last executing test programs: 4m37.434947321s ago: executing program 2 (id=1652): syz_open_dev$video4linux(0x0, 0x2a2, 0x101000) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1200"], 0x50) syz_emit_ethernet(0x2a, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x0, 0x0, 0xc2, 0xa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000680)="d0a298a658d57ced9b09f94876f2cb2e67a4c166f12a4462e13eab41257854e6d11ea88ad1ec1893bc0567593c3f28205806c18517592a4ab53dfcb9bbd17d6ecd082061e65a6e6c3280aff2bfe6e701f03a43941d20b02db1b25268ab10e7f7f10fde4803d5b76d0bb2a21832e413ee396016defeafd1c653f24104df50a562157bcda4c187ffffffff86152add5e9219ed12fbc90eed585ea31b1442d845b8eb00000000000000000000000300000000000000000077e3f8db2d707c27bd2a37b3", &(0x7f0000000980)=""/4103, 0xd, 0x30520cf7f25e0c61, 0x2000, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000340)={0x4, 0x5, 0x0, 0x0, 0x5718, 0x63}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4024587b, &(0x7f0000001a40)={{0xffffffffffffffff, 0x0, 0x4000, &(0x7f0000000480)={@_ha_fsid={[0xffffffc0, 0xe557]}, {0x7f, 0x737, 0x3, 0x261}}, 0x3, 0x0, &(0x7f0000000580)=0x1}, 0x1, &(0x7f00000019c0)=[{0x2, 0x401, &(0x7f0000000780)='sysfs\x00', 0x0, 0x0, 0x18}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x30, r2, 0x1, 0x70bd25, 0x100003, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x1ff, 0x0, 0x9}}}}, 0x30}, 0x1, 0x0, 0x0, 0x2004c805}, 0x4009004) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000440)={0x2, 0x4e24, @loopback}, 0x10) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000540)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000600)="91cfdfef", 0x4}], 0x1}, 0x0) sendmsg$rds(r5, &(0x7f0000000640)={&(0x7f00000007c0)={0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x488c4}, 0x0) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="4b000000a2d075286078af03b8b70ea54de3bc7f3f2336877458ee1a1540ba4087336a631a938f493be35956fd7b80e28a59d4105a4a5874dbc3c49715837f91bfafaeb4ae2dbbcb33b731ef85f1", @ANYRES16=r3], 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) write(0xffffffffffffffff, &(0x7f0000000400), 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) 4m34.887102841s ago: executing program 2 (id=1657): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r2 = timerfd_create(0x8, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000100)) clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x40000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0x7, 0x2000}) ftruncate(r2, 0x7) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f0000000000", 0x15) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000b0000070000000900010073797a300000000014000000030a01010000000000000000000000002c000000200a05000000000000000000070000010900010073797a30000000000c0005"], 0x392c}}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)=[{0x0, 0x2c, 0x11, 0x2}], 0x10, 0xffffffff}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x6, @remote, 0x7}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000006c0)='file device_pm.c +p\n', 0x14) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 4m31.163010881s ago: executing program 2 (id=1659): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) getpid() r3 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xc2742, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x4004000) r5 = syz_io_uring_setup(0x264a, &(0x7f00000190c0)={0x0, 0x8847, 0x40, 0x2, 0x266, 0x0, r3}, &(0x7f0000019140), &(0x7f0000000180), &(0x7f00000191c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r5, 0x12, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x58}}, 0x20000840) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000140)={'netdevsim0\x00', @ifru_hwaddr=@remote}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000003c0)=@newqdisc={0x64, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x3, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6a13}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x5}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x3}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xb064}]}}]}, 0x64}}, 0x2000400c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 4m30.313536847s ago: executing program 1 (id=1660): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000640)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000100)=0x5, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22e7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0xbf4f4195961b6151}, 0xc, &(0x7f0000001780)={&(0x7f000001ab00)={0xa0, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @empty, 0x8}}}}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000884) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000580), 0x2, 0x141102) writev(r4, &(0x7f0000001800)=[{&(0x7f0000001840)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000001880)={0x40000000, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001940)=""/102356, 0x18fd4, 0x200) r7 = openat$nci(0xffffffffffffff9c, &(0x7f000001a940), 0x2, 0x0) write$nci(r7, &(0x7f000001a980)=ANY=[], 0x102) bind$inet(r5, &(0x7f000001a9c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001aa00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 4m29.284186883s ago: executing program 2 (id=1661): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) getpid() syz_open_procfs(0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000003c0)=@newqdisc={0x64, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x3, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6a13}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x5}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x3}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xb064}]}}]}, 0x64}}, 0x2000400c) 4m28.549321807s ago: executing program 1 (id=1663): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') socket$netlink(0x10, 0x3, 0x4) mount(0x0, 0x0, &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) clock_gettime(0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4041) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./trace\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) syz_open_dev$dmmidi(&(0x7f0000000180), 0xfffffffa, 0x80000) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5793, &(0x7f00000006c0)={0x0, 0xca23, 0x200, 0x2, 0x212}, &(0x7f0000000740), &(0x7f0000000780), 0x0) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000007c0)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}}) write(r4, &(0x7f0000000680)='prev_state.function ==', 0x16) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4104aec6, 0x0) 4m28.528475669s ago: executing program 2 (id=1664): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xb3b2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000600)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000001880)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000100)={0x2, 0xfffffffe, 0x0, 'queue1\x00', 0x8001}) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000240)="218292", 0xfff6}], 0x2) 4m27.137188261s ago: executing program 2 (id=1665): r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r0, 0x0) pipe(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000cc0), 0x11000) vmsplice(r1, &(0x7f0000000dc0)=[{&(0x7f0000000e00), 0x3528a9c0}], 0x1, 0x0) 4m23.972213015s ago: executing program 1 (id=1668): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001700)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x112, &(0x7f0000001740)={0x0, 0x5a87, 0x2, 0x4, 0xfffffffe}, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000001880)='n', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x20) write(r1, &(0x7f0000000680)='md', 0x2) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000700), &(0x7f0000000740)=0xc) write(0xffffffffffffffff, &(0x7f0000000780), 0x0) syz_open_dev$sndctrl(0x0, 0x8d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000b80), 0x0, 0x0, &(0x7f0000000bc0)={0x2, 0x13c4, @loopback}, 0x10) 4m23.315370831s ago: executing program 1 (id=1670): socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) unshare(0x2c020400) syz_open_dev$loop(0x0, 0x4, 0xc0981) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bridge0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x2002c094) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x5, 0x4, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3a}, 0x0) syz_clone(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="01000000400800000008000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010000000b0e00000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x40011) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000003c0), 0x318, 0x0) madvise(&(0x7f000074b000/0x1000)=nil, 0x1000, 0xb) setpriority(0x2, 0x0, 0x2) 4m18.835335419s ago: executing program 1 (id=1675): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xb3b2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000600)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000100)={0x2, 0xfffffffe, 0x0, 'queue1\x00', 0x8001}) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000240)="218292", 0xfff6}], 0x2) 4m15.262459483s ago: executing program 1 (id=1677): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = fsopen(&(0x7f00000003c0)='xfs\x00', 0x0) close(r4) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0x0) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffc000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_pidfd_open(0x0, 0x0) 4m11.221370076s ago: executing program 32 (id=1665): r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r0, 0x0) pipe(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000cc0), 0x11000) vmsplice(r1, &(0x7f0000000dc0)=[{&(0x7f0000000e00), 0x3528a9c0}], 0x1, 0x0) 3m59.606748741s ago: executing program 33 (id=1677): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = fsopen(&(0x7f00000003c0)='xfs\x00', 0x0) close(r4) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0x0) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffc000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_pidfd_open(0x0, 0x0) 3m56.296026339s ago: executing program 4 (id=1700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) 3m55.545864325s ago: executing program 4 (id=1702): socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x883, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'CRP-syz', 0x0, '3\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x1d8, 0x138, 0x1, 0x0, 0x5000, 0x0, 0x0, @by_dev={r3}, [@raid={0x0, 0x8, 0x0, 0xa0, 'raid\x00', {'raid6_nr', 0x20, '3 64 raid10_format far', 0x20, 0x3, [{0x20, @none, 0x20, @rnull={'/dev/syzrnull', 0x0}}, {0x20, @dev=@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}}, {0x20, @none, 0x20, @ram_num={'1:', 0x1}}]}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) setns(0xc9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000900), 0x2, 0x141102) writev(r7, &(0x7f0000000940)=[{&(0x7f0000000980)="94", 0xf000}, {0x0}], 0x2) kexec_load(0x80, 0x1, &(0x7f00000009c0)=[{0x0, 0x0, 0x40000000, 0x2000000}], 0xa0000) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000040)=0x4e) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000e00)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r6, &(0x7f0000000e40), 0x4ff, 0xffd8) 3m48.406891804s ago: executing program 4 (id=1706): openat$kvm(0xffffffffffffff9c, 0x0, 0x101040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='usbip-vudc.0', 0xc) 3m47.94940935s ago: executing program 4 (id=1709): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = syz_open_dev$sndctrl(&(0x7f0000000240), 0xf32, 0x22880) readv(r1, &(0x7f0000000300)=[{&(0x7f0000002680)=""/4110, 0x100e}], 0x1) ptrace(0x4206, 0x0) tkill(0x0, 0x12) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) modify_ldt$write2(0x11, &(0x7f0000000180)={0x81, 0x0, 0x4000, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000001640)=""/4101, 0xffffffffffffffd6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000002fab37fd8abd9505000000000000000d00000000000057"], 0x0, 0x34}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000100)={0x36, 0x70, 0x20000}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2) sendfile(r3, r3, 0x0, 0x8000000f3aa6ea) 3m46.292655849s ago: executing program 4 (id=1715): socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x883, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'CRP-syz', 0x0, '3\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x1d8, 0x138, 0x1, 0x0, 0x5000, 0x0, 0x0, @by_dev={r3}, [@raid={0x0, 0x8, 0x0, 0xa0, 'raid\x00', {'raid6_nr', 0x20, '3 64 raid10_format far', 0x20, 0x3, [{0x20, @none, 0x20, @rnull={'/dev/syzrnull', 0x0}}, {0x20, @dev=@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}}, {0x20, @none, 0x20, @ram_num={'1:', 0x1}}]}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) setns(0xc9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000900), 0x2, 0x141102) writev(r7, &(0x7f0000000940)=[{&(0x7f0000000980)="94", 0xf000}, {0x0}], 0x2) kexec_load(0x80, 0x1, &(0x7f00000009c0)=[{0x0, 0x0, 0x40000000, 0x2000000}], 0xa0000) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000040)=0x4e) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000e00)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r6, &(0x7f0000000e40), 0x4ff, 0xffd8) 3m41.183998041s ago: executing program 4 (id=1718): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) getpid() r3 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x4004000) r6 = syz_io_uring_setup(0x264a, &(0x7f00000190c0)={0x0, 0x8847, 0x40, 0x2, 0x266, 0x0, r3}, &(0x7f0000019140), &(0x7f0000000180), &(0x7f00000191c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r6, 0x12, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x58}}, 0x20000840) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000140)={'netdevsim0\x00', @ifru_hwaddr=@remote}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000003c0)=@newqdisc={0x64, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x3, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6a13}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x5}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x3}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xb064}]}}]}, 0x64}}, 0x2000400c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 3m26.007700869s ago: executing program 34 (id=1718): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) getpid() r3 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x4004000) r6 = syz_io_uring_setup(0x264a, &(0x7f00000190c0)={0x0, 0x8847, 0x40, 0x2, 0x266, 0x0, r3}, &(0x7f0000019140), &(0x7f0000000180), &(0x7f00000191c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r6, 0x12, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x58}}, 0x20000840) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000140)={'netdevsim0\x00', @ifru_hwaddr=@remote}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000003c0)=@newqdisc={0x64, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x3, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6a13}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x5}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x3}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xb064}]}}]}, 0x64}}, 0x2000400c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 16.927819433s ago: executing program 5 (id=1678): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') socket$netlink(0x10, 0x3, 0x4) mount(0x0, 0x0, &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) clock_gettime(0x0, &(0x7f0000000140)) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4041) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./trace\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) syz_open_dev$dmmidi(&(0x7f0000000180), 0xfffffffa, 0x80000) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5793, &(0x7f00000006c0)={0x0, 0xca23, 0x200, 0x2, 0x212}, &(0x7f0000000740), &(0x7f0000000780), 0x0) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000007c0)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}}) write(r4, &(0x7f0000000680)='prev_state.function ==', 0x16) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4104aec6, 0x0) 16.07607835s ago: executing program 7 (id=2001): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x24281, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000003bc0)='./proc\x00', &(0x7f0000003c00)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x12a) write$cgroup_int(r2, &(0x7f0000003c40)=0x7ff, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = inotify_init() r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0xa2c6000) bind$inet(0xffffffffffffffff, &(0x7f0000003cc0)={0x2, 0x5e21, @remote}, 0x10) r6 = socket(0x8, 0x2, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x400261f3, &(0x7f0000003d00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000003f40)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000003f80)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r4, 0x20, &(0x7f0000003fc0)="898af54270aac7e9556f7d7e207b0d92d026e22b33eb8275", 0x0, 0x18) syz_memcpy_off$KVM_EXIT_MMIO(r4, 0x20, &(0x7f0000004000)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x68, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}, @IPSET_ATTR_IP={0xf, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1a81}, @IPSET_ATTR_CIDR={0x5}]}]}, 0x68}}, 0x80) 12.865064967s ago: executing program 3 (id=2004): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xa0201, 0x0) io_setup(0x6, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) 11.803733615s ago: executing program 0 (id=2005): syz_open_dev$loop(&(0x7f00000000c0), 0x75f, 0x4c042) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64007d00ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000100000000000000", 0x58}], 0x1) r1 = add_key(&(0x7f0000000380)='asymmetric\x00', 0x0, &(0x7f00000003c0)="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", 0x10f, 0xfffffffffffffffd) r2 = request_key(&(0x7f0000000500)='encrypted\x00', 0x0, &(0x7f0000000580)='-*.