last executing test programs: 31m43.736736396s ago: executing program 4 (id=5): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x8000000010, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010101}}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x2c, 0x0, 0x2c, 0x0, 0x2c}, 0x48) 31m38.212112098s ago: executing program 4 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() ptrace$peeksig(0x4209, r1, 0x0, &(0x7f0000000240)=[{}]) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./trace/error_log\x00', 0x118) futex(&(0x7f000000cffc)=0xfffffffd, 0x6, 0x2, 0x0, 0x0, 0x400000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={0xffffffffffffffff, r4}, 0xc) 31m34.907540103s ago: executing program 4 (id=19): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) timer_getoverrun(0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) 31m24.680273837s ago: executing program 4 (id=30): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$VT_DISALLOCATE(r2, 0x5608) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004"], 0xfc}}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 31m8.400179931s ago: executing program 32 (id=30): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$VT_DISALLOCATE(r2, 0x5608) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004"], 0xfc}}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 26m35.095342901s ago: executing program 0 (id=358): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x11a, 0x5, 0x0, 0x0) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, 0x0) 26m31.284802279s ago: executing program 0 (id=361): close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 26m19.779006434s ago: executing program 0 (id=371): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x8e}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20008000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}}, 0x24}, 0x1, 0x0, 0x0, 0x200058c0}, 0xc080) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_vif\x00') socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99f0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) readv(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) 26m16.665996256s ago: executing program 0 (id=374): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e200000080007000800000005000d0001000000080006"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000002800128009000100626f6e64000000001800028014"], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) syz_open_dev$vcsa(&(0x7f0000000380), 0x5b95b610, 0x701c83) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 26m11.453808876s ago: executing program 0 (id=379): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) 26m8.898139417s ago: executing program 0 (id=381): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 25m53.455708294s ago: executing program 33 (id=381): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 20m43.629823147s ago: executing program 1 (id=699): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) userfaultfd(0x801) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x189802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x0, 0x82, 0x0, 0x0, 0x1}, 0x28) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r0, 0xc010644a, &(0x7f0000000340)) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000000c0)="17005ecfff640000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdffb7299b10c49aee94f5461ee1a6ebe4e459100ac45761407a681f009cee4a5acb550059f8d8d63da400001fb700674f19b44e09bc315033bf79ac2dff0601150039e9fa31227c1dc3aa75f05ebc09c801000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000", 0xb8) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 20m40.219861435s ago: executing program 1 (id=705): r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x40, @none, 0x0, 0x2}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='traceon', 0x7) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x169e41, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2b) 20m37.905932812s ago: executing program 1 (id=707): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, r1}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$bt_hci(r6, 0x84, 0x2, &(0x7f00000016c0)=""/4143, &(0x7f0000000000)=0x102f) 20m34.774234526s ago: executing program 1 (id=709): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0xccd02, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x75) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000580)) getresgid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={r1, 0x0, r5}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r8 = dup(r7) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}}) chdir(&(0x7f0000000040)='./file0\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x41, 0x1, 0x0, 0x0, &(0x7f0000006680)) listen(0xffffffffffffffff, 0x0) 20m34.192253545s ago: executing program 2 (id=711): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000200)=0x1) 20m30.13630557s ago: executing program 2 (id=717): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x0, 0x3, 0xd83f}) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0xc0405627, &(0x7f00000002c0)={0x0, @ctrl={0x0, 0x0, @value64}}) socket$kcm(0x10, 0x2, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4004854) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe2e, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d2, &(0x7f0000000000)) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000180)={0x0, 0xaf0f, 0x700, 0x3, 0x132}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1ba0, 0x4000, 0x2100, 0xa4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7301, 0x200, 0x3, 0x351}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4fcc, 0x1, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x200, 0x2, 0x40250, 0x0, r2}}], 0x1, 0x0, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0x20040001) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$KDGKBDIACR(r8, 0x5433, 0x0) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r9, 0x89ef, &(0x7f0000000000)) 20m25.98733652s ago: executing program 1 (id=720): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) memfd_create(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioperm(0x0, 0x7c9, 0x1) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000600), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x6, 0x7fff7ffc}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x4c42bb4f92, 0x0) shutdown(r4, 0x0) 20m22.11781992s ago: executing program 2 (id=724): gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0xfca804a0, 0xe, 0x0, &(0x7f0000000100)="0400c811fe37db1ba91d3305a782", 0x0, 0x975, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x100000000000000) 20m18.782380744s ago: executing program 1 (id=728): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x408c0c0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x400000000010, 0x3, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="aefdda9d240300005a90f57f07703aeff0f64ebbee010052f436dd2a000000000000", 0x22}], 0x1) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, r6, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r7, &(0x7f00000000c0)={0x27, r6, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r5) 20m13.9262002s ago: executing program 2 (id=733): openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) clock_gettime(0x4, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r4, r5+10000000}) 20m5.646653836s ago: executing program 2 (id=740): landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) gettid() r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x400000041) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x3, 0x3742, 0xffffff86, 0x401, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x6}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040850) iopl(0xe) add_key$keyring(0x0, 0x0, 0x0, 0xfeffff, 0xfffffffffffffffd) r4 = socket(0x15, 0x803, 0xfffffffe) recvmmsg(r4, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) 20m2.45786821s ago: executing program 34 (id=728): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x408c0c0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x400000000010, 0x3, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="aefdda9d240300005a90f57f07703aeff0f64ebbee010052f436dd2a000000000000", 0x22}], 0x1) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, r6, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r7, &(0x7f00000000c0)={0x27, r6, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r5) 20m2.411249593s ago: executing program 2 (id=742): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f00000000c0), 0x80000) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_test', 0x400, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 19m46.291255554s ago: executing program 35 (id=742): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f00000000c0), 0x80000) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_test', 0x400, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 16m19.835683781s ago: executing program 3 (id=959): migrate_pages(0x0, 0x3, &(0x7f0000000100)=0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f00000000c0)) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f0000000180), 0x4001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x2c}, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_dump={0x47, 0x1ff, 0x7}}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) 16m17.226101303s ago: executing program 3 (id=961): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 16m16.058008759s ago: executing program 3 (id=962): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@remote, @in6=@loopback, 0x4e23, 0x0, 0x3, 0x8000, 0x2}, {0x81, 0x1, 0x0, 0x6, 0x95, 0xfffffffffffffffa, 0x2}, {0x40, 0x0, 0xffffffffffffffff, 0x2}, 0x8, 0x1, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x2, 0x9, 0x0, 0x3, 0xfffffffe}}, 0xe8) r1 = socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000021000000100800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x6}}]}, 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r6, 0x200004) sendfile(0xffffffffffffffff, r6, 0x0, 0x80001d00c0d1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 16m14.562709562s ago: executing program 3 (id=963): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20600) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, 0xffffffffffffffff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x9, 0x7fff0000}]}) ioctl$NBD_DISCONNECT(r5, 0xab08) close_range(r6, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 16m11.86965612s ago: executing program 3 (id=965): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0xfffffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffa, 0x2, 0x20000000, 0x327, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x20, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r8 = syz_open_dev$evdev(0x0, 0xfffffffffffffffd, 0x2e44) r9 = dup3(r8, 0xffffffffffffffff, 0x80000) read$FUSE(r9, 0x0, 0x0) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r10, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r10, 0x5501) r11 = syz_open_dev$evdev(&(0x7f0000000440), 0x72, 0x0) ioctl$EVIOCSFF(r11, 0x40304580, &(0x7f0000000500)={0x50, 0x2d, 0x6, {0x0, 0x2}, {0x3, 0x2007}, @const={0xc, {0x100, 0x4, 0x4, 0x5}}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 16m10.275507519s ago: executing program 3 (id=968): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r6, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') pread64(r7, &(0x7f0000000140)=""/245, 0xf5, 0x4) dup(r1) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 15m54.672859171s ago: executing program 36 (id=968): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r6, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') pread64(r7, &(0x7f0000000140)=""/245, 0xf5, 0x4) dup(r1) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 10m27.145494856s ago: executing program 5 (id=1235): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = io_uring_setup(0x5923, &(0x7f0000000080)={0x0, 0xe37d, 0x400, 0x3, 0x3a}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, 0xffffffffffffffff, 0x42) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='auto', 0x4) r5 = syz_io_uring_setup(0x5f38, &(0x7f00000005c0)={0x0, 0x2, 0x800, 0x0, 0x126}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x800000000000002, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x0, 0x1}) io_uring_enter(r5, 0x6516, 0x6993, 0x8, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="01000000d86ba833fd51d4589bb9196332269a465d20da8eb3ab2d15dc6c7bfe5d453502b49a9d169e914db45d95b8f6135dc11b3e52ffa73b21eac09652ecce851312f6ee720a9f5ff4ee5f3de0dd8e203f97119ffb829376d126cba2742f6b5714294902344954bb481d4e5d2e28d2ee73e99cdf49", @ANYRES16=r9, @ANYBLOB="20002cbd7000fcdbdf256b00000008000300", @ANYRES32=r10, @ANYBLOB="0a001a0008021100000100000a0006000802"], 0x40}}, 0x4008000) nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 10m25.391183964s ago: executing program 5 (id=1238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ptrace(0x10, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) 10m24.515862683s ago: executing program 5 (id=1239): openat(0xffffffffffffffff, 0x0, 0x408000, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) getpgid(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, 0xfffffffffffffffe) 10m20.186170202s ago: executing program 5 (id=1241): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x40, 0x14, 0x119, 0x70bd26, 0x25dfdbfc, {0xa, 0x8, 0x19, 0xfe}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x10, 0x0, 0xfffffff9, 0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='raid1', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1:0', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0) modify_ldt$write2(0x11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x10) write(r3, &(0x7f0000000400)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0) write(r4, &(0x7f0000000480)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r5 = open$dir(&(0x7f0000000040)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f00000003c0)={@id, 0x10, 0x0, '\x00', @d}) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r6, &(0x7f0000000500)='active', 0x6) 10m16.734209457s ago: executing program 5 (id=1245): fsopen(&(0x7f0000000300)='iso9660\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg0\x00'}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) fstatfs(0xffffffffffffffff, &(0x7f0000000100)=""/44) openat$ptmx(0xffffffffffffff9c, 0x0, 0x202, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) prlimit64(0x0, 0x7, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000340)='ro\x00H\x96\xf7\v\xcd \xd5\x19\x8ct\x14|\xa9\xd4\xc2\xf0\xf0\xab\xdf\x8f \x00\xc5\xb3\x99\xbf\xed\xa0\xe0\xa9\xc6\xab\xab\x95\xa8\x04O\b\xcc\x9b\x11\xa2`\xce\xffM]\xa1iB,\xae\x16\xf6|\xf5\'W\xd8~\xb7\xf80w+\xb7=f\xb7\xf2+\xe9zG\x9b\xadL\xfa\xbeb\xb1\xe6m\xab$\xd3\x97\xd6~ \xb8y\x13\xaf{\xc9\xa0\x941>\xa4Fgh\xb9r\x9b\xa4\xc1\x90\xf2\x85/A\xb3\x8e\x04~E\x7f\x14W\xcb?k\xa7ZB1\xe0n\x17\xc7U\xf6f\xd5\xdd\'\x05\x90\x10\xa2~\xf3\xe07`\x96\x85r', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) sched_getparam(r1, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x3, r5, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000000040)={0x30, r6, 0x1, 0x0, 0x0, 0x2080140000, 0x49bd, 0x0}) 10m13.942444716s ago: executing program 5 (id=1247): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000140)="84", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d06, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000c00), &(0x7f0000002000)=0x4) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x804) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) syz_usb_connect(0x5, 0x46, 0x0, 0x0) 9m57.7145265s ago: executing program 37 (id=1247): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000140)="84", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d06, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000c00), &(0x7f0000002000)=0x4) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x804) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) syz_usb_connect(0x5, 0x46, 0x0, 0x0) 23.067833775s ago: executing program 9 (id=1784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0xad, 0x80, 0x67, 0x40, 0x856, 0xac31, 0xfb7c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x7, 0x60, 0x9, "", [{{0x9, 0x4, 0x94, 0x8, 0x0, 0x39, 0x40, 0x71}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000002880)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x3, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000010900010073797a31000000001c00048018000180080001006c6f67000c00028002000540ffffff080900020073797a32000000001400"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) close(0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x16}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) syz_emit_ethernet(0x4e, &(0x7f0000000b40)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0x5, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @ssrr={0x89, 0x7, 0x77, [@local]}, @generic={0x7, 0x2}]}}, {{0x4, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_emit_vhci(0x0, 0x7) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3021, 0x3, &(0x7f0000ffd000/0x3000)=nil) socketpair$unix(0x1, 0x2, 0x0, 0x0) 21.548185475s ago: executing program 7 (id=1785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpid() read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) io_setup(0x5, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000005c0)={0x2, "42fce3753785050006be000000000000000000560000000000000800", 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r5, 0xa004}], 0x1, 0x47) r6 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, 0x0) r11 = open_tree(0xffffffffffffff9c, 0x0, 0x80800) renameat2(r7, 0x0, r11, 0x0, 0x5) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) io_submit(0x0, 0x0, 0x0) 21.299787786s ago: executing program 6 (id=1786): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_udp(0xa, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 18.325556552s ago: executing program 7 (id=1787): r0 = socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8102, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mincore(&(0x7f0000123000/0x2000)=nil, 0x2000, &(0x7f0000000180)=""/24) lseek(r6, 0x1, 0x1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="3600000200000000000030bbe7cc4107193fbfc3", @ANYRES32=0x0, @ANYRES8=r3], 