last executing test programs: 8m57.728441892s ago: executing program 4 (id=51): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x9, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}, {0x0, 0x2}]}, @fwd={0x7}, @restrict={0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x30, 0x61, 0x2e]}}, 0x0, 0x5d}, 0x28) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r4], 0x3c}}, 0x0) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='naa.6001405c935d7912\n', 0x16) 8m57.084459288s ago: executing program 4 (id=56): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x9, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}, {0x0, 0x2}]}, @fwd={0x7}, @restrict={0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x30, 0x61, 0x2e]}}, 0x0, 0x5d}, 0x28) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r4], 0x3c}}, 0x0) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='naa.6001405c935d7912\n', 0x16) 8m56.174917309s ago: executing program 4 (id=57): dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpriority(0x0, 0x0) 8m54.513713554s ago: executing program 4 (id=61): socket$netlink(0x10, 0x3, 0xa) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$rds(r3, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0xa9}, 0x0, 0x0, 0x8000, 0x6, 0x84e, 0x2f5, 0x10, 0x10000000000712}}], 0x58}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x4040, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x10, 0x4, 0x0) 8m52.204150127s ago: executing program 4 (id=64): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x13, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000000101040000000014b16b4d97000010240001801400018008000100e000000108000200e00000010c0002800500010000000000040002800800074000000001"], 0x44}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20008820) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x4e24, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0xae26}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) fanotify_init(0x40, 0x80000) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xa880, 0x97) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 8m45.35459638s ago: executing program 4 (id=65): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303130045e2ba5d3187170908b873265e2303030302c757365725f69643d2b1a241405894446029c8a6b7407f1fd6037511a081a704008e7f0ad5dd29bc0fe8a5fb2e910e95df0be32454b8876ebd592fe946e09651eda141eceb1b7cb6c", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0xf955, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffa, 0x2, 0x7, 0x0, 0x2}, 0x12}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x0}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x8000, 0x20, 0xff, 0x4, {{0x6, 0x4, 0x2, 0x9, 0x18, 0x68, 0x0, 0x1, 0x4, 0x0, @multicast2, @empty, {[@ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000006c0)={@loopback, 0x0}, &(0x7f0000000700)=0x14) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) r11 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r11, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r12, 0xc0383e04, &(0x7f00000002c0)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{}]}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x7c, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x480c0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="ec000000210001000400000000000000e00000020000000000000000000000002001000000000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011007f000001000000000000000000000000fe880000000000000000000000000101fc020000000000000000000000000000e000000100000000000000000000000032000000020000217fdf188c638cb60002000000fe8000000000000000000000000000aa7f00000100000000000000000000000064010102000010000000000000000000fc0200000000000000000000000000003c0000000000000002000200"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) read$FUSE(r1, &(0x7f0000004280)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 8m39.557937842s ago: executing program 3 (id=78): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffea7) mkdir(0x0, 0xa5) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 8m32.653826034s ago: executing program 32 (id=65): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303130045e2ba5d3187170908b873265e2303030302c757365725f69643d2b1a241405894446029c8a6b7407f1fd6037511a081a704008e7f0ad5dd29bc0fe8a5fb2e910e95df0be32454b8876ebd592fe946e09651eda141eceb1b7cb6c", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0xf955, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffa, 0x2, 0x7, 0x0, 0x2}, 0x12}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x0}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x8000, 0x20, 0xff, 0x4, {{0x6, 0x4, 0x2, 0x9, 0x18, 0x68, 0x0, 0x1, 0x4, 0x0, @multicast2, @empty, {[@ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000006c0)={@loopback, 0x0}, &(0x7f0000000700)=0x14) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) r11 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r11, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r12, 0xc0383e04, &(0x7f00000002c0)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{}]}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x7c, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x480c0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="ec000000210001000400000000000000e00000020000000000000000000000002001000000000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011007f000001000000000000000000000000fe880000000000000000000000000101fc020000000000000000000000000000e000000100000000000000000000000032000000020000217fdf188c638cb60002000000fe8000000000000000000000000000aa7f00000100000000000000000000000064010102000010000000000000000000fc0200000000000000000000000000003c0000000000000002000200"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) read$FUSE(r1, &(0x7f0000004280)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 8m32.613958728s ago: executing program 3 (id=84): setns(0xc9, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000500)={0x2, @meta={0x4131434d, 0x720795a, 0xdeb7, 0x9d48, 0xff81512}}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) listen(r6, 0x0) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x802) socket$unix(0x1, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) 8m30.759478641s ago: executing program 3 (id=88): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x345) shmat(0x0, &(0x7f0000f4c000/0x2000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_clone(0x10080800, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x200a7a) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/connector\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socketpair(0x11, 0x2, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x100054, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2'}, 0x5b) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x40) 8m27.643518749s ago: executing program 3 (id=91): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r4, 0x0, 0x41) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) socket$inet6(0xa, 0x4, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000840), 0x0}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003b00010324bd7022ffdbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) 8m25.17134222s ago: executing program 3 (id=93): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000200), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xfc}, 0x2) 8m24.219575215s ago: executing program 3 (id=97): mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(0xffffffffffffffff, &(0x7f0000000700), 0x0) socket$inet(0x2, 0x1, 0x6) r3 = socket$inet(0x2, 0x1, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) 8m8.50545837s ago: executing program 33 (id=97): mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(0xffffffffffffffff, &(0x7f0000000700), 0x0) socket$inet(0x2, 0x1, 0x6) r3 = socket$inet(0x2, 0x1, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) 5m37.390163348s ago: executing program 5 (id=334): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file2\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003700)=@newchain={0x48, 0x64, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xc, 0x9}, {0x5, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xb}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0xb}}, @TCA_RATE={0x6, 0x5, {0xd4, 0x7}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="1f0000001300090468fe0700200000000000ff3f080000004801001000000000", 0x20}], 0x1) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff010000"], 0xe4}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x89fc, &(0x7f0000000340)={'bond0\x00', @random="00009e0c1100"}) semop(r3, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r3, &(0x7f0000000340)=[{0x2, 0x7f, 0x1800}, {0x1, 0xbbdb, 0x1000}, {0x1, 0x5}], 0x3) 5m36.551976988s ago: executing program 5 (id=337): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0xc0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x40000000000018e, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r4, 0x1, 0x0, &(0x7f0000004600), 0x0) 5m35.111595573s ago: executing program 5 (id=343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}], 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x883c05, &(0x7f0000000180)='\x00\x00\x00\x00l\xff\x0f\x00\x00\x7fa\xc3\xbc+\xcfPI4\\\x00\x00') r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0xc0803, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r2, 0x4b72, &(0x7f0000000080)={0x5, 0x7d, 0x8, 0xffffffff, 0xe, "00602100000000f60000000000000000000800"}) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) connect$vsock_stream(r1, &(0x7f0000000380)={0x28, 0x0, 0x2711, @hyper}, 0x10) bind$inet(r1, &(0x7f00000028c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x38}, 0x48) 5m33.65855398s ago: executing program 5 (id=346): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x1c0000000000) 5m25.740134471s ago: executing program 5 (id=357): setns(0xc9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1f2) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000080)=""/144) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') preadv(r4, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) io_uring_setup(0x7, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) connect$pppoe(r7, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa80008000300030000000800070005000000080001001000000006000200", @ANYRES16], 0x84}}, 0x20008040) 5m24.570116674s ago: executing program 5 (id=359): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) 5m8.86646655s ago: executing program 34 (id=359): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) 3m27.299562338s ago: executing program 1 (id=526): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x3, @local, 0x2}], 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x240480d6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/trace_options\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='bi', 0x2) close(r2) write(0xffffffffffffffff, &(0x7f00000001f8), 0x0) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) 3m23.124232665s ago: executing program 1 (id=528): mprotect(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b20, 0x0) setsockopt(r0, 0x0, 0xc, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) pipe2(0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}, {&(0x7f0000000100)}], 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x689aece2b491f820}, {0xffff, 0xffff}, {0xfff2, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x3}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x800) socket$inet6(0xa, 0x800000000000002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x800049, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7dc) r6 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x8c0, 0xa6) write(r6, &(0x7f0000000380)='100000', 0x6) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 3m21.920020147s ago: executing program 1 (id=532): signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_FP_MODE(0x42, 0x0) getrlimit(0xd, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000000940)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x20048054) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "140080", 0x48, 0x2f, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x0, [0x8]}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], ':('}, {0x8, 0x88be, 0x104, {{0x6, 0x1, 0x2c, 0x0, 0x1, 0x3, 0x7, 0xfb}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0x1, 0x3, 0x0, 0x2, 0x4, 0x9}, 0x2, {0x8, 0xc4, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x50, &(0x7f0000000080)={0x60, 0x0, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x7aa38fa0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r4, 0x4004550c, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0xffff8881f5c0a000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1, &(0x7f0000000340)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x7cb7}], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd7) 3m20.98810573s ago: executing program 1 (id=534): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24000800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r3, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000104}, 0x4008880) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000003060300000000000000000001000007090002fc73797a31000000000500010007"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x28880) open$dir(&(0x7f00000000c0)='./file0\x00', 0x8200, 0x14) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc0}}, 0x0}, 0x94) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x2d, 0x8000000, r5, 0x0) fcntl$lock(r4, 0x11, &(0x7f00000048c0)={0x0, 0x2, 0x1, 0x9f}) mkdirat(r4, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003"], 0x104}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 3m19.124022817s ago: executing program 1 (id=537): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x10800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getitimer(0x1, &(0x7f0000000040)) r2 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x40) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@userptr={0x10, 0x6, 0x4, 0x0, 0x0, {}, {0x1}, 0x1, 0x2, {&(0x7f0000401000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000001c0)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x38, [0xb, 0xc957, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0x8, 0x5, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0x5, 0x6, 0xc, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x5, 0x4, 0x3, 0x89d2, 0xc, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x7, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x6, 0x4, 0x7, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x7fffffff, 0x0, 0x84, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0x2, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x2000c, 0x8, 0x9, 0xb, 0x47, 0x60f6, 0xffffffff, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x3, 0x1], [0x7, 0x407, 0x8004, 0x6, 0xffffffff, 0x100, 0x80000001, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x30000, 0x3, 0x30f0, 0x7, 0xb, 0x5, 0x2, 0x0, 0x5a9c, 0x20000008, 0x4, 0x6d01, 0x9, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x5, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x7, 0x8c8, 0x2000af, 0xfffffffe, 0x1000, 0x7ff, 0x125, 0x4, 0x7, 0xfff, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb33, 0x7, 0x81, 0x8, 0x6, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x8007, 0x7, 0x8000003, 0x101, 0x10000, 0x4, 0x7ffc, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x10000018, 0x0, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0x1000, 0x10000, 0x1, 0x7e, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x4, 0xffffffff, 0x5, 0x49, 0xc, 0x30b1d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000280)=@multiplanar_fd={0x7, 0x1, 0x4, 0x4, 0x5, {0x77359400}, {0x1, 0x8, 0x65, 0xcf, 0x13, 0xff, "d4024221"}, 0x5, 0x4, {0x0}, 0x80000001}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r5, &(0x7f0000000100)='1\x00', 0x2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x8, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 3m17.366551989s ago: executing program 1 (id=539): setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1f2) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000080)=""/144) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') preadv(r4, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) io_uring_setup(0x7, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) connect$pppoe(r7, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa80008000300030000000800070005000000080001001000000006000200", @ANYRES16], 0x84}}, 0x20008040) 3m1.566953708s ago: executing program 35 (id=539): setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1f2) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000080)=""/144) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') preadv(r4, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) io_uring_setup(0x7, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) connect$pppoe(r7, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa80008000300030000000800070005000000080001001000000006000200", @ANYRES16], 0x84}}, 0x20008040) 1m24.347599301s ago: executing program 6 (id=708): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffea7) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unlink(&(0x7f0000000180)='./bus\x00') 1m20.881713763s ago: executing program 6 (id=713): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1m19.134599902s ago: executing program 6 (id=721): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000300)={0x1}) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000280)={0x1, 0x1, @start={0x9}}) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000200), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140), 0x2) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000340), 0x2000011a) recvmmsg$unix(r3, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000033240)=""/4096, 0x1800}], 0x1, 0x0, 0x100000}}], 0x1, 0x121, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xfc}, 0x2) 1m16.367067226s ago: executing program 6 (id=728): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x2710}, 0x0, 0x2002}], 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) 1m14.846870859s ago: executing program 6 (id=732): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1234, @loopback}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) ptrace$pokeuser(0x6, r3, 0x9, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) setns(0xc9, 0x0) r8 = socket(0x9, 0x2, 0x100002) connect$inet6(r8, &(0x7f0000000040)={0x2a, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x22}, 0x200}, 0x1c) close_range(r7, 0xffffffffffffffff, 0x0) 1m12.698596518s ago: executing program 6 (id=736): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r4, &(0x7f0000000040)="3c5c413ecd45036a2762bb626c65640a", 0x10) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) 56.681687419s ago: executing program 36 (id=736): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r4, &(0x7f0000000040)="3c5c413ecd45036a2762bb626c65640a", 0x10) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) 29.214295394s ago: executing program 8 (id=799): r0 = dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) getpriority(0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) shmctl$IPC_RMID(0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) fchmod(r4, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13, @ANYRES32, @ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.622804811s ago: executing program 8 (id=811): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x9, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}, {0x0, 0x2}]}, @fwd={0x7}, @restrict={0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x30, 0x61, 0x2e]}}, 0x0, 0x5d}, 0x28) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r4], 0x3c}}, 0x0) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='naa.6001405c935d7912\n', 0x16) 17.79224533s ago: executing program 8 (id=818): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) gettid() openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111, 0x6}}, 0x20) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x1e01, 0x90, [0x0, 0x0, 0x1e01, 0x1e01, 0xfffff9, 0x80000440], 0x0, 0x0, 0x0}, 0xe0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000b5f000/0x4000)=nil, 0x4000, 0x100000d, 0x2012, r3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) io_uring_enter(0xffffffffffffffff, 0x6515, 0xb162, 0x11, 0x0, 0x0) 11.163559564s ago: executing program 8 (id=823): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x48, r2, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x48}, 0x1, 0x620b}, 0x0) finit_module(r0, 0x0, 0x0) ioperm(0xd6, 0x9cb8, 0x40) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x0) epoll_pwait2(r5, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000300)) eventfd2(0x0, 0x0) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="307106092a864886f70d010702a0643062020101310f300d06097e86480165030402010500300b06092a864886f70d010701313f303d023014300f310d300b0603550403130454657374020101300d06096086481165030402010500300d06092a864886f70d010101050004", 0x6c, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fanotify_init(0x0, 0x0) getpid() syz_clone(0x20b84111, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0) 11.022514207s ago: executing program 0 (id=824): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x101f01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, 0x0, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b52, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 9.570481108s ago: executing program 0 (id=828): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x6375, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000001c0)={0x0, 0x6, {}, {0x0}, 0x5, 0x2}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast1, @in=@multicast1, 0x4e21, 0x5, 0x4e22, 0x0, 0xa, 0x0, 0x90, 0x32, r4, r5}, {0x1, 0x5, 0x80000001, 0x8, 0x1, 0x2, 0xffffffffffffffff, 0x6}, {0x2, 0x5, 0x8a, 0x5}, 0x28, 0x6e6bbb, 0x0, 0x1, 0x5, 0x3}, {{@in6=@empty, 0x4d2, 0x6c}, 0x0, @in6=@mcast1, 0x3500, 0x1, 0x0, 0x0, 0x8, 0x48670d80, 0xd}}, 0xe8) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) shutdown(0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r6, 0x4b71, &(0x7f00000017c0)={0x6, 0x46, 0x45, 0xb0e, 0x2, 0xae12}) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xbf, 0x6427, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x2, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x8000, 0x401, 0x200, 0x9, 0x7fff, 0x7fffffff, 0xa, 0x9, 0xffb, 0x8, 0xaf, 0x0, 0x10001fc, 0x0, 0x2]}) 8.29644688s ago: executing program 2 (id=831): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x614b, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0xfffffffb, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x12141, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) mknod$loop(0x0, 0x6000, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x10507e, 0xa6) fcntl$F_SET_RW_HINT(r4, 0x40c, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f0000000080)=0x6) 7.643485114s ago: executing program 9 (id=832): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 7.424114869s ago: executing program 0 (id=833): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setrlimit(0xe, &(0x7f0000000340)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_procfs$namespace(0x0, &(0x7f0000002040)='ns/cgroup\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r1, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xea8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) sendmsg$IPSET_CMD_SAVE(r3, 0x0, 0x48040) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0) r5 = fcntl$getown(r3, 0x9) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000040)={r5, 0x0, 0x6}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x80}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r6, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x5, 0x2, 0xa, 0x4, 0xe}, &(0x7f0000000500)=0x98) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 6.481789439s ago: executing program 9 (id=834): r0 = syz_open_dev$swradio(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x1, 0x4, 0x8}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) readv(r2, &(0x7f0000000700)=[{&(0x7f0000000400)=""/38, 0x26}], 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x1, 'veth1_to_hsr\x00', {}, 0x8}) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f000009a000/0x2000)=nil}) readv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000180)={[0xc000, 0xfec00000, 0x5000, 0x4], 0x1, 0x41, 0x90}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x2}], 0x1c) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3}}}, 0x84) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000580)={r2, r2, 0x1, 0xa0, &(0x7f0000000440)="268bfe6c7f85613e7d0b72997dcd53f7fe074ae14cce0486dee6a97c7baae7cfb037d0da24ba406b6f974387cfa904ed145020470139e2d0fed42581e0890a9ba1a1599962ef3097951934aeccee2df3dad60f9fe19673d57d75aca649e5008a1fa621cbdd236901b0e979e6e8b619862288515202a9b59f03fe65ea9a8b9ecadb42980ed2e01fba36b234500d63110f4d81358c197f83945c07c89256567696", 0x1, 0x3, 0x11b, 0x1, 0x9, 0x1, 0x7fff, 'syz1\x00'}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) 6.28846326s ago: executing program 8 (id=836): r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) listen(r0, 0xda8c) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 5.91127757s ago: executing program 0 (id=837): r0 = semget$private(0x0, 0x4000, 0x555) semtimedop(r0, &(0x7f0000000500)=[{0x2, 0x9, 0x2400}, {0x4, 0xffff, 0x800}], 0x2, 0x0) 5.465314141s ago: executing program 7 (id=838): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 4.944244933s ago: executing program 0 (id=839): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r4], 0x3c}}, 0x0) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='naa.6001405c935d7912\n', 0x16) 4.915089608s ago: executing program 7 (id=840): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x13, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20008820) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x4e24, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0xae26}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) fanotify_init(0x40, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@empty, 0x4e23, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@loopback, @in=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000200)='\f', 0x1}], 0x1) 4.731771247s ago: executing program 9 (id=841): syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x6, 0x10, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5}}}}}]}}, 0x0) prctl$PR_MCE_KILL(0x43724f53, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffde, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x55, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) 4.027335519s ago: executing program 7 (id=842): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1234, @loopback}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) setns(0xc9, 0x0) r8 = socket(0x9, 0x2, 0x100002) connect$inet6(r8, &(0x7f0000000040)={0x2a, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x22}, 0x200}, 0x1c) close_range(r7, 0xffffffffffffffff, 0x0) 2.626277022s ago: executing program 7 (id=843): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x6375, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000001c0)={0x0, 0x6, {}, {0x0}, 0x5, 0x2}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast1, @in=@multicast1, 0x4e21, 0x5, 0x4e22, 0x0, 0xa, 0x0, 0x90, 0x32, r4, r5}, {0x1, 0x5, 0x80000001, 0x8, 0x1, 0x2, 0xffffffffffffffff, 0x6}, {0x2, 0x5, 0x8a, 0x5}, 0x28, 0x6e6bbb, 0x0, 0x1, 0x5, 0x3}, {{@in6=@empty, 0x4d2, 0x6c}, 0x0, @in6=@mcast1, 0x3500, 0x1, 0x0, 0x0, 0x8, 0x48670d80, 0xd}}, 0xe8) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) shutdown(0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r6, 0x4b71, &(0x7f00000017c0)={0x6, 0x46, 0x45, 0xb0e, 0x2, 0xae12}) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xbf, 0x6427, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x2, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x8000, 0x401, 0x200, 0x9, 0x7fff, 0x7fffffff, 0xa, 0x9, 0xffb, 0x8, 0xaf, 0x0, 0x10001fc, 0x0, 0x2]}) 2.602632016s ago: executing program 0 (id=844): ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000280)={0x9}) syz_clone3(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) mlockall(0x7) write(r0, &(0x7f00000002c0)='0', 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x50) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) 2.340251878s ago: executing program 2 (id=845): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) symlink(0x0, &(0x7f0000000200)='./file0\x00') openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0xa0202, 0x0, 0x11}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs, 0x6e) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x28000, 0x0) write(r1, &(0x7f0000000140)="0e0412b60f0c0df0f2747782bb714a7661", 0xfdef) 2.046424714s ago: executing program 7 (id=846): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) 1.846050806s ago: executing program 8 (id=847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 1.580234819s ago: executing program 9 (id=848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a44000000060a0b0400000000000000000200000018000480140001800a0001007265646972000000040002800900010073797a30000000000900020073797a3200000000140000000c0a010200000000000000008c00000514000000110098c507ebcabf5901000000000000000000f500000a"], 0x80}}, 0x0) 1.579974928s ago: executing program 2 (id=849): r0 = semget$private(0x0, 0x4000, 0x555) semtimedop(r0, &(0x7f0000000500)=[{0x2, 0x9, 0x2400}, {0x4, 0xffff, 0x800}], 0x2, 0x0) 1.333022958s ago: executing program 9 (id=850): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000100)="2e9b3d0207e03dc45193dfb6c57596bc620acba32f", 0x15}, {&(0x7f0000000140)="00bcebb09848fdd85f23d12e50062af600", 0x11}], 0x1000000000000329) socket$nl_crypto(0x10, 0x3, 0x15) 1.242461982s ago: executing program 2 (id=851): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.020385578s ago: executing program 2 (id=852): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x13, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20008820) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x4e24, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0xae26}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) fanotify_init(0x40, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@empty, 0x4e23, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@loopback, @in=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000200)='\f', 0x1}], 0x1) 360.086292ms ago: executing program 2 (id=853): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0x138, 0x16, 0x633, 0x0, 0x7fffffff, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x2a}, {}, {0x5, 0x3, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0xa, 0x4, 0x18}, [@algo_crypt={0x48, 0x2, {{'lrw-serpent-avx2\x00'}}}]}, 0x138}}, 0x0) 176.39µs ago: executing program 9 (id=854): socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) timer_create(0x7, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000001180)=""/4107, 0x100b}], 0x1, 0x0, 0x0) 0s ago: executing program 7 (id=855): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x614b, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0xfffffffb, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x12141, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) mknod$loop(0x0, 0x6000, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x10507e, 0xa6) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000023c0)=0x1) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f0000000080)=0x6) kernel console output (not intermixed with test programs): to_bond: link becomes ready [ 180.505879][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.542088][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.621910][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.680306][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.814391][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.117441][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.331847][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.369004][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.611363][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.765481][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.417456][ T4194] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 182.471910][ T4750] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 182.617274][ T4750] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 182.768444][ T4750] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 182.797151][ T4194] usb 2-1: config 2 has an invalid interface number: 43 but max is 0 [ 182.846764][ T4194] usb 2-1: config 2 has no interface number 0 [ 182.854459][ T4194] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 182.908762][ T4750] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 182.997632][ T4194] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 183.084240][ T4194] usb 2-1: config 2 interface 43 has no altsetting 0 [ 183.327776][ T4194] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 183.367523][ T4194] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.446789][ T4194] usb 2-1: Product: syz [ 183.451884][ T4194] usb 2-1: Manufacturer: syz [ 183.506368][ T4194] usb 2-1: SerialNumber: syz [ 183.649254][ T4930] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 183.750083][ T4930] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 184.098862][ T4930] mmap: syz.1.151 (4930) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 184.317468][ T4930] netlink: 108 bytes leftover after parsing attributes in process `syz.1.151'. [ 184.406861][ T4942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.151'. [ 184.722786][ T4194] ums-usbat 2-1:2.43: USB Mass Storage device detected [ 184.843372][ T4194] ums-usbat 2-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 184.947377][ T4194] ums-usbat: probe of 2-1:2.43 failed with error 3 [ 184.997784][ T4750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.066927][ T4194] usb 2-1: USB disconnect, device number 2 [ 185.457297][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.488993][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.748321][ T4750] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.015254][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.057988][ T1106] Bluetooth: hci1: command 0x0409 tx timeout [ 186.093112][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.172741][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.181061][ T4284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.337438][ T4955] input: syz1 as /devices/virtual/input/input14 [ 186.352844][ T4937] chnl_net:caif_netlink_parms(): no params data found [ 186.427332][ T4956] netlink: 'syz.1.153': attribute type 1 has an invalid length. [ 186.454989][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.510106][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.648156][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.713370][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.721786][ T4284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.021068][ T4955] nvme_fabrics: missing parameter 'transport=%s' [ 187.047381][ T4955] nvme_fabrics: missing parameter 'nqn=%s' [ 187.069467][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.122746][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.244419][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.362355][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.465841][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.148324][ T4316] Bluetooth: hci1: command 0x041b tx timeout [ 188.361449][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.410341][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.547711][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.637167][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.767229][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.819399][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.885857][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.455577][ T4937] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.539140][ T4937] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.620138][ T4937] device bridge_slave_0 entered promiscuous mode [ 189.763674][ T4937] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.827334][ T4937] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.928927][ T4937] device bridge_slave_1 entered promiscuous mode [ 190.216964][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 191.066263][ T4937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.236178][ T4937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.274676][ T4263] Bluetooth: hci2: command 0x0406 tx timeout [ 191.487412][ T4263] Bluetooth: hci3: command 0x0406 tx timeout [ 191.533428][ T4263] Bluetooth: hci0: command 0x0406 tx timeout [ 192.117135][ T4937] team0: Port device team_slave_0 added [ 192.360935][ T4937] team0: Port device team_slave_1 added [ 192.547262][ T4263] Bluetooth: hci1: command 0x0419 tx timeout [ 192.661921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.697513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.958053][ T4937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.966176][ T4937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.309077][ T4937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.440346][ T4750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.557531][ T4937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.565832][ T4937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.823151][ T4937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.417423][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.424960][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.301269][ T4937] device hsr_slave_0 entered promiscuous mode [ 195.427460][ T4937] device hsr_slave_1 entered promiscuous mode [ 195.502277][ T4937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.603368][ T4937] Cannot create hsr debugfs directory [ 198.919713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 199.019372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 199.373862][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 199.409744][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 199.575527][ T4750] device veth0_vlan entered promiscuous mode [ 199.638345][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 199.672943][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 199.932083][ T4430] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.158746][ T4750] device veth1_vlan entered promiscuous mode [ 200.361126][ T4430] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.761301][ T4430] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.916068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.979476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 201.091055][ T4750] device veth0_macvtap entered promiscuous mode [ 201.543140][ T4430] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.801551][ T4750] device veth1_macvtap entered promiscuous mode [ 202.220768][ T4750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.379757][ T4750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.526670][ T4750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.706728][ T4750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.746707][ T4750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.796352][ T4750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.268453][ T4750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.297556][ T4750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.721320][ T4750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.688399][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 204.739123][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 204.795683][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 204.903796][ T4750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.017862][ T4750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.076124][ T4750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.135074][ T4750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.177052][ T4750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.237642][ T4750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.275519][ T4750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.353903][ T4750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.152289][ T4750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.296339][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 206.339594][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 208.523818][ T4430] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.527061][ T4366] Bluetooth: hci4: command 0x0409 tx timeout [ 220.004169][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 220.139166][ T5171] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 222.056909][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 224.670037][ T4229] Bluetooth: hci4: command 0x0419 tx timeout [ 225.317727][ T5125] chnl_net:caif_netlink_parms(): no params data found [ 225.472392][ T4937] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 225.552253][ T5186] fuse: Bad value for 'fd' [ 225.781443][ T4937] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 225.982370][ T4937] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 229.073898][ T4937] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 230.657485][ T5214] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 232.735936][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.767453][ T5125] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.830829][ T5125] device bridge_slave_0 entered promiscuous mode [ 232.948963][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.006900][ T5125] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.057396][ T5125] device bridge_slave_1 entered promiscuous mode [ 234.014421][ T5125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.251073][ T5125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.696499][ T5125] team0: Port device team_slave_0 added [ 234.753616][ T5125] team0: Port device team_slave_1 added [ 234.998636][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.056042][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.123783][ T5125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.181776][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.198164][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.368824][ T5125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.914980][ T4937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.909404][ T5236] netlink: 'syz.0.215': attribute type 1 has an invalid length. [ 237.925596][ T5125] device hsr_slave_0 entered promiscuous mode [ 237.956950][ T5125] device hsr_slave_1 entered promiscuous mode [ 238.025378][ T5125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.066924][ T5125] Cannot create hsr debugfs directory [ 238.540141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.551247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.596992][ T4937] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.881132][ T5244] fuse: Bad value for 'fd' [ 242.083315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.149477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.204334][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.212661][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.460490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.549065][ T4430] device hsr_slave_0 left promiscuous mode [ 243.770266][ T4430] device hsr_slave_1 left promiscuous mode [ 243.902494][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.977012][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.064824][ T4430] device bridge_slave_1 left promiscuous mode [ 244.103660][ T4430] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.201273][ T4430] device bridge_slave_0 left promiscuous mode [ 244.255939][ T4430] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.415425][ T4430] device hsr_slave_0 left promiscuous mode [ 244.488304][ T4430] device hsr_slave_1 left promiscuous mode [ 244.539385][ T4430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.598696][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.755461][ T4430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.775917][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.824277][ T4430] device bridge_slave_1 left promiscuous mode [ 244.874974][ T4430] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.938875][ T4430] device bridge_slave_0 left promiscuous mode [ 244.983502][ T4430] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.140015][ T4430] device veth1_macvtap left promiscuous mode [ 245.591212][ T4430] device veth0_macvtap left promiscuous mode [ 246.655806][ T4263] Bluetooth: hci5: command 0x0409 tx timeout [ 246.669568][ T4430] device veth1_vlan left promiscuous mode [ 246.702365][ T4430] device veth0_vlan left promiscuous mode [ 247.879929][ T4430] team0 (unregistering): Port device team_slave_1 removed [ 247.919996][ T4430] team0 (unregistering): Port device team_slave_0 removed [ 247.967125][ T4430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.006087][ T4430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.332630][ T4430] bond0 (unregistering): Released all slaves [ 248.620356][ T4430] team0 (unregistering): Port device team_slave_1 removed [ 248.639530][ T4430] team0 (unregistering): Port device team_slave_0 removed [ 248.664850][ T4430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.682995][ T4430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.697282][ T4262] Bluetooth: hci5: command 0x041b tx timeout [ 248.794783][ T4430] bond0 (unregistering): Released all slaves [ 250.811995][ T1106] Bluetooth: hci5: command 0x040f tx timeout [ 253.085864][ T4228] Bluetooth: hci5: command 0x0419 tx timeout [ 253.447599][ T5309] netlink: 'syz.1.233': attribute type 4 has an invalid length. [ 253.861045][ T5273] chnl_net:caif_netlink_parms(): no params data found [ 254.543874][ T5328] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 254.573466][ T5273] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.604171][ T5273] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.647969][ T5273] device bridge_slave_0 entered promiscuous mode [ 254.689985][ T5273] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.743307][ T5273] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.785664][ T5273] device bridge_slave_1 entered promiscuous mode [ 254.794204][ T5328] sg_write: data in/out 830976/136 bytes for SCSI command 0x0-- guessing data in; [ 254.794204][ T5328] program syz.1.239 not setting count and/or reply_len properly [ 254.941537][ T5273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.953372][ T5328] vivid-001: ================= START STATUS ================= [ 254.963365][ T5328] vivid-001: Test Pattern: 75% Colorbar [ 254.970374][ T5328] vivid-001: Fill Percentage of Frame: 100 [ 254.979352][ T5328] vivid-001: Horizontal Movement: No Movement [ 254.987451][ T5328] vivid-001: Vertical Movement: No Movement [ 254.995280][ T5328] vivid-001: OSD Text Mode: All [ 255.006354][ T5328] vivid-001: Show Border: false [ 255.022549][ T5273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.065410][ T5328] vivid-001: Show Square: false [ 255.086943][ T5328] vivid-001: Sensor Flipped Horizontally: false [ 255.140900][ T5125] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 255.155392][ T5328] vivid-001: Sensor Flipped Vertically: false [ 255.220568][ T5328] vivid-001: Insert SAV Code in Image: false [ 255.229415][ T5273] team0: Port device team_slave_0 added [ 255.236751][ T5328] vivid-001: Insert EAV Code in Image: false [ 255.242946][ T5125] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 255.256824][ T5328] vivid-001: Reduced Framerate: false [ 255.274271][ T5273] team0: Port device team_slave_1 added [ 255.287165][ T5328] vivid-001: Enable Capture Cropping: true [ 255.324738][ T5328] vivid-001: Enable Capture Composing: [ 255.350932][ T5125] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 255.378050][ T5328] true [ 255.380989][ T5328] vivid-001: Enable Capture Scaler: true [ 255.415959][ T5328] vivid-001: Timestamp Source: End of Frame [ 255.463546][ T5125] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 255.482330][ T5328] vivid-001: Colorspace: sRGB [ 255.498022][ T5273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.514931][ T5328] vivid-001: Transfer Function: Default [ 255.536697][ T5273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.598203][ T5328] vivid-001: Y'CbCr Encoding: Default [ 255.604930][ T5328] vivid-001: HSV Encoding: Hue 0-179 [ 255.663178][ T5328] vivid-001: Quantization: Default [ 255.693590][ T5273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.731737][ T5328] vivid-001: Apply Alpha To Red Only: false [ 255.743477][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.743570][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.771908][ T5273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.807243][ T5273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.834209][ T5328] vivid-001: Standard Aspect Ratio: 4x3 [ 255.842518][ T5339] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 255.867206][ T5328] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 255.886793][ T5328] vivid-001: DV Timings: 640x480p59 inactive [ 255.892878][ T5328] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 255.934911][ T5328] vivid-001: Maximum EDID Blocks: 2 [ 255.955474][ T5273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.979856][ T5328] vivid-001: Limited RGB Range (16-235): false [ 255.986098][ T5328] vivid-001: Rx RGB Quantization Range: Automatic [ 256.091744][ T5328] vivid-001: Power Present: 0x00000001 [ 256.132575][ T5328] tpg source WxH: 640x360 (Y'CbCr) [ 256.166108][ T5328] tpg field: 1 [ 256.174370][ T5328] tpg crop: 640x360@0x0 [ 256.191454][ T5328] tpg compose: 640x360@0x0 [ 256.196852][ T5328] tpg colorspace: 8 [ 256.214750][ T5328] tpg transfer function: 0/0 [ 256.228030][ T5328] tpg Y'CbCr encoding: 0/0 [ 256.232568][ T5328] tpg quantization: 0/0 [ 256.267720][ T5273] device hsr_slave_0 entered promiscuous mode [ 256.294286][ T5328] tpg RGB range: 0/2 [ 256.302245][ T5273] device hsr_slave_1 entered promiscuous mode [ 256.311229][ T5328] vivid-001: ================== END STATUS ================== [ 256.332606][ T5273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.361478][ T5273] Cannot create hsr debugfs directory [ 256.483749][ T5328] Trying to write to read-only block-device nullb0 [ 256.596738][ T5328] Trying to write to read-only block-device nullb0 [ 256.617693][ T5328] Trying to write to read-only block-device nullb0 [ 256.624351][ T5328] Trying to write to read-only block-device nullb0 [ 256.722390][ T5328] Trying to write to read-only block-device nullb0 [ 256.850923][ T5328] Trying to write to read-only block-device nullb0 [ 256.923126][ T5328] Trying to write to read-only block-device nullb0 [ 256.993938][ T5328] Trying to write to read-only block-device nullb0 [ 257.070190][ T5328] Trying to write to read-only block-device nullb0 [ 257.152449][ T5328] Trying to write to read-only block-device nullb0 [ 257.309122][ T5125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.617429][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.637507][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.679329][ T5125] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.706874][ T5357] netlink: 'syz.1.246': attribute type 4 has an invalid length. [ 257.764450][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.804737][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.866596][ T4769] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.873746][ T4769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.156797][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.209376][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.321492][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.407282][ T4769] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.414421][ T4769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.531463][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 258.623210][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.690696][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.752497][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.722020][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 259.820201][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.871202][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.921614][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.973887][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.027388][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.076978][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.420171][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.582146][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.596237][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.817985][ T5125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.514378][ T5413] FAULT_INJECTION: forcing a failure. [ 265.514378][ T5413] name failslab, interval 1, probability 0, space 0, times 1 [ 265.577015][ T5413] CPU: 0 PID: 5413 Comm: syz.2.258 Not tainted syzkaller #0 [ 265.584360][ T5413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 265.594497][ T5413] Call Trace: [ 265.597794][ T5413] [ 265.600739][ T5413] dump_stack_lvl+0x188/0x250 [ 265.605458][ T5413] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 265.611645][ T5413] ? show_regs_print_info+0x20/0x20 [ 265.616904][ T5413] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 265.623081][ T5413] should_fail+0x383/0x4b0 [ 265.627522][ T5413] should_failslab+0x5/0x20 [ 265.632082][ T5413] slab_pre_alloc_hook+0x51/0xc0 [ 265.637122][ T5413] ? __kernfs_new_node+0xe3/0x6b0 [ 265.642187][ T5413] kmem_cache_alloc+0x3d/0x280 [ 265.647111][ T5413] __kernfs_new_node+0xe3/0x6b0 [ 265.652003][ T5413] ? kernfs_new_node+0x250/0x250 [ 265.657060][ T5413] ? make_kgid+0x1c4/0x650 [ 265.661491][ T5413] ? from_kuid_munged+0x6e0/0x6e0 [ 265.666557][ T5413] kernfs_new_node+0x148/0x250 [ 265.671358][ T5413] kernfs_create_dir_ns+0x40/0x120 [ 265.676495][ T5413] sysfs_create_dir_ns+0x12c/0x290 [ 265.681936][ T5413] ? sysfs_warn_dup+0xa0/0xa0 [ 265.686656][ T5413] ? do_raw_spin_unlock+0x11d/0x230 [ 265.691872][ T5413] kobject_add_internal+0x5ba/0xcd0 [ 265.697087][ T5413] kobject_add+0x160/0x230 [ 265.701533][ T5413] ? kobject_init+0x1c0/0x1c0 [ 265.706240][ T5413] ? get_device_parent+0x288/0x3e0 [ 265.711389][ T5413] device_add+0x470/0x1050 [ 265.715826][ T5413] netdev_register_kobject+0x184/0x320 [ 265.721306][ T5413] register_netdevice+0x10e8/0x1720 [ 265.726555][ T5413] ? netif_stacked_transfer_operstate+0x200/0x200 [ 265.733077][ T5413] register_netdev+0x37/0x50 [ 265.737698][ T5413] loopback_net_init+0x71/0x140 [ 265.742624][ T5413] ops_init+0x360/0x5f0 [ 265.746996][ T5413] setup_net+0x39e/0xa10 [ 265.751318][ T5413] ? copy_net_ns+0x5b0/0x5b0 [ 265.755926][ T5413] ? copy_net_ns+0x324/0x5b0 [ 265.760615][ T5413] ? down_read_killable+0x1ce/0x340 [ 265.765926][ T5413] copy_net_ns+0x33e/0x5b0 [ 265.770471][ T5413] create_new_namespaces+0x3ce/0x700 [ 265.775785][ T5413] unshare_nsproxy_namespaces+0x116/0x160 [ 265.781525][ T5413] ksys_unshare+0x4f6/0x8e0 [ 265.786307][ T5413] ? __lock_acquire+0x7b50/0x7b50 [ 265.791398][ T5413] ? sighand_ctor+0x40/0x40 [ 265.795920][ T5413] ? lock_chain_count+0x20/0x20 [ 265.800882][ T5413] ? syscall_enter_from_user_mode+0x21/0x70 [ 265.806804][ T5413] __x64_sys_unshare+0x34/0x40 [ 265.811601][ T5413] do_syscall_64+0x4c/0xa0 [ 265.816028][ T5413] ? clear_bhb_loop+0x30/0x80 [ 265.820722][ T5413] ? clear_bhb_loop+0x30/0x80 [ 265.825441][ T5413] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 265.831404][ T5413] RIP: 0033:0x7fe5df3c9159 [ 265.835866][ T5413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.855543][ T5413] RSP: 002b:00007fe5dd621028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 265.863977][ T5413] RAX: ffffffffffffffda RBX: 00007fe5df650fa0 RCX: 00007fe5df3c9159 [ 265.872271][ T5413] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 265.880392][ T5413] RBP: 00007fe5df46006b R08: 0000000000000000 R09: 0000000000000000 [ 265.889057][ T5413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.897056][ T5413] R13: 00007fe5df651038 R14: 00007fe5df650fa0 R15: 00007fff3cf655b8 [ 265.905119][ T5413] [ 265.984858][ T5413] kobject_add_internal failed for lo (error: -12 parent: net) [ 266.111564][ T5273] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 266.196678][ T5273] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 266.359737][ T5273] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 266.491957][ T5273] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 267.462099][ T5273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.575920][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.645167][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.689858][ T5273] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.756038][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.768031][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.890293][ T4244] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.897503][ T4244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.281568][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.310675][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.360917][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.399974][ T4244] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.407347][ T4244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.476971][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.672136][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.702025][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 268.761907][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.807603][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 268.877226][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.926170][ T5273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 268.980052][ T5273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.093962][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.118855][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.158880][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.204329][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.245345][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.333188][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.477933][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.485643][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.622446][ T5273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.082228][ T5449] chnl_net:caif_netlink_parms(): no params data found [ 271.789368][ T4263] Bluetooth: hci1: command 0x0409 tx timeout [ 272.120189][ T5449] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.177427][ T5449] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.231252][ T5449] device bridge_slave_0 entered promiscuous mode [ 272.244816][ T5449] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.263785][ T5449] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.281513][ T5449] device bridge_slave_1 entered promiscuous mode [ 272.448225][ T5449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.537613][ T5449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.717141][ T5511] PKCS7: Unknown OID: [26] 3.6.840.1.101.3.4.2.1 [ 272.747298][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 272.756390][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.787359][ T5511] PKCS7: Unsupported SignerInfo version [ 273.002371][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.069766][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.118301][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.150609][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.215545][ T5273] device veth0_vlan entered promiscuous mode [ 273.235260][ T5449] team0: Port device team_slave_0 added [ 273.291804][ T5273] device veth1_vlan entered promiscuous mode [ 273.345318][ T5449] team0: Port device team_slave_1 added [ 273.491532][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 273.517616][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 273.557845][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.598358][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.644403][ T5273] device veth0_macvtap entered promiscuous mode [ 273.667188][ T5449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.685998][ T5449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.817063][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 273.864933][ T5449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.954234][ T5273] device veth1_macvtap entered promiscuous mode [ 273.998283][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 274.026872][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 274.057293][ T5449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.064302][ T5449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.204227][ T5449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.254718][ T5273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.376071][ T5273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.449361][ T5273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.460615][ T5273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.471758][ T5273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.483751][ T5273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.504527][ T5273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.525563][ T5273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.550112][ T5273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.719883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.741417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.870519][ T5273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.269125][ T5273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.330921][ T5273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.357207][ T5273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.368818][ T5273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.381157][ T5273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.413346][ T5273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.447259][ T5273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.467902][ T5273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.523287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 275.567270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 275.638138][ T5273] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.666350][ T5273] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.706792][ T5273] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.759625][ T5553] input: syz1 as /devices/virtual/input/input17 [ 275.776632][ T5273] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.862405][ T5449] device hsr_slave_0 entered promiscuous mode [ 275.869884][ T5553] netlink: 'syz.2.283': attribute type 1 has an invalid length. [ 275.897003][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 275.955861][ T5449] device hsr_slave_1 entered promiscuous mode [ 275.988048][ T5449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.016815][ T5449] Cannot create hsr debugfs directory [ 276.087490][ T5553] nvme_fabrics: missing parameter 'transport=%s' [ 276.096125][ T5553] nvme_fabrics: missing parameter 'nqn=%s' [ 276.927940][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.936091][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.041477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 277.060246][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.073465][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.115370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 277.621547][ T26] audit: type=1326 audit(1790984573.332:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5581 comm="syz.0.287" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7520539159 code=0x0 [ 278.108179][ T5522] Bluetooth: hci1: command 0x0419 tx timeout [ 282.075159][ T5618] input: syz1 as /devices/virtual/input/input18 [ 282.121849][ T5614] netlink: 'syz.5.295': attribute type 1 has an invalid length. [ 282.335556][ T5614] nvme_fabrics: missing parameter 'transport=%s' [ 282.343594][ T5614] nvme_fabrics: missing parameter 'nqn=%s' [ 282.443671][ T4430] device hsr_slave_0 left promiscuous mode [ 282.509912][ T4430] device hsr_slave_1 left promiscuous mode [ 282.536963][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.737426][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.370180][ T4430] device bridge_slave_1 left promiscuous mode [ 283.377018][ T4430] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.459961][ T4430] device bridge_slave_0 left promiscuous mode [ 283.466290][ T4430] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.539400][ T4430] device hsr_slave_0 left promiscuous mode [ 284.314014][ T4430] device hsr_slave_1 left promiscuous mode [ 284.336258][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.372735][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.391126][ T4430] device bridge_slave_1 left promiscuous mode [ 284.421126][ T4430] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.451784][ T4430] device bridge_slave_0 left promiscuous mode [ 284.480249][ T4430] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.531317][ T4430] device hsr_slave_0 left promiscuous mode [ 284.555110][ T4430] device hsr_slave_1 left promiscuous mode [ 284.579707][ T4430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.601967][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.700709][ T4430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.708383][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.786448][ T4430] device bridge_slave_1 left promiscuous mode [ 284.874367][ T4430] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.984917][ T4430] device bridge_slave_0 left promiscuous mode [ 285.014887][ T4430] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.164531][ T4430] device veth1_macvtap left promiscuous mode [ 286.563015][ T4430] device veth0_macvtap left promiscuous mode [ 286.588163][ T4430] device veth1_vlan left promiscuous mode [ 286.624642][ T4430] device veth0_vlan left promiscuous mode [ 286.871062][ T5665] input: syz1 as /devices/virtual/input/input19 [ 286.920237][ T5665] netlink: 'syz.2.308': attribute type 1 has an invalid length. [ 287.080931][ T5666] nvme_fabrics: missing parameter 'transport=%s' [ 287.107122][ T5666] nvme_fabrics: missing parameter 'nqn=%s' [ 287.834663][ T4430] team0 (unregistering): Port device team_slave_1 removed [ 287.916132][ T4430] team0 (unregistering): Port device team_slave_0 removed [ 287.957178][ T4430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.017539][ T4430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.332081][ T4430] bond0 (unregistering): Released all slaves [ 289.700852][ T4430] team0 (unregistering): Port device team_slave_1 removed [ 289.750379][ T4430] team0 (unregistering): Port device team_slave_0 removed [ 289.811448][ T4430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.860169][ T4430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.107398][ T4430] bond0 (unregistering): Released all slaves [ 291.011187][ T4430] team0 (unregistering): Port device team_slave_1 removed [ 291.086328][ T4430] team0 (unregistering): Port device team_slave_0 removed [ 291.131806][ T4430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.194334][ T4430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.430713][ T4430] bond0 (unregistering): Released all slaves [ 291.605520][ T5643] netlink: 'syz.1.301': attribute type 1 has an invalid length. [ 291.692501][ T5647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.301'. [ 291.725546][ T5676] netlink: 'syz.2.310': attribute type 4 has an invalid length. [ 292.051209][ T5449] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 292.678474][ T5449] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 292.943052][ T5449] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 293.052917][ T5449] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 293.461491][ T5710] input: syz1 as /devices/virtual/input/input20 [ 293.529380][ T5715] netlink: 'syz.5.318': attribute type 1 has an invalid length. [ 293.559130][ T5449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.642896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 293.721796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.774986][ T5449] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.814203][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 293.826128][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.994627][ T4405] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.003002][ T4405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.037733][ T5710] nvme_fabrics: missing parameter 'transport=%s' [ 294.872083][ T5710] nvme_fabrics: missing parameter 'nqn=%s' [ 294.912326][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 294.968873][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.023976][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.258024][ T4405] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.265491][ T4405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.218975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 296.255677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 296.295926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 296.355023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 296.466424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 296.517396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 296.615061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 296.656378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 296.695354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 296.736125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 296.789799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 297.442822][ T5768] netlink: 'syz.0.336': attribute type 1 has an invalid length. [ 297.868825][ T5785] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 298.613161][ T5741] netlink: 'syz.1.328': attribute type 4 has an invalid length. [ 304.801522][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 304.844975][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 304.946724][ T5449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.078043][ T5821] input: syz1 as /devices/virtual/input/input21 [ 305.084777][ T5822] netlink: 'syz.1.348': attribute type 1 has an invalid length. [ 305.196789][ T21] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 305.456764][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 305.576822][ T21] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.612647][ T21] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 305.632782][ T5821] nvme_fabrics: missing parameter 'transport=%s' [ 305.640076][ T5821] nvme_fabrics: missing parameter 'nqn=%s' [ 305.681784][ T21] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 305.736832][ T21] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 305.748436][ T5522] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 305.796744][ T21] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 305.826353][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.979286][ T21] hub 6-1:1.0: bad descriptor, ignoring hub [ 305.985758][ T21] hub: probe of 6-1:1.0 failed with error -5 [ 306.099823][ T21] cdc_wdm 6-1:1.0: skipping garbage [ 306.107054][ T5522] usb 3-1: config 0 has no interfaces? [ 306.146050][ T21] cdc_wdm 6-1:1.0: skipping garbage [ 306.851763][ T21] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 306.876956][ T5522] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 306.891953][ T21] cdc_wdm 6-1:1.0: Unknown control protocol [ 306.921916][ T5522] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.006648][ T5522] usb 3-1: Product: syz [ 307.020417][ T21] usb 6-1: USB disconnect, device number 2 [ 307.056762][ T5522] usb 3-1: Manufacturer: syz [ 307.259986][ T5522] usb 3-1: SerialNumber: syz [ 307.282561][ T5522] usb 3-1: config 0 descriptor?? [ 307.305202][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 307.329185][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 308.043719][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 308.072283][ T5522] usb 3-1: USB disconnect, device number 2 [ 308.098600][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 308.156117][ T5449] device veth0_vlan entered promiscuous mode [ 308.164239][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 308.211086][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 308.275902][ T5449] device veth1_vlan entered promiscuous mode [ 308.325149][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 308.474176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 308.523903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 309.135155][ T5449] device veth0_macvtap entered promiscuous mode [ 309.289997][ T5449] device veth1_macvtap entered promiscuous mode [ 309.338880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 309.365300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 309.454418][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.493520][ T5875] xt_hashlimit: size too large, truncated to 1048576 [ 309.566560][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.631898][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.183693][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.222919][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.271030][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.313951][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.361267][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.419928][ T5449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.499197][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 310.551751][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 310.759053][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.795572][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.901829][ T5893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.362'. [ 310.951836][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.110729][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.239207][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.259285][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.279672][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.337332][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.360099][ T5449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.391034][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 311.402968][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 311.430643][ T5449] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.484492][ T5449] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.506772][ T5449] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.526761][ T5449] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.619189][ T4405] rpcbind: server 127.0.0.1 not responding, timed out [ 314.880912][ T4405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.900996][ T4405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.093852][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 315.249440][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.271233][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.321110][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 317.239384][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.248364][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.676756][ T5942] input: syz1 as /devices/virtual/input/input22 [ 318.132162][ T5942] nvme_fabrics: missing parameter 'transport=%s' [ 318.139299][ T5942] nvme_fabrics: missing parameter 'nqn=%s' [ 324.997175][ T5978] fuse: Bad value for 'fd' [ 325.135424][ T5967] netlink: 'syz.6.374': attribute type 4 has an invalid length. [ 325.253692][ T4262] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 325.716804][ T4262] usb 2-1: config 2 has an invalid interface number: 43 but max is 0 [ 325.725430][ T4262] usb 2-1: config 2 has no interface number 0 [ 328.647581][ T4262] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 328.658233][ T4262] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 328.668866][ T4262] usb 2-1: config 2 interface 43 has no altsetting 0 [ 328.695646][ T5990] Zero length message leads to an empty skb [ 328.706806][ T4262] usb 2-1: string descriptor 0 read error: -71 [ 328.713207][ T4262] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 328.723492][ T4262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.060446][ T4262] usb 2-1: can't set config #2, error -71 [ 329.069029][ T4262] usb 2-1: USB disconnect, device number 3 [ 331.706170][ T6011] netlink: 64 bytes leftover after parsing attributes in process `syz.6.383'. [ 331.803491][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 331.943449][ T6000] chnl_net:caif_netlink_parms(): no params data found [ 332.475269][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.590850][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.737388][ T6000] device bridge_slave_0 entered promiscuous mode [ 332.767495][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.774634][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.922765][ T6000] device bridge_slave_1 entered promiscuous mode [ 334.023759][ T6000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.147484][ T6000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.343894][ T6000] team0: Port device team_slave_0 added [ 334.613349][ T6000] team0: Port device team_slave_1 added [ 334.827857][ T6034] netlink: 'syz.1.390': attribute type 4 has an invalid length. [ 334.916730][ T6000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.930492][ T6000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.137005][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 335.143555][ T6000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.010589][ T6000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.036693][ T6000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.193618][ T6000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.531056][ T6000] device hsr_slave_0 entered promiscuous mode [ 336.664857][ T6000] device hsr_slave_1 entered promiscuous mode [ 337.405709][ T4316] Bluetooth: hci4: command 0x040f tx timeout [ 341.135286][ T6059] netlink: 5188 bytes leftover after parsing attributes in process `syz.1.394'. [ 345.709957][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 346.818612][ T4405] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.105947][ T4405] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.292968][ T4405] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.570869][ T4405] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.644731][ T6085] netlink: 'syz.1.401': attribute type 4 has an invalid length. [ 348.165907][ T6000] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 348.237698][ T6000] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 348.388130][ T6000] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 348.422721][ T6000] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 351.007051][ T6119] netlink: 28 bytes leftover after parsing attributes in process `syz.2.407'. [ 354.856684][ T6000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.524071][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 356.549990][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 356.699923][ T6000] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.794146][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 360.849562][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 360.905375][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.912620][ T4284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.986017][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 361.188037][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 361.197387][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.204481][ T4284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.218787][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 361.250107][ T6166] netlink: 'syz.2.415': attribute type 4 has an invalid length. [ 361.898767][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 362.030926][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 362.163963][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 362.237166][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 362.345530][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 362.496005][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 362.654753][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 362.787050][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 362.916143][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 363.088512][ T6000] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.120610][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 363.166945][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 369.067620][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 369.075341][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 369.175475][ T4405] device hsr_slave_0 left promiscuous mode [ 369.209470][ T4405] device hsr_slave_1 left promiscuous mode [ 369.273810][ T4405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.319389][ T4405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.360589][ T4405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.665378][ T6237] autofs4:pid:6237:autofs_fill_super: called with bogus options [ 370.895924][ T4405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.000413][ T4405] device bridge_slave_1 left promiscuous mode [ 371.307304][ T4405] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.322293][ T4405] device bridge_slave_0 left promiscuous mode [ 371.366827][ T4405] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.401416][ T4405] device veth1_macvtap left promiscuous mode [ 371.433994][ T4405] device veth0_macvtap left promiscuous mode [ 371.458351][ T4405] device veth1_vlan left promiscuous mode [ 371.506596][ T4405] device veth0_vlan left promiscuous mode [ 371.751098][ T4232] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 372.157105][ T4232] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 372.166294][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.227801][ T4232] usb 2-1: config 0 descriptor?? [ 372.240621][ T4430] rpcbind: server 127.0.0.1 not responding, timed out [ 372.272399][ T5518] syz.1.274 (5518) used greatest stack depth: 19696 bytes left [ 372.666060][ T4405] team0 (unregistering): Port device team_slave_1 removed [ 373.139811][ T4232] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 373.148545][ T4232] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 373.183843][ T4405] team0 (unregistering): Port device team_slave_0 removed [ 373.186833][ T4232] [drm:udl_init] *ERROR* Selecting channel failed [ 373.224541][ T4405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.252383][ T4232] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 373.268401][ T4232] [drm] Initialized udl on minor 2 [ 373.284371][ T6257] fuse: Bad value for 'fd' [ 373.306753][ T4232] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 373.328336][ T4232] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 373.349458][ T4232] usb 2-1: USB disconnect, device number 4 [ 373.367090][ T5522] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 373.383748][ T4405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.399266][ T5522] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 373.416320][ T5522] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 373.587545][ T4405] bond0 (unregistering): Released all slaves [ 373.661296][ T6000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.677149][ T6245] netlink: 'syz.6.434': attribute type 4 has an invalid length. [ 376.929707][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 376.959177][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 377.083611][ T6000] device veth0_vlan entered promiscuous mode [ 377.127512][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 377.137087][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 378.631621][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.641123][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.917619][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 379.651035][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 381.303370][ T6000] device veth1_vlan entered promiscuous mode [ 381.578928][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 381.611931][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 381.673372][ T6000] device veth0_macvtap entered promiscuous mode [ 381.730804][ T6000] device veth1_macvtap entered promiscuous mode [ 382.621080][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 384.278041][ T6312] netlink: 'syz.1.449': attribute type 4 has an invalid length. [ 384.368711][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.178582][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.235290][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.306088][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.496629][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 386.446563][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.766585][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.796844][ T23] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 386.827624][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.840822][ T23] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 386.866613][ T23] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 386.877157][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.900443][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.919070][ T6000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.005498][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 387.065004][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 387.231922][ T5522] usb 3-1: USB disconnect, device number 3 [ 388.911984][ T6350] ptp ptp0: new virtual clock ptp1 [ 388.917496][ T6350] ptp ptp0: guarantee physical clock free running [ 389.340631][ T6375] No such timeout policy "syz1" [ 391.852989][ T21] Bluetooth: hci5: command 0x0409 tx timeout [ 392.316543][ T4228] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 392.374216][ T6362] chnl_net:caif_netlink_parms(): no params data found [ 392.736660][ T4228] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 392.766668][ T4228] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 392.804458][ T4228] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.841564][ T6362] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.850201][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.860473][ T6362] device bridge_slave_0 entered promiscuous mode [ 392.874326][ T6362] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.882996][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.895795][ T6362] device bridge_slave_1 entered promiscuous mode [ 393.022189][ T6362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.047607][ T6362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.088093][ T4228] usb 7-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 393.116891][ T4228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.164444][ T4228] usb 7-1: Product: syz [ 393.184683][ T6362] team0: Port device team_slave_0 added [ 393.187134][ T4228] usb 7-1: Manufacturer: syz [ 393.223554][ T6362] team0: Port device team_slave_1 added [ 393.229885][ T4228] usb 7-1: SerialNumber: syz [ 393.256976][ T6403] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 393.264251][ T6403] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 393.958069][ T4228] ims_pcu 7-1:1.1: Control endpoint is not INTERRUPT IN [ 394.018342][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.029935][ T4228] ims_pcu: probe of 7-1:1.1 failed with error -22 [ 394.072298][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.116770][ T5522] Bluetooth: hci5: command 0x041b tx timeout [ 394.265357][ T6362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.388555][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.395690][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.626500][ T6362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.806835][ T4228] usb 7-1: USB disconnect, device number 2 [ 394.980717][ T6362] device hsr_slave_0 entered promiscuous mode [ 395.027142][ T6362] device hsr_slave_1 entered promiscuous mode [ 395.069038][ T6362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.091352][ T6362] Cannot create hsr debugfs directory [ 395.201034][ T26] audit: type=1800 audit(1790984690.912:4): pid=6435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.477" name="bmaControls" dev="configfs" ino=41502 res=0 errno=0 [ 396.057201][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 396.155734][ T23] Bluetooth: hci5: command 0x040f tx timeout [ 398.549952][ T23] Bluetooth: hci5: command 0x0419 tx timeout [ 400.475592][ T6362] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 400.665716][ T6362] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 400.814712][ T6362] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 401.386092][ T6362] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 403.462596][ T6362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.481831][ T6362] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.743389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 403.972592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 405.566674][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 405.599476][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 405.643097][ T4769] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.651123][ T4769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.599699][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 407.808389][ T26] audit: type=1326 audit(1790984703.522:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.2.494" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5df3c9159 code=0x0 [ 407.835405][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 