\x00', r1) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000005c0)={r2}, &(0x7f0000000600)=ANY=[@ANYBLOB='enc=raw hash=streebog256-generic\x00'/56], 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x15}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @random="000300"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x3004c047}, 0x4000050) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000940)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r6, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c05c}}], 0x1, 0x2000c080) syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902"], 0x0) sendmsg(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x4850, &(0x7f0000000b00)={0x0, 0xa974, 0x2, 0x0, 0x170}) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000b80)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x8) syz_open_dev$ttys(0xc, 0x2, 0x1) 11.803579426s ago: executing program 6 (id=1693): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000500), 0x8e5b, r0}, 0x38) socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@getchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5}, {0xfff3}}}, 0x24}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) r4 = dup2(r3, r3) read$FUSE(r4, &(0x7f0000000f00)={0x2020}, 0x2020) 11.199635557s ago: executing program 3 (id=2006): socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00004da000/0x4000)=nil, 0x4000, 0x19) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./bus\x00', &(0x7f00000003c0)='exfat\x00', 0x8080, &(0x7f0000000440)='discard') r1 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x28102) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/wakeup_count', 0x422600, 0x10) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000700)=0xa2) r3 = io_uring_setup(0x2e06, &(0x7f00000001c0)={0x0, 0x405acf, 0x40, 0xffffffff, 0x0, 0x0, r2}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newspdinfo={0x1c, 0x24, 0x21, 0x70bd2d, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) setrlimit(0x7, &(0x7f0000000100)={0x4, 0x100}) socket$pppl2tp(0x18, 0x1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x8) write$uinput_user_dev(r6, &(0x7f0000000880)={'syz1\x00', {0x8000}, 0x0, [0x7, 0x0, 0x0, 0x2, 0x0, 0xa5b0e763, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x184, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x3, 0x0, 0x487, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8, 0x1002, 0x14], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x10001, 0x27], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x403, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x401, 0x806, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0xffffaed9, 0x0, 0x0, 0x2000000], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x40, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xff, 0x0, 0xc010, 0x0, 0xfffffffe, 0x3, 0x2, 0x0, 0x0, 0x0, 0x1, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) 11.195996928s ago: executing program 7 (id=2007): setpriority(0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$key(0xf, 0x3, 0x2) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000200)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000019200)=0x7) socket$inet_tcp(0x2, 0x1, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) msgrcv(0x0, 0x0, 0x0, 0xced6b2bc496a26e6, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000019280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f00000192c0)={0xe, 0x16, &(0x7f0000019380)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67100000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f00000199c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x21, 0x10, 0x0, 0x26}, 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r5) timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x800000000004}, 0x0) 8.784985203s ago: executing program 7 (id=2008): socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) unshare(0x2c020400) syz_open_dev$loop(0x0, 0x4, 0xc0981) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bridge0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x2002c094) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x5, 0x4, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3a}, 0x0) syz_clone(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="010000004008000000080000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010000000b0e00000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x40011) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000003c0), 0x318, 0x0) madvise(&(0x7f000074b000/0x1000)=nil, 0x1000, 0xb) setpriority(0x2, 0x0, 0x2) 8.069980407s ago: executing program 0 (id=2009): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) symlinkat(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x2, 0x0, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x0, 0x3, 0x37e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10, 0x0, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626b, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 7.974268986s ago: executing program 3 (id=2010): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1ee) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/devices/system/memory/memory10/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)='offline', 0x7) 7.962108238s ago: executing program 7 (id=2011): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000440)=0xce0, 0x4) sendmsg$nl_generic(r2, 0x0, 0x80000) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) listen(r0, 0xc) 5.440289495s ago: executing program 0 (id=2012): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') mount(0x0, 0x0, &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) mq_open(&(0x7f0000000500)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\x8a\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|L\xca%;5w?R', 0x2, 0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) clock_gettime(0x0, &(0x7f0000000140)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4041) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./trace\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) syz_open_dev$dmmidi(&(0x7f0000000180), 0xfffffffa, 0x80000) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5793, &(0x7f00000006c0)={0x0, 0xca23, 0x200, 0x2, 0x212}, &(0x7f0000000740), &(0x7f0000000780), 0x0) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000007c0)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}}) write(r3, &(0x7f0000000680)='prev_state.function ==', 0x16) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4104aec6, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 5.09641732s ago: executing program 7 (id=2013): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x40, 0x1000, 0x0, 0x0, {[@generic={0x4, 0x2}]}}}}}}}}, 0x0) 2.399953105s ago: executing program 3 (id=2014): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timerfd_create(0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x6, @remote, 0x7}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/dynamic_debug/control\x00', 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000240)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 2.232208392s ago: executing program 0 (id=2015): socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) set_mempolicy(0x3, 0x0, 0x7) unshare(0x6a040000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="96", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x8, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0x7fff) ioctl$DVB_DEMUX_DMX_STOP(r2, 0x6f2a) 612.437077ms ago: executing program 0 (id=2016): r0 = syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x0, 0x41) r1 = syz_open_dev$dvb_demux(&(0x7f0000000380), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f00000003c0)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000400)={0x6, {"77fe1801f805000000ffee0092000008", "000900000000000200", "000000000000161cdf2b7400"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000440)={0x400, {"52f85c70d9764fad16f726a7dca3011e", "6936f6809c8010c296846957dcd968bf", "1c21212bd50edbcfa2baf5bbd009d38e"}, 0x8, 0x1}) 539.806395ms ago: executing program 3 (id=2017): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r0 = socket(0xa, 0x3, 0xff) shutdown(r0, 0x1) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f00000005c0)={0xa, 0x9, 0x0, @mcast2}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000640)="7480612e99d9310fa445597a4e67014f000000000eac945db22045ba4df7f0fcb97b055b065bf0ba", 0x28}], 0x1}, 0x30008bcc) syz_ublk_setup_io_uring(0x64d, &(0x7f0000000240)={0x0, 0xd58c, 0x1000, 0x2, 0x14d}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000006c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="05000000e608"], 0x80}}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="05000000a7013c5a9039fe9027258b426b2822fb10000000000000004f8f29939e2290be1a7e2093bc22c0f7961e717b2af86997d971e9cf44a65f01052795b0f41d72d7da932acbdb3f2a1fd22821", @ANYRES32=0x0, @ANYRES32=0x2710, @ANYRES32=0x0, @ANYRES32=0x2710, @ANYBLOB="0000000001000000000000000000000029fd71a69d3295d8"], 0x48}, 0x2, 0x0, 0x0, 0x24000040}, 0x800) r5 = syz_open_dev$media(&(0x7f0000000080), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000100)=0xffffffffffffffff) r7 = syz_open_dev$radio(&(0x7f0000000140), 0xffffffffffffffff, 0x2) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) r9 = dup(r8) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r10, 0x6, 0x19, &(0x7f0000000180)=0x1, 0x4) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r10, &(0x7f00000002c0)=[{{&(0x7f0000000300)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000440)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe639", 0x23}], 0x2}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r10, 0x6, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="bd0834001a01c783a8bc563de9a0bd984e338531d1157bc12d1fc364fdbaaa4d2954c1166855dbbe782862280400d8c70000000000000000765696cedb30cd5165"], 0x38) pselect6(0x40, &(0x7f00000004c0)={0x4, 0x8, 0x833, 0x1, 0x7, 0x2, 0xd, 0x1}, 0x0, &(0x7f0000000500)={0x8, 0x7, 0x80000001, 0x3, 0x3, 0xfffffffffffffffd, 0x2, 0x2}, &(0x7f0000000540)={0x0, 0x3938700}, 0x0) write$UHID_INPUT(r9, &(0x7f0000000a00)={0xc, {"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", 0x1000}}, 0x1006) r11 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r11, 0x0, 0x485, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000001a40)={0xf010000, 0x0, 0x0, r6, 0x0, 0x0}) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001a80)={0x1, &(0x7f0000001ac0)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) ioctl$TIOCSLCKTRMIOS(r8, 0x5457, &(0x7f0000000680)) close_range(r12, 0xffffffffffffffff, 0x0) 539.340585ms ago: executing program 7 (id=2018): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$sndctrl(&(0x7f0000000640), 0x2000000000000, 0xc81c0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000240)=""/231, 0xe7) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./debug\x00', 0x80) mount(0x0, &(0x7f0000000400)='./debug\x00', &(0x7f0000000440)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./debug/tracing/events/sched/sched_switch/enable\x00', 0x2141, 0x1d1) write(r4, &(0x7f00000004c0)='1', 0x1) write(r4, &(0x7f0000000500)='0', 0x1) 252.723404ms ago: executing program 0 (id=2019): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000640)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5ec800000000000000fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) connect$inet(r1, &(0x7f0000000840)={0x2, 0x4001, @remote}, 0x10) 0s ago: executing program 3 (id=2020): syz_open_dev$loop(&(0x7f00000000c0), 0x75f, 0x4c042) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64007d00ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000100000000000000", 0x58}], 0x1) r1 = add_key(&(0x7f0000000380)='asymmetric\x00', 0x0, &(0x7f00000003c0)="3082010c3081baa003020102020101300a06082a85030701010302300c310a30080603550403130141301e170d3230303130313030303030305a170d3330303130313030303030305a300c310a300806035504031301413068302106082a85030701010101301506092a850307010201010106082a85030701010202034300044001010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101300a06082a85030701010302034100020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202", 0x10f, 0xfffffffffffffffd) r2 = request_key(&(0x7f0000000500)='encrypted\x00', 0x0, &(0x7f0000000580)='-*.\x00', r1) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000005c0)={r2}, &(0x7f0000000600)=ANY=[@ANYBLOB='enc=raw hash=streebog256-generic\x00'/56], 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x15}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @random="000300"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x3004c047}, 0x4000050) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000940)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r6, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c05c}}], 0x1, 0x2000c080) syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902"], 0x0) sendmsg(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x4850, &(0x7f0000000b00)={0x0, 0xa974, 0x2, 0x0, 0x170}) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000b80)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x8) syz_open_dev$ttys(0xc, 0x2, 0x1) kernel console output (not intermixed with test programs): 1: link becomes ready [ 900.115385][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 900.142305][T12617] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.188631][T12617] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.201299][ T26] audit: type=1800 audit(1794534675.495:304): pid=12677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1742" name="file1" dev="sda1" ino=2048 res=0 errno=0 [ 900.271908][T12617] device bridge_slave_0 entered promiscuous mode [ 900.487119][T12617] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.517667][T12617] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.574998][T12617] device bridge_slave_1 entered promiscuous mode [ 900.625032][T12335] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.841640][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 900.883004][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 900.914854][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.923096][ T5085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.940889][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 900.950628][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 900.960572][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.967748][ T5085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.976785][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 900.990907][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 901.021363][T12617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.043002][T12405] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 901.125973][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 901.251473][T12617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.921502][T12617] team0: Port device team_slave_0 added [ 901.929739][T12405] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 902.030598][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 902.059558][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 902.099888][ T4292] Bluetooth: hci5: command 0x040f tx timeout [ 902.108845][ T34] usb 4-1: USB disconnect, device number 17 [ 902.196568][T12617] team0: Port device team_slave_1 added [ 902.230849][T12405] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 902.283230][T12405] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 902.341830][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 902.351901][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 902.390774][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 902.401047][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 902.439863][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 902.460206][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 902.490550][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 902.541432][T12335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 902.639517][T12617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.649771][T12617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.021774][T12617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.062067][T12617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.079648][T12617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.172985][T12617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.303641][T12715] 9pnet_virtio: no channels available for device syz [ 903.320088][T12715] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 903.330210][T12715] overlayfs: missing 'lowerdir' [ 904.189282][ T4292] Bluetooth: hci5: command 0x0419 tx timeout [ 904.464154][ T5115] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.666508][ T26] audit: type=1800 audit(1794534680.953:305): pid=12728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1750" name="file1" dev="sda1" ino=2048 res=0 errno=0 [ 905.282249][ T5115] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.410333][T12617] device hsr_slave_0 entered promiscuous mode [ 905.448028][T12617] device hsr_slave_1 entered promiscuous mode [ 905.509709][T12617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 905.517342][T12617] Cannot create hsr debugfs directory [ 905.894985][ T5115] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.606775][ T5115] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.703276][T12405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.781711][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 907.818032][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 907.863345][T12405] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.931858][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 907.944591][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 907.972075][T12752] fuse: Bad value for 'fd' [ 907.998049][T12335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 908.070300][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 908.092012][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 908.102656][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.109844][ T5106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.122332][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 908.133468][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 908.151374][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.158562][ T5106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.175635][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 908.189017][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 908.631763][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 908.685367][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 908.779468][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 908.893742][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 908.905850][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 908.916203][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 908.926634][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 908.936664][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 