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x40800) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_DELOBJ={0x130, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xf4, 0x8, "eae0c34204d4f8582d59e4f4bc2ace0161ea28e836c0463e81eb244346a163dc1ac5cc916503838e87d7388ba5f4b02aff458c2896d0ecff6d5d5b090feadb2448f1df69e1611d3ceed4b75eae33da4aade7bbf41a1bd24ea5dc3747d4c4a7ddce2c9b44eef483947722b765d61cb967f2175e42b79e2c98208ea27733c12f1ec387c8516efd532099084d2c05e8af5b00c2685d1f12bec05a8421a28e04c5ff4faf843c72261a66cc852f82f0d2d5492cb58d2770239ae0871578b64935ef9aee039c3beec9edc3f6a73dc558c10815af26f4e1f252119e055eee77927c3e3366ebca8f08f072e38edb6203a22eb213"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0x194}}, 0x24008080) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x603ca0114ad58eb3) 18.25849191s ago: executing program 6 (id=1788): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0xff08, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20002000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r8, &(0x7f0000000340)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r8, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r8, 0x0, r7, 0x0, 0x406f413, 0x0) 16.652968021s ago: executing program 9 (id=1789): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x38}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, 0x0, 0x1, 0x0, 0x0) 14.795875776s ago: executing program 6 (id=1790): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ptrace(0x10, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) readv(r1, &(0x7f0000001500)=[{0x0}, {&(0x7f00000000c0)=""/46, 0x2e}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioprio_get$pid(0x3, r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20) 14.549431609s ago: executing program 7 (id=1791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) symlink(0x0, &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') utimes(0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102400, 0x19000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000440)=""/213, 0xd5}, {0x0}], 0x2, 0x14, 0x5) sched_setaffinity(r2, 0x0, 0x0) syz_open_dev$dri(0x0, 0x78, 0xa02) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) timer_create(0x8, 0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) gettid() r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 12.604347938s ago: executing program 9 (id=1792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_ublk_setup_io_uring(0x1c, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x95}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10010001, 0xffffffffffffffff, 0x0, 0xcd}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x1000d8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x2, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x40, 0x2, 0x369}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r6, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) write$P9_RGETLOCK(r9, &(0x7f0000000340)={0x1f, 0x37, 0x2, {0x2, 0x400, 0x8, r1, 0x1, ','}}, 0x1f) r10 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x1, 0x0) r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r11, &(0x7f0000019680)=""/102392, 0x18ff8) r12 = socket$inet_udp(0x2, 0x2, 0x0) r13 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r13, 0x0, 0x0) r14 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r14, 0x0, 0x0) getsockopt$sock_int(r12, 0x1, 0x2c, &(0x7f0000000200), &(0x7f0000000240)=0x4) keyctl$get_persistent(0x16, 0x0, r14) add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r15 = syz_open_dev$usbfs(0x0, 0x3, 0x8080) read$usbfs(r15, &(0x7f00000002c0)=""/107, 0x6b) 12.520200036s ago: executing program 7 (id=1793): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x12000, @loopback, 0x7}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x515002, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x10f0, 0x700001b, 0x148, 0x0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0xa0, 0xc0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) r4 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r4, &(0x7f0000001fc0)=""/177, 0xb1) r5 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000400)='v2\x00ul\x00\x00\n\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfcn\x85o\a\x00\x00\x00\x00\x00\x00\x00\xaa?4\xafq^\x00\x00\x00\x00\x00\x00\x00\xffDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9e\xf1\xe4:\xe2\x05\x00\x00\x00\x00\x00\x00\x00%\x95xX$\x84gRUo\xcd\x83\x95\xc3\xe4I\xc44)%\xb8\x9b\xcbF<\xfb#<\xe2d\xbd\xbd\x9eR\x84M\xa8\v}rQ\xc9\x9f\x9e1]\x9a\xe6\xbe\xc2\xcfc\x04\x17\"\x1a\x00o\x17\xdf\xf1\xa2`}0\x9a\xe8\xf0x\x15\x84`3\xf9\x813\x94\xecj\xd1\xa4\x03\xe6Q\xa9\xcf\xdf\x9a=\xfe\x06\xf2\xb9n|N2\xec\v\x14P\xb1\x8fh9\xa0,\xca!\xc1`\xce\x80\xf8Y)\xd6u\xb9 \x88\x7f\xad+\xc1\xc6\xb0D\x90\xff2\xadc-\x06\xdf<:-\xadA\bTH\xecg\x13\"\xa6\x94q\x83\x19\xd3\x12\x9dbI(\xf6+B\x12Ud\x83\ndv\x8f\xe0H\xba\xf1F\xa2\xbb\x11\xc2M\x92(\xf1%I\a\x9eRu\xe4\xc7L\x93\xa8\xa9\x12\x9c\xe2{]\xff\xff\xff\xffg\x9c\x13\x89\xdd\x1e\xc8\x83\xcf\xc7\xd9\xa4)o\x1aj\x8e\b>c\x9f\x8e\xf3H\xcc\xe0\xc1z\xbd\xae2\x9a\xb7\xd4}f\x9c\x0fA\xcd\xa3\xd5\xbb\xc2-r\xb2M\x15!3f=\xc4\x9f~\xbc[:\v[FT\xec$\xd5\x1c\x99^\x80\x1a\xb5zv\xa9\xed\x1f\xe5\xec\x9f\xdd\xf1\x8f\xe4C\xee\xeb\xaa^\xaf\x86\r>\xde\xa6L\xb3D\xd8v\\\x9f\xfb\xb2\r\xc8\'\x9aAa\xca\xd5\x91\xd9\xe2\x1b\x9d~ \x98\xee\xcf\xb7\xc0n\x9d>q6\xe6\xc6\x025\xef\xbajN\x8f\xd1a\xc6\t\xe4\xb4\x95\xda\xc9\xe6X\xeba\xfb\xce9\xeedZ\xcb\xff4s\x91\xf8\x90rYR\xec%\xd3\x03@\\\xda\xd7,\x035\xb6\xac\xb9', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x71, &(0x7f0000000100)={0x800, 0x4, 0x1, 0xc05}) 12.51866319s ago: executing program 6 (id=1794): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x40, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r4}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$F2FS_IOC_GET_FEATURES(r6, 0x8004f50c, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@mss={0x2, 0x2}, @mss={0x2, 0x8}, @window={0x3, 0x401, 0x8002}, @timestamp, @timestamp, @sack_perm], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0) 8.571615161s ago: executing program 9 (id=1795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8030}, 0x50) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x841) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000005000000020000000700000042000000", @ANYRES32, @ANYBLOB="01e59fe62efc79f1"], 0x50) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) socket$netlink(0x10, 0x3, 0x2) 8.570108278s ago: executing program 6 (id=1796): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_udp(0xa, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 5.283295891s ago: executing program 6 (id=1797): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f00020b, 0x0, 0x0, 0x0, 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="18070000000000000000000000800000851000000300000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) r9 = syz_open_dev$video(&(0x7f0000000040), 0x8000000a7, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r9, 0xc0185647, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) 3.753065495s ago: executing program 7 (id=1798): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0xfd}, {0x16}]}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r3, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r3, &(0x7f0000000440)="e8491a3ad6e51dd9adade66a5e96cc0c2b8a6794a6c605daf37222d4b32eaff82507510b17c0aa6052fc30999b16a54ab82fd851c3d16943a806268b24a5dab519c8c15aa9314bdd46a9ce50a826b38b1a48ec5ea23a7eeb887d68ee3d7357d6c8a10a3a00003035a231a456fd0b14b5f660d763274078984b27fd5faf45e5622c4ed08f0154116bf4ee0b97102b81a762c37e839623ac68098c6eb58a03c426492b8d9c0a43f1047afbbf2e39bc9a86d9e299acd1cb895fa17b4ad93d82a1dccd0c57af25d33709ccf3a3d1063c222ec2add12ac86bcfa7379a576599b887c30810", 0xe2, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000280)=""/135, &(0x7f0000000680), &(0x7f0000000540), 0x6c}, 0x38) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) ftruncate(0xffffffffffffffff, 0x6000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) unshare(0x28000600) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/pid\x00') sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000002000000080002000000000008000700", @ANYRES32=r5, @ANYBLOB="0000000006f432b92568c9efcf88382d4c016b1986f3ab60749e97943c17d6d85f61c046835c0b460eb359f5353f0a640efce65d95beb72d73643807186f2440232c0068f8b84f9e60f72fc3a1480d9ba33f326953a587c23ecd6940ff4356df4b01d0d91fc0ad0bfcb4575276eaa32c2ea6b91e2f408dee58a0bd1fe527734a4a0f9d88f6511695819cf3b93d", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r6, 0x0, 0x0) 1.126517343s ago: executing program 9 (id=1799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x40}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) dup(0xffffffffffffffff) socket(0xa, 0x5, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) openat$null(0xffffffffffffff9c, &(0x7f0000002840), 0x101101, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x18, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb06}, 0x94) mount(0x0, 0x0, &(0x7f0000000000)='romfs\x00', 0x200000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, &(0x7f00000000c0), &(0x7f0000000380)=""/75}, 0x20) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0x22e2e, 0x100, 0x0, 0x3, 0x0, 0x0, 0xffff}}) 965.044488ms ago: executing program 7 (id=1800): r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x101040, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x83, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x28, 0x1056}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mkdirat(r0, &(0x7f0000000000)='./config\x00', 0x1c9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x2) write(r4, &(0x7f0000000e80)="01000000070538abb5ce00", 0xb) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000000)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x2, 0xffffffffffffffff}) 0s ago: executing program 9 (id=1801): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000180)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, &(0x7f0000003880)=[{&(0x7f00000016c0)="27031c00160014000000001106afacf706e105400000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c36505968f28a4894f", 0x3a}, {&(0x7f0000000200)="22ea7e01f370d458bc5f5da807d19edcce18b75bf5034bb80875257d68b199f247eac81ab52f03e698103d9d1cf70127eda16f2c7017285d0e1b1dabc9ec2db03ed73c3145e68be07ae34de748c1341f382840698a3fb95e9b1aaf2bb8cb0191e7e392db050fa06124f73d1c9276bad26884d4208acc499b17b6d62f2bbb14db3e0007478df45cff3aa28b8e92621be927ca29819deea491e2b0b1a275e2c1ac4ff8c30000000000", 0xa8}, {&(0x7f0000000380)="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", 0xe78}], 0x3}, 0x8eec3816282631eb) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, 0x1c) timer_create(0x4, &(0x7f0000000140)={0x0, 0x21, 0x4, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10004, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x300000b) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x224}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r8) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000001c0), 0x3) socket$inet_sctp(0x2, 0x5, 0x84) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) kernel console output (not intermixed with test programs): oth: hci4: command tx timeout [ 1497.036156][T13383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1497.036181][T13383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1497.036195][T13383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1497.193430][T13383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1497.193448][T13383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1497.193475][T13383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1497.333898][T13383] hsr_slave_0: entered promiscuous mode [ 1497.334677][T13383] hsr_slave_1: entered promiscuous mode [ 1497.335191][T13383] debugfs: 'hsr0' already exists in 'hsr' [ 1497.335216][T13383] Cannot create hsr debugfs directory [ 1498.695190][T11977] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1498.787860][T11977] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1498.797420][T11977] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1498.798453][T11977] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1498.825254][T11977] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1499.329666][ T5896] hsr_slave_0: left promiscuous mode [ 1499.370976][ T5896] hsr_slave_1: left promiscuous mode [ 1499.374455][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1499.410484][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1499.629481][ T5896] hsr_slave_1: left promiscuous mode [ 1499.630270][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1499.630308][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1499.671627][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1499.671655][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1499.756831][ T5896] veth1_macvtap: left promiscuous mode [ 1499.756903][ T5896] veth0_macvtap: left promiscuous mode [ 1499.757047][ T5896] veth1_vlan: left promiscuous mode [ 1499.757157][ T5896] veth0_vlan: left promiscuous mode [ 1500.410591][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 1500.451005][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 1500.879800][ T5593] Bluetooth: hci0: command tx timeout [ 1501.260437][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 1501.323051][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 1501.580438][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 1501.894127][ T5248] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1502.911066][T13608] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.911292][T13608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.911462][T13608] bridge_slave_0: entered allmulticast mode [ 1502.914249][T13608] bridge_slave_0: entered promiscuous mode [ 1502.953957][T13608] bridge0: port 2(bridge_slave_1) entered blocking state [ 1502.954104][T13608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.954267][T13608] bridge_slave_1: entered allmulticast mode [ 1502.957969][T13608] bridge_slave_1: entered promiscuous mode [ 1502.960104][ T5593] Bluetooth: hci0: command tx timeout [ 1502.968992][T13661] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.969142][T13661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.987484][T13661] bridge_slave_0: entered allmulticast mode [ 1502.991990][T13661] bridge_slave_0: entered promiscuous mode [ 1503.032216][T13661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.032423][T13661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.032616][T13661] bridge_slave_1: entered allmulticast mode [ 1503.035281][T13661] bridge_slave_1: entered promiscuous mode [ 1503.167347][T13608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1503.169183][ T5248] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1503.259147][T13608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1503.333638][T13661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1503.357697][T13661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1503.462647][T13608] team0: Port device team_slave_0 added [ 1503.541724][T13608] team0: Port device team_slave_1 added [ 1503.544177][T13661] team0: Port device team_slave_0 added [ 1503.574748][T13661] team0: Port device team_slave_1 added [ 1503.638292][T13608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1503.638312][T13608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1503.638334][T13608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1503.695125][T13608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1503.695166][T13608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1503.695192][T13608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1503.696818][T13661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1503.696832][T13661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1503.696857][T13661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1503.720468][T13661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1503.720489][T13661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1503.720516][T13661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1504.021372][T13608] hsr_slave_0: entered promiscuous mode [ 1504.022218][T13608] hsr_slave_1: entered promiscuous mode [ 1504.518955][T13661] hsr_slave_0: entered promiscuous mode [ 1504.532994][T13661] hsr_slave_1: entered promiscuous mode [ 1504.534066][T13661] debugfs: 'hsr0' already exists in 'hsr' [ 1504.534094][T13661] Cannot create hsr debugfs directory [ 1504.559240][ T5248] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1504.974590][T13726] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.974817][T13726] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.974990][T13726] bridge_slave_0: entered allmulticast mode [ 1504.977705][T13726] bridge_slave_0: entered promiscuous mode [ 1505.023315][T13726] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.023447][T13726] bridge0: port 2(bridge_slave_1) entered disabled state [ 1505.023638][T13726] bridge_slave_1: entered allmulticast mode [ 1505.025799][T13726] bridge_slave_1: entered promiscuous mode [ 1505.039698][ T5593] Bluetooth: hci0: command tx timeout [ 1505.238543][T13726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1505.358316][T13726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1505.514755][T13726] team0: Port device team_slave_0 added [ 1505.516884][T13726] team0: Port device team_slave_1 added [ 1505.584813][T13726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1505.584831][T13726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1505.584845][T13726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1505.586558][T13726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1505.586575][T13726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1505.586594][T13726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1505.849902][T13726] hsr_slave_0: entered promiscuous mode [ 1505.850763][T13726] hsr_slave_1: entered promiscuous mode [ 1505.851705][T13726] debugfs: 'hsr0' already exists in 'hsr' [ 1505.851729][T13726] Cannot create hsr debugfs directory [ 1506.578849][ T5248] 8021q: adding VLAN 0 to HW filter on device eth28 [ 1507.029783][T13608] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1507.118166][T13608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1507.119174][T13608] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1507.125502][ T5593] Bluetooth: hci0: command tx timeout [ 1507.277052][T13608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1507.394311][T13608] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1507.509962][T13608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1508.181437][T13608] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1508.234278][T13608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1509.205512][T13608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1509.319886][T13608] 8021q: adding VLAN 0 to HW filter on device team0 [ 1509.353317][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.353534][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1510.268114][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.268202][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1511.809632][ T5896] bridge_slave_1: left allmulticast mode [ 1511.809662][ T5896] bridge_slave_1: left promiscuous mode [ 1511.809840][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.990697][ T5896] bridge_slave_0: left allmulticast mode [ 1511.990725][ T5896] bridge_slave_0: left promiscuous mode [ 1511.990931][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.319805][ T5896] bridge_slave_1: left allmulticast mode [ 1512.319845][ T5896] bridge_slave_1: left promiscuous mode [ 1512.320093][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.492777][ T5896] bridge_slave_0: left allmulticast mode [ 1512.492804][ T5896] bridge_slave_0: left promiscuous mode [ 1512.492958][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.789648][ T5896] bridge_slave_1: left allmulticast mode [ 1512.789676][ T5896] bridge_slave_1: left promiscuous mode [ 1512.789865][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.962568][ T5896] bridge_slave_0: left allmulticast mode [ 1512.962597][ T5896] bridge_slave_0: left promiscuous mode [ 1512.962786][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1513.199760][ T5896] bridge_slave_1: left allmulticast mode [ 1513.199799][ T5896] bridge_slave_1: left promiscuous mode [ 1513.200054][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1513.350998][ T5896] bridge_slave_0: left allmulticast mode [ 1513.351025][ T5896] bridge_slave_0: left promiscuous mode [ 1513.351188][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1513.859956][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1513.980044][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1514.063926][ T5896] bond0 (unregistering): Released all slaves [ 1514.381355][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1514.501921][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1514.582329][ T5896] bond0 (unregistering): Released all slaves [ 1514.900071][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1515.021415][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1515.100756][ T5896] bond0 (unregistering): Released all slaves [ 1515.440080][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1515.560752][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1515.640953][ T5896] bond0 (unregistering): Released all slaves [ 1515.964729][T13608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1516.955100][T13661] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1517.091336][T13661] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1517.093338][T13661] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1517.337541][T13661] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1517.371981][T13661] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1517.692633][T13661] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1517.744850][T13661] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1517.864562][T13661] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1518.740285][ T5896] hsr_slave_0: left promiscuous mode [ 1518.761129][ T5896] hsr_slave_1: left promiscuous mode [ 1518.762135][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1518.801286][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1518.999623][ T5896] hsr_slave_0: left promiscuous mode [ 1519.039668][ T5896] hsr_slave_1: left promiscuous mode [ 1519.040607][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1519.092512][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1519.209548][ T5896] hsr_slave_0: left promiscuous mode [ 1519.249575][ T5896] hsr_slave_1: left promiscuous mode [ 1519.251220][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1519.290570][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1519.389594][ T5896] hsr_slave_0: left promiscuous mode [ 1519.429614][ T5896] hsr_slave_1: left promiscuous mode [ 1519.430744][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1519.480079][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1519.763461][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 1519.819957][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 1520.241554][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 1520.305409][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 1520.670246][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 1520.710791][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 1521.061826][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 1521.101768][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 1521.317076][T13608] veth0_vlan: entered promiscuous mode [ 1521.525111][T13608] veth1_vlan: entered promiscuous mode [ 1521.594692][T13726] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1521.652029][T13726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1521.750620][T13726] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1521.935608][T13726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1522.038185][T13726] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1522.073815][T13726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1522.092140][T13726] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1522.224593][T13726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1522.867112][T13608] veth0_macvtap: entered promiscuous mode [ 1522.922749][T13608] veth1_macvtap: entered promiscuous mode [ 1523.069069][T13608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1523.097335][T13608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1523.126700][T13661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1523.272377][T13661] 8021q: adding VLAN 0 to HW filter on device team0 [ 1523.620863][ T5898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.621070][ T5898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1523.888424][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.888639][ T5897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1524.384239][T13726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1524.429734][ T69] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.647142][T11977] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1533.674400][T11977] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1533.676123][T11977] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1533.707965][T11977] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1533.717362][T11977] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1535.096941][T13726] 8021q: adding VLAN 0 to HW filter on device team0 [ 1535.116737][ T7936] bridge0: port 1(bridge_slave_0) entered blocking state [ 1535.116933][ T7936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1535.368239][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1535.368469][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1535.988296][ T5593] Bluetooth: hci1: command tx timeout [ 1537.919836][ T5897] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.921536][ T5897] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.923574][ T5897] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.067023][ T5593] Bluetooth: hci1: command tx timeout [ 1538.125559][T13661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1538.630477][T14047] bridge0: port 1(bridge_slave_0) entered blocking state [ 1538.630576][T14047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.630764][T14047] bridge_slave_0: entered allmulticast mode [ 1538.634986][T14047] bridge_slave_0: entered promiscuous mode [ 1538.754959][T14047] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.755188][T14047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.756099][T14047] bridge_slave_1: entered allmulticast mode [ 1538.759127][T14047] bridge_slave_1: entered promiscuous mode [ 1538.958831][T14047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1538.983001][T13726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1539.014623][T14047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1539.111754][T14047] team0: Port device team_slave_0 added [ 1539.128693][T14047] team0: Port device team_slave_1 added [ 1539.191656][T14047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1539.191675][T14047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1539.191700][T14047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1539.249017][T14047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1539.249036][T14047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1539.249062][T14047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1539.605594][T14047] hsr_slave_0: entered promiscuous mode [ 1539.608012][T14047] hsr_slave_1: entered promiscuous mode [ 1539.608695][T14047] debugfs: 'hsr0' already exists in 'hsr' [ 1539.608715][T14047] Cannot create hsr debugfs directory [ 1539.764544][T13661] veth0_vlan: entered promiscuous mode [ 1540.089999][ T5593] Bluetooth: hci1: command tx timeout [ 1540.376370][ T5896] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.492833][T13661] veth1_vlan: entered promiscuous mode [ 1541.001023][ T5896] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.217230][T13726] veth0_vlan: entered promiscuous mode [ 1541.468963][ T5896] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.531716][T13661] veth0_macvtap: entered promiscuous mode [ 1541.575902][T13726] veth1_vlan: entered promiscuous mode [ 1541.591205][T13661] veth1_macvtap: entered promiscuous mode [ 1541.751683][T13661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1541.792853][T13661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1542.102981][ T5896] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.140461][T13726] veth0_macvtap: entered promiscuous mode [ 1542.147664][T13726] veth1_macvtap: entered promiscuous mode [ 1542.174649][ T5593] Bluetooth: hci1: command tx timeout [ 1542.435472][T13726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1542.783261][T13726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1542.896196][ T1140] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.139031][ T5812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1543.139055][ T5812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1544.522687][T13101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1544.522709][T13101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1545.150083][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1545.150109][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1545.235739][ T5812] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.236940][ T5812] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.237270][ T5812] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.237742][ T5812] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.238655][ T5812] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.238990][ T5812] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.644163][T14228] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[13661] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[14228] [ 1546.478162][ T5593] Bluetooth: Frame is too long (len 16, expected len 4) [ 1547.200676][ T5896] bridge_slave_1: left allmulticast mode [ 1547.200705][ T5896] bridge_slave_1: left promiscuous mode [ 1547.200878][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.333572][T14237] usb usb8: usbfs: process 14237 (syz.6.1342) did not claim interface 7 before use [ 1550.065528][T14243] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1550.096825][T14243] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1333'. [ 1550.611015][ T5896] bridge_slave_0: left allmulticast mode [ 1550.611054][ T5896] bridge_slave_0: left promiscuous mode [ 1550.611316][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.982363][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1552.982445][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1553.068831][T13661] ffs_data_put(): freeing [ 1554.520581][T14263] FAULT_INJECTION: forcing a failure. [ 1554.520581][T14263] name failslab, interval 1, probability 1, space 0, times 0 [ 1554.520703][T14263] CPU: 1 UID: 0 PID: 14263 Comm: syz.9.1338 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1554.520765][T14263] Tainted: [L]=SOFTLOCKUP [ 1554.520773][T14263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1554.520788][T14263] Call Trace: [ 1554.520797][T14263] [ 1554.520808][T14263] dump_stack_lvl+0xe8/0x150 [ 1554.520848][T14263] should_fail_ex+0x46b/0x600 [ 1554.520885][T14263] should_failslab+0xa8/0x100 [ 1554.520910][T14263] __kmalloc_cache_noprof+0xa1/0x680 [ 1554.520943][T14263] ? netstat_seq_show+0x10d/0xe50 [ 1554.521107][T14263] ? netstat_seq_show+0x10d/0xe50 [ 1554.521136][T14263] ? seq_write+0xd8/0x140 [ 1554.521162][T14263] netstat_seq_show+0x10d/0xe50 [ 1554.521197][T14263] ? seq_read_iter+0x1eb/0xcb0 [ 1554.521225][T14263] ? seq_read_iter+0x1eb/0xcb0 [ 1554.521261][T14263] seq_read_iter+0x464/0xcb0 [ 1554.521307][T14263] seq_read+0x36a/0x490 [ 1554.521347][T14263] ? __pfx_seq_read+0x10/0x10 [ 1554.521396][T14263] ? __pfx_seq_read+0x10/0x10 [ 1554.521424][T14263] proc_reg_read+0x1f6/0x2f0 [ 1554.521457][T14263] ? __pfx_proc_reg_read+0x10/0x10 [ 1554.521486][T14263] vfs_read+0x219/0xa90 [ 1554.521516][T14263] ? preempt_schedule_thunk+0x16/0x40 [ 1554.521544][T14263] ? __pfx_vfs_read+0x10/0x10 [ 1554.521569][T14263] ? preempt_schedule_thunk+0x16/0x40 [ 1554.521599][T14263] ? _raw_spin_unlock_irqrestore+0x76/0x80 [ 1554.521623][T14263] ? mutex_lock_nested+0x152/0x1d0 [ 1554.521650][T14263] ? fdget_pos+0x252/0x320 [ 1554.521683][T14263] ksys_read+0x156/0x270 [ 1554.521711][T14263] ? __pfx_ksys_read+0x10/0x10 [ 1554.521747][T14263] ? __x64_sys_read+0x2d/0x90 [ 1554.521778][T14263] do_syscall_64+0x166/0x520 [ 1554.521801][T14263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.521825][T14263] ? clear_bhb_loop+0x70/0xc0 [ 1554.521852][T14263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.521873][T14263] RIP: 0033:0x7f2b94ebe159 [ 1554.521895][T14263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1554.521914][T14263] RSP: 002b:00007f2b930d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1554.521939][T14263] RAX: ffffffffffffffda RBX: 00007f2b95146180 RCX: 00007f2b94ebe159 [ 1554.521960][T14263] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000007 [ 1554.521975][T14263] RBP: 00007f2b94f5506b R08: 0000000000000000 R09: 0000000000000000 [ 1554.521989][T14263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1554.522002][T14263] R13: 00007f2b95146218 R14: 00007f2b95146180 R15: 00007ffcde8bf688 [ 1554.522037][T14263] [ 1554.640238][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1555.370209][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1555.392083][ T5896] bond0 (unregistering): Released all slaves [ 1555.452399][T14243] hsr_slave_0 (unregistering): left promiscuous mode [ 1556.172717][T14267] PKCS7: Unknown OID: [4] 0.0 [ 1556.172883][T14267] PKCS7: Only support pkcs7_signedData type [ 1562.010360][ T36] audit: type=1326 audit(2000000423.066:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14298 comm="syz.6.1349" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1562.012409][ T36] audit: type=1326 audit(2000000423.076:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14298 comm="syz.6.1349" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1562.017058][ T36] audit: type=1326 audit(2000000423.076:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14298 comm="syz.6.1349" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1562.017390][ T36] audit: type=1326 audit(2000000423.076:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14298 comm="syz.6.1349" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1562.055590][ T36] audit: type=1326 audit(2000000423.116:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14298 comm="syz.6.1349" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1562.055643][ T36] audit: type=1326 audit(2000000423.116:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14298 comm="syz.6.1349" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1562.055684][ T36] audit: type=1326 audit(2000000423.116:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14298 comm="syz.6.1349" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1562.056343][ T36] audit: type=1326 audit(2000000423.116:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14298 comm="syz.6.1349" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1562.056386][ T36] audit: type=1326 audit(2000000423.116:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14298 comm="syz.6.1349" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1562.056666][ T36] audit: type=1326 audit(2000000423.116:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14298 comm="syz.6.1349" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1562.537947][T11977] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1562.614465][T11977] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1562.618082][T11977] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1562.648794][T11977] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1562.670330][T11977] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1563.968436][T14314] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1564.526090][ T1684] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.815695][T14328] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1353'. [ 1566.565795][ T5593] Bluetooth: hci2: command tx timeout [ 1568.903526][ T5593] Bluetooth: hci2: command tx timeout [ 1568.994803][T14363] net_ratelimit: 27 callbacks suppressed [ 1568.994829][T14363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1569.374649][T14361] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1357'. [ 1570.130566][T14372] jffs2: notice: (14372) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1571.178707][ T5593] Bluetooth: hci2: command tx timeout [ 1572.703588][T14377] jffs2: notice: (14377) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1573.229770][ T5593] Bluetooth: hci2: command tx timeout [ 1574.444161][ T5248] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1575.626121][T14361] bond0: (slave bond_slave_0): Releasing backup interface [ 1576.355205][T14405] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1364'. [ 1577.666862][T14411] 9p: Bad value for 'rfdno' [ 1577.831962][T14414] comedi comedi0: pcl818: I/O port conflict (0x140,16) [ 1578.615537][ T5896] hsr_slave_0: left promiscuous mode [ 1578.669026][ T5896] hsr_slave_1: left promiscuous mode [ 1578.673941][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1578.673988][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1578.720640][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1578.720671][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1579.349632][ T5896] veth1_macvtap: left promiscuous mode [ 1579.349748][ T5896] veth0_macvtap: left promiscuous mode [ 1579.350033][ T5896] veth1_vlan: left promiscuous mode [ 1579.350176][ T5896] veth0_vlan: left promiscuous mode [ 1591.141696][T14462] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1374'. [ 1592.176396][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 1592.420268][T14472] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1379'. [ 1595.037991][T14487] binder: 14479:14487 ioctl 4008550d 200000000000 returned -22 [ 1595.657642][T11977] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1595.754802][T11977] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1595.772119][T11977] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1595.799784][T11977] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1595.821482][T11977] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1597.497758][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 1597.700615][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 1598.800163][ T5593] Bluetooth: hci0: command tx timeout [ 1599.061636][ T1140] IPVS: starting estimator thread 0... [ 1599.319620][T14512] IPVS: using max 15 ests per chain, 36000 per kthread [ 1600.879439][ T5593] Bluetooth: hci0: command tx timeout [ 1602.959514][ T5593] Bluetooth: hci0: command tx timeout [ 1604.898229][T14539] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1604.903398][T14539] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1605.040327][ T5593] Bluetooth: hci0: command tx timeout [ 1605.517143][T14539] vimc vimc.0: kthread_run failed with -4 [ 1607.505260][T13037] libceph: connect (1)[c::]:6789 error -101 [ 1607.536179][T13037] libceph: mon0 (1)[c::]:6789 connect error [ 1607.585241][T13037] libceph: connect (1)[c::]:6789 error -101 [ 1607.585439][T13037] libceph: mon0 (1)[c::]:6789 connect error [ 1607.833047][T14546] ceph: No mds server is up or the cluster is laggy [ 1607.844816][ T5954] libceph: connect (1)[c::]:6789 error -101 [ 1607.845008][ T5954] libceph: mon0 (1)[c::]:6789 connect error [ 1608.629199][T13037] libceph: connect (1)[c::]:6789 error -101 [ 1608.629620][T13037] libceph: mon0 (1)[c::]:6789 connect error [ 1609.618589][T14568] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11964] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[14568] [ 1609.643178][ T5593] Bluetooth: Frame is too long (len 16, expected len 4) [ 1609.973631][ T8744] libceph: connect (1)[c::]:6789 error -101 [ 1609.973834][ T8744] libceph: mon0 (1)[c::]:6789 connect error [ 1611.440463][ T5954] libceph: connect (1)[c::]:6789 error -101 [ 1611.440699][ T5954] libceph: mon0 (1)[c::]:6789 connect error [ 1611.699752][ T8744] libceph: connect (1)[c::]:6789 error -101 [ 1611.699932][ T8744] libceph: mon0 (1)[c::]:6789 connect error [ 1611.799347][T14301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1611.799505][T14301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.799654][T14301] bridge_slave_0: entered allmulticast mode [ 1611.801835][T14301] bridge_slave_0: entered promiscuous mode [ 1611.804618][T14301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1611.804806][T14301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.804962][T14301] bridge_slave_1: entered allmulticast mode [ 1611.807131][T14301] bridge_slave_1: entered promiscuous mode [ 1611.847044][T14301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1611.855013][T14301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1612.174196][T14301] team0: Port device team_slave_0 added [ 1612.245483][T14301] team0: Port device team_slave_1 added [ 1612.710896][T14593] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1398'. [ 1613.871611][T14301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1613.871627][T14301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1613.871649][T14301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1613.876797][T14593] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1613.876827][T14593] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1613.876840][T14593] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1614.251818][T14301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1614.251836][T14301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1614.251861][T14301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1615.743793][ T5593] Bluetooth: hci4: command 0x0406 tx timeout [ 1616.382049][T14301] hsr_slave_0: entered promiscuous mode [ 1616.421474][T14301] hsr_slave_1: entered promiscuous mode [ 1618.731225][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1618.731300][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1622.028647][T14301] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1622.502683][T14301] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1622.763719][T14488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.764857][T14488] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.785248][T14488] bridge_slave_0: entered allmulticast mode [ 1622.875335][T14488] bridge_slave_0: entered promiscuous mode [ 1623.188230][T14488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1623.188368][T14488] bridge0: port 2(bridge_slave_1) entered disabled state [ 1623.188552][T14488] bridge_slave_1: entered allmulticast mode [ 1623.298030][T14488] bridge_slave_1: entered promiscuous mode [ 1623.334310][T14660] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11964] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[14660] [ 1623.338017][T14491] Bluetooth: Frame is too long (len 16, expected len 4) [ 1623.420841][T14488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1623.426288][T14488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1623.704944][ T5593] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1624.705240][ T5593] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1624.736391][ T5593] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1624.737179][ T5593] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1625.038237][ T5593] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1625.442859][T14301] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.500516][T14668] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1626.241803][T14488] team0: Port device team_slave_0 added [ 1626.246406][T14488] team0: Port device team_slave_1 added [ 1627.870210][T14491] Bluetooth: hci1: command tx timeout [ 1629.982408][T14491] Bluetooth: hci1: command tx timeout [ 1630.189949][T14301] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.311493][T14488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1630.311513][T14488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1630.311537][T14488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1630.371482][T14488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1630.371501][T14488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1630.371526][T14488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1630.488127][T14488] hsr_slave_0: entered promiscuous mode [ 1630.495811][T14488] hsr_slave_1: entered promiscuous mode [ 1630.496771][T14488] debugfs: 'hsr0' already exists in 'hsr' [ 1630.496795][T14488] Cannot create hsr debugfs directory [ 1631.043549][ T5896] bridge_slave_1: left allmulticast mode [ 1631.043589][ T5896] bridge_slave_1: left promiscuous mode [ 1631.043877][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1631.131156][ T5896] bridge_slave_0: left allmulticast mode [ 1631.131217][ T5896] bridge_slave_0: left promiscuous mode [ 1631.131496][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.741044][T14491] Bluetooth: hci1: command tx timeout [ 1632.916609][ T5896] bridge_slave_1: left allmulticast mode [ 1632.916649][ T5896] bridge_slave_1: left promiscuous mode [ 1632.916900][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.083705][ T5896] bridge_slave_0: left allmulticast mode [ 1633.083744][ T5896] bridge_slave_0: left promiscuous mode [ 1633.084019][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1634.906058][T14491] Bluetooth: hci1: command tx timeout [ 1636.430632][T14715] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1419'. [ 1636.475857][ T36] kauditd_printk_skb: 160 callbacks suppressed [ 1636.475913][ T36] audit: type=1326 audit(2000000496.462:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14712 comm="syz.7.1419" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c77ace159 code=0x7ffc0000 [ 1636.476228][ T36] audit: type=1326 audit(2000000496.462:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14712 comm="syz.7.1419" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f0c77ace159 code=0x7ffc0000 [ 1636.476462][ T36] audit: type=1326 audit(2000000496.462:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14712 comm="syz.7.1419" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c77ace159 code=0x7ffc0000 [ 1636.476744][ T36] audit: type=1326 audit(2000000496.462:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14712 comm="syz.7.1419" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c77ace159 code=0x7ffc0000 [ 1636.476945][ T36] audit: type=1326 audit(2000000496.462:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14712 comm="syz.7.1419" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c77ace159 code=0x7ffc0000 [ 1636.477075][ T36] audit: type=1326 audit(2000000496.472:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14712 comm="syz.7.1419" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c77ace159 code=0x7ffc0000 [ 1636.477333][ T36] audit: type=1326 audit(2000000496.472:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14712 comm="syz.7.1419" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c77ace159 code=0x7ffc0000 [ 1636.477527][ T36] audit: type=1326 audit(2000000496.472:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14712 comm="syz.7.1419" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0c77a8e98e code=0x7ffc0000 [ 1636.477902][ T36] audit: type=1326 audit(2000000496.482:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14712 comm="syz.7.1419" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0c77a8e98e code=0x7ffc0000 [ 1636.478199][ T36] audit: type=1326 audit(2000000496.482:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14712 comm="syz.7.1419" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0c77a8e98e code=0x7ffc0000 [ 1639.020311][T14726] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1418'. [ 1639.038787][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1641.304106][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1641.341271][ T5896] bond0 (unregistering): Released all slaves [ 1641.848911][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 1641.848931][ T36] audit: type=1326 audit(2000000501.902:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14731 comm="syz.9.1422" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b94ebe159 code=0x0 [ 1642.013599][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1642.093988][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1642.267480][ T5701] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 1642.297285][ T5896] bond0 (unregistering): Released all slaves [ 1642.322114][T14724] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1642.725383][ T36] audit: type=1326 audit(2000000502.582:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14742 comm="syz.9.1425" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b94ebe159 code=0x7ffc0000 [ 1642.725701][ T36] audit: type=1326 audit(2000000502.592:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14742 comm="syz.9.1425" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f2b94ebe159 code=0x7ffc0000 [ 1642.725930][ T36] audit: type=1326 audit(2000000502.592:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14742 comm="syz.9.1425" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b94ebe159 code=0x7ffc0000 [ 1642.726178][ T36] audit: type=1326 audit(2000000502.592:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14742 comm="syz.9.1425" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b94ebe159 code=0x7ffc0000 [ 1642.726482][ T36] audit: type=1326 audit(2000000502.592:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14742 comm="syz.9.1425" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b94ebe159 code=0x7ffc0000 [ 1642.726624][ T36] audit: type=1326 audit(2000000502.602:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14742 comm="syz.9.1425" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b94ebe159 code=0x7ffc0000 [ 1642.726843][ T36] audit: type=1326 audit(2000000502.602:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14742 comm="syz.9.1425" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b94ebe159 code=0x7ffc0000 [ 1642.727087][ T36] audit: type=1326 audit(2000000502.612:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14742 comm="syz.9.1425" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2b94e7e98e code=0x7ffc0000 [ 1642.727412][ T36] audit: type=1326 audit(2000000502.612:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14742 comm="syz.9.1425" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2b94e7e98e code=0x7ffc0000 [ 1643.651055][ T5701] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1643.652142][ T5701] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.652190][ T5701] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1643.652214][ T5701] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1643.654276][ T5701] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.654302][ T5701] usb 7-1: Product: syz [ 1643.654317][ T5701] usb 7-1: Manufacturer: syz [ 1643.654331][ T5701] usb 7-1: SerialNumber: syz [ 1643.725587][ T5701] usb 7-1: config 0 descriptor?? [ 1643.726706][T14737] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1643.784517][ T5701] port100 7-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1644.157975][ T5954] usb 7-1: USB disconnect, device number 14 [ 1644.388543][T14762] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11964] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[14762] [ 1645.209369][T14491] Bluetooth: Frame is too long (len 16, expected len 4) [ 1649.847638][T14792] 9p: Bad value for 'rfdno' [ 1652.096966][T14800] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1657.354472][ T5593] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1657.404609][ T5593] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1657.435570][ T5593] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1657.439812][ T5593] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1657.441751][ T5593] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1660.089035][T14491] Bluetooth: hci2: command tx timeout [ 1661.272175][ T5896] hsr_slave_0: left promiscuous mode [ 1661.329518][T14881] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[13661] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[14881] [ 1664.454899][ T5896] hsr_slave_1: left promiscuous mode [ 1664.456244][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1664.456973][T14491] Bluetooth: hci2: command tx timeout [ 1664.876008][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1667.157521][T14491] Bluetooth: hci2: command tx timeout [ 1667.675192][ T5896] hsr_slave_0: left promiscuous mode [ 1667.724100][ T5896] hsr_slave_1: left promiscuous mode [ 1667.725331][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1667.725358][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1667.774606][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1667.774763][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1667.932942][ T5896] veth1_macvtap: left promiscuous mode [ 1667.933706][ T5896] veth0_macvtap: left promiscuous mode [ 1667.935636][ T5896] veth1_vlan: left promiscuous mode [ 1667.937028][ T5896] veth0_vlan: left promiscuous mode [ 1669.402090][T14491] Bluetooth: hci2: command tx timeout [ 1671.318001][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 1671.636535][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 1672.361511][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 1672.400168][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 1672.625830][T14888] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1673.761431][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 1673.761454][ T36] audit: type=1326 audit(2000000533.812:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14928 comm="syz.6.1452" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1673.761499][ T36] audit: type=1326 audit(2000000533.812:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14928 comm="syz.6.1452" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1673.761540][ T36] audit: type=1326 audit(2000000533.812:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14928 comm="syz.6.1452" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f63bdb6e98e code=0x7ffc0000 [ 1673.761587][ T36] audit: type=1326 audit(2000000533.812:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14928 comm="syz.6.1452" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1673.761625][ T36] audit: type=1326 audit(2000000533.812:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14928 comm="syz.6.1452" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1673.761665][ T36] audit: type=1326 audit(2000000533.812:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14928 