407.862505][ T4769] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.870027][ T4769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.972762][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 408.337690][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 408.387703][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 408.398280][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 408.409248][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 408.421443][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 408.460760][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 408.477583][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 408.541193][ T4405] device hsr_slave_0 left promiscuous mode [ 408.565275][ T4405] device hsr_slave_1 left promiscuous mode [ 408.582796][ T4405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.607168][ T4405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.640213][ T26] audit: type=1800 audit(1790984704.352:6): pid=6512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.499" name="bmaControls" dev="configfs" ino=41782 res=0 errno=0 [ 408.669929][ T4405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.698370][ T4405] device bridge_slave_1 left promiscuous mode [ 408.704758][ T4405] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.754590][ T4405] device bridge_slave_0 left promiscuous mode [ 408.790407][ T4405] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.834192][ T4405] device veth1_macvtap left promiscuous mode [ 408.854122][ T4405] device veth0_macvtap left promiscuous mode [ 408.899379][ T4405] device veth1_vlan left promiscuous mode [ 408.915511][ T4405] device veth0_vlan left promiscuous mode [ 409.009956][ T6518] netlink: 108 bytes leftover after parsing attributes in process `syz.0.502'. [ 409.062239][ T6519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.502'. [ 414.274807][ T4405] team0 (unregistering): Port device team_slave_1 removed [ 414.420464][ T4405] team0 (unregistering): Port device team_slave_0 removed [ 414.491003][ T4405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.523545][ T6535] netlink: 36 bytes leftover after parsing attributes in process `syz.6.506'. [ 414.567237][ T4405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.814214][ T4405] bond0 (unregistering): Released all slaves [ 414.943489][ T6362] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 414.977458][ T6362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 414.998272][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 415.008108][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 415.027786][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 415.047991][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 415.072080][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 415.512396][ T6546] syz.0.509 uses obsolete (PF_INET,SOCK_PACKET) [ 415.562557][ T26] audit: type=1326 audit(1790984711.272:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.2.508" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5df3c9159 code=0x0 [ 416.988237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 416.997737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 417.025369][ T6362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.392247][ T26] audit: type=1800 audit(1790984715.102:8): pid=6570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.514" name="bmaControls" dev="configfs" ino=41912 res=0 errno=0 [ 422.052952][ T6578] FAULT_INJECTION: forcing a failure. [ 422.052952][ T6578] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 422.068585][ T6578] CPU: 0 PID: 6578 Comm: syz.6.516 Not tainted syzkaller #0 [ 422.076027][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 422.086409][ T6578] Call Trace: [ 422.090018][ T6578] [ 422.092982][ T6578] dump_stack_lvl+0x188/0x250 [ 422.097833][ T6578] ? show_regs_print_info+0x20/0x20 [ 422.103100][ T6578] ? load_image+0x410/0x410 [ 422.107649][ T6578] ? __lock_acquire+0x7b50/0x7b50 [ 422.112748][ T6578] ? __lock_acquire+0x1305/0x7b50 [ 422.117919][ T6578] should_fail+0x383/0x4b0 [ 422.122592][ T6578] prepare_alloc_pages+0x1e3/0x5b0 [ 422.127767][ T6578] __alloc_pages+0x11b/0x480 [ 422.132417][ T6578] ? zone_statistics+0x170/0x170 [ 422.137400][ T6578] ? count_memcg_event_mm+0x324/0x370 [ 422.142781][ T6578] ? remove_device_exclusive_entry+0xac0/0xac0 [ 422.148960][ T6578] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 422.154959][ T6578] alloc_pages_vma+0x2bc/0x790 [ 422.159739][ T6578] handle_mm_fault+0x23be/0x4440 [ 422.164699][ T6578] ? get_page+0xe0/0xe0 [ 422.168964][ T6578] do_user_addr_fault+0x494/0xc90 [ 422.174013][ T6578] exc_page_fault+0x60/0x100 [ 422.178622][ T6578] ? clear_bhb_loop+0x30/0x80 [ 422.183349][ T6578] asm_exc_page_fault+0x22/0x30 [ 422.188346][ T6578] RIP: 0033:0x7f2eac87fa50 [ 422.192782][ T6578] Code: 76 13 00 89 c3 85 c0 0f 88 ad 07 00 00 83 f8 1d 0f 8f 9d 09 00 00 48 8d 3d ad 5f 1a 00 31 c0 41 bf 01 00 00 00 e8 70 ca fe ff 44 0f c1 3d a7 a8 4e 00 41 83 ff 05 7f 06 49 83 fc 1a 77 1b 48 [ 422.212421][ T6578] RSP: 002b:00007f2eaac0df60 EFLAGS: 00010202 [ 422.218513][ T6578] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000 [ 422.226510][ T6578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f2eaca259f0 [ 422.234533][ T6578] RBP: 00007f2eaca4f06b R08: 0000000000000000 R09: 0000000000000000 [ 422.242529][ T6578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000080 [ 422.250529][ T6578] R13: 00002000000000c0 R14: 0000000000000003 R15: 0000000000000001 [ 422.258977][ T6578] [ 422.281503][ T6578] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 422.546878][ T7] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 423.837087][ T7] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.851906][ T7] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 423.872680][ T7] usb 7-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 423.887720][ T13] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 424.337036][ T7] usb 7-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 424.366667][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.376059][ T7] usb 7-1: Product: syz [ 424.416286][ T7] usb 7-1: Manufacturer: syz [ 424.436958][ T7] usb 7-1: SerialNumber: syz [ 424.485953][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 424.498950][ T13] usb 3-1: config 2 has an invalid interface number: 43 but max is 0 [ 424.508633][ T13] usb 3-1: config 2 has no interface number 0 [ 424.515905][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 424.515930][ T13] usb 3-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 424.547091][ T13] usb 3-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 424.559667][ T13] usb 3-1: config 2 interface 43 has no altsetting 0 [ 424.645423][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 424.706034][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 424.727194][ T13] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 424.753645][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 424.813003][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 425.024666][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.034435][ T13] usb 3-1: Product: syz [ 425.039385][ T13] usb 3-1: Manufacturer: syz [ 425.045713][ T13] usb 3-1: SerialNumber: syz [ 425.078888][ T6362] device veth0_vlan entered promiscuous mode [ 425.145526][ T6362] device veth1_vlan entered promiscuous mode [ 425.167215][ T6590] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 425.175603][ T6590] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 425.283499][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 425.312609][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 425.398783][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 425.451349][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 425.472989][ T6589] netlink: 108 bytes leftover after parsing attributes in process `syz.2.518'. [ 425.510589][ T26] audit: type=1326 audit(1790984721.222:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.0.523" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7520539159 code=0x0 [ 425.515648][ T7] usb 7-1: USB disconnect, device number 3 [ 425.543703][ T6362] device veth0_macvtap entered promiscuous mode [ 425.562710][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 425.588559][ T6589] netlink: 20 bytes leftover after parsing attributes in process `syz.2.518'. [ 425.713129][ T6362] device veth1_macvtap entered promiscuous mode [ 425.965611][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.551899][ T6614] udevd[6614]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.160068][ T6633] i2c i2c-0: new_device: Missing parameters [ 428.357184][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.206225][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.429088][ T7] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 430.159182][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.556313][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.567453][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.574510][ T7] usb 7-1: config 0 has an invalid interface number: 81 but max is 0 [ 430.579940][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.597211][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.609123][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.632244][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.653339][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.668699][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.681522][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.703704][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.740831][ T13] ums-usbat 3-1:2.43: USB Mass Storage device detected [ 430.758487][ T7] usb 7-1: config 0 has no interface number 0 [ 430.799450][ T7] usb 7-1: too many endpoints for config 0 interface 81 altsetting 146: 215, using maximum allowed: 30 [ 430.821947][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.833366][ T13] ums-usbat 3-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 430.867152][ T7] usb 7-1: config 0 interface 81 altsetting 146 has 0 endpoint descriptors, different from the interface descriptor's value: 215 [ 430.884783][ T7] usb 7-1: config 0 interface 81 has no altsetting 0 [ 430.893207][ T7] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 430.903942][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.906754][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.930889][ T7] usb 7-1: config 0 descriptor?? [ 430.937352][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.950419][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.135332][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 431.165205][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 431.221969][ T13] ums-usbat: probe of 3-1:2.43 failed with error 3 [ 431.749036][ T13] usb 3-1: USB disconnect, device number 4 [ 431.778981][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 431.826960][ T7] usb 7-1: can't set config #0, error -71 [ 431.854908][ T7] usb 7-1: USB disconnect, device number 4 [ 431.864966][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 431.960712][ T6362] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.084067][ T6362] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.133168][ T6362] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.312832][ T6362] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.683690][ T4285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.728496][ T4285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.762820][ T6671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.534'. [ 434.661644][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 434.734554][ T4769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.771963][ T4769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.887509][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 438.442461][ T6714] netlink: 'syz.7.543': attribute type 1 has an invalid length. [ 439.787760][ T6719] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 440.072085][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.081886][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.516011][ T6714] nvme_fabrics: missing parameter 'transport=%s' [ 441.488001][ T6714] nvme_fabrics: missing parameter 'nqn=%s' [ 452.018880][ T6774] netlink: 68 bytes leftover after parsing attributes in process `syz.6.559'. [ 452.347131][ T6775] netlink: 'syz.7.556': attribute type 1 has an invalid length. [ 452.462766][ T6771] input: syz1 as /devices/virtual/input/input26 [ 453.243324][ T6775] nvme_fabrics: missing parameter 'transport=%s' [ 453.436985][ T6775] nvme_fabrics: missing parameter 'nqn=%s' [ 456.633032][ T6815] jffs2: notice: (6815) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 457.971392][ T4244] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.319294][ T4244] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.435945][ T4244] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.584663][ T4244] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.414939][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 460.678544][ T6826] chnl_net:caif_netlink_parms(): no params data found [ 461.075440][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.083120][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.092725][ T6826] device bridge_slave_0 entered promiscuous mode [ 461.102861][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.114403][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.124398][ T6826] device bridge_slave_1 entered promiscuous mode [ 461.151453][ T6826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.163776][ T6826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.978994][ T6871] input: syz1 as /devices/virtual/input/input27 [ 462.102192][ T6866] netlink: 'syz.7.575': attribute type 1 has an invalid length. [ 462.117821][ T6826] team0: Port device team_slave_0 added [ 462.181048][ T6826] team0: Port device team_slave_1 added [ 462.347657][ T6866] nvme_fabrics: missing parameter 'transport=%s' [ 462.387210][ T6866] nvme_fabrics: missing parameter 'nqn=%s' [ 462.415355][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.469092][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.222849][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 463.241418][ T6826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.388174][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.426583][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.681848][ T6900] jffs2: notice: (6900) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 465.867915][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 466.051836][ T6826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.982803][ T6900] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 467.310833][ T6826] device hsr_slave_0 entered promiscuous mode [ 467.419456][ T6826] device hsr_slave_1 entered promiscuous mode [ 467.896565][ T4228] Bluetooth: hci2: command 0x0419 tx timeout [ 469.926078][ T6934] input: syz1 as /devices/virtual/input/input28 [ 470.016722][ T6934] netlink: 'syz.2.587': attribute type 1 has an invalid length. [ 470.622784][ T6934] nvme_fabrics: missing parameter 'transport=%s' [ 470.647065][ T6934] nvme_fabrics: missing parameter 'nqn=%s' [ 470.677965][ T6826] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 470.770236][ T6826] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 470.836900][ T6826] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 470.935749][ T6826] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 471.204600][ T4244] device hsr_slave_0 left promiscuous mode [ 471.232056][ T4244] device hsr_slave_1 left promiscuous mode [ 471.783634][ T6959] jffs2: notice: (6959) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 471.841178][ T4244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.871473][ T4244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.931463][ T4244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.950554][ T4244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.077281][ T4244] device bridge_slave_1 left promiscuous mode [ 472.083997][ T4244] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.650157][ T4244] device bridge_slave_0 left promiscuous mode [ 474.699073][ T4244] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.730374][ T4244] device veth1_macvtap left promiscuous mode [ 474.794637][ T4244] device veth0_macvtap left promiscuous mode [ 475.139016][ T4244] device veth1_vlan left promiscuous mode [ 476.038076][ T4244] device veth0_vlan left promiscuous mode [ 480.335202][ T4244] team0 (unregistering): Port device team_slave_1 removed [ 480.408979][ T4244] team0 (unregistering): Port device team_slave_0 removed [ 480.499261][ T4244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.552134][ T4244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.381947][ T7013] jffs2: notice: (7013) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 485.135211][ T4244] bond0 (unregistering): Released all slaves [ 488.076035][ T6826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.210978][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 488.242462][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 488.281065][ T6826] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.960173][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 488.971439][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 488.991311][ T4769] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.998461][ T4769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.006334][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 489.015294][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 489.119897][ T4769] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.127292][ T4769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.135171][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 489.236093][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 490.287024][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 492.383161][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 