908.954206][T12405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 909.047246][ T26] audit: type=1800 audit(1794534687.331:306): pid=12775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1758" name="file1" dev="sda1" ino=2048 res=0 errno=0 [ 909.519514][T12405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 909.584638][ T5102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 909.664212][ T5102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 909.966445][ T5115] tipc: Disabling bearer [ 909.986410][ T5115] tipc: Left network mode [ 909.997735][T12617] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 910.091098][T12617] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 910.124686][T12617] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 910.203371][T12617] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 911.934093][ T26] audit: type=1800 audit(1794534692.227:307): pid=12815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1766" name="file1" dev="sda1" ino=2048 res=0 errno=0 [ 912.075107][T12339] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 912.097799][T12339] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 912.107629][T12339] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 912.117041][T12339] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 912.124764][T12339] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 912.132103][T12339] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 913.155955][T12820] rxe_eth0 speed is unknown, defaulting to 1000 [ 913.198181][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 913.227916][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 913.641101][T12405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.180388][T12339] Bluetooth: hci1: command 0x0409 tx timeout [ 916.061931][T12617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.258888][T12339] Bluetooth: hci1: command 0x041b tx timeout [ 918.349079][T12339] Bluetooth: hci1: command 0x040f tx timeout [ 919.117319][T12617] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.186565][ T8258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 919.196929][ T8258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 919.354839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 919.389753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 919.465683][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.472905][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.486856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 919.686947][ T26] audit: type=1800 audit(1794534699.977:308): pid=12889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1774" name="file1" dev="sda1" ino=2048 res=0 errno=0 [ 919.732565][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 919.756916][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 919.794708][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.801935][ T5113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.885753][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 919.951164][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 919.991363][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 920.036614][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 920.163146][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 920.249262][T12887] comedi comedi1: reset error (fatal) [ 920.357510][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 920.379949][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 920.419166][T12339] Bluetooth: hci1: command 0x0419 tx timeout [ 920.489721][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 920.527611][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 920.546744][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 920.567479][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 920.597352][T12617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 920.609545][T12617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 920.622480][T12820] chnl_net:caif_netlink_parms(): no params data found [ 920.640587][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 920.659854][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 920.690225][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 920.701251][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 920.730782][T12405] device veth0_vlan entered promiscuous mode [ 920.785646][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 920.809577][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 923.131643][T12820] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.141029][T12820] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.150092][T12820] device bridge_slave_0 entered promiscuous mode [ 923.159800][T12820] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.166989][T12820] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.210401][T12820] device bridge_slave_1 entered promiscuous mode [ 923.251950][T12922] netlink: 'syz.0.1778': attribute type 10 has an invalid length. [ 923.511858][T12820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.671805][T12820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 926.690334][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 926.760014][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 926.909061][T12617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 927.023527][T12820] team0: Port device team_slave_0 added [ 927.095560][T12820] team0: Port device team_slave_1 added [ 927.419657][T12339] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 927.440255][T12339] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 927.449074][T12339] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 927.473075][T12339] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 927.481957][T12339] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 927.489880][T12339] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 927.614789][ T5115] device hsr_slave_0 left promiscuous mode [ 927.691957][ T5115] device hsr_slave_1 left promiscuous mode [ 927.774316][ T5115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 927.814922][ T26] audit: type=1800 audit(1794534708.108:309): pid=12974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1782" name="file1" dev="sda1" ino=2048 res=0 errno=0 [ 927.837006][ T5115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.849298][ T5115] device bridge_slave_1 left promiscuous mode [ 927.878083][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.911733][ T5115] device bridge_slave_0 left promiscuous mode [ 927.935305][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.993258][ T5115] device hsr_slave_0 left promiscuous mode [ 928.012955][ T5115] device hsr_slave_1 left promiscuous mode [ 928.028546][ T5115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 928.036152][ T5115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 928.052838][ T5115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 928.061133][ T5115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 928.070606][ T5115] device bridge_slave_1 left promiscuous mode [ 928.076984][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.094321][ T5115] device bridge_slave_0 left promiscuous mode [ 928.118035][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.456045][ T5115] device veth1_macvtap left promiscuous mode [ 928.517917][ T5115] device veth0_macvtap left promiscuous mode [ 928.581040][ T5115] device veth1_vlan left promiscuous mode [ 928.631855][ T5115] device veth0_vlan left promiscuous mode [ 929.539380][ T4292] Bluetooth: hci3: command 0x0409 tx timeout [ 929.870423][ T26] audit: type=1800 audit(1794534710.168:310): pid=13012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1785" name="file1" dev="sda1" ino=2048 res=0 errno=0 [ 930.524447][ T5115] team0 (unregistering): Port device team_slave_1 removed [ 930.574515][ T5115] team0 (unregistering): Port device team_slave_0 removed [ 930.622247][ T5115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 930.671662][ T5115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 931.132119][ T5115] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 931.164350][ T5115] bond0 (unregistering): Released all slaves [ 931.463574][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.470616][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.618428][ T4292] Bluetooth: hci3: command 0x041b tx timeout [ 933.774773][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 934.275414][ T5115] team0 (unregistering): Port device team_slave_1 removed [ 934.325206][ T5115] team0 (unregistering): Port device team_slave_0 removed [ 934.373102][ T5115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 934.422020][ T5115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 934.793434][ T5115] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 934.803111][ T5115] bond0 (unregistering): Released all slaves [ 935.031228][T13073] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 935.062137][T13073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.075292][T13073] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.094446][T13073] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 935.123440][T12820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.133305][T12820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.160761][T12820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.184920][T12820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.197056][T12820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.285403][T12820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.442261][T12966] rxe_eth0 speed is unknown, defaulting to 1000 [ 935.474452][T12820] device hsr_slave_0 entered promiscuous mode [ 935.511867][T12820] device hsr_slave_1 entered promiscuous mode [ 935.859093][ T4292] Bluetooth: hci3: command 0x0419 tx timeout [ 936.666704][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 936.696690][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 936.952784][ T26] audit: type=1800 audit(1794534718.239:311): pid=13093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1795" name="file1" dev="sda1" ino=2048 res=0 errno=0 [ 937.099088][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 937.118085][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 937.140198][T12617] device veth0_vlan entered promiscuous mode [ 937.164192][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 937.192579][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 937.216305][T12617] device veth1_vlan entered promiscuous mode [ 937.479775][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 937.488010][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 937.557675][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 937.669884][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 937.713527][T12617] device veth0_macvtap entered promiscuous mode [ 937.759868][T12617] device veth1_macvtap entered promiscuous mode [ 937.871932][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 937.935473][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.980715][T12617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 938.010002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 938.029298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 938.056137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 938.079521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 938.112233][T12966] chnl_net:caif_netlink_parms(): no params data found [ 938.146850][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 938.219001][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.267778][T12617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 938.287340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 938.301681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 938.352865][T12617] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.372005][T12617] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.395275][T12617] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.437320][T12617] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.451266][T12820] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 938.603204][T12820] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 938.649177][T12820] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 938.707349][T12820] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 938.995597][T12966] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.009169][T12966] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.027145][T12966] device bridge_slave_0 entered promiscuous mode [ 939.094388][T12966] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.102205][ T4474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.121732][T12966] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.131046][T12966] device bridge_slave_1 entered promiscuous mode [ 939.131994][ T4474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.387889][ T5065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 939.426153][ T26] audit: type=1800 audit(1794534720.709:312): pid=13125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1800" name="file1" dev="sda1" ino=2048 res=0 errno=0 [ 939.454506][ T6916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.465570][T12966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.505154][T12966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.515317][ T6916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.570019][ T6916] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 939.659152][T12572] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 939.680285][T12966] team0: Port device team_slave_0 added [ 939.874518][T12820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.882630][T12572] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 941.555273][T12572] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.601062][T12966] team0: Port device team_slave_1 added [ 941.730655][T12820] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.284906][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 942.300733][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 942.351579][T12966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.370407][T12966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.374170][T12572] usb 4-1: ATUSB: AT86RF231 version 1 [ 943.474770][ T26] audit: type=1800 audit(1794534725.763:313): pid=13150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1803" name="file1" dev="sda1" ino=2048 res=0 errno=0 [ 943.516669][T12966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.574810][T12572] usb 4-1: Firmware version (0.0) predates our first public release. [ 943.589775][T12966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.604928][T12572] usb 4-1: Please update to version 0.2 or newer [ 943.622708][T12966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.761599][T12966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 943.847491][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 943.887295][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 943.922651][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.929879][ T5100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.996357][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 944.160607][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 944.180189][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 944.195465][T13168] netlink: 'syz.7.1806': attribute type 3 has an invalid length. [ 944.214395][T13167] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 944.235804][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.242970][ T5100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 944.253100][T12572] usb 4-1: USB disconnect, device number 18 [ 944.276812][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 944.294589][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 944.379789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 944.399967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 944.434303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 944.579913][T12966] device hsr_slave_0 entered promiscuous mode [ 944.775024][T12966] device hsr_slave_1 entered promiscuous mode [ 945.100563][T12966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 945.282961][T12966] Cannot create hsr debugfs directory [ 945.383651][ T8258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 945.446413][ T8258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 945.550035][ T8258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 945.787716][ T8258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 946.279366][ T8258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 946.399858][ T8258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 946.426840][T12820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 947.673498][ T26] audit: type=1800 audit(1794534730.965:314): pid=13202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1812" name="file1" dev="sda1" ino=2048 res=0 errno=0 [ 952.308802][T12987] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 952.613572][ T6916] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 952.681447][ T6916] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 952.722466][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1820'. [ 958.185050][T12820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 958.788091][ T26] audit: type=1800 audit(1794534744.072:315): pid=13268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1823" name="file1" dev="sda1" ino=2048 res=0 errno=0 [ 959.845608][T12966] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 962.140979][T12966] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 964.029393][T12966] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 964.087049][T12966] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 966.609506][ T26] audit: type=1800 audit(1794534752.901:316): pid=13316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1833" name="file1" dev="sda1" ino=2048 res=0 errno=0 [ 966.924337][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 966.952481][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 967.143929][T12966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 967.202012][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 967.224985][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 967.247188][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 967.609806][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 967.621383][T12820] device veth0_vlan entered promiscuous mode [ 967.650509][T12820] device veth1_vlan entered