comm="syz.6.1452" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1673.761706][ T36] audit: type=1326 audit(2000000533.812:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14928 comm="syz.6.1452" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1673.761755][ T36] audit: type=1326 audit(2000000533.812:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14928 comm="syz.6.1452" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1673.761796][ T36] audit: type=1326 audit(2000000533.812:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14928 comm="syz.6.1452" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1673.761837][ T36] audit: type=1326 audit(2000000533.812:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14928 comm="syz.6.1452" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1674.213299][T14935] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[13661] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[14935] [ 1677.056635][T14663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.056764][T14663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.056969][T14663] bridge_slave_0: entered allmulticast mode [ 1677.093601][T14663] bridge_slave_0: entered promiscuous mode [ 1677.125716][T14663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.125932][T14663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.126112][T14663] bridge_slave_1: entered allmulticast mode [ 1677.128787][T14663] bridge_slave_1: entered promiscuous mode [ 1677.202384][T14663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1677.205521][T14663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1677.279041][T14663] team0: Port device team_slave_0 added [ 1677.288469][T14663] team0: Port device team_slave_1 added [ 1677.343840][T14663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1677.343868][T14663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1677.343890][T14663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1677.462432][T14663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1677.462451][T14663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1677.462473][T14663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1683.021377][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1683.021451][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1683.114140][T14969] bond1 (unregistering): Released all slaves [ 1684.875245][T14832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1684.875317][T14832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.875468][T14832] bridge_slave_0: entered allmulticast mode [ 1684.878441][T14832] bridge_slave_0: entered promiscuous mode [ 1684.904999][T14832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1684.905079][T14832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1684.905224][T14832] bridge_slave_1: entered allmulticast mode [ 1684.908051][T14832] bridge_slave_1: entered promiscuous mode [ 1685.065479][T14832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1685.067906][T14832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1685.893986][T15013] overlay: Unknown parameter 'fsmagic' [ 1687.051978][ T5593] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1687.092627][ T5593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1687.121640][ T5593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1687.158880][ T5593] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1687.160170][ T5593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1688.251437][T15027] binder: 15023:15027 ioctl c0306201 0 returned -14 [ 1689.383322][T14832] team0: Port device team_slave_0 added [ 1689.391443][T14832] team0: Port device team_slave_1 added [ 1689.520220][T14832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1689.520240][T14832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1689.520267][T14832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1689.542350][T14832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1689.542370][T14832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1689.542398][T14832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1689.697468][T14491] Bluetooth: hci0: command tx timeout [ 1690.850804][T14832] hsr_slave_0: entered promiscuous mode [ 1690.914769][T14832] hsr_slave_1: entered promiscuous mode [ 1690.915600][T14832] debugfs: 'hsr0' already exists in 'hsr' [ 1690.915624][T14832] Cannot create hsr debugfs directory [ 1692.249606][T14491] Bluetooth: hci0: command tx timeout [ 1694.079499][T15077] kAFS: No cell specified [ 1694.329329][T14491] Bluetooth: hci0: command tx timeout [ 1696.559598][T14491] Bluetooth: hci0: command tx timeout [ 1697.283511][T15086] jffs2: notice: (15086) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1701.013679][T15103] hub 8-0:1.0: USB hub found [ 1701.031354][T15103] hub 8-0:1.0: 1 port detected [ 1706.250950][T15134] usb usb7: check_ctrlrecip: process 15134 (syz.6.1483) requesting ep 01 but needs 81 [ 1706.553335][T15135] PKCS7: Unknown OID: [98] 1.2.10824.113549.1.1.1 [ 1706.553426][T15135] Unsupported pkey algo: 106 [ 1707.028994][T15008] bridge0: port 1(bridge_slave_0) entered blocking state [ 1707.029135][T15008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1707.029590][T15008] bridge_slave_0: entered allmulticast mode [ 1707.037116][T15008] bridge_slave_0: entered promiscuous mode [ 1707.046000][T15008] bridge0: port 2(bridge_slave_1) entered blocking state [ 1707.046214][T15008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1707.046397][T15008] bridge_slave_1: entered allmulticast mode [ 1707.052494][T15008] bridge_slave_1: entered promiscuous mode [ 1707.274579][T15136] 9p: Bad value for 'rfdno' [ 1707.616028][T15008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1707.633662][T15008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1707.809601][T15008] team0: Port device team_slave_0 added [ 1707.819819][T15008] team0: Port device team_slave_1 added [ 1708.000063][T15008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1708.000083][T15008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1708.000119][T15008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1708.004067][T15008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1708.004086][T15008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1708.004109][T15008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1708.020966][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 1708.020983][ T36] audit: type=1326 audit(2000000568.082:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15141 comm="syz.9.1486" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b94ebe159 code=0x0 [ 1709.899226][T15152] input: syz0 as /devices/virtual/input/input14 [ 1711.047710][T15159] Bluetooth: MGMT ver 1.23 [ 1711.256022][T15161] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11964] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[15161] [ 1712.704212][ T5896] bridge_slave_1: left allmulticast mode [ 1712.704248][ T5896] bridge_slave_1: left promiscuous mode [ 1712.704846][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1712.940276][ T5896] bridge_slave_0: left allmulticast mode [ 1712.940304][ T5896] bridge_slave_0: left promiscuous mode [ 1712.940504][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1713.119352][T14491] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 1713.169529][T15176] jffs2: notice: (15176) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1713.681138][ T5593] Bluetooth: hci0: command 0x0c24 tx timeout [ 1714.184795][T15173] CIFS: Attempting to mount //127.0.0.1/share [ 1714.532291][T15173] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1714.532529][T15173] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1717.382203][ T5896] bridge_slave_1: left allmulticast mode [ 1717.382244][ T5896] bridge_slave_1: left promiscuous mode [ 1717.382485][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.116593][ T5593] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1719.197422][ T5593] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1719.241924][ T5593] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1719.244667][ T5593] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1719.245687][ T5593] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1720.998197][ T5896] bridge_slave_0: left allmulticast mode [ 1720.998237][ T5896] bridge_slave_0: left promiscuous mode [ 1720.998480][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.139444][ T5896] bridge_slave_1: left allmulticast mode [ 1721.139482][ T5896] bridge_slave_1: left promiscuous mode [ 1721.139742][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.231195][ T5896] bridge_slave_0: left allmulticast mode [ 1721.231235][ T5896] bridge_slave_0: left promiscuous mode [ 1721.231486][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.579977][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1721.660326][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1721.700747][ T5896] bond0 (unregistering): Released all slaves [ 1721.920020][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1721.980127][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1722.034550][ T5896] bond0 (unregistering): Released all slaves [ 1722.382061][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1722.614666][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1722.812972][T14491] Bluetooth: hci1: command tx timeout [ 1723.025351][ T5896] bond0 (unregistering): Released all slaves [ 1723.059048][T15195] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1723.308488][T15008] hsr_slave_0: entered promiscuous mode [ 1723.309832][T15008] hsr_slave_1: entered promiscuous mode [ 1723.310328][T15008] debugfs: 'hsr0' already exists in 'hsr' [ 1723.310346][T15008] Cannot create hsr debugfs directory [ 1724.235922][T15231] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[13661] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[15231] [ 1724.879353][T14491] Bluetooth: hci1: command tx timeout [ 1725.354684][T15242] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1502'. [ 1726.978132][T14491] Bluetooth: hci1: command tx timeout [ 1728.713247][T15250] NILFS (nullb0): couldn't find nilfs on the device [ 1729.041303][T14491] Bluetooth: hci1: command tx timeout [ 1729.294682][T10866] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 1729.628964][T10866] usb 10-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 1729.643697][T10866] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1729.644656][T10866] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1729.644677][T10866] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1729.644700][T10866] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.752596][T10866] usb 10-1: config 0 descriptor?? [ 1730.288680][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1730.337805][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1730.457085][T10866] asus 0003:0B05:1807.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 0b05:1807] on usb-dummy_hcd.9-1/input0 [ 1732.019450][ T5896] hsr_slave_0: left promiscuous mode [ 1732.070947][ T5896] hsr_slave_1: left promiscuous mode [ 1732.072255][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1732.137288][ T8744] usb 10-1: USB disconnect, device number 2 [ 1732.137491][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1733.239356][ T5896] hsr_slave_0: left promiscuous mode [ 1733.313700][ T5896] hsr_slave_1: left promiscuous mode [ 1733.314481][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1733.349877][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1733.538286][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 1733.611918][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 1734.657076][T15278] 9p: Bad value for 'rfdno' [ 1735.507825][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 1735.588636][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 1736.238650][T15290] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11964] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[15290] [ 1737.049223][T15295] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1512'. [ 1737.254548][ T36] audit: type=1326 audit(2000000597.062:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15292 comm="syz.6.1512" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1737.254813][ T36] audit: type=1326 audit(2000000597.072:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15292 comm="syz.6.1512" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1737.255050][ T36] audit: type=1326 audit(2000000597.072:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15292 comm="syz.6.1512" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1737.255322][ T36] audit: type=1326 audit(2000000597.072:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15292 comm="syz.6.1512" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1737.255480][ T36] audit: type=1326 audit(2000000597.072:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15292 comm="syz.6.1512" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1737.255694][ T36] audit: type=1326 audit(2000000597.072:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15292 comm="syz.6.1512" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1737.255911][ T36] audit: type=1326 audit(2000000597.082:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15292 comm="syz.6.1512" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bdbae159 code=0x7ffc0000 [ 1737.256240][ T36] audit: type=1326 audit(2000000597.082:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15292 comm="syz.6.1512" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f63bdb6e98e code=0x7ffc0000 [ 1737.256448][ T36] audit: type=1326 audit(2000000597.092:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15292 comm="syz.6.1512" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f63bdb6e98e code=0x7ffc0000 [ 1737.256675][ T36] audit: type=1326 audit(2000000597.092:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15292 comm="syz.6.1512" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f63bdb6e98e code=0x7ffc0000 [ 1738.086414][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 1738.572287][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 1739.103056][T15273] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1742.331556][T15326] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1517'. [ 1745.693145][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1745.693216][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1748.552710][ T5593] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1748.624452][ T5593] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1748.629064][ T5593] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1748.632793][ T5593] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1748.643864][ T5593] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1748.721513][T15367] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11964] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[15367] [ 1751.889348][T14491] Bluetooth: hci2: command tx timeout [ 1753.746979][T15399] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 1754.082408][T14491] Bluetooth: hci2: command tx timeout [ 1754.541650][T15199] bridge0: port 1(bridge_slave_0) entered blocking state [ 1754.541882][T15199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1754.542094][T15199] bridge_slave_0: entered allmulticast mode [ 1754.578564][T15199] bridge_slave_0: entered promiscuous mode [ 1754.608739][T15199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1754.613664][T15199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1754.616635][T15199] bridge_slave_1: entered allmulticast mode [ 1754.661216][T15199] bridge_slave_1: entered promiscuous mode [ 1754.872048][T15199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1754.912275][T15199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1755.075682][T15199] team0: Port device team_slave_0 added [ 1755.104883][T15199] team0: Port device team_slave_1 added [ 1755.393403][T15388] Driver unsupported XDP return value 0 on prog (id 117) dev N/A, expect packet loss! [ 1756.203155][T14491] Bluetooth: hci2: command tx timeout [ 1759.620831][T14491] Bluetooth: hci2: command tx timeout [ 1759.626715][T15199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1759.626734][T15199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1759.626756][T15199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1759.637525][T15199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1759.637542][T15199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1759.637568][T15199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1762.119664][T15445] tipc: Started in network mode [ 1762.119694][T15445] tipc: Node identity 4, cluster identity 4711 [ 1762.119701][T15445] tipc: Node number set to 4 [ 1762.717577][T15199] hsr_slave_0: entered promiscuous mode [ 1762.718675][T15199] hsr_slave_1: entered promiscuous mode [ 1769.888275][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 1769.888301][ T36] audit: type=1326 audit(2000000629.932:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15484 comm="syz.6.1541" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63bdbae159 code=0x0 [ 1773.724325][T15520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1773.741976][T15363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1773.742100][T15363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1773.742313][T15363] bridge_slave_0: entered allmulticast mode [ 1773.794270][T15363] bridge_slave_0: entered promiscuous mode [ 1773.821641][T15363] bridge0: port 2(bridge_slave_1) entered blocking state [ 1773.821863][T15363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.822076][T15363] bridge_slave_1: entered allmulticast mode [ 1773.825886][T15363] bridge_slave_1: entered promiscuous mode [ 1777.466280][T15548] FAULT_INJECTION: forcing a failure. [ 1777.466280][T15548] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1777.466313][T15548] CPU: 1 UID: 0 PID: 15548 Comm: syz.7.1549 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1777.466331][T15548] Tainted: [L]=SOFTLOCKUP [ 1777.466335][T15548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1777.466343][T15548] Call Trace: [ 1777.466348][T15548] [ 1777.466354][T15548] dump_stack_lvl+0xe8/0x150 [ 1777.466378][T15548] should_fail_ex+0x46b/0x600 [ 1777.466397][T15548] get_futex_key+0x1b4/0x1580 [ 1777.466424][T15548] ? __pfx_get_futex_key+0x10/0x10 [ 1777.466447][T15548] futex_wake+0x119/0x600 [ 1777.466463][T15548] ? rcu_is_watching+0x16/0xb0 [ 1777.466482][T15548] ? __pfx_futex_wake+0x10/0x10 [ 1777.466507][T15548] do_futex+0x458/0x4e0 [ 1777.466517][T15548] ? __asan_memcpy+0x40/0x70 [ 1777.466535][T15548] ? __pfx_do_futex+0x10/0x10 [ 1777.466546][T15548] ? lock_acquire+0x115/0x350 [ 1777.466563][T15548] __se_sys_futex+0x3a8/0x450 [ 1777.466578][T15548] ? __pfx___se_sys_futex+0x10/0x10 [ 1777.466588][T15548] ? fd_install+0x30f/0x3e0 [ 1777.466604][T15548] ? __x64_sys_futex+0x21/0xf0 [ 1777.466618][T15548] do_syscall_64+0x166/0x520 [ 1777.466630][T15548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1777.466641][T15548] ? clear_bhb_loop+0x70/0xc0 [ 1777.466656][T15548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1777.466668][T15548] RIP: 0033:0x7f0c77ace159 [ 1777.466679][T15548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1777.466690][T15548] RSP: 002b:00007f0c75d260e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1777.466703][T15548] RAX: ffffffffffffffda RBX: 00007f0c77d55fa8 RCX: 00007f0c77ace159 [ 1777.466711][T15548] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0c77d55fac [ 1777.466718][T15548] RBP: 00007f0c77d55fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1777.466726][T15548] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1777.466733][T15548] R13: 00007f0c77d56038 R14: 00007ffe389c06b0 R15: 00007ffe389c0798 [ 1777.466750][T15548] [ 1778.159571][T15363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1778.370421][T15363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1778.904390][T15563] F2FS-fs: Conflicting test_dummy_encryption options [ 1781.375656][ T5593] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1781.505751][ T5593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1781.520709][ T5593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1781.526173][ T5593] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1781.527005][ T5593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1783.460790][T15363] team0: Port device team_slave_0 added [ 1783.486546][T15363] team0: Port device team_slave_1 added [ 1784.898863][ T5593] Bluetooth: hci0: command tx timeout [ 1786.994458][ T5593] Bluetooth: hci0: command tx timeout [ 1789.039367][ T5593] Bluetooth: hci0: command tx timeout [ 1789.464959][T15363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1789.464979][T15363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1789.465006][T15363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1789.879519][T15363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1789.879541][T15363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1789.879569][T15363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1791.079674][T15363] hsr_slave_0: entered promiscuous mode [ 1791.084853][T15363] hsr_slave_1: entered promiscuous mode [ 1791.087914][T15363] debugfs: 'hsr0' already exists in 'hsr' [ 1791.087988][T15363] Cannot create hsr debugfs directory [ 1791.167946][ T5593] Bluetooth: hci0: command tx timeout [ 1792.859314][T12288] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1792.949668][ T43] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1793.019325][T12288] usb 10-1: Using ep0 maxpacket: 16 [ 1793.020282][T12288] usb 10-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 1793.022556][T12288] usb 10-1: config 0 has an invalid interface number: 66 but max is 0 [ 1793.022582][T12288] usb 10-1: config 0 has no interface number 0 [ 1793.022613][T12288] usb 10-1: config 0 interface 66 has no altsetting 0 [ 1793.072504][T12288] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.072533][T12288] usb 10-1: Product: syz [ 1793.072548][T12288] usb 10-1: Manufacturer: syz [ 1793.072562][T12288] usb 10-1: SerialNumber: syz [ 1793.109500][T12288] usb 10-1: config 0 descriptor?? [ 1793.111957][ T43] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1793.115511][ T43] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1793.116017][ T43] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1793.116047][ T43] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1793.116088][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.188821][ T43] cxacru 8-1:1.0: send of cm 0x91 failed (-71) [ 1795.223162][ T43] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1795.223299][ T43] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1797.373457][T15675] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 1798.421157][T12288] usb 10-1: selecting invalid altsetting 3 [ 1798.421207][T12288] comedi comedi4: could not set alternate setting 3 in high speed [ 1798.421225][T12288] usbduxsigma 10-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 1798.844214][T12288] usbduxsigma 10-1:0.66: probe with driver usbduxsigma failed with error -22 [ 1798.848441][ T43] cxacru 8-1:1.0: probe with driver cxacru failed with error -71 [ 1798.897275][T12288] usb 10-1: USB disconnect, device number 3 [ 1798.976165][ T43] usb 8-1: USB disconnect, device number 2 [ 1799.816235][T15678] autofs: Unknown parameter '00000000000000000000' [ 1800.555917][ T36] audit: type=1326 audit(2000000660.612:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15686 comm="syz.7.1569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c77ace159 code=0x0 [ 1803.086351][T15689] comedi comedi1: pc212e: a I/O base address must be specified [ 1804.592148][T15697] syzkaller1: tun_chr_ioctl cmd 35108 [ 1804.594859][T15699] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1805.809719][T15715] FAULT_INJECTION: forcing a failure. [ 1805.809719][T15715] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1805.809763][T15715] CPU: 0 UID: 0 PID: 15715 Comm: syz.6.1574 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1805.809791][T15715] Tainted: [L]=SOFTLOCKUP [ 1805.809799][T15715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1805.809812][T15715] Call Trace: [ 1805.809821][T15715] [ 1805.809831][T15715] dump_stack_lvl+0xe8/0x150 [ 1805.809867][T15715] should_fail_ex+0x46b/0x600 [ 1805.809907][T15715] get_futex_key+0x1b4/0x1580 [ 1805.809939][T15715] ? __pfx_number+0x10/0x10 [ 1805.810080][T15715] ? __pfx_get_futex_key+0x10/0x10 [ 1805.810112][T15715] ? vsnprintf+0xe42/0xef0 [ 1805.810146][T15715] futex_wait_setup+0x4a/0x590 [ 1805.810178][T15715] ? __futex_wait+0xe1/0x410 [ 1805.810208][T15715] __futex_wait+0x161/0x410 [ 1805.810238][T15715] ? __pfx___futex_wait+0x10/0x10 [ 1805.810267][T15715] ? __pfx_futex_wake_mark+0x10/0x10 [ 1805.810309][T15715] ? futex_hash+0x4e/0x2b0 [ 1805.810340][T15715] ? futex_hash+0x4e/0x2b0 [ 1805.810367][T15715] ? futex_hash+0x275/0x2b0 [ 1805.810403][T15715] futex_wait+0x121/0x390 [ 1805.810432][T15715] ? __pfx_futex_wait+0x10/0x10 [ 1805.810468][T15715] ? vfs_read+0x67f/0xa90 [ 1805.810500][T15715] do_futex+0x3e7/0x4e0 [ 1805.810527][T15715] ? __pfx_do_futex+0x10/0x10 [ 1805.810557][T15715] __se_sys_futex+0x3a8/0x450 [ 1805.810588][T15715] ? __x64_sys_pread64+0x1ff/0x230 [ 1805.810615][T15715] ? __pfx___se_sys_futex+0x10/0x10 [ 1805.810638][T15715] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1805.810671][T15715] ? __x64_sys_futex+0x21/0xf0 [ 1805.810697][T15715] do_syscall_64+0x166/0x520 [ 1805.810720][T15715] ? trace_irq_disable+0x3b/0x140 [ 1805.810748][T15715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1805.810771][T15715] ? clear_bhb_loop+0x70/0xc0 [ 1805.810795][T15715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1805.810816][T15715] RIP: 0033:0x7f63bdbae159 [ 1805.810838][T15715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1805.810857][T15715] RSP: 002b:00007f63bbe060e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1805.810881][T15715] RAX: ffffffffffffffda RBX: 00007f63bde35fa8 RCX: 00007f63bdbae159 [ 1805.810899][T15715] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f63bde35fa8 [ 1805.810913][T15715] RBP: 00007f63bde35fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1805.810927][T15715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1805.810940][T15715] R13: 00007f63bde36038 R14: 00007ffdef33b9a0 R15: 00007ffdef33ba88 [ 1805.810975][T15715] [ 1807.123240][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1807.123316][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1807.976689][ T5896] bridge_slave_1: left allmulticast mode [ 1807.976720][ T5896] bridge_slave_1: left promiscuous mode [ 1807.976900][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1808.210327][ T5896] bridge_slave_0: left allmulticast mode [ 1808.210356][ T5896] bridge_slave_0: left promiscuous mode [ 1808.210554][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1809.663557][ T5593] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1810.726679][T15755] input: syz0 as /devices/virtual/input/input17 [ 1811.693450][ T5593] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1811.722335][ T5593] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1812.772704][T15779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1812.829619][T15779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1813.003721][ T5896] bridge_slave_1: left allmulticast mode [ 1813.003772][ T5896] bridge_slave_1: left promiscuous mode [ 1813.004020][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1813.402648][ T5896] bridge_slave_0: left allmulticast mode [ 1813.402688][ T5896] bridge_slave_0: left promiscuous mode [ 1813.402925][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1815.953200][T14491] Bluetooth: hci1: command tx timeout [ 1816.660380][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1816.849946][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1817.456156][ T5896] bond0 (unregistering): Released all slaves [ 1817.840022][T15807] netlink: 'syz.6.1585': attribute type 25 has an invalid length. [ 1818.030474][ T8525] Bluetooth: hci1: command tx timeout [ 1818.059767][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1818.509976][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1818.951691][ T5896] bond0 (unregistering): Released all slaves [ 1818.984092][T15794] syzkaller1: tun_chr_ioctl cmd 35108 [ 1818.984754][T15795] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1819.270050][ T5248] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1819.556753][T15573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1819.557783][T15573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1819.558013][T15573] bridge_slave_0: entered allmulticast mode [ 1819.629099][T15573] bridge_slave_0: entered promiscuous mode [ 1820.103495][T14491] Bluetooth: hci1: command tx timeout [ 1822.720867][T14491] Bluetooth: hci1: command tx timeout [ 1825.083892][T15573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1825.085562][T15573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1825.085803][T15573] bridge_slave_1: entered allmulticast mode [ 1825.103838][T15573] bridge_slave_1: entered promiscuous mode [ 1826.101833][T15875] netlink: 'syz.7.1594': attribute type 25 has an invalid length. [ 1826.413680][ T5896] hsr_slave_0: left promiscuous mode [ 1826.885259][ T5896] hsr_slave_1: left promiscuous mode [ 1826.902377][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1828.163536][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1828.918875][ T5896] hsr_slave_0: left promiscuous mode [ 1828.949342][ T5896] hsr_slave_1: left promiscuous mode [ 1828.950579][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1829.340449][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1829.763861][T15915] netlink: 'syz.6.1604': attribute type 25 has an invalid length. [ 1829.967818][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 1830.020215][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 1830.629980][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 1830.692722][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 1830.830228][T15909] syzkaller1: tun_chr_ioctl cmd 35108 [ 1830.830927][T15911] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1831.118109][T15573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1831.238759][ T5248] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1832.021536][T15573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1833.498144][T15573] team0: Port device team_slave_0 added [ 1834.192551][T15573] team0: Port device team_slave_1 added [ 1834.330644][T15573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1834.330664][T15573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1834.330686][T15573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1834.960449][T15573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1834.960471][T15573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1834.960498][T15573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1836.194467][T15573] hsr_slave_0: entered promiscuous mode [ 1836.231409][T15573] hsr_slave_1: entered promiscuous mode [ 1836.248570][T15573] debugfs: 'hsr0' already exists in 'hsr' [ 1836.248647][T15573] Cannot create hsr debugfs directory [ 1838.112506][T15967] netlink: 'syz.9.1615': attribute type 1 has an invalid length. [ 1840.821945][T15987] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11964] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[15987] [ 1841.268350][ T8525] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1841.477726][ T8525] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1841.570594][ T8525] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1841.662943][ T8525] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1841.762919][ T8525] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1842.824191][T16000] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[9169] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[16000] [ 1842.987716][T14491] Bluetooth: Frame is too long (len 16, expected len 4) [ 1844.643793][T14491] Bluetooth: hci3: command tx timeout [ 1846.879318][T14491] Bluetooth: hci3: command tx timeout [ 1848.233951][T15752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1848.234050][T15752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1848.240571][T15752] bridge_slave_0: entered allmulticast mode [ 1848.248036][T15752] bridge_slave_0: entered promiscuous mode [ 1848.252360][T15752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1848.252487][T15752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1848.253674][T15752] bridge_slave_1: entered allmulticast mode [ 1848.256424][T15752] bridge_slave_1: entered promiscuous mode [ 1848.434011][T15752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1848.437811][T15752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1848.559725][T15752] team0: Port device team_slave_0 added [ 1848.576804][T15752] team0: Port device team_slave_1 added [ 1848.653830][T15752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1848.653850][T15752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1848.653875][T15752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1848.740200][T15752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1848.740220][T15752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1848.740248][T15752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1849.039619][T14491] Bluetooth: hci3: command tx timeout [ 1849.119678][ T5896] bridge_slave_1: left allmulticast mode [ 1849.119719][ T5896] bridge_slave_1: left promiscuous mode [ 1849.120203][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1849.684837][ T5896] bridge_slave_0: left allmulticast mode [ 1849.684875][ T5896] bridge_slave_0: left promiscuous mode [ 1849.685517][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1849.915572][T16072] kAFS: unable to lookup cell '.' [ 1850.237404][ T5896] bridge_slave_1: left allmulticast mode [ 1850.237502][ T5896] bridge_slave_1: left promiscuous mode [ 1850.339684][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1850.514711][ T5896] bridge_slave_0: left allmulticast mode [ 1850.515101][ T5896] bridge_slave_0: left promiscuous mode [ 1850.548963][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1851.119386][T14491] Bluetooth: hci3: command tx timeout [ 1851.250300][T16092] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11964] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[16092] [ 1851.326677][T14491] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 1852.269420][T16085] usb 1-1: USB disconnect, device number 3 [ 1853.823342][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1854.435658][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1854.524647][ T5896] bond0 (unregistering): Released all slaves [ 1856.242726][ T5599] Process accounting resumed [ 1858.598718][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1860.387342][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1860.692195][ T5896] bond0 (unregistering): Released all slaves [ 1862.045622][T15752] hsr_slave_0: entered promiscuous mode [ 1862.049046][T15752] hsr_slave_1: entered promiscuous mode [ 1862.063847][T15752] debugfs: 'hsr0' already exists in 'hsr' [ 1862.063876][T15752] Cannot create hsr debugfs directory [ 1862.589361][ T5896] hsr_slave_0: left promiscuous mode [ 1862.723214][T16172] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[9169] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[16172] [ 1862.870533][T14491] Bluetooth: Frame is too long (len 16, expected len 4) [ 1863.565788][ T5896] hsr_slave_1: left promiscuous mode [ 1863.566584][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1863.615386][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1864.238627][ T5896] hsr_slave_0: left promiscuous mode [ 1864.779377][ T5896] hsr_slave_1: left promiscuous mode [ 1864.808201][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1865.356006][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1866.464841][T16194] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 1867.106574][T16194] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 1867.132781][T16194] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 1867.134968][T16197] tcpci 0-0002: probe with driver tcpci failed with error -5 [ 1867.135345][T16197] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 1868.569870][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1868.569943][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1868.920914][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 