08 ff e9 42 fe ff ff e8 18 7e af fe <0f> 0b 66 0f 1f 44 00 00 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 199.139528][ T5776] RSP: 0018:ffffc900045a7a98 EFLAGS: 00010293 [ 199.145872][ T5776] RAX: ffffffff82d7f368 RBX: ffff88805d885040 RCX: ffff88801df0da00 [ 199.154059][ T5776] RDX: 0000000000000000 RSI: ffff88805d885040 RDI: ffff88805c3e0000 [ 199.162051][ T5776] RBP: 0000000000000006 R08: ffff88805c3e036b R09: 1ffff1100b87c06d [ 199.170018][ T5776] R10: dffffc0000000000 R11: ffffed100b87c06e R12: ffff88805d885040 [ 199.178000][ T5776] R13: dffffc0000000000 R14: ffff88805d885060 R15: ffff88805c3e0000 [ 199.185976][ T5776] FS: 00005555833b1500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 199.194912][ T5776] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.201517][ T5776] CR2: 000000110c3ece00 CR3: 0000000061515000 CR4: 00000000003506f0 [ 199.209493][ T5776] Call Trace: [ 199.212774][ T5776] [ 199.215722][ T5776] ? jffs2_do_clear_inode+0x314/0x390 [ 199.221188][ T5776] jffs2_do_clear_inode+0x31f/0x390 [ 199.226386][ T5776] ? jffs2_statfs+0x370/0x370 [ 199.231097][ T5776] evict+0x4b7/0x8a0 [ 199.234992][ T5776] ? xa_load+0x64/0x2e0 [ 199.239162][ T5776] ? proc_nr_inodes+0x230/0x230 [ 199.244018][ T5776] ? do_raw_spin_unlock+0x121/0x230 [ 199.249220][ T5776] ? do_raw_spin_unlock+0x121/0x230 [ 199.254421][ T5776] evict_inodes+0x64a/0x6e0 [ 199.258925][ T5776] ? clear_inode+0x150/0x150 [ 199.263531][ T5776] ? jffs2_sync_fs+0x97/0xa0 [ 199.268121][ T5776] generic_shutdown_super+0x97/0x2b0 [ 199.273406][ T5776] kill_mtd_super+0x23/0x70 [ 199.278172][ T5776] jffs2_kill_sb+0x96/0xb0 [ 199.282585][ T5776] deactivate_locked_super+0x97/0x100 [ 199.287962][ T5776] cleanup_mnt+0x3d7/0x460 [ 199.292377][ T5776] task_work_run+0x1d4/0x260 [ 199.296987][ T5776] ? task_work_cancel+0x220/0x220 [ 199.302009][ T5776] ? exit_to_user_mode_loop+0x3b/0x110 [ 199.307470][ T5776] exit_to_user_mode_loop+0xe6/0x110 [ 199.312753][ T5776] exit_to_user_mode_prepare+0xee/0x180 [ 199.318299][ T5776] syscall_exit_to_user_mode+0x1a/0x50 [ 199.323758][ T5776] do_syscall_64+0x61/0xb0 [ 199.328170][ T5776] ? clear_bhb_loop+0x40/0x90 [ 199.332844][ T5776] ? clear_bhb_loop+0x40/0x90 [ 199.337604][ T5776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.343607][ T5776] RIP: 0033:0x7f2ec5d9f317 [ 199.348056][ T5776] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 199.367681][ T5776] RSP: 002b:00007fffdade6e28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 199.376102][ T5776] RAX: 0000000000000000 RBX: 00007f2ec5e34474 RCX: 00007f2ec5d9f317 [ 199.384072][ T5776] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffdade6ee0 [ 199.392039][ T5776] RBP: 00007fffdade6ee0 R08: 00007fffdade7ee0 R09: 00000000ffffffff [ 199.400022][ T5776] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffdade7f70 [ 199.407997][ T5776] R13: 00007f2ec5e34474 R14: 0000000000030950 R15: 00007fffdade7fb0 [ 199.415980][ T5776] [ 199.418994][ T5776] Modules linked in: [ 199.548257][ T5776] ---[ end trace 0000000000000000 ]--- [ 199.563537][ T5776] RIP: 0010:jffs2_del_ino_cache+0x2b8/0x2c0 [ 199.573784][ T5776] Code: 08 ff e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 72 00 08 ff e9 42 fe ff ff e8 18 7e af fe <0f> 0b 66 0f 1f 44 00 00 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 199.595745][ T5776] RSP: 0018:ffffc900045a7a98 EFLAGS: 00010293 [ 199.602492][ T5776] RAX: ffffffff82d7f368 RBX: ffff88805d885040 RCX: ffff88801df0da00 [ 199.612676][ T5776] RDX: 0000000000000000 RSI: ffff88805d885040 RDI: ffff88805c3e0000 [ 199.621390][ T5776] RBP: 0000000000000006 R08: ffff88805c3e036b R09: 1ffff1100b87c06d [ 199.631748][ T5776] R10: dffffc0000000000 R11: ffffed100b87c06e R12: ffff88805d885040 [ 199.640482][ T5776] R13: dffffc0000000000 R14: ffff88805d885060 R15: ffff88805c3e0000 [ 199.652593][ T5776] FS: 00005555833b1500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 199.662184][ T5776] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.669492][ T5776] CR2: 000020000000c000 CR3: 0000000061515000 CR4: 00000000003506e0 [ 199.678674][ T5776] Kernel panic - not syncing: Fatal exception [ 199.684902][ T5776] Kernel Offset: disabled [ 199.689231][ T5776] Rebooting in 86400 seconds..