promiscuous mode [ 967.667054][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 967.724984][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 967.829842][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 967.871709][T12966] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.911517][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 967.920606][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 967.958127][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 967.986850][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 968.025986][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.033212][ T5113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.381768][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 968.434281][ T4474] device hsr_slave_0 left promiscuous mode [ 968.454282][ T4474] device hsr_slave_1 left promiscuous mode [ 968.475857][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.516991][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.525827][ T4474] device bridge_slave_1 left promiscuous mode [ 968.533004][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.565014][ T4474] device bridge_slave_0 left promiscuous mode [ 968.580232][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.640720][ T4474] device hsr_slave_0 left promiscuous mode [ 968.647385][ T4474] device hsr_slave_1 left promiscuous mode [ 968.787299][ T4292] Bluetooth: hci5: unexpected event 0x04 length: 11 > 10 [ 968.787338][ T4292] Bluetooth: unknown link type 96 [ 968.802086][ T4292] Bluetooth: hci5: connection err: -111 [ 969.071905][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 969.107061][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 969.137452][ T4474] device bridge_slave_1 left promiscuous mode [ 969.145950][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.186236][ T4474] device bridge_slave_0 left promiscuous mode [ 969.217119][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.355145][ T4474] device veth0_vlan left promiscuous mode [ 970.476815][ T26] audit: type=1800 audit(1794534757.761:317): pid=13397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1844" name="file1" dev="sda1" ino=2048 res=0 errno=0 [ 973.535477][ T4291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 973.547284][ T4291] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 973.562126][ T4291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 973.570749][ T4291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 973.579468][ T4291] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 973.586936][ T4291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 974.154906][ T4474] team0 (unregistering): Port device team_slave_1 removed [ 974.208010][ T4474] team0 (unregistering): Port device team_slave_0 removed [ 974.262144][ T4474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 974.329874][ T4474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 974.815667][ T4474] bond0 (unregistering): Released all slaves [ 975.146361][T13433] netlink: 34 bytes leftover after parsing attributes in process `syz.3.1854'. [ 975.200262][ T4474] team0 (unregistering): Port device team_slave_1 removed [ 975.257068][ T4474] team0 (unregistering): Port device team_slave_0 removed [ 975.319426][ T4474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.396352][ T4474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.599525][ T26] audit: type=1800 audit(1794534763.891:318): pid=13437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1856" name="file1" dev="sda1" ino=2048 res=0 errno=0 [ 975.620625][ T4291] Bluetooth: hci2: command 0x0409 tx timeout [ 976.593918][ T4474] bond0 (unregistering): Released all slaves [ 976.996355][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 977.066944][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 977.097984][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.105232][ T5113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.173085][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 977.640917][T13410] netlink: 'syz.0.1848': attribute type 10 has an invalid length. [ 977.699012][ T4292] Bluetooth: hci2: command 0x041b tx timeout [ 977.733522][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 977.886228][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 978.253659][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 978.580384][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 978.775885][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 978.864413][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 978.877211][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 978.885887][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 978.917397][T13414] rxe_eth0 speed is unknown, defaulting to 1000 [ 978.987336][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 979.105604][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 979.172360][T13456] FAULT_INJECTION: forcing a failure. [ 979.172360][T13456] name failslab, interval 1, probability 0, space 0, times 0 [ 979.185810][T13456] CPU: 0 PID: 13456 Comm: syz.7.1858 Not tainted syzkaller #0 [ 979.193318][T13456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 979.203411][T13456] Call Trace: [ 979.206724][T13456] [ 979.209689][T13456] dump_stack_lvl+0x188/0x24e [ 979.214424][T13456] ? show_regs_print_info+0x12/0x12 [ 979.219770][T13456] ? load_image+0x410/0x410 [ 979.224377][T13456] ? __lock_acquire+0x7ea0/0x7ea0 [ 979.229457][T13456] should_fail_ex+0x390/0x4c0 [ 979.234205][T13456] should_failslab+0x5/0x20 [ 979.238754][T13456] slab_pre_alloc_hook+0x59/0x300 [ 979.243843][T13456] ? ceph_alloc_options+0xae/0x1c0 [ 979.249012][T13456] __kmem_cache_alloc_node+0x4f/0x270 [ 979.254437][T13456] ? ceph_alloc_options+0xae/0x1c0 [ 979.259599][T13456] kmalloc_trace+0x26/0xe0 [ 979.264099][T13456] ceph_alloc_options+0xae/0x1c0 [ 979.269083][T13456] ceph_init_fs_context+0x64/0x4a0 [ 979.274250][T13456] ? destroy_caches+0x80/0x80 [ 979.278984][T13456] alloc_fs_context+0x628/0x7d0 [ 979.283900][T13456] __se_sys_fsopen+0xa0/0x2c0 [ 979.288632][T13456] do_syscall_64+0x4c/0xa0 [ 979.293092][T13456] ? clear_bhb_loop+0x60/0xb0 [ 979.297815][T13456] ? clear_bhb_loop+0x60/0xb0 [ 979.302576][T13456] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 979.308523][T13456] RIP: 0033:0x7fc0213a94d9 [ 979.312978][T13456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 979.332629][T13456] RSP: 002b:00007fc0222a4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 979.341086][T13456] RAX: ffffffffffffffda RBX: 00007fc021626180 RCX: 00007fc0213a94d9 [ 979.349099][T13456] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000580 [ 979.357107][T13456] RBP: 00007fc02143804e R08: 0000000000000000 R09: 0000000000000000 [ 979.365114][T13456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 979.373121][T13456] R13: 00007fc021626218 R14: 00007fc021626180 R15: 00007ffc66257438 [ 979.381158][T13456] [ 979.441610][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 979.779105][ T4292] Bluetooth: hci2: command 0x040f tx timeout [ 981.595682][T13414] chnl_net:caif_netlink_parms(): no params data found [ 981.858928][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 981.964562][T13496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1867'. [ 981.979421][T13496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1867'. [ 984.174895][T13504] netlink: 'syz.7.1868': attribute type 10 has an invalid length. [ 984.271988][T13504] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.279425][T13504] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.693412][T13504] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.700616][T13504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 985.708012][T13504] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.715158][T13504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.117490][T13504] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 986.805867][T13519] FAULT_INJECTION: forcing a failure. [ 986.805867][T13519] name failslab, interval 1, probability 0, space 0, times 0 [ 986.819289][T13519] CPU: 1 PID: 13519 Comm: syz.0.1870 Not tainted syzkaller #0 [ 986.826799][T13519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 986.836905][T13519] Call Trace: [ 986.840229][T13519] [ 986.843223][T13519] dump_stack_lvl+0x188/0x24e [ 986.847955][T13519] ? show_regs_print_info+0x12/0x12 [ 986.853222][T13519] ? load_image+0x410/0x410 [ 986.857776][T13519] ? __lock_acquire+0x7ea0/0x7ea0 [ 986.862857][T13519] should_fail_ex+0x390/0x4c0 [ 986.867589][T13519] should_failslab+0x5/0x20 [ 986.872177][T13519] slab_pre_alloc_hook+0x59/0x300 [ 986.877252][T13519] ? ceph_alloc_options+0xae/0x1c0 [ 986.882416][T13519] __kmem_cache_alloc_node+0x4f/0x270 [ 986.887845][T13519] ? ceph_alloc_options+0xae/0x1c0 [ 986.893011][T13519] kmalloc_trace+0x26/0xe0 [ 986.897495][T13519] ceph_alloc_options+0xae/0x1c0 [ 986.902487][T13519] ceph_init_fs_context+0x64/0x4a0 [ 986.907664][T13519] ? destroy_caches+0x80/0x80 [ 986.912403][T13519] alloc_fs_context+0x628/0x7d0 [ 986.917311][T13519] __se_sys_fsopen+0xa0/0x2c0 [ 986.922041][T13519] do_syscall_64+0x4c/0xa0 [ 986.926534][T13519] ? clear_bhb_loop+0x60/0xb0 [ 986.931268][T13519] ? clear_bhb_loop+0x60/0xb0 [ 986.936001][T13519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 986.941951][T13519] RIP: 0033:0x7f5b6e1a94d9 [ 986.946413][T13519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 986.966062][T13519] RSP: 002b:00007f5b6bfc2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 986.974524][T13519] RAX: ffffffffffffffda RBX: 00007f5b6e426270 RCX: 00007f5b6e1a94d9 [ 986.982542][T13519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000580 [ 986.990560][T13519] RBP: 00007f5b6e23804e R08: 0000000000000000 R09: 0000000000000000 [ 986.998578][T13519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 987.006611][T13519] R13: 00007f5b6e426308 R14: 00007f5b6e426270 R15: 00007ffcb30a1f38 [ 987.014642][T13519] [ 987.017714][ C1] vkms_vblank_simulate: vblank timer overrun [ 987.380061][T13414] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.387597][T13414] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.430163][T13414] device bridge_slave_0 entered promiscuous mode [ 988.025134][T13414] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.137529][T13414] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.147050][T13414] device bridge_slave_1 entered promiscuous mode [ 988.285952][T13414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 988.352687][T13414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.819966][T13414] team0: Port device team_slave_0 added [ 988.915896][T13414] team0: Port device team_slave_1 added [ 989.083885][T13414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 989.130595][ T4291] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 989.143620][ T4291] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 989.168866][ T4291] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 989.180295][T13414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.207041][ T4291] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 989.215208][T13414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 989.233082][T13414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 989.241013][T13414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.302471][ T4291] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 989.312658][ T4291] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 989.364790][T13414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 990.010650][T13414] device hsr_slave_0 entered promiscuous mode [ 990.063316][T13414] device hsr_slave_1 entered promiscuous mode [ 990.098074][T13414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 990.125748][T13414] Cannot create hsr debugfs directory [ 991.380516][ T4292] Bluetooth: hci1: command 0x0409 tx timeout [ 992.709604][T13549] rxe_eth0 speed is unknown, defaulting to 1000 [ 992.902015][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.908953][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.934978][T13576] netlink: 'syz.7.1880': attribute type 10 has an invalid length. [ 993.375902][T13576] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.383227][T13576] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.459037][ T4292] Bluetooth: hci1: command 0x041b tx timeout [ 994.527918][T13587] FAULT_INJECTION: forcing a failure. [ 994.527918][T13587] name failslab, interval 1, probability 0, space 0, times 0 [ 994.541422][T13587] CPU: 1 PID: 13587 Comm: syz.0.1883 Not tainted syzkaller #0 [ 994.548932][T13587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 994.559031][T13587] Call Trace: [ 994.562355][T13587] [ 994.565320][T13587] dump_stack_lvl+0x188/0x24e [ 994.570052][T13587] ? show_regs_print_info+0x12/0x12 [ 994.575304][T13587] ? load_image+0x410/0x410 [ 994.579863][T13587] ? __lock_acquire+0x7ea0/0x7ea0 [ 994.584947][T13587] should_fail_ex+0x390/0x4c0 [ 994.589690][T13587] should_failslab+0x5/0x20 [ 994.594235][T13587] slab_pre_alloc_hook+0x59/0x300 [ 994.599315][T13587] ? ceph_alloc_options+0xae/0x1c0 [ 994.604473][T13587] __kmem_cache_alloc_node+0x4f/0x270 [ 994.609897][T13587] ? ceph_alloc_options+0xae/0x1c0 [ 994.615078][T13587] kmalloc_trace+0x26/0xe0 [ 994.619543][T13587] ceph_alloc_options+0xae/0x1c0 [ 994.624530][T13587] ceph_init_fs_context+0x64/0x4a0 [ 994.629699][T13587] ? destroy_caches+0x80/0x80 [ 994.634426][T13587] alloc_fs_context+0x628/0x7d0 [ 994.639345][T13587] __se_sys_fsopen+0xa0/0x2c0 [ 994.644077][T13587] do_syscall_64+0x4c/0xa0 [ 994.648543][T13587] ? clear_bhb_loop+0x60/0xb0 [ 994.653273][T13587] ? clear_bhb_loop+0x60/0xb0 [ 994.658008][T13587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 994.663949][T13587] RIP: 0033:0x7f5b6e1a94d9 [ 994.668406][T13587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 994.688058][T13587] RSP: 002b:00007f5b6efbc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 994.696515][T13587] RAX: ffffffffffffffda RBX: 00007f5b6e426180 RCX: 00007f5b6e1a94d9 [ 994.704531][T13587] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000580 [ 994.712548][T13587] RBP: 00007f5b6e23804e R08: 0000000000000000 R09: 0000000000000000 [ 994.720562][T13587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 994.728570][T13587] R13: 00007f5b6e426218 R14: 00007f5b6e426180 R15: 00007ffcb30a1f38 [ 994.736622][T13587] [ 995.539001][ T4292] Bluetooth: hci1: command 0x040f tx timeout [ 997.580719][T13549] chnl_net:caif_netlink_parms(): no params data found [ 997.619085][ T4292] Bluetooth: hci1: command 0x0419 tx timeout [ 1004.939822][T13668] netlink: 'syz.7.1894': attribute type 10 has an invalid length. [ 1005.000361][T13549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.007546][T13549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.059252][T13549] device bridge_slave_0 entered promiscuous mode [ 1005.203496][T13549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.216424][T13549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.254511][T13549] device bridge_slave_1 entered promiscuous mode [ 1005.622103][T13683] FAULT_INJECTION: forcing a failure. [ 1005.622103][T13683] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.635638][T13683] CPU: 0 PID: 13683 Comm: syz.7.1896 Not tainted syzkaller #0 [ 1005.643145][T13683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1005.653241][T13683] Call Trace: [ 1005.656574][T13683] [ 1005.659643][T13683] dump_stack_lvl+0x188/0x24e [ 1005.664379][T13683] ? show_regs_print_info+0x12/0x12 [ 1005.669634][T13683] ? load_image+0x410/0x410 [ 1005.674183][T13683] ? __lock_acquire+0x7ea0/0x7ea0 [ 1005.679291][T13683] should_fail_ex+0x390/0x4c0 [ 1005.684019][T13683] should_failslab+0x5/0x20 [ 1005.688583][T13683] slab_pre_alloc_hook+0x59/0x300 [ 1005.693687][T13683] ? ceph_alloc_options+0xae/0x1c0 [ 1005.698878][T13683] __kmem_cache_alloc_node+0x4f/0x270 [ 1005.704302][T13683] ? ceph_alloc_options+0xae/0x1c0 [ 1005.709471][T13683] kmalloc_trace+0x26/0xe0 [ 1005.713930][T13683] ceph_alloc_options+0xae/0x1c0 [ 1005.718919][T13683] ceph_init_fs_context+0x64/0x4a0 [ 1005.724089][T13683] ? destroy_caches+0x80/0x80 [ 1005.728825][T13683] alloc_fs_context+0x628/0x7d0 [ 1005.733740][T13683] __se_sys_fsopen+0xa0/0x2c0 [ 1005.738477][T13683] do_syscall_64+0x4c/0xa0 [ 1005.742939][T13683] ? clear_bhb_loop+0x60/0xb0 [ 1005.747691][T13683] ? clear_bhb_loop+0x60/0xb0 [ 1005.752424][T13683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1005.758475][T13683] RIP: 0033:0x7fc0213a94d9 [ 1005.762924][T13683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1005.782598][T13683] RSP: 002b:00007fc02220d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1005.791069][T13683] RAX: ffffffffffffffda RBX: 00007fc021626270 RCX: 00007fc0213a94d9 [ 1005.799089][T13683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000580 [ 1005.807167][T13683] RBP: 00007fc02143804e R08: 0000000000000000 R09: 0000000000000000 [ 1005.815179][T13683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1005.823187][T13683] R13: 00007fc021626308 R14: 00007fc021626270 R15: 00007ffc66257438 [ 1005.831223][T13683] [ 1006.165810][T13549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1006.318162][T13549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.115178][T13549] team0: Port device team_slave_0 added [ 1008.260320][T13549] team0: Port device team_slave_1 added [ 1008.267359][T13414] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1008.845381][T13695] 9pnet_virtio: no channels available for device syz [ 1011.468173][T13414] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1011.866427][T13414] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1011.903940][T13549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1011.921517][T13549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1011.998924][T13549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.084942][T13549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.113075][T13549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.199221][T13715] Bluetooth: MGMT ver 1.22 [ 1012.228268][T13549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1012.309387][T13414] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1012.323941][T13709] FAULT_INJECTION: forcing a failure. [ 1012.323941][T13709] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.361379][T13709] CPU: 0 PID: 13709 Comm: syz.3.1901 Not tainted syzkaller #0 [ 1012.368940][T13709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1012.379039][T13709] Call Trace: [ 