492.454919][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 493.788623][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 494.040082][ T26] audit: type=1326 audit(1790984789.752:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7069 comm="syz.7.618" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e6aabf159 code=0x0 [ 494.148629][ T7071] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 495.086972][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 497.628470][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 497.707398][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 497.764581][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 497.812914][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 497.832506][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 497.855382][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 500.279595][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 500.320635][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 500.383050][ T6826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.502230][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.509813][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.732876][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 501.764251][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 501.856228][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 501.883093][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 501.943554][ T6826] device veth0_vlan entered promiscuous mode [ 501.992431][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 502.008639][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 504.876672][ T6826] device veth1_vlan entered promiscuous mode [ 504.902578][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 505.005797][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 505.155887][ T6826] device veth0_macvtap entered promiscuous mode [ 505.314622][ T6826] device veth1_macvtap entered promiscuous mode [ 505.720161][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.906587][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.075641][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.236674][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.313969][ T26] audit: type=1326 audit(1790984802.022:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7142 comm="syz.6.631" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2eac9b8159 code=0x0 [ 506.396812][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.506523][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.646574][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.786730][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.634310][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.874753][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 507.928997][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 508.373407][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 508.414132][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.549928][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.566918][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.580569][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.611966][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.625988][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.661950][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.692512][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.910716][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.101209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 509.139284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 509.215771][ T6826] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.274156][ T6826] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.307485][ T6826] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.400556][ T6826] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.262328][ T4284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.306621][ T4284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.369798][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 510.432974][ T6879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.476746][ T6879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.495494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 514.333671][ T4228] Bluetooth: hci5: command 0x0406 tx timeout [ 516.499588][ T7223] binder: BINDER_SET_CONTEXT_MGR already set [ 516.591884][ T7223] binder: 7221:7223 ioctl 4018620d 200000004a80 returned -16 [ 520.092421][ T7223] binder: 7221:7223 ioctl c0306201 200000000180 returned -14 [ 522.433894][ T7255] input: syz1 as /devices/virtual/input/input33 [ 522.863502][ T7260] nvme_fabrics: missing parameter 'transport=%s' [ 522.917392][ T7260] nvme_fabrics: missing parameter 'nqn=%s' [ 523.796161][ T26] audit: type=1326 audit(1790984819.502:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.0.647" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7520539159 code=0x0 [ 530.128051][ T7309] binder: BINDER_SET_CONTEXT_MGR already set [ 530.196643][ T7309] binder: 7308:7309 ioctl 4018620d 200000004a80 returned -16 [ 531.460370][ T7326] input: syz1 as /devices/virtual/input/input34 [ 531.537191][ T7330] netlink: 'syz.7.672': attribute type 1 has an invalid length. [ 531.947523][ T7326] nvme_fabrics: missing parameter 'transport=%s' [ 531.954138][ T7326] nvme_fabrics: missing parameter 'nqn=%s' [ 534.026610][ T4366] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 534.406698][ T4366] usb 8-1: config 2 has an invalid interface number: 43 but max is 0 [ 534.415191][ T4366] usb 8-1: config 2 has no interface number 0 [ 534.449570][ T4366] usb 8-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 534.506559][ T4366] usb 8-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 534.566483][ T4366] usb 8-1: config 2 interface 43 has no altsetting 0 [ 534.766737][ T4366] usb 8-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 534.816558][ T4366] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.824674][ T4366] usb 8-1: Product: syz [ 534.842242][ T4366] usb 8-1: Manufacturer: syz [ 534.862500][ T4366] usb 8-1: SerialNumber: syz [ 534.917741][ T7361] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 534.962011][ T7361] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 535.339820][ T7361] netlink: 108 bytes leftover after parsing attributes in process `syz.7.680'. [ 536.499150][ T4366] ums-usbat 8-1:2.43: USB Mass Storage device detected [ 536.828353][ T4366] ums-usbat 8-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 536.990859][ T4366] ums-usbat: probe of 8-1:2.43 failed with error 3 [ 537.010483][ T4366] usb 8-1: USB disconnect, device number 2 [ 539.963905][ T7402] misc userio: The device must be registered before sending interrupts [ 547.781360][ T7448] netlink: 108 bytes leftover after parsing attributes in process `syz.0.697'. [ 548.173206][ T26] audit: type=1800 audit(1790984843.882:13): pid=7462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.700" name="bmaControls" dev="configfs" ino=45240 res=0 errno=0 [ 548.553367][ T7473] misc userio: The device must be registered before sending interrupts [ 548.855136][ T7473] misc userio: The device must be registered before sending interrupts [ 554.716876][ T4194] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 555.546757][ T4194] usb 8-1: config 2 has an invalid interface number: 43 but max is 0 [ 555.568090][ T4194] usb 8-1: config 2 has no interface number 0 [ 555.590370][ T4194] usb 8-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 555.812842][ T4194] usb 8-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 555.830143][ T4194] usb 8-1: config 2 interface 43 has no altsetting 0 [ 555.850365][ T7536] misc userio: No port type given on /dev/userio [ 556.826870][ T4194] usb 8-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 556.846636][ T4194] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.855742][ T4194] usb 8-1: Product: syz [ 556.877213][ T4194] usb 8-1: Manufacturer: syz [ 556.882727][ T4194] usb 8-1: SerialNumber: syz [ 556.911369][ T7517] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 556.964163][ T7517] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 557.070673][ T7538] misc userio: The device must be registered before sending interrupts [ 557.139703][ T26] audit: type=1800 audit(1790984852.852:14): pid=7553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.725" name="bmaControls" dev="configfs" ino=45325 res=0 errno=0 [ 557.160350][ T7538] misc userio: The device must be registered before sending interrupts [ 557.518270][ T4194] ums-usbat 8-1:2.43: USB Mass Storage device detected [ 557.591801][ T4194] ums-usbat 8-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 557.734151][ T4194] ums-usbat: probe of 8-1:2.43 failed with error 3 [ 557.777868][ T4194] usb 8-1: USB disconnect, device number 3 [ 562.949695][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.957375][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 579.354529][ T7727] chnl_net:caif_netlink_parms(): no params data found [ 580.216538][ T5522] Bluetooth: hci4: command 0x0409 tx timeout [ 580.316546][ T7727] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.323728][ T7727] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.698914][ T5522] Bluetooth: hci2: command 0x0406 tx timeout [ 580.821739][ T7727] device bridge_slave_0 entered promiscuous mode [ 580.854063][ T7770] No such timeout policy "syz1" [ 580.881443][ T26] audit: type=1800 audit(1790984876.592:15): pid=7769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.762" name="bmaControls" dev="configfs" ino=46572 res=0 errno=0 [ 580.923485][ T7727] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.975520][ T7727] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.041021][ T7727] device bridge_slave_1 entered promiscuous mode [ 581.272314][ T7727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.384117][ T7727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.606975][ T7727] team0: Port device team_slave_0 added [ 581.670281][ T7727] team0: Port device team_slave_1 added [ 581.882265][ T7727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.923853][ T7727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.068826][ T7727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.296483][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 582.446130][ T7727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.479128][ T7727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.623820][ T7727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.946625][ T7727] device hsr_slave_0 entered promiscuous mode [ 584.019633][ T7727] device hsr_slave_1 entered promiscuous mode [ 584.286007][ T7727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 584.345254][ T7727] Cannot create hsr debugfs directory [ 584.393458][ T5522] Bluetooth: hci4: command 0x040f tx timeout [ 584.850150][ T4326] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.161201][ T4326] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.529120][ T4366] Bluetooth: hci4: command 0x0419 tx timeout [ 587.499693][ T4326] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.400444][ T4326] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.661817][ T7727] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 593.833728][ T7727] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 593.994700][ T7727] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 595.289692][ T7727] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 598.736282][ T7727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.865787][ T7727] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.938878][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 598.967119][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 599.021392][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 599.065169][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 599.121053][ T4244] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.128315][ T4244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.291872][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 599.397878][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 599.639416][ T4244] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.647934][ T4244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.764257][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 600.225690][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 600.264535][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 600.343951][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 600.409916][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 600.500202][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 600.555976][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 600.931925][ T7727] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 600.986624][ T7727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 601.055117][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 601.084715][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 601.157355][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 601.226212][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 601.279277][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 601.336009][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 602.394059][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 602.401810][ T7921] netlink: 32 bytes leftover after parsing attributes in process `syz.0.794'. [ 602.419661][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 602.475784][ T7727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.616551][ T7828] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 602.896958][ T7828] usb 9-1: Using ep0 maxpacket: 8 [ 603.066762][ T7828] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 603.106541][ T7828] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 603.146618][ T7828] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 603.159399][ T4326] device hsr_slave_0 left promiscuous mode [ 603.196630][ T7828] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 603.267147][ T7828] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 603.295825][ T7828] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.385611][ T4326] device hsr_slave_1 left promiscuous mode [ 603.407727][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.448387][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.498330][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.526771][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.587132][ T7828] usb 9-1: GET_CAPABILITIES returned 0 [ 603.593820][ T7828] usbtmc 9-1:16.0: can't read capabilities [ 603.678951][ T4326] device bridge_slave_1 left promiscuous mode [ 603.686273][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.790140][ T4326] device bridge_slave_0 left promiscuous mode [ 603.807140][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.854057][ T23] usb 9-1: USB disconnect, device number 2 [ 603.972597][ T4326] device veth1_macvtap left promiscuous mode [ 603.996936][ T4326] device veth0_macvtap left promiscuous mode [ 604.004281][ T4326] device veth1_vlan left promiscuous mode [ 604.046917][ T4326] device veth0_vlan left promiscuous mode [ 610.602430][ T4326] team0 (unregistering): Port device team_slave_1 removed [ 610.743963][ T4326] team0 (unregistering): Port device team_slave_0 removed [ 610.857099][ T4326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.007041][ T4326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.057027][ T7828] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 611.736751][ T7828] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 611.766630][ T7828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.828826][ T7828] usb 3-1: config 0 descriptor?? [ 612.036310][ T4326] bond0 (unregistering): Released all slaves [ 612.446790][ T7828] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 612.455703][ T7828] [drm] Initialized udl on minor 2 [ 612.586709][ T7828] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 612.597477][ T7828] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 614.537146][ T7828] [drm:udl_get_edid_block] *ERROR* Read EDID byte 1 failed err ffffff92 [ 614.592201][ T4194] usb 3-1: USB disconnect, device number 5 [ 614.596030][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 614.632415][ T7828] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 614.649120][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 614.663677][ T7828] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 614.844616][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 614.884309][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 614.943783][ T7727] device veth0_vlan entered promiscuous mode [ 614.968681][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 615.025656][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 615.099385][ T7727] device veth1_vlan entered promiscuous mode [ 615.212514][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 615.247311][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 615.307139][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 615.345689][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 615.397225][ T7727] device veth0_macvtap entered promiscuous mode [ 615.458201][ T7727] device veth1_macvtap entered promiscuous mode [ 615.655836][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.750415][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.806415][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.876555][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.934143][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.012663][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.069349][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.137669][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.207335][ T7727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.214876][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 616.239564][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 616.298168][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 616.374830][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 616.419245][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.466467][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.476346][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.576402][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.623631][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.804082][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.932304][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.116053][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.197874][ T7727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.206726][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 617.215714][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 617.297776][ T7727] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.362161][ T7727] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.418758][ T7727] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.449321][ T7727] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.260605][ T7798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.296617][ T7798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.419178][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 622.503977][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.516236][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.643023][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 624.385813][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.393440][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.577641][ T8102] netlink: 12 bytes leftover after parsing attributes in process `syz.7.835'. [ 629.606834][ T21] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 629.876541][ T21] usb 10-1: Using ep0 maxpacket: 16 [ 630.176642][ T21] usb 10-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 630.336505][ T21] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.289128][ T21] usb 10-1: Product: syz [ 631.293873][ T21] usb 10-1: Manufacturer: syz [ 631.350395][ T21] usb 10-1: SerialNumber: syz [ 631.642257][ T8134] netlink: 28 bytes leftover after parsing attributes in process `syz.9.841'. [ 631.895051][ T21] usb 10-1: USB disconnect, device number 2 [ 632.220639][ T8153] udevd[8153]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 632.391517][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz.9.848'. [ 632.687481][ T8081] syz.8.823 (8081) used greatest stack depth: 18512 bytes left [ 633.680834][ T8192] netlink: 64 bytes leftover after parsing attributes in process `syz.2.853'. [ 635.913862][ T8193] autofs4:pid:8193:autofs_fill_super: called with bogus options [ 638.150291][ T8203] syz.8.847 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 638.161425][ T8203] CPU: 0 PID: 8203 Comm: syz.8.847 Not tainted syzkaller #0 [ 638.168748][ T8203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 638.178898][ T8203] Call Trace: [ 638.182374][ T8203] [ 638.185326][ T8203] dump_stack_lvl+0x188/0x250 [ 638.190034][ T8203] ? show_regs_print_info+0x20/0x20 [ 638.195374][ T8203] ? load_image+0x410/0x410 [ 638.199990][ T8203] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 638.206283][ T8203] dump_header+0xd9/0x780 [ 638.210751][ T8203] oom_kill_process+0x20e/0x3d0 [ 638.216130][ T8203] out_of_memory+0xdb2/0x1190 [ 638.220953][ T8203] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 638.226783][ T8203] ? lockdep_hardirqs_on+0x94/0x140 [ 638.232013][ T8203] ? mutex_lock_io_nested+0x60/0x60 [ 638.237409][ T8203] ? unregister_oom_notifier+0x20/0x20 [ 638.242898][ T8203] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 638.248543][ T8203] ? mem_cgroup_oom_trylock+0x210/0x210 [ 638.254293][ T8203] ? do_raw_spin_unlock+0x11d/0x230 [ 638.259513][ T8203] try_charge_memcg+0x1075/0x15b0 [ 638.265313][ T8203] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 638.271157][ T8203] ? rcu_lock_acquire+0x30/0x30 [ 638.276164][ T8203] charge_memcg+0x100/0x300 [ 638.280695][ T8203] ? __mem_cgroup_charge+0x80/0x80 [ 638.285838][ T8203] __mem_cgroup_charge+0x21/0x80 [ 638.290911][ T8203] shmem_add_to_page_cache+0xa8a/0x14d0 [ 638.297340][ T8203] ? put_page+0x200/0x200 [ 638.301841][ T8203] ? mark_lock+0x94/0x320 [ 638.307174][ T8203] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 638.313335][ T8203] shmem_getpage_gfp+0x1735/0x2c10 [ 638.318683][ T8203] shmem_write_begin+0xcd/0x1a0 [ 638.324409][ T8203] generic_perform_write+0x2b6/0x550 [ 638.330006][ T8203] ? atime_needs_update+0x770/0x770 [ 638.338685][ T8203] ? grab_cache_page_write_begin+0xa0/0xa0 [ 638.349802][ T8203] ? file_remove_privs+0x5d0/0x5d0 [ 638.356063][ T8203] ? rwsem_write_trylock+0x135/0x1c0 [ 638.365066][ T8203] ? clear_nonspinnable+0x60/0x60 [ 638.371502][ T8203] __generic_file_write_iter+0x261/0x4e0 [ 638.377881][ T8203] ? generic_write_checks+0x3be/0x460 [ 638.384077][ T8203] generic_file_write_iter+0xa6/0x1b0 [ 638.389664][ T8203] __kernel_write+0x522/0x980 [ 638.394422][ T8203] ? vfs_read+0xd50/0xd50 [ 638.398895][ T8203] ? get_dump_page+0xee/0x670 [ 638.403695][ T8203] ? down_read_killable+0x1ce/0x340 [ 638.409092][ T8203] __dump_emit+0x258/0x380 [ 638.413649][ T8203] ? wait_for_dump_helpers+0x3e0/0x3e0 [ 638.419350][ T8203] ? dump_emit+0x145/0x3d0 [ 638.423797][ T8203] dump_user_range+0x84/0x340 [ 638.428780][ T8203] elf_core_dump+0x2fe0/0x3530 [ 638.433586][ T8203] ? load_elf_library+0x980/0x980 [ 638.438773][ T8203] ? verify_lock_unused+0x140/0x140 [ 638.444032][ T8203] ? lock_chain_count+0x20/0x20 [ 638.449050][ T8203] ? dump_vma_snapshot+0xaf1/0xe40 [ 638.454288][ T8203] ? lockdep_hardirqs_on+0x94/0x140 [ 638.459558][ T8203] ? rcu_read_lock_any_held+0xb0/0x130 [ 638.465045][ T8203] ? getname_kernel+0x142/0x2e0 [ 638.470030][ T8203] do_coredump+0x14e8/0x2a40 [ 638.474705][ T8203] ? nfs_stat_to_errno+0x170/0x170 [ 638.480128][ T8203] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 638.486474][ T8203] get_signal+0x531/0x12e0 [ 638.490960][ T8203] arch_do_signal_or_restart+0xe6/0x12a0 [ 638.496628][ T8203] ? _raw_spin_unlock+0x40/0x40 [ 638.501617][ T8203] ? force_sig_info_to_task+0x318/0x3c0 [ 638.507415][ T8203] ? get_sigframe_size+0x10/0x10 [ 638.512390][ T8203] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 638.518915][ T8203] ? exit_to_user_mode_loop+0x3b/0x130 [ 638.524835][ T8203] exit_to_user_mode_loop+0x9e/0x130 [ 638.530426][ T8203] exit_to_user_mode_prepare+0xee/0x180 [ 638.536303][ T8203] irqentry_exit_to_user_mode+0x5/0x30 [ 638.541947][ T8203] exc_page_fault+0x88/0x100 [ 638.546733][ T8203] asm_exc_page_fault+0x22/0x30 [ 638.551599][ T8203] RIP: 0033:0x7f7e0e565161 [ 638.556040][ T8203] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 638.576195][ T8203] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 638.582288][ T8203] RAX: 0000000000000000 RBX: 00007f7e0e7ed090 RCX: 00007f7e0e565159 [ 638.590273][ T8203] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 638.598338][ T8203] RBP: 00007f7e0e5fc06b R08: 0000000000000000 R09: 0000000000000000 [ 638.606503][ T8203] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 638.615129][ T8203] R13: 00007f7e0e7ed128 R14: 00007f7e0e7ed090 R15: 00007ffeff5d8c38 [ 638.623410][ T8203] [ 638.626484][ C0] vkms_vblank_simulate: vblank timer overrun [ 638.672578][ C0] vkms_vblank_simulate: vblank timer overrun [ 638.683659][ T8203] memory: usage 307200kB, limit 307200kB, failcnt 11351 [ 638.690622][ T8203] memory+swap: usage 432180kB, limit 9007199254740988kB, failcnt 0 [ 638.698649][ T8203] kmem: usage 3316kB, limit 9007199254740988kB, failcnt 0 [ 638.705768][ T8203] Memory cgroup stats for /syz8: [ 638.706853][ T8203] anon 229376 [ 638.706853][ T8203] file 310902784 [ 638.706853][ T8203] kernel_stack 163840 [ 638.706853][ T8203] pagetables 958464 [ 638.706853][ T8203] percpu 0 [ 638.706853][ T8203] sock 0 [ 638.706853][ T8203] shmem 310902784 [ 638.706853][ T8203] file_mapped 191877120 [ 638.706853][ T8203] file_dirty 0 [ 638.706853][ T8203] file_writeback 0 [ 638.706853][ T8203] swapcached 127983616 [ 638.706853][ T8203] anon_thp 0 [ 638.706853][ T8203] file_thp 0 [ 638.706853][ T8203] shmem_thp 0 [ 638.706853][ T8203] inactive_anon 299126784 [ 638.706853][ T8203] active_anon 11821056 [ 638.706853][ T8203] inactive_file 0 [ 638.706853][ T8203] active_file 0 [ 638.706853][ T8203] unevictable 0 [ 638.706853][ T8203] slab_reclaimable 1347096 [ 638.706853][ T8203] slab_unreclaimable 783160 [ 638.706853][ T8203] slab 2130256 [ 638.706853][ T8203] workingset_refault_anon 0 [ 638.706853][ T8203] workingset_refault_file 0 [ 638.706853][ T8203] workingset_activate_anon 0 [ 638.805306][ C0] vkms_vblank_simulate: vblank timer overrun [ 638.824963][ T8203] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0-1,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.685,pid=7405,uid=0 [ 638.840188][ C0] vkms_vblank_simulate: vblank timer overrun [ 638.849435][ T8203] Memory cgroup out of memory: Killed process 7405 (syz.8.685) total-vm:200688kB, anon-rss:1256kB, file-rss:20544kB, shmem-rss:55696kB, UID:0 pgtables:224kB oom_score_adj:1000 [ 739.456361][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 739.463553][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8189/1:b..l [ 739.472114][ C1] (detected by 1, t=10502 jiffies, g=34557, q=154) [ 739.478748][ C1] task:syz.2.853 state:R running task stack:24080 pid: 8189 ppid: 4185 flags:0x00004000 [ 739.491029][ C1] Call Trace: [ 739.494468][ C1] [ 739.497446][ C1] __schedule+0x11c3/0x4350 [ 739.502027][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 739.507471][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 739.512913][ C1] ? _local_bh_enable+0xa0/0xa0 [ 739.517830][ C1] ? release_firmware_map_entry+0x190/0x190 [ 739.523793][ C1] ? __dev_queue_xmit+0x1b64/0x2e50 [ 739.529029][ C1] ? preempt_schedule+0xbc/0xd0 [ 739.533917][ C1] ? local_bh_enable+0x5/0x20 [ 739.538726][ C1] preempt_schedule_common+0x82/0xd0 [ 739.544050][ C1] preempt_schedule+0xbc/0xd0 [ 739.549300][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 739.554993][ C1] ? lock_chain_count+0x20/0x20 [ 739.559897][ C1] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 739.565923][ C1] preempt_schedule_thunk+0x16/0x18 [ 739.571177][ C1] __local_bh_enable_ip+0x147/0x1c0 [ 739.576412][ C1] ? _local_bh_enable+0xa0/0xa0 [ 739.581297][ C1] ? ip6_finish_output2+0xd8d/0x1640 [ 739.586630][ C1] ip6_finish_output2+0x1205/0x1640 [ 739.591981][ C1] ? nf_hook+0x360/0x360 [ 739.597011][ C1] ? ip6_finish_output+0x627/0x790 [ 739.602284][ C1] ip6_send_skb+0x1af/0x350 [ 739.606838][ C1] rawv6_push_pending_frames+0x665/0x820 [ 739.612594][ C1] ? rawv6_send_hdrinc+0x1650/0x1650 [ 739.618003][ C1] ? raw6_getfrag+0x2c0/0x2c0 [ 739.622736][ C1] ? rawv6_send_hdrinc+0x1650/0x1650 [ 739.628062][ C1] rawv6_sendmsg+0x1298/0x1710 [ 739.632868][ C1] ? __might_sleep+0xf0/0xf0 [ 739.637792][ C1] ? compat_rawv6_ioctl+0x60/0x60 [ 739.642873][ C1] ? aa_sk_perm+0x7dc/0x910 [ 739.647433][ C1] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 739.653894][ C1] ? sock_rps_record_flow+0x17/0x3b0 [ 739.659249][ C1] ? inet_sendmsg+0x7a/0x2a0 [ 739.663879][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 739.669556][ C1] ? inet_send_prepare+0x250/0x250 [ 739.674751][ C1] ____sys_sendmsg+0x5be/0x8f0 [ 739.679565][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 739.684642][ C1] ? rcu_is_watching+0x11/0xa0 [ 739.689445][ C1] ? import_iovec+0x6f/0xa0 [ 739.694002][ C1] ___sys_sendmsg+0x236/0x2e0 [ 739.698728][ C1] ? __sys_sendmsg+0x290/0x290 [ 739.703650][ C1] ? __might_fault+0xb3/0x110 [ 739.708727][ C1] __sys_sendmmsg+0x2ba/0x500 [ 739.713552][ C1] ? __ia32_sys_sendmsg+0x80/0x80 [ 739.718756][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 739.724791][ C1] ? lock_chain_count+0x20/0x20 [ 739.730040][ C1] __x64_sys_sendmmsg+0x9c/0xb0 [ 739.734939][ C1] do_syscall_64+0x4c/0xa0 [ 739.739482][ C1] ? clear_bhb_loop+0x30/0x80 [ 739.744363][ C1] ? clear_bhb_loop+0x30/0x80 [ 739.749377][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 739.756091][ C1] RIP: 0033:0x7fe5df3c9159 [ 739.760583][ C1] RSP: 002b:00007fe5dd621028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 739.769053][ C1] RAX: ffffffffffffffda RBX: 00007fe5df650fa0 RCX: 00007fe5df3c9159 [ 739.777640][ C1] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000004 [ 739.785825][ C1] RBP: 00007fe5df46006b R08: 0000000000000000 R09: 0000000000000000 [ 739.793999][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.802009][ C1] R13: 00007fe5df651038 R14: 00007fe5df650fa0 R15: 00007fff3cf655b8 [ 739.810024][ C1] [ 739.813070][ C1] rcu: rcu_preempt kthread starved for 9958 jiffies! g34557 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 739.824320][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 739.834925][ C1] rcu: RCU grace-period kthread stack dump: [ 739.840844][ C1] task:rcu_preempt state:R running task stack:27088 pid: 15 ppid: 2 flags:0x00004000 [ 739.851765][ C1] Call Trace: [ 739.855094][ C1] [ 739.858059][ C1] __schedule+0x11c3/0x4350 [ 739.862745][ C1] ? release_firmware_map_entry+0x190/0x190 [ 739.868865][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 739.875004][ C1] ? lock_chain_count+0x20/0x20 [ 739.879987][ C1] ? preempt_schedule+0xbc/0xd0 [ 739.884966][ C1] preempt_schedule_common+0x82/0xd0 [ 739.890312][ C1] preempt_schedule+0xbc/0xd0 [ 739.895118][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 739.900812][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 739.906483][ C1] preempt_schedule_thunk+0x16/0x18 [ 739.911815][ C1] _raw_spin_unlock_irqrestore+0x10d/0x120 [ 739.918132][ C1] ? _raw_spin_unlock+0x40/0x40 [ 739.923034][ C1] ? rcu_is_watching+0x11/0xa0 [ 739.927845][ C1] ? enqueue_timer+0x225/0x520 [ 739.932878][ C1] __mod_timer+0x925/0xd20 [ 739.937450][ C1] schedule_timeout+0x17f/0x2d0 [ 739.942333][ C1] ? console_conditional_schedule+0x40/0x40 [ 739.948276][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 739.954209][ C1] ? update_process_times+0x200/0x200 [ 739.959621][ C1] ? prepare_to_swait_event+0x33d/0x360 [ 739.965323][ C1] rcu_gp_fqs_loop+0x2be/0x11f0 [ 739.970229][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 739.975463][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 739.981771][ C1] ? rcu_gp_init+0xd72/0x10f0 [ 739.986550][ C1] ? rcu_gp_init+0x10f0/0x10f0 [ 739.991369][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 739.996711][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 740.001967][ C1] rcu_gp_kthread+0x9a/0x370 [ 740.006741][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 740.011907][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 740.017879][ C1] ? __kthread_parkme+0x14e/0x1b0 [ 740.022956][ C1] kthread+0x42e/0x520 [ 740.027154][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 740.032311][ C1] ? kthread_blkcg+0xd0/0xd0 [ 740.036953][ C1] ret_from_fork+0x1f/0x30 [ 740.041428][ C1] [ 740.045079][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 740.051507][ C1] NMI backtrace for cpu 1 [ 740.056063][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 740.063497][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 740.074593][ C1] Call Trace: [ 740.078179][ C1] [ 740.081239][ C1] dump_stack_lvl+0x188/0x250 [ 740.086225][ C1] ? show_regs_print_info+0x20/0x20 [ 740.091466][ C1] ? load_image+0x410/0x410 [ 740.096029][ C1] nmi_cpu_backtrace+0x3a2/0x3d0 [ 740.101127][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 740.107432][ C1] ? _printk+0xda/0x130 [ 740.111629][ C1] ? cpu_online+0x1d/0x30 [ 740.116027][ C1] ? load_image+0x410/0x410 [ 740.120590][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 740.126873][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 740.133256][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 740.139793][ C1] print_other_cpu_stall+0x1110/0x1270 [ 740.145501][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 740.150935][ C1] ? timekeeping_advance+0x82c/0xb20 [ 740.156290][ C1] rcu_sched_clock_irq+0x845/0x1120 [ 740.161620][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 740.166862][ C1] ? hrtimer_run_queues+0x162/0x400 [ 740.172855][ C1] ? account_process_tick+0x22a/0x3a0 [ 740.178283][ C1] update_process_times+0x193/0x200 [ 740.183523][ C1] tick_sched_timer+0x37d/0x560 [ 740.188412][ C1] ? tick_setup_sched_timer+0x2b0/0x2b0 [ 740.193995][ C1] __hrtimer_run_queues+0x4b0/0xb60 [ 740.199655][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 740.205716][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 740.210890][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 740.216997][ C1] hrtimer_interrupt+0x397/0x8b0 [ 740.221993][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 740.228017][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 740.233965][ C1] [ 740.236927][ C1] [ 740.239890][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 740.246109][ C1] RIP: 0010:default_idle+0xb/0x10 [ 740.251336][ C1] Code: b7 48 89 df e8 06 bf f3 f7 eb ad e8 1f ab f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d c7 44 5b 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 740.271075][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 740.277204][ C1] RAX: 3311c696c5ada700 RBX: ffff888016e98000 RCX: 3311c696c5ada700 [ 740.285208][ C1] RDX: 0000000000000001 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a48c0 [ 740.293208][ C1] RBP: ffffc90000d67e80 R08: ffff8880b913b30b R09: 1ffff11017227661 [ 740.301207][ C1] R10: dffffc0000000000 R11: ffffed1017227662 R12: 1ffff920001acfb4 [ 740.309303][ C1] R13: dffffc0000000000 R14: 1ffff11002dd3000 R15: 0000000000000000 [ 740.317482][ C1] default_idle_call+0x81/0xc0 [ 740.322319][ C1] do_idle+0x251/0x650 [ 740.326622][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 740.331945][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 740.337268][ C1] ? asm_sysvec_apic_timer_interrupt+0x11/0x20 [ 740.343556][ C1] ? schedule_idle+0x57/0x90 [ 740.348360][ C1] cpu_startup_entry+0x14/0x20 [ 740.353180][ C1] start_secondary+0x32f/0x430 [ 740.357984][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 740.363538][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 740.369501][ C1]