1868.971240][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 1870.704093][T16222] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[13661] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[16222] [ 1870.788995][T14491] Bluetooth: Frame is too long (len 16, expected len 4) [ 1872.032873][ T8525] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1872.094244][ T8525] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1872.127816][ T8525] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1872.128910][ T8525] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1872.139331][ T8525] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1872.953643][T16235] netlink: 180 bytes leftover after parsing attributes in process `syz.9.1660'. [ 1872.954689][T16235] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1660'. [ 1874.325525][T14491] Bluetooth: hci0: command tx timeout [ 1874.341336][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 1874.460061][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 1876.399326][T14491] Bluetooth: hci0: command tx timeout [ 1878.055668][T16263] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[9169] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[16263] [ 1878.077987][T14491] Bluetooth: Frame is too long (len 16, expected len 4) [ 1878.549224][T14491] Bluetooth: hci0: command tx timeout [ 1880.008451][T16273] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1880.008512][T16273] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1880.933436][T14491] Bluetooth: hci0: command tx timeout [ 1882.210807][T15985] bridge0: port 1(bridge_slave_0) entered blocking state [ 1882.213341][T15985] bridge0: port 1(bridge_slave_0) entered disabled state [ 1882.213550][T15985] bridge_slave_0: entered allmulticast mode [ 1882.220811][T15985] bridge_slave_0: entered promiscuous mode [ 1882.227488][T15985] bridge0: port 2(bridge_slave_1) entered blocking state [ 1882.227699][T15985] bridge0: port 2(bridge_slave_1) entered disabled state [ 1882.227882][T15985] bridge_slave_1: entered allmulticast mode [ 1882.290293][T15985] bridge_slave_1: entered promiscuous mode [ 1883.083045][T16287] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[13661] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[16287] [ 1883.178022][T15985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1883.199799][T14491] Bluetooth: Frame is too long (len 16, expected len 4) [ 1883.383718][T15985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1883.591945][T15985] team0: Port device team_slave_0 added [ 1883.596400][T15985] team0: Port device team_slave_1 added [ 1884.006844][T15985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1884.006864][T15985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1884.006893][T15985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1884.236333][T15985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1884.236352][T15985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1884.236378][T15985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1884.825074][T15985] hsr_slave_0: entered promiscuous mode [ 1884.827967][T15985] hsr_slave_1: entered promiscuous mode [ 1891.184250][ T5896] bridge_slave_1: left allmulticast mode [ 1891.184277][ T5896] bridge_slave_1: left promiscuous mode [ 1891.184464][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1891.953940][ T5896] bridge_slave_0: left allmulticast mode [ 1891.954128][ T5896] bridge_slave_0: left promiscuous mode [ 1891.955316][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1893.443582][ T5896] bridge_slave_1: left allmulticast mode [ 1893.443619][ T5896] bridge_slave_1: left promiscuous mode [ 1893.443865][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1894.025219][ T5896] bridge_slave_0: left allmulticast mode [ 1894.025274][ T5896] bridge_slave_0: left promiscuous mode [ 1894.025521][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1894.045541][ T36] audit: type=1326 audit(2000000754.102:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16347 comm="syz.7.1683" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c77ace159 code=0x7ffc0000 [ 1894.048283][ T36] audit: type=1326 audit(2000000754.102:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16347 comm="syz.7.1683" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c77ace159 code=0x7ffc0000 [ 1894.048586][ T36] audit: type=1326 audit(2000000754.102:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16347 comm="syz.7.1683" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c77ace159 code=0x7ffc0000 [ 1894.052731][ T36] audit: type=1326 audit(2000000754.102:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16347 comm="syz.7.1683" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c77ace159 code=0x7ffc0000 [ 1894.053511][ T36] audit: type=1326 audit(2000000754.112:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16347 comm="syz.7.1683" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c77ace159 code=0x7ffc0000 [ 1894.053773][ T36] audit: type=1326 audit(2000000754.112:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16347 comm="syz.7.1683" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0c77ace159 code=0x7ffc0000 [ 1894.056830][ T36] audit: type=1326 audit(2000000754.112:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16347 comm="syz.7.1683" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c77ace159 code=0x7ffc0000 [ 1894.058669][ T36] audit: type=1326 audit(2000000754.112:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16347 comm="syz.7.1683" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c77ace159 code=0x7ffc0000 [ 1894.061722][ T36] audit: type=1326 audit(2000000754.122:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16347 comm="syz.7.1683" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0c77ace159 code=0x7ffc0000 [ 1894.062620][ T36] audit: type=1326 audit(2000000754.122:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16347 comm="syz.7.1683" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c77ace159 code=0x7ffc0000 [ 1894.331717][T16350] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[9169] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[16350] [ 1894.359266][T14491] Bluetooth: Frame is too long (len 16, expected len 4) [ 1898.736604][T16374] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1686'. [ 1899.019853][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1899.131491][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1899.261583][ T5896] bond0 (unregistering): Released all slaves [ 1902.003523][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1902.339751][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1902.413345][ T5896] bond0 (unregistering): Released all slaves [ 1905.617959][ T8525] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1905.665802][ T8525] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1905.796448][ T8525] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1905.887361][ T8525] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1905.913488][ T8525] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1906.152528][T16406] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1693'. [ 1906.424663][T16406] bridge_slave_1: left allmulticast mode [ 1906.424711][T16406] bridge_slave_1: left promiscuous mode [ 1906.424976][T16406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1907.776125][T16406] bridge_slave_0: left allmulticast mode [ 1907.776166][T16406] bridge_slave_0: left promiscuous mode [ 1907.786874][T16406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1908.437469][T14491] Bluetooth: hci1: command tx timeout [ 1910.639319][T14491] Bluetooth: hci1: command tx timeout [ 1910.841836][T16430] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[9169] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[16430] [ 1910.847062][T14491] Bluetooth: Frame is too long (len 16, expected len 4) [ 1912.719393][T14491] Bluetooth: hci1: command tx timeout [ 1914.442323][ T5896] hsr_slave_0: left promiscuous mode [ 1914.800160][T14491] Bluetooth: hci1: command tx timeout [ 1915.021774][ T5896] hsr_slave_1: left promiscuous mode [ 1915.099504][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1915.151891][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1920.021394][T16478] Bluetooth: MGMT ver 1.23 [ 1921.280709][ T5896] hsr_slave_0: left promiscuous mode [ 1921.865306][ T5896] hsr_slave_1: left promiscuous mode [ 1921.866947][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1921.905625][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1922.567452][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 1922.614193][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 1924.330808][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 1924.473274][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 1925.111599][T16516] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11964] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[16516] [ 1925.118672][T14491] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 1926.070398][T16226] bridge0: port 1(bridge_slave_0) entered blocking state [ 1926.070528][T16226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1926.070741][T16226] bridge_slave_0: entered allmulticast mode [ 1926.093257][T16226] bridge_slave_0: entered promiscuous mode [ 1926.101435][T16226] bridge0: port 2(bridge_slave_1) entered blocking state [ 1926.101559][T16226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1926.101757][T16226] bridge_slave_1: entered allmulticast mode [ 1926.118545][T16226] bridge_slave_1: entered promiscuous mode [ 1927.591273][T16522] 9pnet_virtio: no channels available for device syz [ 1927.731169][T16226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1927.813403][T16226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1930.142498][ T8525] Bluetooth: hci1: command 0x0405 tx timeout [ 1930.787369][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1930.788060][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1930.963549][T16226] team0: Port device team_slave_0 added [ 1931.021844][T16226] team0: Port device team_slave_1 added [ 1931.317607][T16226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1931.317628][T16226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1931.317652][T16226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1931.324898][T16226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1931.324915][T16226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1931.324937][T16226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1931.413947][T16226] hsr_slave_0: entered promiscuous mode [ 1931.415237][T16226] hsr_slave_1: entered promiscuous mode [ 1931.416141][T16226] debugfs: 'hsr0' already exists in 'hsr' [ 1931.416166][T16226] Cannot create hsr debugfs directory [ 1932.468165][T16398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1932.468305][T16398] bridge0: port 1(bridge_slave_0) entered disabled state [ 1932.468407][T16398] bridge_slave_0: entered allmulticast mode [ 1932.469840][T16398] bridge_slave_0: entered promiscuous mode [ 1932.472856][T16398] bridge0: port 2(bridge_slave_1) entered blocking state [ 1932.473372][T16398] bridge0: port 2(bridge_slave_1) entered disabled state [ 1932.473868][T16398] bridge_slave_1: entered allmulticast mode [ 1932.475286][T16398] bridge_slave_1: entered promiscuous mode [ 1932.593651][T16398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1932.597222][T16398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1932.638092][T16398] team0: Port device team_slave_0 added [ 1932.641259][T16398] team0: Port device team_slave_1 added [ 1932.740472][T16398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1932.740492][T16398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1932.740510][T16398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1932.741872][T16398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1932.741886][T16398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1932.741922][T16398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1932.869974][T16398] hsr_slave_0: entered promiscuous mode [ 1932.873185][T16398] hsr_slave_1: entered promiscuous mode [ 1932.874095][T16398] debugfs: 'hsr0' already exists in 'hsr' [ 1932.874119][T16398] Cannot create hsr debugfs directory [ 1933.838793][ T8525] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1934.868670][ T8525] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1934.886341][ T8525] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1934.895210][ T8525] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1935.415332][ T8525] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1938.360032][T14491] Bluetooth: hci0: command tx timeout [ 1940.558303][T14491] Bluetooth: hci0: command tx timeout [ 1941.195055][T16592] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[9169] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[16592] [ 1941.205539][T14491] Bluetooth: Frame is too long (len 16, expected len 4) [ 1941.393255][T16594] Bluetooth: MGMT ver 1.23 [ 1941.399460][ T5896] bridge_slave_1: left allmulticast mode [ 1941.399498][ T5896] bridge_slave_1: left promiscuous mode [ 1941.423087][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1941.577604][ T5896] bridge_slave_0: left allmulticast mode [ 1941.577644][ T5896] bridge_slave_0: left promiscuous mode [ 1941.578029][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1942.866049][T14491] Bluetooth: hci0: command tx timeout [ 1943.063331][ T5896] bridge_slave_1: left allmulticast mode [ 1943.063381][ T5896] bridge_slave_1: left promiscuous mode [ 1943.064878][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1945.006835][T14491] Bluetooth: hci0: command tx timeout [ 1945.037324][ T4914] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1945.204251][ T4914] usb 8-1: Using ep0 maxpacket: 8 [ 1945.206298][ T4914] usb 8-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1945.222635][ T4914] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1945.237791][ T5896] bridge_slave_0: left allmulticast mode [ 1945.237830][ T5896] bridge_slave_0: left promiscuous mode [ 1945.238067][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1945.285581][ T4914] usb 8-1: config 0 descriptor?? [ 1945.302227][ T4914] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 1946.839586][ T4914] cxusb: set interface failed [ 1946.840314][ T4914] dvb-usb: bulk message failed: -22 (1/0) [ 1947.206741][ T4914] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1947.218776][ T4914] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 1947.218840][ T4914] usb 8-1: media controller created [ 1947.267062][ T4914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1947.443525][ T4914] DVB: Unable to find symbol lgdt330x_attach() [ 1947.443543][ T4914] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 1947.444411][ T4914] dvb-usb: bulk message failed: -22 (1/0) [ 1947.444433][ T4914] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 1947.492644][ T4914] usb 8-1: USB disconnect, device number 3 [ 1947.628699][ T4914] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 1948.587300][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1948.893742][T16638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1949.592289][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1949.715106][ T5896] bond0 (unregistering): Released all slaves [ 1950.908961][T16646] sctp: [Deprecated]: syz.9.1740 (pid 16646) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1950.908961][T16646] Use struct sctp_sack_info instead [ 1952.037757][T16658] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[13661] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[16658] [ 1952.051651][T14491] Bluetooth: Frame is too long (len 16, expected len 4) [ 1952.192786][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1953.346605][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1953.430893][ T5896] bond0 (unregistering): Released all slaves [ 1957.637803][ T5896] hsr_slave_0: left promiscuous mode [ 1957.709782][ T5896] hsr_slave_1: left promiscuous mode [ 1957.711122][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1959.006760][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1959.117224][ T5896] hsr_slave_0: left promiscuous mode [ 1960.625662][ T5896] hsr_slave_1: left promiscuous mode [ 1960.626892][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1960.665044][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1961.480179][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 1963.276017][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 1965.494946][T16725] FAULT_INJECTION: forcing a failure. [ 1965.494946][T16725] name failslab, interval 1, probability 1, space 0, times 0 [ 1965.495064][T16725] CPU: 1 UID: 0 PID: 16725 Comm: syz.9.1760 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1965.495097][T16725] Tainted: [L]=SOFTLOCKUP [ 1965.495105][T16725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1965.495119][T16725] Call Trace: [ 1965.495128][T16725] [ 1965.495138][T16725] dump_stack_lvl+0xe8/0x150 [ 1965.495177][T16725] should_fail_ex+0x46b/0x600 [ 1965.495214][T16725] should_failslab+0xa8/0x100 [ 1965.495237][T16725] __kmalloc_cache_noprof+0xa1/0x680 [ 1965.495276][T16725] ? netstat_seq_show+0x10d/0xe50 [ 1965.495306][T16725] ? netstat_seq_show+0x10d/0xe50 [ 1965.495337][T16725] ? seq_write+0xd8/0x140 [ 1965.495362][T16725] netstat_seq_show+0x10d/0xe50 [ 1965.495396][T16725] ? seq_read_iter+0x1eb/0xcb0 [ 1965.495425][T16725] ? seq_read_iter+0x1eb/0xcb0 [ 1965.495463][T16725] seq_read_iter+0x464/0xcb0 [ 1965.495509][T16725] seq_read+0x36a/0x490 [ 1965.495549][T16725] ? __pfx_seq_read+0x10/0x10 [ 1965.495598][T16725] ? __pfx_seq_read+0x10/0x10 [ 1965.495625][T16725] proc_reg_read+0x1f6/0x2f0 [ 1965.495658][T16725] ? __pfx_proc_reg_read+0x10/0x10 [ 1965.495688][T16725] vfs_read+0x219/0xa90 [ 1965.495717][T16725] ? preempt_schedule_thunk+0x16/0x40 [ 1965.495745][T16725] ? __pfx_vfs_read+0x10/0x10 [ 1965.495769][T16725] ? preempt_schedule_thunk+0x16/0x40 [ 1965.495800][T16725] ? _raw_spin_unlock_irqrestore+0x76/0x80 [ 1965.495824][T16725] ? mutex_lock_nested+0x152/0x1d0 [ 1965.495851][T16725] ? fdget_pos+0x252/0x320 [ 1965.495883][T16725] ksys_read+0x156/0x270 [ 1965.495912][T16725] ? __pfx_ksys_read+0x10/0x10 [ 1965.495950][T16725] do_syscall_64+0x166/0x520 [ 1965.495973][T16725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1965.495995][T16725] ? clear_bhb_loop+0x70/0xc0 [ 1965.496022][T16725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1965.496043][T16725] RIP: 0033:0x7f2b94ebe159 [ 1965.496064][T16725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1965.496083][T16725] RSP: 002b:00007f2b930d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1965.496107][T16725] RAX: ffffffffffffffda RBX: 00007f2b95146180 RCX: 00007f2b94ebe159 [ 1965.496123][T16725] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000007 [ 1965.496138][T16725] RBP: 00007f2b94f5506b R08: 0000000000000000 R09: 0000000000000000 [ 1965.496151][T16725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1965.496164][T16725] R13: 00007f2b95146218 R14: 00007f2b95146180 R15: 00007ffcde8bf688 [ 1965.496200][T16725] [ 1968.494581][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 1968.674888][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 1969.396677][ T8525] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1969.503030][ T8525] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1969.515758][ T8525] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1969.541010][ T8525] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1969.544242][ T8525] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1972.683967][ T8525] Bluetooth: hci2: command tx timeout [ 1974.469975][T16763] netlink: 'syz.9.1769': attribute type 1 has an invalid length. [ 1974.853839][T14491] Bluetooth: hci2: command tx timeout [ 1977.092785][T14491] Bluetooth: hci2: command tx timeout [ 1980.713314][T14491] Bluetooth: hci2: command tx timeout [ 1984.980941][T16834] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[9169] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[16834] [ 1985.363434][T14491] Bluetooth: Frame is too long (len 16, expected len 4) [ 1986.158947][T16547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1986.159195][T16547] bridge0: port 1(bridge_slave_0) entered disabled state [ 1986.159323][T16547] bridge_slave_0: entered allmulticast mode [ 1986.160765][T16547] bridge_slave_0: entered promiscuous mode [ 1986.205169][T16547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1986.205264][T16547] bridge0: port 2(bridge_slave_1) entered disabled state [ 1986.205379][T16547] bridge_slave_1: entered allmulticast mode [ 1986.207958][T16547] bridge_slave_1: entered promiscuous mode [ 1986.499924][ T5599] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1987.479150][ T5599] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1987.479209][ T5599] usb 10-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=fb.7c [ 1987.480378][ T5599] usb 10-1: config 0 has an invalid interface number: 148 but max is 0 [ 1987.480404][ T5599] usb 10-1: config 0 has no interface number 0 [ 1987.480434][ T5599] usb 10-1: config 0 interface 148 has no altsetting 0 [ 1987.483053][ T5599] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1987.483078][ T5599] usb 10-1: Product: syz [ 1987.483093][ T5599] usb 10-1: Manufacturer: syz [ 1987.483108][ T5599] usb 10-1: SerialNumber: syz [ 1987.488694][ T5599] usb 10-1: config 0 descriptor?? [ 1988.023499][T16854] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1784'. [ 1990.874919][T16547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1990.923152][T16547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1990.923396][T16737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1990.923846][T16737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1990.924387][T16737] bridge_slave_0: entered allmulticast mode [ 1990.927094][T16737] bridge_slave_0: entered promiscuous mode [ 1990.994324][T16737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1990.994500][T16737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1990.994668][T16737] bridge_slave_1: entered allmulticast mode [ 1991.071535][T16737] bridge_slave_1: entered promiscuous mode [ 1992.431614][T16547] team0: Port device team_slave_0 added [ 1992.444374][ T5599] mos7840 10-1:0.148: required endpoints missing [ 1992.465739][ T5599] usb 10-1: USB disconnect, device number 4 [ 1992.565080][T16547] team0: Port device team_slave_1 added [ 1992.606184][T16737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1992.668198][T16737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1992.728569][T16547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1992.728589][T16547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1992.728615][T16547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1992.804987][T16547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1992.805008][T16547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1992.805036][T16547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1992.881127][T16737] team0: Port device team_slave_0 added [ 1992.902448][T16737] team0: Port device team_slave_1 added [ 1993.100233][T16547] hsr_slave_0: entered promiscuous mode [ 1993.108163][T16547] hsr_slave_1: entered promiscuous mode [ 1993.129305][T16737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1993.129322][T16737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1993.129367][T16737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1993.178324][T16737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1993.178344][T16737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1993.178372][T16737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1993.940542][T16737] hsr_slave_0: entered promiscuous mode [ 1993.941297][T16737] hsr_slave_1: entered promiscuous mode [ 1993.942230][T16737] debugfs: 'hsr0' already exists in 'hsr' [ 1993.942248][T16737] Cannot create hsr debugfs directory [ 1996.463452][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1996.463524][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 2001.335287][ T8525] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2001.416898][ T8525] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2001.426272][ T8525] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2001.445771][ T8525] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2001.446641][ T8525] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2002.389434][T16904] F2FS-fs: Conflicting test_dummy_encryption options [ 2003.862156][ T8525] Bluetooth: hci1: command tx timeout [ 2006.425296][ T8525] Bluetooth: hci1: command tx timeout [ 2006.562255][T16914] : renamed from bond_slave_0 (while UP) [ 2008.633800][ T8525] Bluetooth: hci1: command tx timeout [ 2010.272914][T16935] gadgetfs: bound to dummy_udc driver [ 2010.860361][ T8525] Bluetooth: hci1: command tx timeout [ 2011.264817][T16937] ================================================================== [ 2011.264837][T16937] BUG: KASAN: slab-use-after-free in mutex_lock_interruptible_nested+0x5a/0x1d0 [ 2011.264877][T16937] Read of size 1 at addr ffff888065fdd858 by task syz.7.1800/16937 [ 2011.264894][T16937] [ 2011.264909][T16937] CPU: 1 UID: 0 PID: 16937 Comm: syz.7.1800 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2011.264939][T16937] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2011.264947][T16937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2011.264959][T16937] Call Trace: [ 2011.264968][T16937] [ 2011.264977][T16937] dump_stack_lvl+0xe8/0x150 [ 2011.265008][T16937] print_address_description+0x55/0x1e0 [ 2011.265040][T16937] ? mutex_lock_interruptible_nested+0x5a/0x1d0 [ 2011.265068][T16937] print_report+0x58/0x70 [ 2011.265094][T16937] kasan_report+0x117/0x150 [ 2011.265115][T16937] ? mutex_lock_interruptible_nested+0x5a/0x1d0 [ 2011.265150][T16937] ? ep_open+0x4e/0x270 [ 2011.265216][T16937] __kasan_check_byte+0x2a/0x40 [ 2011.265236][T16937] lock_acquire+0x7d/0x350 [ 2011.265265][T16937] ? ep_open+0x4e/0x270 [ 2011.265286][T16937] ? ep_open+0x4e/0x270 [ 2011.265312][T16937] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 2011.265340][T16937] ? ep_open+0x4e/0x270 [ 2011.265361][T16937] ep_open+0x4e/0x270 [ 2011.265378][T16937] ? do_dentry_open+0x83a/0x1420 [ 2011.265410][T16937] ? __pfx_ep_open+0x10/0x10 [ 2011.265427][T16937] do_dentry_open+0x849/0x1420 [ 2011.265462][T16937] vfs_open+0x3b/0x350 [ 2011.265479][T16937] ? path_openat+0x142d/0x1d60 [ 2011.265506][T16937] path_openat+0x1448/0x1d60 [ 2011.265547][T16937] do_file_open+0x23e/0x4a0 [ 2011.265577][T16937] ? __pfx_do_file_open+0x10/0x10 [ 2011.265615][T16937] ? alloc_fd+0x654/0x6d0 [ 2011.265642][T16937] do_sys_openat2+0x115/0x200 [ 2011.265663][T16937] ? __pfx_do_sys_openat2+0x10/0x10 [ 2011.265690][T16937] __x64_sys_openat+0x138/0x170 [ 2011.265713][T16937] do_syscall_64+0x166/0x520 [ 2011.265734][T16937] ? trace_irq_disable+0x3b/0x140 [ 2011.265761][T16937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2011.265782][T16937] ? clear_bhb_loop+0x70/0xc0 [ 2011.265804][T16937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2011.265824][T16937] RIP: 0033:0x7f0c77ace159 [ 2011.265844][T16937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2011.265863][T16937] RSP: 002b:00007f0c75ce4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2011.265887][T16937] RAX: ffffffffffffffda RBX: 00007f0c77d56180 RCX: 00007f0c77ace159 [ 2011.265903][T16937] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 2011.265919][T16937] RBP: 00007f0c77b6506b R08: 0000000000000000 R09: 0000000000000000 [ 2011.265933][T16937] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2011.265946][T16937] R13: 00007f0c77d56218 R14: 00007f0c77d56180 R15: 00007ffe389c0798 [ 2011.265971][T16937] [ 2011.265979][T16937] [ 2011.265984][T16937] Allocated by task 16935: [ 2011.265995][T16937] kasan_save_track+0x3e/0x80 [ 2011.266023][T16937] __kasan_kmalloc+0x93/0xb0 [ 2011.266050][T16937] __kmalloc_cache_noprof+0x3d5/0x680 [ 2011.266077][T16937] gadgetfs_bind+0x27a/0xae0 [ 2011.266152][T16937] gadget_bind_driver+0x2ca/0x9e0 [ 2011.266243][T16937] really_probe+0x254/0xae0 [ 2011.266307][T16937] __driver_probe_device+0x1e8/0x360 [ 2011.266326][T16937] driver_probe_device+0x4f/0x240 [ 2011.266345][T16937] __driver_attach+0x339/0x600 [ 2011.266363][T16937] bus_for_each_dev+0x23e/0x2c0 [ 2011.266388][T16937] bus_add_driver+0x348/0x670 [ 2011.266411][T16937] driver_register+0x23a/0x320 [ 2011.266460][T16937] usb_gadget_register_driver_owner+0xf9/0x270 [ 2011.266487][T16937] dev_config+0xe4e/0x12c0 [ 2011.266512][T16937] vfs_write+0x29f/0xbb0 [ 2011.266533][T16937] ksys_write+0x156/0x270 [ 2011.266554][T16937] do_syscall_64+0x166/0x520 [ 2011.266572][T16937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2011.266591][T16937] [ 2011.266595][T16937] Freed by task 16935: [ 2011.266605][T16937] kasan_save_track+0x3e/0x80 [ 2011.266631][T16937] kasan_save_free_info+0x40/0x50 [ 2011.266653][T16937] __kasan_slab_free+0x5c/0x80 [ 2011.266679][T16937] kfree+0x1c5/0x6d0 [ 2011.266701][T16937] destroy_ep_files+0x29f/0x330 [ 2011.266717][T16937] gadgetfs_unbind+0x112/0x2c0 [ 2011.266744][T16937] gadget_unbind_driver+0x1cb/0x410 [ 2011.266769][T16937] device_release_driver_internal+0x48b/0x880 [ 2011.266789][T16937] driver_detach+0x1f3/0x2d0 [ 2011.266805][T16937] bus_remove_driver+0x229/0x320 [ 2011.266829][T16937] usb_gadget_unregister_driver+0x4e/0x70 [ 2011.266852][T16937] dev_release+0x86/0x210 [ 2011.266878][T16937] __fput+0x42a/0xa80 [ 2011.266894][T16937] task_work_run+0x1d9/0x270 [ 2011.266914][T16937] exit_to_user_mode_loop+0x204/0x770 [ 2011.266939][T16937] do_syscall_64+0x328/0x520 [ 2011.266957][T16937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2011.266976][T16937] [ 2011.266981][T16937] The buggy address belongs to the object at ffff888065fdd800 [ 2011.266981][T16937] which belongs to the cache kmalloc-512 of size 512 [ 2011.267000][T16937] The buggy address is located 88 bytes inside of [ 2011.267000][T16937] freed 512-byte region [ffff888065fdd800, ffff888065fdda00) [ 2011.267022][T16937] [ 2011.267027][T16937] The buggy address belongs to the physical page: [ 2011.267039][T16937] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x65fdc [ 2011.267059][T16937] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2011.267076][T16937] flags: 0x80000000000040(head|node=0|zone=1) [ 2011.267094][T16937] page_type: f5(slab) [ 2011.267113][T16937] raw: 0080000000000040 ffff88813ffbdc80 dead000000000100 dead000000000122 [ 2011.267131][T16937] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 2011.267150][T16937] head: 0080000000000040 ffff88813ffbdc80 dead000000000100 dead000000000122 [ 2011.267168][T16937] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 2011.267187][T16937] head: 0080000000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 2011.267205][T16937] head: 0000000000005116 0000000000000000 00000000ffffffff 0000000000000004 [ 2011.267216][T16937] page dumped because: kasan: bad access detected [ 2011.267237][T16937] page_owner tracks the page as allocated [ 2011.267246][T16937] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 69, tgid 69 (kworker/u8:5), ts 714401858834 [ 2011.267279][T16937] post_alloc_hook+0x1f9/0x250 [ 2011.267311][T16937] get_page_from_freelist+0x2591/0x2600 [ 2011.267341][T16937] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 2011.267370][T16937] allocate_slab+0x7d/0x620 [ 2011.267390][T16937] refill_objects+0x2d8/0x350 [ 2011.267411][T16937] __pcs_replace_empty_main+0x339/0x690 [ 2011.267432][T16937] __kmalloc_cache_noprof+0x46f/0x680 [ 2011.267459][T16937] batadv_forw_packet_alloc+0x178/0x370 [ 2011.267549][T16937] batadv_iv_ogm_queue_add+0x8a6/0xd80 [ 2011.267627][T16937] batadv_iv_ogm_schedule+0xade/0xf90 [ 2011.267655][T16937] batadv_iv_send_outstanding_bat_ogm_packet+0x622/0x740 [ 2011.267686][T16937] process_scheduled_works+0xc3d/0x1630 [ 2011.267711][T16937] worker_thread+0xa47/0xfb0 [ 2011.267736][T16937] kthread+0x38b/0x470 [ 2011.267753][T16937] ret_from_fork+0x514/0xb70 [ 2011.267770][T16937] ret_from_fork_asm+0x1a/0x30 [ 2011.267786][T16937] page last free pid 8744 tgid 8744 ts 709681099472 stack trace: [ 2011.267801][T16937] __free_frozen_pages+0xf8e/0x1070 [ 2011.267826][T16937] __slab_free+0x250/0x2a0 [ 2011.267852][T16937] qlist_free_all+0x99/0x100 [ 2011.267877][T16937] kasan_quarantine_reduce+0x148/0x160 [ 2011.267902][T16937] __kasan_slab_alloc+0x22/0x80 [ 2011.267929][T16937] __kmalloc_cache_noprof+0x353/0x680 [ 2011.267955][T16937] nsim_fib_event+0xf37/0xa3a0 [ 2011.268014][T16937] nsim_fib_event_work+0x26a/0x3e0 [ 2011.268043][T16937] process_scheduled_works+0xc3d/0x1630 [ 2011.268068][T16937] worker_thread+0xa47/0xfb0 [ 2011.268093][T16937] kthread+0x38b/0x470 [ 2011.268110][T16937] ret_from_fork+0x514/0xb70 [ 2011.268126][T16937] ret_from_fork_asm+0x1a/0x30 [ 2011.268143][T16937] [ 2011.268147][T16937] Memory state around the buggy address: [ 2011.268159][T16937] ffff888065fdd700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2011.268172][T16937] ffff888065fdd780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2011.268185][T16937] >ffff888065fdd800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2011.268195][T16937] ^ [ 2011.268207][T16937] ffff888065fdd880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2011.268219][T16937] ffff888065fdd900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2011.268230][T16937] ================================================================== [ 2011.268325][T16937] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2012.112868][T16937] CPU: 1 UID: 0 PID: 16937 Comm: syz.7.1800 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2012.124307][T16937] Tainted: [L]=SOFTLOCKUP [ 2012.128614][T16937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2012.138651][T16937] Call Trace: [ 2012.141944][T16937] [ 2012.144865][T16937] vpanic+0x56d/0xa60 [ 2012.148841][T16937] ? __pfx_vpanic+0x10/0x10 [ 2012.153357][T16937] ? __pfx___schedule+0x10/0x10 [ 2012.158216][T16937] panic+0xc5/0xd0 [ 2012.161929][T16937] ? __pfx_panic+0x10/0x10 [ 2012.166342][T16937] ? preempt_schedule_common+0x7f/0xd0 [ 2012.171895][T16937] ? mutex_lock_interruptible_nested+0x5a/0x1d0 [ 2012.178144][T16937] check_panic_on_warn+0x89/0xb0 [ 2012.183135][T16937] ? mutex_lock_interruptible_nested+0x5a/0x1d0 [ 2012.189374][T16937] end_report+0x73/0x170 [ 2012.193598][T16937] ? mutex_lock_interruptible_nested+0x5a/0x1d0 [ 2012.199822][T16937] kasan_report+0x128/0x150 [ 2012.204303][T16937] ? mutex_lock_interruptible_nested+0x5a/0x1d0 [ 2012.210533][T16937] ? ep_open+0x4e/0x270 [ 2012.214668][T16937] __kasan_check_byte+0x2a/0x40 [ 2012.219508][T16937] lock_acquire+0x7d/0x350 [ 2012.223925][T16937] ? ep_open+0x4e/0x270 [ 2012.228072][T16937] ? ep_open+0x4e/0x270 [ 2012.232216][T16937] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 2012.238378][T16937] ? ep_open+0x4e/0x270 [ 2012.242538][T16937] ep_open+0x4e/0x270 [ 2012.246500][T16937] ? do_dentry_open+0x83a/0x1420 [ 2012.251432][T16937] ? __pfx_ep_open+0x10/0x10 [ 2012.255999][T16937] do_dentry_open+0x849/0x1420 [ 2012.260752][T16937] vfs_open+0x3b/0x350 [ 2012.264805][T16937] ? path_openat+0x142d/0x1d60 [ 2012.269552][T16937] path_openat+0x1448/0x1d60 [ 2012.274135][T16937] do_file_open+0x23e/0x4a0 [ 2012.278663][T16937] ? __pfx_do_file_open+0x10/0x10 [ 2012.283680][T16937] ? alloc_fd+0x654/0x6d0 [ 2012.287993][T16937] do_sys_openat2+0x115/0x200 [ 2012.292655][T16937] ? __pfx_do_sys_openat2+0x10/0x10 [ 2012.297841][T16937] __x64_sys_openat+0x138/0x170 [ 2012.302707][T16937] do_syscall_64+0x166/0x520 [ 2012.307301][T16937] ? trace_irq_disable+0x3b/0x140 [ 2012.312336][T16937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2012.318397][T16937] ? clear_bhb_loop+0x70/0xc0 [ 2012.323057][T16937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2012.328956][T16937] RIP: 0033:0x7f0c77ace159 [ 2012.333354][T16937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2012.352942][T16937] RSP: 002b:00007f0c75ce4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2012.361341][T16937] RAX: ffffffffffffffda RBX: 00007f0c77d56180 RCX: 00007f0c77ace159 [ 2012.369296][T16937] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 2012.377258][T16937] RBP: 00007f0c77b6506b R08: 0000000000000000 R09: 0000000000000000 [ 2012.385231][T16937] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2012.393201][T16937] R13: 00007f0c77d56218 R14: 00007f0c77d56180 R15: 00007ffe389c0798 [ 2012.401186][T16937] [ 2012.404520][T16937] Kernel Offset: disabled [ 2012.408852][T16937] Rebooting in 86400 seconds..