1012.382354][T13709] [ 1012.385349][T13709] dump_stack_lvl+0x188/0x24e [ 1012.390100][T13709] ? show_regs_print_info+0x12/0x12 [ 1012.395336][T13709] ? load_image+0x410/0x410 [ 1012.399868][T13709] ? __might_sleep+0xd0/0xd0 [ 1012.404485][T13709] ? __lock_acquire+0x7ea0/0x7ea0 [ 1012.409548][T13709] should_fail_ex+0x390/0x4c0 [ 1012.414258][T13709] should_failslab+0x5/0x20 [ 1012.418787][T13709] slab_pre_alloc_hook+0x59/0x300 [ 1012.423844][T13709] ? kobject_set_name_vargs+0x5d/0x110 [ 1012.429329][T13709] __kmem_cache_alloc_node+0x4f/0x270 [ 1012.434736][T13709] ? kobject_set_name_vargs+0x5d/0x110 [ 1012.440218][T13709] __kmalloc_node_track_caller+0xa0/0x240 [ 1012.445960][T13709] kstrdup_const+0x56/0x90 [ 1012.450499][T13709] kobject_set_name_vargs+0x5d/0x110 [ 1012.455811][T13709] dev_set_name+0xdf/0x130 [ 1012.460265][T13709] ? get_device+0x30/0x30 [ 1012.464626][T13709] ? __init_waitqueue_head+0xa4/0x140 [ 1012.470043][T13709] ? device_initialize+0x247/0x450 [ 1012.475206][T13709] netdev_register_kobject+0xaf/0x320 [ 1012.480633][T13709] register_netdevice+0x133a/0x1b80 [ 1012.485897][T13709] ? netif_stacked_transfer_operstate+0x200/0x200 [ 1012.492364][T13709] ? alloc_netdev_mqs+0xb92/0xf50 [ 1012.497424][T13709] ? validate_linkmsg+0x3db/0x4c0 [ 1012.502487][T13709] ? rtnl_create_link+0x905/0xb90 [ 1012.507548][T13709] ? batadv_softif_validate+0x70/0x70 [ 1012.512971][T13709] rtnl_newlink+0x14b3/0x1f90 [ 1012.517712][T13709] ? rtnl_setlink+0x510/0x510 [ 1012.522437][T13709] ? __rwlock_init+0x140/0x140 [ 1012.527230][T13709] ? do_raw_spin_unlock+0x11d/0x230 [ 1012.532459][T13709] ? __mutex_lock+0x858/0xb40 [ 1012.537160][T13709] ? __mutex_lock+0x3ba/0xb40 [ 1012.541889][T13709] ? rtnl_setlink+0x510/0x510 [ 1012.546602][T13709] rtnetlink_rcv_msg+0x863/0xfb0 [ 1012.551576][T13709] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 1012.556724][T13709] ? rtnetlink_bind+0x80/0x80 [ 1012.561448][T13709] ? __local_bh_enable_ip+0x136/0x1c0 [ 1012.566866][T13709] ? lockdep_hardirqs_on+0x94/0x140 [ 1012.572121][T13709] ? __local_bh_enable_ip+0x136/0x1c0 [ 1012.577610][T13709] ? _local_bh_enable+0xa0/0xa0 [ 1012.582575][T13709] ? __dev_queue_xmit+0x274/0x3a70 [ 1012.587821][T13709] ? __dev_queue_xmit+0x274/0x3a70 [ 1012.592958][T13709] ? __dev_queue_xmit+0x1496/0x3a70 [ 1012.598185][T13709] ? __dev_queue_xmit+0x274/0x3a70 [ 1012.603326][T13709] ? ref_tracker_free+0x682/0x830 [ 1012.608380][T13709] ? refcount_inc+0x70/0x70 [ 1012.612928][T13709] ? memcpy+0x3c/0x60 [ 1012.616937][T13709] ? __copy_skb_header+0x3ba/0x4f0 [ 1012.622086][T13709] ? __skb_clone+0x446/0x6c0 [ 1012.626713][T13709] netlink_rcv_skb+0x1ef/0x440 [ 1012.631515][T13709] ? rtnetlink_bind+0x80/0x80 [ 1012.636251][T13709] ? netlink_ack+0x1160/0x1160 [ 1012.641056][T13709] ? netlink_deliver_tap+0x2e/0x1b0 [ 1012.646293][T13709] netlink_unicast+0x7ad/0x920 [ 1012.651097][T13709] netlink_sendmsg+0x8ad/0xbd0 [ 1012.655897][T13709] ? netlink_getsockopt+0x550/0x550 [ 1012.661125][T13709] ? apparmor_socket_sendmsg+0x16c/0x330 [ 1012.666878][T13709] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1012.672201][T13709] ? security_socket_sendmsg+0x7c/0xa0 [ 1012.677684][T13709] ? netlink_getsockopt+0x550/0x550 [ 1012.682911][T13709] ____sys_sendmsg+0x5ed/0x9a0 [ 1012.687711][T13709] ? __sys_sendmsg_sock+0x30/0x30 [ 1012.692764][T13709] ? __import_iovec+0x306/0x510 [ 1012.697652][T13709] ? import_iovec+0x6f/0xa0 [ 1012.702188][T13709] ___sys_sendmsg+0x2a2/0x360 [ 1012.706900][T13709] ? __sys_sendmsg+0x2a0/0x2a0 [ 1012.711732][T13709] __se_sys_sendmsg+0x1c3/0x2b0 [ 1012.716612][T13709] ? __x64_sys_sendmsg+0x80/0x80 [ 1012.721594][T13709] ? lockdep_hardirqs_on+0x94/0x140 [ 1012.726830][T13709] do_syscall_64+0x4c/0xa0 [ 1012.731295][T13709] ? clear_bhb_loop+0x60/0xb0 [ 1012.736032][T13709] ? clear_bhb_loop+0x60/0xb0 [ 1012.740749][T13709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1012.746678][T13709] RIP: 0033:0x7f8ac8fa94d9 [ 1012.751126][T13709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1012.770756][T13709] RSP: 002b:00007f8ac9e13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1012.779200][T13709] RAX: ffffffffffffffda RBX: 00007f8ac9225fa0 RCX: 00007f8ac8fa94d9 [ 1012.787285][T13709] RDX: 0000000020000840 RSI: 0000200000000240 RDI: 0000000000000008 [ 1012.795319][T13709] RBP: 00007f8ac903804e R08: 0000000000000000 R09: 0000000000000000 [ 1012.803336][T13709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1012.811501][T13709] R13: 00007f8ac9226038 R14: 00007f8ac9225fa0 R15: 00007fffe600e058 [ 1012.819530][T13709] [ 1013.423202][T13549] device hsr_slave_0 entered promiscuous mode [ 1013.475902][T13549] device hsr_slave_1 entered promiscuous mode [ 1013.520692][T13549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1013.535840][T13549] Cannot create hsr debugfs directory [ 1013.710777][T13732] FAULT_INJECTION: forcing a failure. [ 1013.710777][T13732] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.782296][T13732] CPU: 1 PID: 13732 Comm: syz.7.1904 Not tainted syzkaller #0 [ 1013.789827][T13732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1013.799899][T13732] Call Trace: [ 1013.803183][T13732] [ 1013.806230][T13732] dump_stack_lvl+0x188/0x24e [ 1013.810928][T13732] ? verify_lock_unused+0x140/0x140 [ 1013.816141][T13732] ? show_regs_print_info+0x12/0x12 [ 1013.821451][T13732] ? load_image+0x410/0x410 [ 1013.825984][T13732] should_fail_ex+0x390/0x4c0 [ 1013.830700][T13732] should_failslab+0x5/0x20 [ 1013.835213][T13732] slab_pre_alloc_hook+0x59/0x300 [ 1013.840265][T13732] ? ___neigh_create+0x6f4/0x2450 [ 1013.845370][T13732] __kmem_cache_alloc_node+0x4f/0x270 [ 1013.850795][T13732] ? ___neigh_create+0x6f4/0x2450 [ 1013.855843][T13732] __kmalloc+0xa3/0x240 [ 1013.860103][T13732] ___neigh_create+0x6f4/0x2450 [ 1013.864991][T13732] ? neigh_lookup+0xab/0x3e0 [ 1013.869615][T13732] ? neigh_ifdown+0x30/0x30 [ 1013.874152][T13732] neigh_add+0xb14/0xdf0 [ 1013.878428][T13732] ? do_raw_spin_unlock+0x11d/0x230 [ 1013.883653][T13732] ? neigh_proc_dointvec_unres_qlen+0x2a0/0x2a0 [ 1013.889955][T13732] ? neigh_proc_dointvec_unres_qlen+0x2a0/0x2a0 [ 1013.896235][T13732] rtnetlink_rcv_msg+0x863/0xfb0 [ 1013.901222][T13732] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 1013.906370][T13732] ? rtnetlink_bind+0x80/0x80 [ 1013.911075][T13732] ? __local_bh_enable_ip+0x136/0x1c0 [ 1013.916488][T13732] ? lockdep_hardirqs_on+0x94/0x140 [ 1013.921697][T13732] ? __local_bh_enable_ip+0x136/0x1c0 [ 1013.927094][T13732] ? _local_bh_enable+0xa0/0xa0 [ 1013.931968][T13732] ? __dev_queue_xmit+0x274/0x3a70 [ 1013.937082][T13732] ? __dev_queue_xmit+0x274/0x3a70 [ 1013.942216][T13732] ? __dev_queue_xmit+0x1496/0x3a70 [ 1013.947427][T13732] ? __dev_queue_xmit+0x274/0x3a70 [ 1013.952560][T13732] ? ref_tracker_free+0x682/0x830 [ 1013.957609][T13732] ? refcount_inc+0x70/0x70 [ 1013.962120][T13732] ? memcpy+0x3c/0x60 [ 1013.966118][T13732] ? __copy_skb_header+0x3ba/0x4f0 [ 1013.971273][T13732] ? __skb_clone+0x446/0x6c0 [ 1013.975882][T13732] netlink_rcv_skb+0x1ef/0x440 [ 1013.980679][T13732] ? rtnetlink_bind+0x80/0x80 [ 1013.985385][T13732] ? netlink_ack+0x1160/0x1160 [ 1013.990185][T13732] ? netlink_deliver_tap+0x2e/0x1b0 [ 1013.995433][T13732] netlink_unicast+0x7ad/0x920 [ 1014.000240][T13732] netlink_sendmsg+0x8ad/0xbd0 [ 1014.005029][T13732] ? netlink_getsockopt+0x550/0x550 [ 1014.010241][T13732] ? apparmor_socket_sendmsg+0x16c/0x330 [ 1014.016496][T13732] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1014.021792][T13732] ? security_socket_sendmsg+0x7c/0xa0 [ 1014.027285][T13732] ? netlink_getsockopt+0x550/0x550 [ 1014.032527][T13732] ____sys_sendmsg+0x5ed/0x9a0 [ 1014.037329][T13732] ? __sys_sendmsg_sock+0x30/0x30 [ 1014.042376][T13732] ? __import_iovec+0x306/0x510 [ 1014.047248][T13732] ? import_iovec+0x6f/0xa0 [ 1014.051857][T13732] ___sys_sendmsg+0x2a2/0x360 [ 1014.056561][T13732] ? __sys_sendmsg+0x2a0/0x2a0 [ 1014.061372][T13732] __se_sys_sendmsg+0x1c3/0x2b0 [ 1014.066244][T13732] ? __x64_sys_sendmsg+0x80/0x80 [ 1014.071216][T13732] ? lockdep_hardirqs_on+0x94/0x140 [ 1014.076450][T13732] do_syscall_64+0x4c/0xa0 [ 1014.081000][T13732] ? clear_bhb_loop+0x60/0xb0 [ 1014.085694][T13732] ? clear_bhb_loop+0x60/0xb0 [ 1014.090393][T13732] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1014.096306][T13732] RIP: 0033:0x7fc0213a94d9 [ 1014.100732][T13732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.120355][T13732] RSP: 002b:00007fc022350028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1014.128781][T13732] RAX: ffffffffffffffda RBX: 00007fc021625fa0 RCX: 00007fc0213a94d9 [ 1014.136782][T13732] RDX: 0000000020040000 RSI: 0000200000000480 RDI: 0000000000000005 [ 1014.144771][T13732] RBP: 00007fc02143804e R08: 0000000000000000 R09: 0000000000000000 [ 1014.152751][T13732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1014.160733][T13732] R13: 00007fc021626038 R14: 00007fc021625fa0 R15: 00007ffc66257438 [ 1014.168727][T13732] [ 1014.371256][ T4474] device hsr_slave_0 left promiscuous mode [ 1014.389034][ T4474] device hsr_slave_1 left promiscuous mode [ 1014.415520][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1014.429536][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.447812][ T4474] device bridge_slave_1 left promiscuous mode [ 1014.471399][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.490903][ T4474] device bridge_slave_0 left promiscuous mode [ 1014.498482][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.579257][ T4474] device veth1_vlan left promiscuous mode [ 1014.595797][ T4474] device veth0_vlan left promiscuous mode [ 1015.371226][T13753] device-mapper: table: 248:7: raid: 'raid10_format' is an invalid parameter for this RAID type (-EINVAL) [ 1015.512863][T13753] device-mapper: ioctl: error adding target to table [ 1020.578399][ T4291] Bluetooth: hci5: command 0x0406 tx timeout [ 1021.332459][ T4474] team0 (unregistering): Port device team_slave_1 removed [ 1021.431166][ T4474] team0 (unregistering): Port device team_slave_0 removed [ 1021.579161][ T4474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1021.700333][ T4474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1022.761244][ T4474] bond0 (unregistering): Released all slaves [ 1022.910184][T13773] netlink: 'syz.3.1914': attribute type 10 has an invalid length. [ 1022.990234][T13773] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1023.073850][T13414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.176647][T13414] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.207440][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1023.364940][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1025.142388][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1025.392625][T13801] FAULT_INJECTION: forcing a failure. [ 1025.392625][T13801] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.406173][T13801] CPU: 0 PID: 13801 Comm: syz.0.1918 Not tainted syzkaller #0 [ 1025.413691][T13801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1025.423794][T13801] Call Trace: [ 1025.427124][T13801] [ 1025.430117][T13801] dump_stack_lvl+0x188/0x24e [ 1025.434867][T13801] ? show_regs_print_info+0x12/0x12 [ 1025.440128][T13801] ? load_image+0x410/0x410 [ 1025.444685][T13801] ? __lock_acquire+0x7ea0/0x7ea0 [ 1025.449778][T13801] should_fail_ex+0x390/0x4c0 [ 1025.454514][T13801] should_failslab+0x5/0x20 [ 1025.459064][T13801] slab_pre_alloc_hook+0x59/0x300 [ 1025.464138][T13801] ? ceph_alloc_options+0xae/0x1c0 [ 1025.469659][T13801] __kmem_cache_alloc_node+0x4f/0x270 [ 1025.476625][T13801] ? ceph_alloc_options+0xae/0x1c0 [ 1025.481797][T13801] kmalloc_trace+0x26/0xe0 [ 1025.486315][T13801] ceph_alloc_options+0xae/0x1c0 [ 1025.491332][T13801] ceph_init_fs_context+0x64/0x4a0 [ 1025.496497][T13801] ? destroy_caches+0x80/0x80 [ 1025.501228][T13801] alloc_fs_context+0x628/0x7d0 [ 1025.506147][T13801] __se_sys_fsopen+0xa0/0x2c0 [ 1025.510896][T13801] do_syscall_64+0x4c/0xa0 [ 1025.515371][T13801] ? clear_bhb_loop+0x60/0xb0 [ 1025.520105][T13801] ? clear_bhb_loop+0x60/0xb0 [ 1025.524843][T13801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1025.530805][T13801] RIP: 0033:0x7f5b6e1a94d9 [ 1025.535269][T13801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.554927][T13801] RSP: 002b:00007f5b6bfc2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1025.563517][T13801] RAX: ffffffffffffffda RBX: 00007f5b6e426270 RCX: 00007f5b6e1a94d9 [ 1025.571540][T13801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000580 [ 1025.579550][T13801] RBP: 00007f5b6e23804e R08: 0000000000000000 R09: 0000000000000000 [ 1025.587562][T13801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1025.595572][T13801] R13: 00007f5b6e426308 R14: 00007f5b6e426270 R15: 00007ffcb30a1f38 [ 1025.603609][T13801] [ 1025.606747][ C0] vkms_vblank_simulate: vblank timer overrun [ 1025.678094][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1025.729452][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.736608][ T5096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.821963][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1025.832073][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1025.840896][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.848117][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.880446][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1025.901392][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1027.471942][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1027.503850][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1027.571667][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1027.613659][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1027.651639][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1027.680521][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1031.206115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1031.219628][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1031.257841][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1031.295133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1032.041012][T13835] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1923'. [ 1032.120636][T13837] capability: warning: `syz.3.1923' uses deprecated v2 capabilities in a way that may be insecure [ 1032.799007][ T9302] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1033.031420][ T9302] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1033.089635][ T4292] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1033.099706][ T4292] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1033.107561][ T4292] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1033.116417][ T4292] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1033.125910][ T4292] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1033.134102][ T4292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1033.279029][ T9302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.379972][T13857] rxe_eth0 speed is unknown, defaulting to 1000 [ 1033.508644][T13866] Failed to get privilege flags for destination (handle=0x2:0x0) [ 1035.369081][ T9302] usb 4-1: Firmware version (0.0) predates our first public release. [ 1035.377245][ T9302] usb 4-1: Please update to version 0.2 or newer [ 1035.378741][ T4291] Bluetooth: hci2: command 0x0409 tx timeout [ 1035.549628][ T7508] Bluetooth: hci3: Frame reassembly failed (-84) [ 1035.565709][ T7508] Bluetooth: hci3: Frame reassembly failed (-84) [ 1035.597049][T13878] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1035.620828][T13549] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1035.690863][T13549] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1035.745904][T13549] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1035.782229][T13549] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1036.133235][T13857] chnl_net:caif_netlink_parms(): no params data found [ 1036.556387][T13549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.751556][T13549] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.791395][ T7508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1036.809131][ T7508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1036.820882][ T7508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1036.830727][ T7508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1036.840612][ T7508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.847742][ T7508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.009210][ T7508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1037.064645][ T22] usb 4-1: USB disconnect, device number 19 [ 1037.244850][T13908] device syzkaller0 entered promiscuous mode [ 1037.270371][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1037.326628][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1037.382187][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.389474][ T5087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.456325][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1037.460577][ T4292] Bluetooth: hci2: command 0x041b tx timeout [ 1037.525295][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1037.539069][ T4291] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1038.133173][T13857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.155363][T13857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.249415][T13857] device bridge_slave_0 entered promiscuous mode [ 1039.538886][ T4291] Bluetooth: hci2: command 0x040f tx timeout [ 1039.703449][T13908] tipc: Enabled bearer , priority 0 [ 1039.842221][T13912] tipc: Resetting bearer [ 1039.964647][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1040.074669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1040.200268][T13907] tipc: Resetting bearer [ 1040.510573][T13907] tipc: Disabling bearer [ 1040.963383][T13857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.973538][T13857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.064854][T13857] device bridge_slave_1 entered promiscuous mode [ 1041.231851][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1041.618355][ T4291] Bluetooth: hci2: command 0x0419 tx timeout [ 1042.675564][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1042.728112][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1042.802636][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1042.811882][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1042.825156][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1042.849578][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1045.104990][T13857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.157383][T13857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.594493][T13857] team0: Port device team_slave_0 added [ 1045.639918][T13857] team0: Port device team_slave_1 added [ 1045.689048][ T4356] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1045.890891][ T4356] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1045.953306][ T4356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.096546][T13857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1046.108828][T13857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1046.241596][ T4292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1046.252425][T13857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1046.253655][ T4292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1046.277682][ T4292] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1046.286678][ T4292] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1046.297927][ T4292] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1046.306002][ T4292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1046.390670][T13857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1046.411348][T13857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1046.456627][T13857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.672990][ T4474] device hsr_slave_0 left promiscuous mode [ 1046.699078][ T4474] device hsr_slave_1 left promiscuous mode [ 1046.724112][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.798150][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.876315][ T4474] device bridge_slave_1 left promiscuous mode [ 1046.971408][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.081675][ T4474] device bridge_slave_0 left promiscuous mode [ 1047.136180][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.261116][ T4356] usb 4-1: ATUSB: AT86RF231 version 1 [ 1047.360301][ T4474] device hsr_slave_0 left promiscuous mode [ 1047.425749][ T4474] device hsr_slave_1 left promiscuous mode [ 1047.492982][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.552246][ T4356] usb 4-1: Firmware version (0.0) predates our first public release. [ 1047.561068][ T4356] usb 4-1: Please update to version 0.2 or newer [ 1047.591940][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1047.617780][ T4474] device bridge_slave_1 left promiscuous mode [ 1047.629428][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.858825][ T4474] device bridge_slave_0 left promiscuous mode [ 1047.865124][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.338898][ T4292] Bluetooth: hci1: command 0x0409 tx timeout [ 1051.006377][ T4292] Bluetooth: hci1: command 0x041b tx timeout [ 1052.686666][ T4474] team0 (unregistering): Port device team_slave_1 removed [ 1052.774632][ T4474] team0 (unregistering): Port device team_slave_0 removed [ 1052.839554][ T4474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1053.063808][ T4292] Bluetooth: hci1: command 0x040f tx timeout [ 1053.183891][ T4474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.840626][ T4474] bond0 (unregistering): Released all slaves [ 1054.093672][ T4474] team0 (unregistering): Port device team_slave_1 removed [ 1054.145295][ T4474] team0 (unregistering): Port device team_slave_0 removed [ 1054.193906][ T4474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1054.245530][ T4474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.351975][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.358459][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.506674][ T4474] bond0 (unregistering): Released all slaves [ 1054.569430][T13971] rxe_eth0 speed is unknown, defaulting to 1000 [ 1054.581411][T13857] device hsr_slave_0 entered promiscuous mode [ 1054.595878][T13857] device hsr_slave_1 entered promiscuous mode [ 1054.731734][ T4356] usb 4-1: USB disconnect, device number 20 [ 1055.139133][ T4292] Bluetooth: hci1: command 0x0419 tx timeout [ 1055.559991][T14036] FAULT_INJECTION: forcing a failure. [ 1055.559991][T14036] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.573613][T14036] CPU: 0 PID: 14036 Comm: syz.7.1956 Not tainted syzkaller #0 [ 1055.581128][T14036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1055.591236][T14036] Call Trace: [ 1055.594564][T14036] [ 1055.597536][T14036] dump_stack_lvl+0x188/0x24e [ 1055.602280][T14036] ? show_regs_print_info+0x12/0x12 [ 1055.607546][T14036] ? load_image+0x410/0x410 [ 1055.612194][T14036] ? __lock_acquire+0x7ea0/0x7ea0 [ 1055.617278][T14036] should_fail_ex+0x390/0x4c0 [ 1055.622044][T14036] should_failslab+0x5/0x20 [ 1055.626599][T14036] slab_pre_alloc_hook+0x59/0x300 [ 1055.631764][T14036] ? ceph_alloc_options+0xae/0x1c0 [ 1055.636927][T14036] __kmem_cache_alloc_node+0x4f/0x270 [ 1055.642382][T14036] ? ceph_alloc_options+0xae/0x1c0 [ 1055.647553][T14036] kmalloc_trace+0x26/0xe0 [ 1055.652059][T14036] ceph_alloc_options+0xae/0x1c0 [ 1055.657134][T14036] ceph_init_fs_context+0x64/0x4a0 [ 1055.662305][T14036] ? destroy_caches+0x80/0x80 [ 1055.667046][T14036] alloc_fs_context+0x628/0x7d0 [ 1055.671957][T14036] __se_sys_fsopen+0xa0/0x2c0 [ 1055.676696][T14036] do_syscall_64+0x4c/0xa0 [ 1055.681203][T14036] ? clear_bhb_loop+0x60/0xb0 [ 1055.685935][T14036] ? clear_bhb_loop+0x60/0xb0 [ 1055.690707][T14036] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1055.696654][T14036] RIP: 0033:0x7fc0213a94d9 [ 1055.701118][T14036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.720778][T14036] RSP: 002b:00007fc02229e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1055.729254][T14036] RAX: ffffffffffffffda RBX: 00007fc021626180 RCX: 00007fc0213a94d9 [ 1055.737278][T14036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000580 [ 1055.745299][T14036] RBP: 00007fc02143804e R08: 0000000000000000 R09: 0000000000000000 [ 1055.753330][T14036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1055.761436][T14036] R13: 00007fc021626218 R14: 00007fc021626180 R15: 00007ffc66257438 [ 1055.769564][T14036] [ 1058.554364][T14076] 9pnet_virtio: no channels available for device syz [ 1058.612441][T13971] chnl_net:caif_netlink_parms(): no params data found [ 1060.480351][T13971] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.551738][T13971] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.626599][T13971] device bridge_slave_0 entered promiscuous mode [ 1060.769528][T13971] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.849326][T13971] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.960769][T13971] device bridge_slave_1 entered promiscuous mode [ 1061.500382][T13857] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1061.621397][T14089] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 1061.724739][T13857] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1061.859981][T13971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1061.937328][T13857] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1062.087089][T13971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1062.222307][T13857] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1062.565697][T13971] team0: Port device team_slave_0 added [ 1062.600160][T13971] team0: Port device team_slave_1 added [ 1062.624226][T13971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1062.632097][T13971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1062.671536][T13971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1062.726053][T13971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1062.766595][T13971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1062.800111][T13971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.862640][T13971] device hsr_slave_0 entered promiscuous mode [ 1062.874313][T13971] device hsr_slave_1 entered promiscuous mode [ 1062.886734][T13971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1062.908166][T13971] Cannot create hsr debugfs directory [ 1063.219727][T13857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.067782][T13857] 8021q: adding VLAN 0 to HW filter on device team0 [ 1065.126192][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1065.149804][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1065.230852][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1065.259426][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1065.309306][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.316521][ T5100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1065.449259][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1066.172923][T14135] FAULT_INJECTION: forcing a failure. [ 1066.172923][T14135] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.186634][T14135] CPU: 0 PID: 14135 Comm: syz.7.1970 Not tainted syzkaller #0 [ 1066.194186][T14135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1066.204288][T14135] Call Trace: [ 1066.207613][T14135] [ 1066.210588][T14135] dump_stack_lvl+0x188/0x24e [ 1066.215334][T14135] ? show_regs_print_info+0x12/0x12 [ 1066.220597][T14135] ? load_image+0x410/0x410 [ 1066.225153][T14135] ? __lock_acquire+0x7ea0/0x7ea0 [ 1066.230252][T14135] should_fail_ex+0x390/0x4c0 [ 1066.235000][T14135] should_failslab+0x5/0x20 [ 1066.239545][T14135] slab_pre_alloc_hook+0x59/0x300 [ 1066.244624][T14135] ? ceph_alloc_options+0xae/0x1c0 [ 1066.249795][T14135] __kmem_cache_alloc_node+0x4f/0x270 [ 1066.255226][T14135] ? ceph_alloc_options+0xae/0x1c0 [ 1066.260390][T14135] kmalloc_trace+0x26/0xe0 [ 1066.264862][T14135] ceph_alloc_options+0xae/0x1c0 [ 1066.269853][T14135] ceph_init_fs_context+0x64/0x4a0 [ 1066.275023][T14135] ? destroy_caches+0x80/0x80 [ 1066.279763][T14135] alloc_fs_context+0x628/0x7d0 [ 1066.284677][T14135] __se_sys_fsopen+0xa0/0x2c0 [ 1066.289425][T14135] do_syscall_64+0x4c/0xa0 [ 1066.293896][T14135] ? clear_bhb_loop+0x60/0xb0 [ 1066.298627][T14135] ? clear_bhb_loop+0x60/0xb0 [ 1066.303354][T14135] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1066.309327][T14135] RIP: 0033:0x7fc0213a94d9 [ 1066.313777][T14135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1066.333513][T14135] RSP: 002b:00007fc02230e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1066.341982][T14135] RAX: ffffffffffffffda RBX: 00007fc021626180 RCX: 00007fc0213a94d9 [ 1066.349995][T14135] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000580 [ 1066.358008][T14135] RBP: 00007fc02143804e R08: 0000000000000000 R09: 0000000000000000 [ 1066.366024][T14135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1066.374033][T14135] R13: 00007fc021626218 R14: 00007fc021626180 R15: 00007ffc66257438 [ 1066.382069][T14135] [ 1066.569757][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1066.659351][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.666520][ T5100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.753404][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1066.974054][T13857] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1067.021587][T13857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1067.045455][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1067.060234][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1067.079458][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1067.099396][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1067.119426][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1067.141260][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1067.160781][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1067.179012][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1067.198154][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1067.207141][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1067.239583][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1067.258626][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1068.791601][T14153] hub 1-0:1.0: USB hub found [ 1068.796471][T14153] hub 1-0:1.0: 1 port detected [ 1069.949841][ T26] audit: type=1326 audit(1794534858.241:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.7.1978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0213a94d9 code=0x7ffc0000 [ 1069.998270][ T26] audit: type=1326 audit(1794534858.241:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.7.1978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0213a94d9 code=0x7ffc0000 [ 1070.093664][ T54] device offline error, dev sda, sector 819510 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1070.104962][ T54] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2035 starting block 102438) [ 1070.117334][ T54] Buffer I/O error on device sda1, logical block 102400 [ 1070.125077][ T54] device offline error, dev sda, sector 827662 op 0x1:(WRITE) flags 0x0 phys_seg 5 prio class 2 [ 1070.136630][ T54] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2035 starting block 103457) [ 1070.149298][ T54] Buffer I/O error on device sda1, logical block 103419 [ 1070.156565][ T54] Buffer I/O error on device sda1, logical block 103420 [ 1070.164174][ T54] Buffer I/O error on device sda1, logical block 103421 [ 1070.171735][ T54] Buffer I/O error on device sda1, logical block 103422 [ 1070.179322][ T54] Buffer I/O error on device sda1, logical block 103423 [ 1070.186435][ T54] device offline error, dev sda, sector 831606 op 0x1:(WRITE) flags 0x0 phys_seg 7 prio class 2 [ 1070.197372][ T54] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2035 starting block 103950) [ 1070.209624][ T54] Buffer I/O error on device sda1, logical block 103912 [ 1070.216723][ T54] Buffer I/O error on device sda1, logical block 103913 [ 1070.224272][ T54] Buffer I/O error on device sda1, logical block 103914 [ 1070.231793][ T54] Buffer I/O error on device sda1, logical block 103915 [ 1070.239537][ T54] device offline error, dev sda, sector 835894 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1070.250503][ T54] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2037 starting block 104486) [ 1070.262662][ T54] device offline error, dev sda, sector 844070 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1070.273211][ T54] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2037 starting block 105508) [ 1070.285009][ T54] device offline error, dev sda, sector 848062 op 0x1:(WRITE) flags 0x0 phys_seg 15 prio class 2 [ 1070.295618][ T54] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2037 starting block 106007) [ 1070.308076][ T54] device offline error, dev sda, sector 721286 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1070.319158][ T54] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90160) [ 1070.331146][ T54] device offline error, dev sda, sector 721318 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1070.342292][ T54] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90164) [ 1070.475319][ T5096] device offline error, dev sda, sector 721350 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1070.550448][ T5096] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90168) [ 1070.599341][ T5096] device offline error, dev sda, sector 721390 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1070.631620][ T5096] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90173) [ 1070.749896][ T3606] Aborting journal on device sda1-8. [ 1070.759640][T14177] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1979: Detected aborted journal [ 1070.767735][ T3606] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 1070.816945][T14180] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1980: Detected aborted journal [ 1070.837944][ T3606] JBD2: I/O error when updating journal superblock for sda1-8. [ 1070.853378][T14177] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 1070.879552][T14177] EXT4-fs (sda1): I/O error while writing superblock [ 1070.886395][T14180] EXT4-fs (sda1): previous I/O error to superblock detected [ 1070.915945][T14180] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 1070.935154][T14177] EXT4-fs (sda1): Remounting filesystem read-only [ 1070.949033][T14180] EXT4-fs (sda1): I/O error while writing superblock [ 1070.959171][T14180] EXT4-fs (sda1): Remounting filesystem read-only [ 1070.965770][T14177] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1979: Detected aborted journal [ 1070.990573][T14177] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 1071.007620][T14177] EXT4-fs (sda1): I/O error while writing superblock [ 1071.017727][T14177] EXT4-fs (sda1): Remounting filesystem read-only [ 1071.071334][ T7508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1071.143493][ T4263] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1071.192691][ T7508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1071.240184][T14183] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1267: comm kworker/u4:12: reading directory lblock 0 [ 1071.260360][T14178] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd-run-hook: reading directory lblock 0 [ 1071.290530][ T4263] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 1071.407586][ T4263] EXT4-fs (sda1): I/O error while writing superblock [ 1071.441876][T12058] EXT4-fs (sda1): previous I/O error to superblock detected [ 1071.494683][T14189] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1267: comm kworker/u4:12: reading directory lblock 0 [ 1071.509561][T14178] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #116: comm dhcpcd-run-hook: reading directory lblock 0 [ 1071.527310][T12058] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 1071.545425][ T4263] EXT4-fs (sda1): Remounting filesystem read-only [ 1071.590933][ T3643] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #259: comm udevd: reading directory lblock 0 [ 1071.641552][T12058] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 1071.652616][ T4263] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1071.827914][ T4263] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 1071.958062][T14180] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 1072.092919][ T128] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 1072.123155][T13971] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1072.167737][T13857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.254412][T13971] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1072.295038][T13971] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1072.317006][T14162] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1072.342879][T13971] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1072.403179][ T22] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1072.442943][ T22] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1072.509757][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1072.520481][T14216] udevd[14216]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 1072.539528][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1072.615863][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1072.634270][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1072.644221][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1072.657414][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1072.676647][T13857] device veth0_vlan entered promiscuous mode [ 1072.707729][ T4474] device hsr_slave_0 left promiscuous mode [ 1072.735288][ T4474] device hsr_slave_1 left promiscuous mode [ 1072.759652][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1072.775025][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1072.784903][ T4474] device bridge_slave_1 left promiscuous mode [ 1072.802425][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.842534][ T4474] device bridge_slave_0 left promiscuous mode [ 1072.859056][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.323588][ T4474] team0 (unregistering): Port device team_slave_1 removed [ 1073.376394][ T4474] team0 (unregistering): Port device team_slave_0 removed [ 1073.439655][ T4474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1073.497819][ T4474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1073.725582][ T4474] bond0 (unregistering): Released all slaves [ 1073.809449][T14218] FAULT_INJECTION: forcing a failure. [ 1073.809449][T14218] name failslab, interval 1, probability 0, space 0, times 0 [ 1073.838831][T14218] CPU: 0 PID: 14218 Comm: syz.0.1982 Not tainted syzkaller #0 [ 1073.846397][T14218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1073.856499][T14218] Call Trace: [ 1073.859990][T14218] [ 1073.862957][T14218] dump_stack_lvl+0x188/0x24e [ 1073.867700][T14218] ? show_regs_print_info+0x12/0x12 [ 1073.872983][T14218] ? load_image+0x410/0x410 [ 1073.877547][T14218] ? __might_sleep+0xd0/0xd0 [ 1073.882179][T14218] ? __lock_acquire+0x7ea0/0x7ea0 [ 1073.887267][T14218] should_fail_ex+0x390/0x4c0 [ 1073.892017][T14218] should_failslab+0x5/0x20 [ 1073.896561][T14218] slab_pre_alloc_hook+0x59/0x300 [ 1073.901642][T14218] ? kobject_set_name_vargs+0x5d/0x110 [ 1073.907160][T14218] __kmem_cache_alloc_node+0x4f/0x270 [ 1073.912589][T14218] ? kobject_set_name_vargs+0x5d/0x110 [ 1073.918091][T14218] __kmalloc_node_track_caller+0xa0/0x240 [ 1073.923868][T14218] kstrdup_const+0x56/0x90 [ 1073.928351][T14218] kobject_set_name_vargs+0x5d/0x110 [ 1073.933701][T14218] dev_set_name+0xdf/0x130 [ 1073.938190][T14218] ? get_device+0x30/0x30 [ 1073.942601][T14218] ? __init_waitqueue_head+0xa4/0x140 [ 1073.948039][T14218] ? device_initialize+0x247/0x450 [ 1073.953211][T14218] netdev_register_kobject+0xaf/0x320 [ 1073.958644][T14218] register_netdevice+0x133a/0x1b80 [ 1073.963919][T14218] ? netif_stacked_transfer_operstate+0x200/0x200 [ 1073.970396][T14218] ? alloc_netdev_mqs+0xb92/0xf50 [ 1073.975472][T14218] ? validate_linkmsg+0x3db/0x4c0 [ 1073.980554][T14218] ? rtnl_create_link+0x905/0xb90 [ 1073.985631][T14218] ? batadv_softif_validate+0x70/0x70 [ 1073.991060][T14218] rtnl_newlink+0x14b3/0x1f90 [ 1073.995822][T14218] ? rtnl_setlink+0x510/0x510 [ 1074.000549][T14218] ? __rwlock_init+0x140/0x140 [ 1074.005368][T14218] ? do_raw_spin_unlock+0x11d/0x230 [ 1074.010623][T14218] ? __mutex_lock+0x858/0xb40 [ 1074.015361][T14218] ? __mutex_lock+0x3ba/0xb40 [ 1074.020104][T14218] ? rtnl_setlink+0x510/0x510 [ 1074.024840][T14218] rtnetlink_rcv_msg+0x863/0xfb0 [ 1074.029833][T14218] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 1074.035004][T14218] ? rtnetlink_bind+0x80/0x80 [ 1074.039736][T14218] ? __local_bh_enable_ip+0x136/0x1c0 [ 1074.045168][T14218] ? lockdep_hardirqs_on+0x94/0x140 [ 1074.050416][T14218] ? __local_bh_enable_ip+0x136/0x1c0 [ 1074.055849][T14218] ? _local_bh_enable+0xa0/0xa0 [ 1074.060756][T14218] ? __dev_queue_xmit+0x274/0x3a70 [ 1074.065905][T14218] ? __dev_queue_xmit+0x274/0x3a70 [ 1074.071058][T14218] ? __dev_queue_xmit+0x1496/0x3a70 [ 1074.076305][T14218] ? __dev_queue_xmit+0x274/0x3a70 [ 1074.081481][T14218] ? ref_tracker_free+0x682/0x830 [ 1074.086578][T14218] ? refcount_inc+0x70/0x70 [ 1074.091157][T14218] ? memcpy+0x3c/0x60 [ 1074.095196][T14218] ? __copy_skb_header+0x3ba/0x4f0 [ 1074.100374][T14218] ? __skb_clone+0x446/0x6c0 [ 1074.105024][T14218] netlink_rcv_skb+0x1ef/0x440 [ 1074.109862][T14218] ? rtnetlink_bind+0x80/0x80 [ 1074.114593][T14218] ? netlink_ack+0x1160/0x1160 [ 1074.119417][T14218] ? netlink_deliver_tap+0x2e/0x1b0 [ 1074.124676][T14218] netlink_unicast+0x7ad/0x920 [ 1074.129513][T14218] netlink_sendmsg+0x8ad/0xbd0 [ 1074.134350][T14218] ? netlink_getsockopt+0x550/0x550 [ 1074.139612][T14218] ? apparmor_socket_sendmsg+0x16c/0x330 [ 1074.145295][T14218] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1074.150624][T14218] ? security_socket_sendmsg+0x7c/0xa0 [ 1074.156148][T14218] ? netlink_getsockopt+0x550/0x550 [ 1074.161420][T14218] ____sys_sendmsg+0x5ed/0x9a0 [ 1074.166257][T14218] ? __sys_sendmsg_sock+0x30/0x30 [ 1074.171339][T14218] ? __import_iovec+0x306/0x510 [ 1074.176266][T14218] ? import_iovec+0x6f/0xa0 [ 1074.180822][T14218] ___sys_sendmsg+0x2a2/0x360 [ 1074.185555][T14218] ? __sys_sendmsg+0x2a0/0x2a0 [ 1074.190425][T14218] __se_sys_sendmsg+0x1c3/0x2b0 [ 1074.195334][T14218] ? __x64_sys_sendmsg+0x80/0x80 [ 1074.200371][T14218] ? lockdep_hardirqs_on+0x94/0x140 [ 1074.205626][T14218] do_syscall_64+0x4c/0xa0 [ 1074.210091][T14218] ? clear_bhb_loop+0x60/0xb0 [ 1074.214826][T14218] ? clear_bhb_loop+0x60/0xb0 [ 1074.219564][T14218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1074.225511][T14218] RIP: 0033:0x7f5b6e1a94d9 [ 1074.229970][T14218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1074.249713][T14218] RSP: 002b:00007f5b6f06e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1074.258186][T14218] RAX: ffffffffffffffda RBX: 00007f5b6e425fa0 RCX: 00007f5b6e1a94d9 [ 1074.266218][T14218] RDX: 0000000020000840 RSI: 0000200000000240 RDI: 0000000000000008 [ 1074.274234][T14218] RBP: 00007f5b6e23804e R08: 0000000000000000 R09: 0000000000000000 [ 1074.282247][T14218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1074.290275][T14218] R13: 00007f5b6e426038 R14: 00007f5b6e425fa0 R15: 00007ffcb30a1f38 [ 1074.298334][T14218] [ 1074.362244][T14224] device macsec1 entered promiscuous mode [ 1074.384765][T14224] device netdevsim0 entered promiscuous mode [ 1074.442796][T13857] device veth1_vlan entered promiscuous mode [ 1074.565190][T14235] fuse: Unknown parameter 'grou00000000000000000000' [ 1074.644938][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1074.659401][T14227] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1984'. [ 1074.680503][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1075.022224][T13857] device veth0_macvtap entered promiscuous mode [ 1075.067883][T13971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1075.091433][T13857] device veth1_macvtap entered promiscuous mode [ 1075.190098][T13857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1075.202001][T13857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.212104][T13857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1075.222939][T13857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.235509][T13857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1075.251411][ T8258] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1075.270138][ T8258] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1075.284354][ T8258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1075.303347][ T9302] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1075.383923][ T8258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1075.461551][ T8258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1075.538943][ T8258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1075.549712][ T9302] usb 4-1: Using ep0 maxpacket: 8 [ 1075.566082][ T9302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1075.654286][T13971] 8021q: adding VLAN 0 to HW filter on device team0 [ 1075.680580][ T9302] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1075.734016][T13857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1075.774286][T14246] EXT4-fs error: 103 callbacks suppressed [ 1075.776218][T14246] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 1075.796808][ T9302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.825698][T13857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.900710][ T9302] usb 4-1: config 0 descriptor?? [ 1075.927851][T13857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1075.986782][T13974] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 1076.117026][ T4263] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1076.129461][T13857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.155940][T14238] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1987: Detected aborted journal [ 1076.174649][T13974] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 1076.174681][ T4263] EXT4-fs: 56 callbacks suppressed [ 1076.174692][ T4263] EXT4-fs (sda1): Remounting filesystem read-only [ 1076.202485][ T4263] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1076.214177][ T4263] EXT4-fs (sda1): Remounting filesystem read-only [ 1076.220775][ T4263] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1076.232824][ T4263] EXT4-fs (sda1): Remounting filesystem read-only [ 1076.247446][T14238] EXT4-fs (sda1): Remounting filesystem read-only [ 1076.255125][T13857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1076.255505][ T4263] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1076.275059][T14238] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1987: Detected aborted journal [ 1076.287174][T14238] EXT4-fs (sda1): Remounting filesystem read-only [ 1076.291386][T13974] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 1076.296620][ T4263] EXT4-fs (sda1): Remounting filesystem read-only [ 1076.313007][T14238] EXT4-fs (sda1): Remounting filesystem read-only [ 1076.320476][ T4263] EXT4-fs (sda1): Remounting filesystem read-only [ 1076.327659][ T4263] EXT4-fs (sda1): Remounting filesystem read-only [ 1076.333773][ T9302] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1076.363363][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1076.383036][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1076.416849][T14249] EXT4-fs (sda1): Remounting filesystem read-only [ 1076.422175][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1076.444101][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1076.460267][ T4618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.467426][ T4618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1076.497045][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1076.569169][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1076.630803][ T4618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.638031][ T4618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.832410][T13857] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.849896][T13857] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.946656][T13857] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.009887][T13857] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.112725][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1079.127166][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1079.154279][T12058] usb 4-1: USB disconnect, device number 21 [ 1079.172231][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1079.211409][T14268] comedi comedi3: board detection failed [ 1081.049583][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1081.091195][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1081.110780][T14271] EXT4-fs error: 51 callbacks suppressed [ 1081.110792][T14271] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1992: Detected aborted journal [ 1081.133682][T14271] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1992: Detected aborted journal [ 1081.160589][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1081.178362][ T4263] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1081.193627][ T4263] EXT4-fs: 33 callbacks suppressed [ 1081.193641][ T4263] EXT4-fs (sda1): Remounting filesystem read-only [ 1081.236421][T14276] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 1081.281384][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1081.309915][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1081.341836][ T4263] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1081.368922][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1081.383881][T14277] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 1081.389367][ T4263] EXT4-fs (sda1): Remounting filesystem read-only [ 1081.413351][T14278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1993: Detected aborted journal [ 1081.414453][T13974] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 1081.440371][ T22] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1081.454436][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1081.464538][ T22] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1081.479700][T14278] EXT4-fs (sda1): Remounting filesystem read-only [ 1081.492411][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1081.500761][T14279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1994: Detected aborted journal [ 1081.500797][T14279] EXT4-fs (sda1): Remounting filesystem read-only [ 1081.505445][T13974] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 1081.537448][T14278] EXT4-fs (sda1): Remounting filesystem read-only [ 1081.547055][T14279] EXT4-fs (sda1): Remounting filesystem read-only [ 1081.557516][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1081.584124][T14282] udevd[14282]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 1081.611786][T13971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1081.879717][T14283] device syzkaller0 entered promiscuous mode [ 1081.895763][T14279] EXT4-fs (sda1): Remounting filesystem read-only [ 1081.906296][T14278] EXT4-fs (sda1): Remounting filesystem read-only [ 1082.047575][ T4263] EXT4-fs (sda1): Remounting filesystem read-only [ 1082.079112][ T5065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.087016][ T5065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.142342][ T5065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1082.155632][ T4263] EXT4-fs (sda1): Remounting filesystem read-only [ 1082.173257][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1082.194624][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1082.242932][T13971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.339810][ T5115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.404750][ T5115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.444167][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1082.545910][ T5065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1082.561641][T14314] comedi comedi3: board detection failed [ 1082.575017][ T5065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1082.679243][T13971] device veth0_vlan entered promiscuous mode [ 1082.693145][T13971] device veth1_vlan entered promiscuous mode [ 1082.788969][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1082.797591][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1082.806446][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1082.872479][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1082.974836][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1084.179758][ T5065] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 1084.187988][ T5065] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 1084.269132][ T5065] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1084.397469][ T4474] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.427698][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1084.454839][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1084.470919][T13971] device veth0_macvtap entered promiscuous mode [ 1084.479242][T14348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1999'. [ 1084.495828][T13971] device veth1_macvtap entered promiscuous mode [ 1084.607788][ T4474] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.887333][ T4474] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.107213][T13971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.250773][T13971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.388144][T13971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.506540][T13971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.615488][T13971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1086.093873][T13971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.191064][T14362] EXT4-fs error: 119 callbacks suppressed [ 1086.191319][T14362] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1267: comm kworker/u4:2: reading directory lblock 0 [ 1086.222991][T14356] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.2001: Detected aborted journal [ 1087.112303][ T4263] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1087.199996][T13971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1087.209052][T14356] EXT4-fs: 49 callbacks suppressed [ 1087.209066][T14356] EXT4-fs (sda1): Remounting filesystem read-only [ 1087.240152][ T4263] EXT4-fs (sda1): Remounting filesystem read-only [ 1087.253962][T14356] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.2001: Detected aborted journal [ 1087.278278][T14356] EXT4-fs (sda1): Remounting filesystem read-only [ 1087.295945][ T4263] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1087.335793][T14363] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1265: comm syz-executor: reading directory lblock 0 [ 1087.349983][ T4263] EXT4-fs (sda1): Remounting filesystem read-only [ 1087.356542][ T4263] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1087.373840][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1087.399980][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1087.437937][ T4263] EXT4-fs (sda1): Remounting filesystem read-only [ 1087.449937][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1087.461805][ T4263] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1087.484587][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1087.494532][ T4263] EXT4-fs (sda1): Remounting filesystem read-only [ 1087.511417][ T4263] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1087.556715][ T4263] EXT4-fs (sda1): Remounting filesystem read-only [ 1087.582539][ T4474] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.621874][T13971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1087.644353][T13971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.647539][T14373] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2002: Detected aborted journal [ 1087.668977][T13971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1087.682244][T14373] EXT4-fs (sda1): Remounting filesystem read-only [ 1087.688308][T13971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.705597][T14373] EXT4-fs (sda1): Remounting filesystem read-only [ 1087.712311][T13971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1087.712330][T13971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.729696][T13971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1087.757406][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1087.781162][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1087.816098][T13971] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.833994][T13971] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.844938][T13971] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.862058][T13971] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.911324][T14356] EXT4-fs (sda1): Remounting filesystem read-only [ 1088.367189][ T5065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.397158][ T5065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.721385][ T5065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1088.756629][ T7508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.766728][ T7508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.782650][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1089.728786][ T9302] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1089.785674][ T4474] device hsr_slave_0 left promiscuous mode [ 1089.792724][ T4474] device hsr_slave_1 left promiscuous mode [ 1089.799609][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1089.807278][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1089.815940][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1089.824342][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1089.832770][ T4474] device bridge_slave_1 left promiscuous mode [ 1089.839761][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.849788][ T4474] device bridge_slave_0 left promiscuous mode [ 1089.856005][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.910827][ T9302] usb 1-1: config 0 has no interfaces? [ 1089.921635][ T9302] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1089.948868][ T9302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.963871][ T9302] usb 1-1: Product: syz [ 1089.968149][ T9302] usb 1-1: Manufacturer: syz [ 1089.975363][ T9302] usb 1-1: SerialNumber: syz [ 1089.983288][ T9302] usb 1-1: config 0 descriptor?? [ 1089.993226][ T4474] device veth1_macvtap left promiscuous mode [ 1090.051277][ T4474] device veth0_macvtap left promiscuous mode [ 1090.074526][T14426] exFAT-fs (nbd3): mounting with "discard" option, but the device does not support discard [ 1090.088150][T14426] syz.3.2006: attempt to access beyond end of device [ 1090.088150][T14426] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1091.563413][T14422] EXT4-fs error: 78 callbacks suppressed [ 1091.563443][T14422] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2006: Detected aborted journal [ 1091.580728][T14422] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2006: Detected aborted journal [ 1091.592373][T14426] exFAT-fs (nbd3): unable to read boot sector [ 1091.598535][T14426] exFAT-fs (nbd3): failed to read boot sector [ 1091.604675][T14426] exFAT-fs (nbd3): failed to recognize exfat type [ 1091.621222][T14422] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2006: Detected aborted journal [ 1091.634914][T14422] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2006: Detected aborted journal [ 1091.647886][T14422] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2006: Detected aborted journal [ 1091.735995][T14422] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2006: Detected aborted journal [ 1091.749200][T14422] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2006: Detected aborted journal [ 1091.762460][T14422] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2006: Detected aborted journal [ 1091.774250][T14422] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2006: Detected aborted journal [ 1091.865487][ T4474] device veth1_vlan left promiscuous mode [ 1091.963359][ T4474] device veth0_vlan left promiscuous mode [ 1092.031848][T14422] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2006: Detected aborted journal [ 1092.089798][ T9302] usb 1-1: USB disconnect, device number 23 [ 1092.243572][ T4263] EXT4-fs: 53 callbacks suppressed [ 1092.243592][ T4263] EXT4-fs (sda1): Remounting filesystem read-only [ 1092.697624][T14433] EXT4-fs (sda1): Remounting filesystem read-only [ 1092.716311][T14433] EXT4-fs (sda1): Remounting filesystem read-only [ 1092.731353][T14433] EXT4-fs (sda1): Remounting filesystem read-only [ 1092.797080][T14433] EXT4-fs (sda1): Remounting filesystem read-only [ 1092.809101][T14433] EXT4-fs (sda1): Remounting filesystem read-only [ 1092.824530][T14433] EXT4-fs (sda1): Remounting filesystem read-only [ 1092.851199][T14433] EXT4-fs (sda1): Remounting filesystem read-only [ 1092.875933][T14433] EXT4-fs (sda1): Remounting filesystem read-only [ 1092.886205][T14433] EXT4-fs (sda1): Remounting filesystem read-only [ 1095.354289][T14442] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888057e06000 pfn:0x57e00 [ 1095.399045][T14442] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0 [ 1095.437264][T14442] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1095.468992][T14442] raw: 00fff00000010200 ffffea00015bd408 ffffea0000a65608 ffff88801844c280 [ 1095.477883][T14442] raw: ffff888057e06000 0000000000040001 00000001ffffffff 0000000000000000 [ 1095.508896][T14442] page dumped because: unmovable page [ 1095.514328][T14442] page_owner tracks the page as allocated Nov 13 01:54:43 syzkaller kern.alert kernel: [ 1095.514328][T14442] page_owner tracks the page as allocated [ 1095.576895][T14442] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4284, tgid 4284 (syz-executor), ts 82661174600, free_ts 25676861297 Nov 13 01:54:43 syzkaller kern.alert kernel: [ 1095.576895][T14442] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4284, tgid 4284 (syz-executor), t [ 1095.628859][T14442] post_alloc_hook+0x173/0x1a0 [ 1095.633710][T14442] get_page_from_freelist+0x206b/0x2180 [ 1095.659299][T14442] __alloc_pages+0x1ec/0x4f0 [ 1095.669171][T14442] alloc_slab_page+0x5d/0x180 [ 1095.688798][T14442] new_slab+0x87/0x2d0 [ 1095.692957][T14442] ___slab_alloc+0xbc5/0x1240 [ 1095.710354][T14442] __kmem_cache_alloc_node+0x126/0x270 [ 1095.729145][T14442] __kmalloc_node+0xa2/0x240 [ 1095.738453][T14442] kvmalloc_node+0x6c/0x180 [ 1095.757872][T14442] alloc_netdev_mqs+0x84/0xf50 [ 1095.768945][T14442] vti6_init_net+0x100/0x350 [ 1095.773623][T14442] ops_init+0x360/0x5e0 [ 1095.777835][T14442] setup_net+0x4f2/0xbd0 [ 1095.808241][T14442] copy_net_ns+0x33e/0x5b0 [ 1095.812750][T14442] create_new_namespaces+0x3ce/0x700 [ 1095.839007][T14442] unshare_nsproxy_namespaces+0x116/0x160 [ 1095.844998][T14442] page last free stack trace: Nov 13 01:54:44 syzkaller kern.alert kernel: [ 1095.844998][T14442] page last free stack trace: [ 1095.874132][T14442] free_unref_page_prepare+0x8e5/0x9e0 [ 1095.896754][T14442] free_unref_page+0x2e/0x3f0 [ 1095.909245][T14442] free_contig_range+0x9d/0x150 [ 1095.914173][T14442] destroy_args+0xef/0xa0e [ 1095.949850][T14442] debug_vm_pgtable+0x33c/0x38e [ 1095.954797][T14442] do_one_initcall+0x257/0x800 [ 1095.972651][T14442] do_initcall_level+0x13d/0x1ed [ 1095.977670][T14442] do_initcalls+0x4b/0x8a [ 1095.999153][T14442] kernel_init_freeable+0x401/0x5ab [ 1096.018905][T14442] kernel_init+0x19/0x1b0 [ 1096.023326][T14442] ret_from_fork+0x1f/0x30 [ 1098.059183][ T4263] EXT4-fs error: 66 callbacks suppressed [ 1098.059202][ T4263] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1098.092670][T14465] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.2013: Detected aborted journal [ 1098.187141][ T4263] EXT4-fs: 24 callbacks suppressed [ 1098.187314][ T4263] EXT4-fs (sda1): Remounting filesystem read-only [ 1098.213475][T14465] EXT4-fs (sda1): Remounting filesystem read-only [ 1098.350827][T14465] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.2013: Detected aborted journal [ 1098.393154][T14470] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1265: comm syz-executor: reading directory lblock 0 [ 1098.498933][T14465] EXT4-fs (sda1): Remounting filesystem read-only [ 1098.505620][T14465] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.2013: Detected aborted journal [ 1098.517571][T14465] EXT4-fs (sda1): Remounting filesystem read-only [ 1098.524996][T14465] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.2013: Detected aborted journal [ 1098.536610][T14465] EXT4-fs (sda1): Remounting filesystem read-only [ 1098.545832][T14465] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.2013: Detected aborted journal [ 1098.557430][T14465] EXT4-fs (sda1): Remounting filesystem read-only [ 1098.702717][T14473] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2014: Detected aborted journal [ 1098.714351][ T4263] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1098.765431][T14472] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1265: comm syz-executor: reading directory lblock 0 [ 1098.793485][ T4263] EXT4-fs (sda1): Remounting filesystem read-only [ 1098.798411][T14473] EXT4-fs (sda1): Remounting filesystem read-only [ 1098.811548][T14473] EXT4-fs (sda1): Remounting filesystem read-only [ 1098.845738][ T4263] EXT4-fs (sda1): Remounting filesystem read-only [ 1098.913847][ T4474] team0 (unregistering): Port device team_slave_1 removed [ 1099.110190][ T4474] team0 (unregistering): Port device team_slave_0 removed [ 1099.277614][ T4474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1099.385075][ T4474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1099.902946][ T4474] bond0 (unregistering): Released all slaves [ 1100.014477][T14476] rxe_eth0 speed is unknown, defaulting to 1000 [ 1100.744060][ T4474] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.817130][ T4474] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.930712][ T22] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1100.944974][ T4474] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.098152][ T4474] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.118993][ T22] usb 8-1: Using ep0 maxpacket: 32 [ 1101.126110][ T22] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1101.166168][ T22] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1101.220550][ T22] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1101.235744][ T22] usb 8-1: Product: syz [ 1101.251220][ T22] usb 8-1: Manufacturer: syz [ 1101.262281][ T22] usb 8-1: SerialNumber: syz [ 1101.280820][ T22] usb 8-1: config 0 descriptor?? [ 1101.298293][T14511] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1101.318083][ T22] hub 8-1:0.0: bad descriptor, ignoring hub SYZFAIL: mkdir(syz-tmp) failed (errno 5: Input/output error) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: repeatedly failed to execute the program proc=5 req=1678 state=1 status=67 (errno 9: Bad file descriptor) [ 1101.336050][ T22] hub: probe of 8-1:0.0 failed with error -5 [ 1101.538820][ T4639] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1102.450051][ T4639] usb 4-1: device descriptor read/all, error -71 [ 1102.709194][T12789] usb 8-1: USB disconnect, device number 2 [ 1103.090408][ T3643] EXT4-fs error: 194 callbacks suppressed [ 1103.090424][ T3643] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #259: comm udevd: reading directory lblock 0 [ 1103.109199][ T3643] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 1103.122175][ T3643] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 1103.134667][ T3643] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 1103.147724][ T3643] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1642: comm udevd: reading directory lblock 0 [ 1103.160584][ T3643] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1480: comm udevd: reading directory lblock 0 [ 1103.523208][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 1103.535456][ T4474] device hsr_slave_0 left promiscuous mode [ 1103.537154][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 1103.554685][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 1103.566518][ T4474] device hsr_slave_1 left promiscuous mode [ 1103.567489][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 1103.585024][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1103.596421][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1103.605386][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1103.613695][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1103.625478][ T4474] device bridge_slave_1 left promiscuous mode [ 1103.633521][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.643031][ T4474] device bridge_slave_0 left promiscuous mode [ 1103.650153][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.677904][ T4474] device veth1_macvtap left promiscuous mode [ 1103.684573][ T4474] device veth0_macvtap left promiscuous mode [ 1103.691778][ T4474] device veth1_vlan left promiscuous mode [ 1103.697603][ T4474] device veth0_vlan left promiscuous mode [ 1104.305631][ T4474] team0 (unregistering): Port device team_slave_1 removed [ 1104.354370][ T4474] team0 (unregistering): Port device team_slave_0 removed [ 1104.405187][ T4474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1104.452197][ T4474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1104.789226][ T4474] bond0 (unregistering): Released all slaves [ 1105.352189][ T4474] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.467129][ T4474] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.547193][ T4474] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.634863][ T4474] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.793364][ T4474] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.877663][ T4474] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.976648][ T4474] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.090737][ T4474] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.495414][ T4474] device netdevsim0 left promiscuous mode [ 1106.834725][ T4474] tipc: Left network mode [ 1106.853810][ T4474] tipc: Left network mode [ 1108.133405][ T3938] EXT4-fs error: 209 callbacks suppressed [ 1108.133424][ T3938] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #116: comm dhcpcd: reading directory lblock 0 [ 1108.154951][T14691] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 1108.171735][ T3938] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0 [ 1108.202670][ T3938] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0 [ 1108.229319][ T3938] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #116: comm dhcpcd: reading directory lblock 0 [ 1108.281193][T14694] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 1108.296772][ T3938] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0 [ 1108.314503][ T3938] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #116: comm dhcpcd: reading directory lblock 0 [ 1108.387196][T14696] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 1108.404602][ T3938] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #116: comm dhcpcd: reading directory lblock 0 [ 1108.809409][ T4474] device hsr_slave_0 left promiscuous mode [ 1108.815771][ T4474] device hsr_slave_1 left promiscuous mode [ 1108.822884][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1108.830972][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.838918][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1108.846353][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1108.854202][ T4474] device bridge_slave_1 left promiscuous mode [ 1108.860635][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.871149][ T4474] device bridge_slave_0 left promiscuous mode [ 1108.877390][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.891707][ T4474] device hsr_slave_0 left promiscuous mode [ 1108.897981][ T4474] device hsr_slave_1 left promiscuous mode [ 1108.904664][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1108.912243][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.921029][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1108.928546][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1108.936144][ T4474] device bridge_slave_1 left promiscuous mode [ 1108.942413][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.951166][ T4474] device bridge_slave_0 left promiscuous mode [ 1108.957388][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.970235][ T4474] device hsr_slave_0 left promiscuous mode [ 1108.976531][ T4474] device hsr_slave_1 left promiscuous mode [ 1108.983625][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.991717][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1109.000290][ T4474] device bridge_slave_1 left promiscuous mode [ 1109.006474][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.015294][ T4474] device bridge_slave_0 left promiscuous mode [ 1109.025060][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.095712][ T4474] device veth1_macvtap left promiscuous mode [ 1109.102143][ T4474] device veth0_macvtap left promiscuous mode [ 1109.108395][ T4474] device veth1_vlan left promiscuous mode [ 1109.114288][ T4474] device veth0_vlan left promiscuous mode [ 1109.123591][ T4474] device veth1_macvtap left promiscuous mode [ 1109.129731][ T4474] device veth0_macvtap left promiscuous mode [ 1109.135868][ T4474] device veth1_vlan left promiscuous mode [ 1109.142014][ T4474] device veth0_vlan left promiscuous mode [ 1109.928454][ T4474] team0 (unregistering): Port device team_slave_1 removed [ 1109.973314][ T4474] team0 (unregistering): Port device team_slave_0 removed [ 1110.020736][ T4474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1110.073799][ T4474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1110.444814][ T4474] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1110.454121][ T4474] bond0 (unregistering): Released all slaves [ 1110.534301][ T4474] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1110.542579][ T4474] device bridge1 left promiscuous mode [ 1110.674636][ T4474] bond1 (unregistering): Released all slaves [ 1111.198696][ T4474] team0 (unregistering): Port device team_slave_1 removed [ 1111.271509][ T4474] team0 (unregistering): Port device team_slave_0 removed [ 1111.327108][ T4474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface