last executing test programs:

38m17.159698972s ago: executing program 0 (id=381):
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

38m9.19748981s ago: executing program 0 (id=383):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
dup(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xef)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x40)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e)

37m56.216142641s ago: executing program 0 (id=386):
mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20)
recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0)

37m22.185623357s ago: executing program 0 (id=389):
r0 = syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x800)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r4, 0xfdffffffffffffff, 0x0, 0x0, 0x3, 0x1})
io_uring_enter(r0, 0x627, 0x4c1, 0xb, 0x0, 0x0)

37m12.133910533s ago: executing program 0 (id=391):
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50)

37m4.18563217s ago: executing program 0 (id=393):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
ftruncate(r2, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0)

36m15.074857795s ago: executing program 32 (id=393):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
ftruncate(r2, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0)

33m34.172679083s ago: executing program 1 (id=412):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x20a, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf0}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0, 0xff8, 0x0, &(0x7f00000031c0)={0x30, 0x30, 0x1e}}}], 0x0, 0x0, 0x0})

33m27.771496954s ago: executing program 1 (id=413):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})

33m17.136268652s ago: executing program 1 (id=414):
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000fbdbdf25"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001)
r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x800, 0x0, 0x2, 0x1, 0x2a15, 0xd}, 0x20)
r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}})

33m11.192397047s ago: executing program 1 (id=415):
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x8, 0x89, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r2 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0xdd68, 0x10100}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0)
openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0)

33m6.276255954s ago: executing program 1 (id=416):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x20a, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf0}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0, 0xff8, 0x0, &(0x7f00000031c0)={0x30, 0x30, 0x1e}}}], 0x0, 0x0, 0x0})

33m0.499322489s ago: executing program 1 (id=417):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x3516, 0x67f, 0x64, 0x0, 0x0)

32m14.027856505s ago: executing program 33 (id=417):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x3516, 0x67f, 0x64, 0x0, 0x0)

22m21.544694983s ago: executing program 2 (id=469):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000012"], 0x24}], 0x1}, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=<r3=>r2, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xe6c11ffe4afd7b0e, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r4, r3, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000040), 0x0)

22m9.830670296s ago: executing program 2 (id=471):
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x200000, 0x0)

21m45.184736192s ago: executing program 2 (id=473):
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50)

21m37.710464893s ago: executing program 2 (id=474):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
dup(0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000540)=0x9)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xef)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x40)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e)
close_range(r0, 0xffffffffffffffff, 0x0)

21m29.643044076s ago: executing program 2 (id=475):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000012"], 0x24}], 0x1}, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=<r3=>r2, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xe6c11ffe4afd7b0e, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r4, r3, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000040), 0x0)

21m19.509739973s ago: executing program 2 (id=476):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0)
r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd)
keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r6, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8004}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x60}}, {{&(0x7f0000002440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0xc054)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)

20m27.025612879s ago: executing program 34 (id=476):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0)
r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd)
keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r6, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8004}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x60}}, {{&(0x7f0000002440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0xc054)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)

12m15.763474641s ago: executing program 4 (id=488):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}})

12m1.783361409s ago: executing program 4 (id=490):
syz_emit_ethernet(0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaa4aaaaaaaaaaaa1e88f51e"], 0x0)

11m45.616158068s ago: executing program 4 (id=492):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180))
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe0000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

11m31.747302921s ago: executing program 4 (id=494):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
dup(0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000540)=0x9)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xef)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x40)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e)
close_range(r0, 0xffffffffffffffff, 0x0)

11m18.29942863s ago: executing program 4 (id=495):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0xc0)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

10m44.775239094s ago: executing program 4 (id=497):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50)
r0 = socket(0x2c, 0x3, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, 0x0, &(0x7f0000000180))
io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0x0, 0xc45, 0x1}}, 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r6, {0x0, 0x9}, {0x0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r8, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x240000d0)

9m56.232436122s ago: executing program 35 (id=497):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50)
r0 = socket(0x2c, 0x3, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, 0x0, &(0x7f0000000180))
io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0x0, 0xc45, 0x1}}, 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r6, {0x0, 0x9}, {0x0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r8, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x240000d0)

1m10.155160736s ago: executing program 3 (id=530):
r0 = openat$khugepaged_scan(0xffffff9c, &(0x7f0000000640), 0x1, 0x0)
write$khugepaged_scan(r0, &(0x7f00000006c0), 0x8)

55.406105109s ago: executing program 3 (id=531):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x2)
syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffd}}}}}}}, 0x0)
syz_emit_ethernet(0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa8086dd600a3ff200540600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYBLOB="5001000090"], 0x0)

43.933083609s ago: executing program 3 (id=532):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10)

31.755483178s ago: executing program 3 (id=533):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc)

21.335128399s ago: executing program 3 (id=534):
socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000002, 0xfffefffe}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0)

0s ago: executing program 3 (id=535):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:28446' (ED25519) to the list of known hosts.
syzkaller login: [  582.329641][ T3230] cgroup: Unknown subsys name 'net'
[  583.378135][ T3230] cgroup: Unknown subsys name 'cpuset'
[  583.777910][ T3230] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  678.430719][ T3230] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  881.790731][ T3237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  881.908608][ T3237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  884.239909][ T3238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  884.393847][ T3238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  897.997013][ T3237] hsr_slave_0: entered promiscuous mode
[  898.119015][ T3237] hsr_slave_1: entered promiscuous mode
[  905.046135][ T3238] hsr_slave_0: entered promiscuous mode
[  905.079709][ T3238] hsr_slave_1: entered promiscuous mode
[  905.143464][ T3238] debugfs: 'hsr0' already exists in 'hsr'
[  905.147092][ T3238] Cannot create hsr debugfs directory
[  917.469827][ T3237] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  917.769370][ T3237] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  918.747468][ T3237] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  919.084051][ T3237] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  921.713225][ T3238] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  921.979454][ T3238] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  922.157600][ T3238] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  922.337851][ T3238] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  940.316135][ T3237] 8021q: adding VLAN 0 to HW filter on device bond0
[  946.727069][ T3238] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1005.798740][ T3237] veth0_vlan: entered promiscuous mode
[ 1006.558625][ T3237] veth1_vlan: entered promiscuous mode
[ 1010.007744][ T3237] veth0_macvtap: entered promiscuous mode
[ 1011.080579][ T3237] veth1_macvtap: entered promiscuous mode
[ 1011.989181][ T3238] veth0_vlan: entered promiscuous mode
[ 1013.432274][ T3238] veth1_vlan: entered promiscuous mode
[ 1014.340779][ T3247] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1014.367657][ T3247] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1014.507885][ T3247] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1014.568161][ T3247] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1017.901976][ T3238] veth0_macvtap: entered promiscuous mode
[ 1018.975004][ T3238] veth1_macvtap: entered promiscuous mode
[ 1021.539553][ T3237] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 1023.653051][ T3247] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1023.655462][ T3247] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1023.698935][ T3247] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1023.705489][ T3247] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1045.039641][ T3866] Zero length message leads to an empty skb
[ 1076.756045][ T3891] vlan2: entered allmulticast mode
[ 1076.758379][ T3891] veth0_to_bond: entered allmulticast mode
[ 1086.134731][ T3897] xt_hashlimit: size too large, truncated to 1048576
[ 1112.547752][ T3185] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 1113.030111][ T3185] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1113.564505][ T3185] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1113.566120][ T3185] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1113.580050][ T3185] usb 2-1: Product: syz
[ 1113.592034][ T3185] usb 2-1: SerialNumber: syz
[ 1116.345493][ T3185] cdc_ncm 2-1:1.0: failed to get mac address
[ 1116.674188][ T3185] cdc_ncm 2-1:1.0: bind() failure
[ 1117.458605][ T3185] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[ 1117.556132][ T3185] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[ 1117.706694][ T3185] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[ 1118.099377][ T3185] usb 2-1: USB disconnect, device number 2
[ 1124.433380][ T3858] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[ 1125.023932][ T3858] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1125.025354][ T3858] usb 1-1: config 0 has no interface number 0
[ 1125.026797][ T3858] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1125.028967][ T3858] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1125.030491][ T3858] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1125.042084][ T3858] usb 1-1: config 0 interface 1 has no altsetting 0
[ 1125.044400][ T3858] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[ 1125.045644][ T3858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1125.417101][ T3858] usb 1-1: config 0 descriptor??
[ 1126.677630][ T3858] uclogic 0003:145F:0212.0001: failed retrieving string descriptor #100: -71
[ 1126.680193][ T3858] uclogic 0003:145F:0212.0001: failed retrieving pen parameters: -71
[ 1126.687338][ T3858] uclogic 0003:145F:0212.0001: pen probing failed: -71
[ 1126.689110][ T3858] uclogic 0003:145F:0212.0001: failed probing parameters: -71
[ 1126.716945][ T3858] uclogic 0003:145F:0212.0001: probe with driver uclogic failed with error -71
[ 1126.923497][ T3858] usb 1-1: USB disconnect, device number 2
[ 1134.599671][ T3957] xt_hashlimit: size too large, truncated to 1048576
[ 1259.824120][ T4022] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 1284.293606][ T4036] netlink: 128 bytes leftover after parsing attributes in process `syz.1.49'.
[ 1284.298845][ T4036] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[ 1293.245012][ T3859] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[ 1293.786245][ T3859] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1293.859622][ T3859] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1293.870082][ T3859] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1293.887329][ T3859] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1294.034929][ T3858] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 1294.167888][ T3859] usb 1-1: string descriptor 0 read error: -22
[ 1294.196501][ T3859] usb 1-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.40
[ 1294.198823][ T3859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1294.313738][ T3858] usb 2-1: Using ep0 maxpacket: 16
[ 1294.489278][ T3858] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1294.490979][ T3858] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1294.724380][ T3858] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1294.726591][ T3858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1294.727682][ T3858] usb 2-1: Product: syz
[ 1294.728551][ T3858] usb 2-1: Manufacturer: syz
[ 1294.729497][ T3858] usb 2-1: SerialNumber: syz
[ 1295.278711][ T3859] usbhid 1-1:1.0: can't add hid device: -22
[ 1295.300057][ T3859] usbhid 1-1:1.0: probe with driver usbhid failed with error -22
[ 1295.829424][ T3858] usb 2-1: 0:2 : does not exist
[ 1296.037500][ T3858] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[ 1296.889781][ T3858] usb 2-1: USB disconnect, device number 3
[ 1298.850559][ T3858] usb 1-1: USB disconnect, device number 3
[ 1312.167983][ T4086] netlink: 128 bytes leftover after parsing attributes in process `syz.0.56'.
[ 1312.169753][ T4086] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[ 1318.718508][ T3859] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 1319.438932][ T3859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1319.443224][ T3859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1319.446419][ T3859] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[ 1319.448304][ T3859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1319.835543][ T3859] usb 2-1: config 0 descriptor??
[ 1323.238618][ T3859] hkems 0003:2006:0118.0002: unknown main item tag 0x0
[ 1323.241103][ T3859] hkems 0003:2006:0118.0002: unknown main item tag 0x0
[ 1323.259335][ T3859] hkems 0003:2006:0118.0002: unknown main item tag 0x0
[ 1323.300228][ T3859] hkems 0003:2006:0118.0002: unknown main item tag 0x0
[ 1323.313983][ T3859] hkems 0003:2006:0118.0002: unknown main item tag 0x0
[ 1323.330451][ T3859] hkems 0003:2006:0118.0002: unknown main item tag 0x0
[ 1323.373079][ T3859] hkems 0003:2006:0118.0002: unknown main item tag 0x0
[ 1323.977293][ T3859] hkems 0003:2006:0118.0002: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.1-1/input0
[ 1323.980010][ T3859] hkems 0003:2006:0118.0002: no inputs found
[ 1324.000484][ T3859] hkems 0003:2006:0118.0002: force feedback init failed
[ 1324.656201][ T3859] usb 2-1: USB disconnect, device number 4
[ 1333.609567][ T4116] netlink: 128 bytes leftover after parsing attributes in process `syz.0.62'.
[ 1333.610901][ T4116] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[ 1338.532860][   T31] audit: type=1326 audit(1337.160:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.1.63" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb1133282 code=0x7ffc0000
[ 1338.570757][   T31] audit: type=1326 audit(1337.230:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.1.63" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb1133282 code=0x7ffc0000
[ 1338.688147][   T31] audit: type=1326 audit(1337.350:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.1.63" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb1133282 code=0x7ffc0000
[ 1338.774854][   T31] audit: type=1326 audit(1337.410:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.1.63" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb1133282 code=0x7ffc0000
[ 1338.857085][   T31] audit: type=1326 audit(1337.400:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.1.63" exe="/syz-executor" sig=0 arch=c00000f3 syscall=232 compat=0 ip=0x7fffb1133282 code=0x7ffc0000
[ 1338.859495][   T31] audit: type=1326 audit(1337.520:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.1.63" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb1133282 code=0x7ffc0000
[ 1338.885631][   T31] audit: type=1326 audit(1337.560:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.1.63" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb1133282 code=0x7ffc0000
[ 1338.918282][   T31] audit: type=1326 audit(1337.580:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.1.63" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb1133282 code=0x7ffc0000
[ 1338.936169][   T31] audit: type=1326 audit(1337.610:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.1.63" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb1133282 code=0x7ffc0000
[ 1338.948940][   T31] audit: type=1326 audit(1337.600:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.1.63" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0x7fffb1133282 code=0x7ffc0000
[ 1343.643411][   T31] kauditd_printk_skb: 68 callbacks suppressed
[ 1343.644166][   T31] audit: type=1326 audit(1342.230:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.1.63" exe="/syz-executor" sig=0 arch=c00000f3 syscall=268 compat=0 ip=0x7fffb1134174 code=0x7ffc0000
[ 1343.686882][   T31] audit: type=1326 audit(1342.330:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.1.63" exe="/syz-executor" sig=0 arch=c00000f3 syscall=57 compat=0 ip=0x7fffb111d864 code=0x7ffc0000
[ 1343.722190][   T31] audit: type=1326 audit(1342.390:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.1.63" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb1133282 code=0x7ffc0000
[ 1343.790184][   T31] audit: type=1326 audit(1342.460:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.1.63" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb1133282 code=0x7ffc0000
[ 1344.714020][   T31] audit: type=1326 audit(1343.310:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.1.63" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb1133282 code=0x7ffc0000
[ 1344.718231][   T31] audit: type=1326 audit(1343.370:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.1.63" exe="/syz-executor" sig=0 arch=c00000f3 syscall=57 compat=0 ip=0x7fffb1133282 code=0x7ffc0000
[ 1344.737760][   T31] audit: type=1326 audit(1343.400:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.1.63" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb1133282 code=0x7ffc0000
[ 1344.956168][   T31] audit: type=1326 audit(1343.620:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.1.63" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb1133282 code=0x7ffc0000
[ 1345.755892][   T31] audit: type=1326 audit(1344.410:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.1.63" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb1133282 code=0x7ffc0000
[ 1346.313954][   T31] audit: type=1326 audit(1344.930:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4117 comm="syz.1.63" exe="/syz-executor" sig=0 arch=c00000f3 syscall=436 compat=0 ip=0x7fffb1133282 code=0x7ffc0000
[ 1367.199871][ T4153] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.68'.
[ 1369.734478][ T3796] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 1369.993987][ T3796] usb 2-1: Using ep0 maxpacket: 32
[ 1370.435752][ T3796] usb 2-1: config 2 has an invalid interface number: 88 but max is 0
[ 1370.438182][ T3796] usb 2-1: config 2 has no interface number 0
[ 1370.440408][ T3796] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[ 1370.485741][ T3796] usb 2-1: config 2 interface 88 has no altsetting 0
[ 1370.735853][ T3796] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[ 1370.737229][ T3796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1370.738258][ T3796] usb 2-1: Product: syz
[ 1370.739086][ T3796] usb 2-1: Manufacturer: syz
[ 1370.740046][ T3796] usb 2-1: SerialNumber: syz
[ 1371.025859][ T4156] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1372.717745][ T4156] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1374.363930][ T3796] asix 2-1:2.88 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 1374.727658][ T3796] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1374.730396][ T3796] asix 2-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[ 1374.769654][ T3796] asix 2-1:2.88: probe with driver asix failed with error -71
[ 1375.144290][ T3796] usb 2-1: USB disconnect, device number 5
[ 1513.980310][ T4248] xt_hashlimit: size too large, truncated to 1048576
[ 1553.430043][ T3857] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 1553.996777][ T3857] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 72, changing to 7
[ 1554.156958][ T3857] usb 2-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice= 0.40
[ 1554.158281][ T3857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1554.159357][ T3857] usb 2-1: Product: syz
[ 1554.160313][ T3857] usb 2-1: Manufacturer: syz
[ 1554.192836][ T3857] usb 2-1: SerialNumber: syz
[ 1557.160720][ T3857] usb 2-1: Invalid firmware size=96.
[ 1557.413786][ T3857] usb 2-1: Invalid firmware size=96.
[ 1557.584251][ T3857] usb 2-1: Invalid firmware size=96.
[ 1557.833423][ T3857] usb 2-1: USB disconnect, device number 6
[ 1585.177705][ T4301] Driver unsupported XDP return value 0 on prog  (id 16) dev N/A, expect packet loss!
[ 1726.753810][   T31] kauditd_printk_skb: 1 callbacks suppressed
[ 1726.754163][   T31] audit: type=1326 audit(1725.420:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4374 comm="syz.0.145" exe="/syz-executor" sig=9 arch=c00000f3 syscall=98 compat=0 ip=0x7fff82b33282 code=0x0
[ 1737.066713][ T4386] comedi: valid board names for 8255 driver are:
[ 1737.068301][ T4386]  8255
[ 1737.069127][ T4386] comedi: valid board names for vmk80xx driver are:
[ 1737.069962][ T4386]  vmk80xx
[ 1737.070638][ T4386] comedi: valid board names for usbduxsigma driver are:
[ 1737.112717][ T4386]  usbduxsigma
[ 1737.113713][ T4386] comedi: valid board names for usbduxfast driver are:
[ 1737.118182][ T4386]  usbduxfast
[ 1737.119979][ T4386] comedi: valid board names for usbdux driver are:
[ 1737.162133][ T4386]  usbdux
[ 1737.163301][ T4386] comedi: valid board names for ni6501 driver are:
[ 1737.164139][ T4386]  ni6501
[ 1737.164907][ T4386] comedi: valid board names for dt9812 driver are:
[ 1737.165857][ T4386]  dt9812
[ 1737.166588][ T4386] comedi: valid board names for ni_labpc_cs driver are:
[ 1737.167522][ T4386]  ni_labpc_cs
[ 1737.168231][ T4386] comedi: valid board names for ni_daq_700 driver are:
[ 1737.169328][ T4386]  ni_daq_700
[ 1737.170152][ T4386] comedi: valid board names for labpc_pci driver are:
[ 1737.192218][ T4386]  labpc_pci
[ 1737.193347][ T4386] comedi: valid board names for adl_pci9118 driver are:
[ 1737.194479][ T4386]  pci9118dg
[ 1737.195316][ T4386]  pci9118hg
[ 1737.196092][ T4386]  pci9118hr
[ 1737.196846][ T4386] comedi: valid board names for 8255_pci driver are:
[ 1737.222707][ T4386]  8255_pci
[ 1737.224208][ T4386] comedi: valid board names for comedi_parport driver are:
[ 1737.225116][ T4386]  comedi_parport
[ 1737.225823][ T4386] comedi: valid board names for comedi_test driver are:
[ 1737.226648][ T4386]  comedi_test
[ 1737.227336][ T4386] comedi: valid board names for comedi_bond driver are:
[ 1737.228146][ T4386]  comedi_bond
[ 1743.209305][ T4391] tc_dump_action: action bad kind
[ 1744.765527][ T3858] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 1745.304998][ T3858] usb 2-1: Using ep0 maxpacket: 8
[ 1745.656180][ T3858] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64
[ 1745.676764][ T3858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[ 1745.679141][ T3858] usb 2-1: Product: syz
[ 1745.680760][ T3858] usb 2-1: Manufacturer: syz
[ 1745.694851][ T3858] usb 2-1: SerialNumber: syz
[ 1746.574797][ T3858] usb 2-1: config 0 descriptor??
[ 1760.699042][ T3857] usb 2-1: USB disconnect, device number 7
[ 1771.328920][ T4420] kernel profiling enabled (shift: 0)
[ 1836.468954][ T4457] netlink: 20 bytes leftover after parsing attributes in process `syz.1.170'.
[ 1836.486656][ T4457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'.
[ 1998.174793][ T3567] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[ 1998.378702][ T3567] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 2091.562817][ T4635] netlink: 'syz.1.239': attribute type 13 has an invalid length.
[ 2091.564364][ T4635] netlink: 'syz.1.239': attribute type 58 has an invalid length.
[ 2091.567168][ T4635] netlink: 152 bytes leftover after parsing attributes in process `syz.1.239'.
[ 2105.275291][ T4645] misc userio: The device must be registered before sending interrupts
[ 2145.977791][ T4670] binfmt_misc: register: failed to install interpreter file ./file0
[ 2229.706133][ T4672] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 2230.100735][ T4672] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 2230.105789][ T4672] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[ 2230.113135][ T4672] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2230.116197][ T4672] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2230.118152][ T4672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2231.114305][ T4672] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 2234.188501][ T4672] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12
[ 2234.824473][ T4672] usb 2-1: USB disconnect, device number 8
[ 2284.489703][ T4773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'.
[ 2387.854954][ T4866] xt_hashlimit: size too large, truncated to 1048576
[ 2454.243693][ T4892] xt_hashlimit: size too large, truncated to 1048576
[ 2467.263958][ T3567] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 2467.583173][ T3567] usb 1-1: Using ep0 maxpacket: 32
[ 2468.357962][ T3567] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2468.359744][ T3567] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2468.817939][ T3567] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 2468.820376][ T3567] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 2468.832052][ T3567] usb 1-1: Product: syz
[ 2468.833958][ T3567] usb 1-1: Manufacturer: syz
[ 2469.369421][ T3567] hub 1-1:4.0: USB hub found
[ 2471.088383][ T3567] hub 1-1:4.0: 5 ports detected
[ 2471.138203][ T3567] hub 1-1:4.0: insufficient power available to use all downstream ports
[ 2472.500477][ T3567] hub 1-1:4.0: hub_hub_status failed (err = -32)
[ 2472.509824][ T3567] hub 1-1:4.0: config failed, can't get hub status (err -32)
[ 2474.408190][ T4672] usb 1-1: USB disconnect, device number 4
[ 2488.457245][ T4928] xt_hashlimit: size too large, truncated to 1048576
[ 2596.895774][ T5007] binder_alloc: 5005: binder_alloc_buf, no vma
[ 2637.817491][ T5022] binder_alloc: 5021: binder_alloc_buf, no vma
[ 2791.046322][ T5078] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[ 2891.894887][ T5106] netlink: 168 bytes leftover after parsing attributes in process `syz.1.375'.
[ 2898.310506][ T5110] netlink: 'syz.0.376': attribute type 8 has an invalid length.
[ 2898.324524][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.376'.
[ 2898.850569][ T5110] bond0: entered promiscuous mode
[ 2898.889137][ T5110] bond_slave_0: entered promiscuous mode
[ 2898.920852][ T5110] bond_slave_1: entered promiscuous mode
[ 2899.213429][ T5110] gretap0: entered promiscuous mode
[ 2899.377782][ T5110] hsr1: entered promiscuous mode
[ 3096.524329][   T31] audit: type=1326 audit(3095.190:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5192 comm="syz.1.402" exe="/syz-executor" sig=9 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb1133282 code=0x0
[ 3132.635061][ T5280] xt_hashlimit: size too large, truncated to 1048576
[ 3151.039010][ T4269] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3152.210549][ T5182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3152.648357][ T5182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3153.616475][ T4269] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3156.870177][ T4269] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3159.057368][ T4269] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3174.658267][ T4269] gretap0 (unregistering): left promiscuous mode
[ 3179.155364][ T4269] bond0 (unregistering): left promiscuous mode
[ 3179.156744][ T4269] bond_slave_0: left promiscuous mode
[ 3179.183100][ T4269] bond_slave_1: left promiscuous mode
[ 3180.745635][ T4269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3181.564736][ T4269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3181.775400][ T4269] bond0 (unregistering): Released all slaves
[ 3186.196214][ T4269] hsr_slave_0: left promiscuous mode
[ 3186.260122][ T4269] hsr_slave_1: left promiscuous mode
[ 3190.920977][ T5370] block device autoloading is deprecated and will be removed.
[ 3193.506165][ T4269] veth1_macvtap: left promiscuous mode
[ 3193.512486][ T4269] veth0_macvtap: left promiscuous mode
[ 3193.590611][ T4269] veth1_vlan: left promiscuous mode
[ 3193.616505][ T4269] veth0_vlan: left promiscuous mode
[ 3256.550564][ T5182] hsr_slave_0: entered promiscuous mode
[ 3256.644134][ T5182] hsr_slave_1: entered promiscuous mode
[ 3256.737362][ T5182] debugfs: 'hsr0' already exists in 'hsr'
[ 3256.739496][ T5182] Cannot create hsr debugfs directory
[ 3275.495454][ T5182] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 3275.834714][ T5182] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 3276.168875][ T5182] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 3276.484896][ T5182] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 3300.610464][ T5182] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3386.200929][ T4671] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3389.833858][ T4671] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3393.020940][ T4671] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3399.629103][ T4671] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3400.693527][ T5558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3401.045121][ T5558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3427.045654][ T4671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3427.359085][ T4671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3427.758567][ T4671] bond0 (unregistering): Released all slaves
[ 3430.077570][ T4671] hsr_slave_0: left promiscuous mode
[ 3430.140350][ T4671] hsr_slave_1: left promiscuous mode
[ 3430.626405][ T4671] veth1_macvtap: left promiscuous mode
[ 3430.633716][ T4671] veth0_macvtap: left promiscuous mode
[ 3430.645057][ T4671] veth1_vlan: left promiscuous mode
[ 3430.653617][ T4671] veth0_vlan: left promiscuous mode
[ 3473.239161][ T5182] veth0_vlan: entered promiscuous mode
[ 3473.994583][ T5182] veth1_vlan: entered promiscuous mode
[ 3476.106831][ T5182] veth0_macvtap: entered promiscuous mode
[ 3476.376194][ T5182] veth1_macvtap: entered promiscuous mode
[ 3478.658321][ T5371] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3478.708264][ T5371] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3478.722647][ T4176] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3478.724437][ T4176] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3483.406791][ T5558] hsr_slave_0: entered promiscuous mode
[ 3483.553810][ T5558] hsr_slave_1: entered promiscuous mode
[ 3501.169013][ T5558] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 3501.555913][ T5558] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 3502.010806][ T5558] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 3502.515431][ T5558] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 3531.059463][ T5558] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3660.926644][ T6010] binder: BINDER_SET_CONTEXT_MGR already set
[ 3660.929655][ T6010] binder: 6008:6010 ioctl 4018620d 200000000200 returned -16
[ 3664.975116][ T5558] veth0_vlan: entered promiscuous mode
[ 3666.468130][ T5558] veth1_vlan: entered promiscuous mode
[ 3670.187407][ T5558] veth0_macvtap: entered promiscuous mode
[ 3671.423168][ T5558] veth1_macvtap: entered promiscuous mode
[ 3675.523217][ T4888] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3675.525884][ T4888] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3675.585370][ T4888] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3675.623365][ T4888] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3734.514406][ T6050] netlink: 16 bytes leftover after parsing attributes in process `syz.3.441'.
[ 3737.414719][ T6050] bond0: entered promiscuous mode
[ 3737.426572][ T6050] bond_slave_0: entered promiscuous mode
[ 3737.430608][ T6050] bond_slave_1: entered promiscuous mode
[ 3737.878769][ T6050] gretap0: entered promiscuous mode
[ 3738.686581][ T6050] hsr1: entered promiscuous mode
[ 3778.756084][ T6078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.448'.
[ 3836.876102][ T6113] IPv6: NLM_F_CREATE should be specified when creating new route
[ 3867.543275][ T6132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3867.635130][ T6132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3905.280945][ T3247] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3907.972948][ T3247] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3910.349434][ T3247] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3912.466973][ T3247] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3930.655921][ T3247] gretap0 (unregistering): left promiscuous mode
[ 3935.284454][ T3247] bond0 (unregistering): left promiscuous mode
[ 3935.286341][ T3247] bond_slave_0: left promiscuous mode
[ 3935.340123][ T3247] bond_slave_1: left promiscuous mode
[ 3935.929144][ T3247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3936.193212][ T3247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3936.415547][ T3247] bond0 (unregistering): Released all slaves
[ 3939.052358][ T3247] hsr_slave_0: left promiscuous mode
[ 3939.183792][ T3247] hsr_slave_1: left promiscuous mode
[ 3940.583391][ T3247] veth1_macvtap: left promiscuous mode
[ 3940.588443][ T3247] veth0_macvtap: left promiscuous mode
[ 3940.645244][ T3247] veth1_vlan: left promiscuous mode
[ 3940.648086][ T3247] veth0_vlan: left promiscuous mode
[ 3966.141819][ T6185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.476'.
[ 4037.917229][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4040.429095][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4042.317040][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4043.957266][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4071.710097][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4072.108929][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4072.414861][   T13] bond0 (unregistering): Released all slaves
[ 4075.126891][   T13] hsr_slave_0: left promiscuous mode
[ 4075.230513][   T13] hsr_slave_1: left promiscuous mode
[ 4076.653804][   T13] veth1_macvtap: left promiscuous mode
[ 4076.657695][   T13] veth0_macvtap: left promiscuous mode
[ 4076.706714][   T13] veth1_vlan: left promiscuous mode
[ 4076.744686][   T13] veth0_vlan: left promiscuous mode
[ 4132.080749][ T6173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4132.459007][ T6173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4157.832719][ T6206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4159.134146][ T6206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4163.037801][ T6173] hsr_slave_0: entered promiscuous mode
[ 4163.098193][ T6173] hsr_slave_1: entered promiscuous mode
[ 4196.643773][ T6206] hsr_slave_0: entered promiscuous mode
[ 4196.679733][ T6206] hsr_slave_1: entered promiscuous mode
[ 4196.774835][ T6206] debugfs: 'hsr0' already exists in 'hsr'
[ 4196.776275][ T6206] Cannot create hsr debugfs directory
[ 4204.159565][ T6173] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 4205.343273][ T6173] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 4206.407848][ T6173] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 4206.946907][ T6173] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 4219.109065][ T6206] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 4219.506513][ T6206] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 4219.694739][ T6206] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 4219.896881][ T6206] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 4242.275227][ T6173] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4254.117722][ T6206] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4368.570878][ T6173] veth0_vlan: entered promiscuous mode
[ 4371.244057][ T6173] veth1_vlan: entered promiscuous mode
[ 4377.389598][ T6173] veth0_macvtap: entered promiscuous mode
[ 4378.173838][ T6173] veth1_macvtap: entered promiscuous mode
[ 4383.744769][ T4269] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4383.748360][ T4269] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4383.798341][ T4269] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4383.938778][ T4269] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4397.465489][ T6206] veth0_vlan: entered promiscuous mode
[ 4399.683026][ T6206] veth1_vlan: entered promiscuous mode
[ 4406.168831][ T6206] veth0_macvtap: entered promiscuous mode
[ 4407.180955][ T6206] veth1_macvtap: entered promiscuous mode
[ 4412.394774][ T6186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4412.448383][ T5371] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4412.466198][ T5371] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4412.469125][ T5371] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4464.740817][ T6937] netlink: 16 bytes leftover after parsing attributes in process `syz.4.482'.
[ 4465.157436][ T6937] netlink: 16 bytes leftover after parsing attributes in process `syz.4.482'.
[ 4534.565141][ T6986] capability: warning: `syz.4.492' uses 32-bit capabilities (legacy support in use)
[ 4555.365794][ T6996] syzkaller0: entered promiscuous mode
[ 4555.367940][ T6996] syzkaller0: entered allmulticast mode
[ 4604.998794][   T31] audit: type=1326 audit(4603.660:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7019 comm="syz.4.497" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb9f33282 code=0x7ffc0000
[ 4605.039323][   T31] audit: type=1326 audit(4603.690:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7019 comm="syz.4.497" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb9f33282 code=0x7ffc0000
[ 4763.847200][ T7129] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 4776.260764][ T7147] bond0: (slave bond_slave_0): Releasing backup interface
[ 4777.217491][ T7147] bond0: (slave bond_slave_1): Releasing backup interface
[ 4778.429382][ T7147] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 4800.986749][ T6186] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4804.108855][ T6186] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4807.070136][ T6186] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4814.546196][ T6186] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4844.175958][ T7239] netlink: 16 bytes leftover after parsing attributes in process `syz.3.510'.
[ 4844.949549][ T6186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4845.188358][ T6186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4845.477567][ T6186] bond0 (unregistering): Released all slaves
[ 4849.066856][ T7239] bond0: entered promiscuous mode
[ 4849.614264][ T7239] gretap0: entered promiscuous mode
[ 4849.747764][ T7239] hsr1: entered promiscuous mode
[ 4854.052559][ T6186] hsr_slave_0: left promiscuous mode
[ 4854.148999][ T6186] hsr_slave_1: left promiscuous mode
[ 4854.954106][ T6186] veth1_macvtap: left promiscuous mode
[ 4854.956243][ T6186] veth0_macvtap: left promiscuous mode
[ 4854.960602][ T6186] veth1_vlan: left promiscuous mode
[ 4855.035484][ T6186] veth0_vlan: left promiscuous mode
[ 4868.543894][   T31] audit: type=1326 audit(4867.200:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.3.512" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb3b33282 code=0x7ffc0000
[ 4869.065530][   T31] audit: type=1326 audit(4867.670:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.3.512" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb3b33282 code=0x7ffc0000
[ 4869.534174][   T31] audit: type=1326 audit(4868.180:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.3.512" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb3b33282 code=0x7ffc0000
[ 4869.538917][   T31] audit: type=1326 audit(4868.190:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.3.512" exe="/syz-executor" sig=0 arch=c00000f3 syscall=47 compat=0 ip=0x7fffb3b33282 code=0x7ffc0000
[ 4869.583778][   T31] audit: type=1326 audit(4868.210:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.3.512" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb3b33282 code=0x7ffc0000
[ 4869.587088][   T31] audit: type=1326 audit(4868.190:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.3.512" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb3b33282 code=0x7ffc0000
[ 4869.589996][   T31] audit: type=1326 audit(4868.230:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.3.512" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb3b33282 code=0x7ffc0000
[ 4869.649722][   T31] audit: type=1326 audit(4868.260:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.3.512" exe="/syz-executor" sig=0 arch=c00000f3 syscall=436 compat=0 ip=0x7fffb3b33282 code=0x7ffc0000
[ 4869.857503][   T31] audit: type=1326 audit(4868.320:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.3.512" exe="/syz-executor" sig=0 arch=c00000f3 syscall=94 compat=0 ip=0x7fffb3b33282 code=0x7ffc0000
[ 4889.869323][ T7261] netlink: 16 bytes leftover after parsing attributes in process `syz.3.514'.
[ 4911.338876][ T7051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4912.244291][ T7051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4958.624591][ T7051] hsr_slave_0: entered promiscuous mode
[ 4958.835771][ T7051] hsr_slave_1: entered promiscuous mode
[ 4959.247514][ T7051] debugfs: 'hsr0' already exists in 'hsr'
[ 4959.249611][ T7051] Cannot create hsr debugfs directory
[ 4976.768326][ T7410] netlink: 16 bytes leftover after parsing attributes in process `syz.3.518'.
[ 4997.686561][ T7051] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 4998.733499][ T7051] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 4999.479391][ T7051] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 5000.159917][ T7051] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 5031.765891][ T7471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.522'.
[ 5046.579170][ T7051] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5091.568373][ T7503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.526'.
[ 5225.970942][ T7051] veth0_vlan: entered promiscuous mode
[ 5229.428217][ T7051] veth1_vlan: entered promiscuous mode
[ 5237.523756][ T7051] veth0_macvtap: entered promiscuous mode
[ 5238.867085][    C0] ------------[ cut here ]------------
[ 5238.867303][    C0] kernel BUG at [] mm/page_table_check.c:118!
[ 5238.868135][    C0] Kernel BUG [#1]
[ 5238.868312][    C0] Modules linked in:
[ 5238.869851][    C0] CPU: 0 UID: 0 PID: 7581 Comm: syz.3.535 Tainted: G             L      syzkaller #0 PREEMPT 
[ 5238.870346][    C0] Tainted: [L]=SOFTLOCKUP
[ 5238.870498][    C0] Hardware name: riscv-virtio,qemu (DT)
[ 5238.870922][    C0] epc : page_table_check_set+0xa74/0xd30
[ 5238.871849][    C0]  ra : page_table_check_set+0xa74/0xd30
[ 5238.872271][    C0] epc : ffffffff80bfcb7c ra : ffffffff80bfcb7c sp : ffff8f80026f6f60
[ 5238.872504][    C0]  gp : ffffffff89f9df20 tp : ffffaf8019509a80 t0 : ffffaf802f8bfd70
[ 5238.872787][    C0]  t1 : fffff5ef025ae409 t2 : ffffffff80a2597e s0 : ffff8f80026f6fe0
[ 5238.873019][    C0]  s1 : 0000000000000001 a0 : 0000000000000001 a1 : 0000000000000000
[ 5238.873281][    C0]  a2 : 0000000000080000 a3 : ffffffff80bfcb7c a4 : ffff8f8004d51658
[ 5238.873541][    C0]  a5 : 0000000000067658 a6 : 0000000000000003 a7 : ffffaf8012d7204b
[ 5238.873773][    C0]  s2 : 00000000000a4a00 s3 : 0000000000000000 s4 : ffffaf8012d72000
[ 5238.874003][    C0]  s5 : 0000000000000200 s6 : 0000000000000001 s7 : dfffffff00000000
[ 5238.874220][    C0]  s8 : 0000000000007fff s9 : ffffffff88825fa0 s10: 0000000000000000
[ 5238.874449][    C0]  s11: ffffffff8a0b5d80 t3 : 0000000000000001 t4 : fffff5ef025ae409
[ 5238.874661][    C0]  t5 : fffff5ef025ae40a t6 : 0000000000000002 ssp : 0000000000000000
[ 5238.874876][    C0] status: 0000000200000120 badaddr: ffffffff80bfcb7c cause: 0000000000000003
[ 5238.875169][    C0] [<ffffffff80bfcb7c>] page_table_check_set+0xa74/0xd30
[ 5238.875580][    C0] [<ffffffff80bfd300>] __page_table_check_ptes_set+0x264/0x47c
[ 5238.876027][    C0] [<ffffffff80b8b0de>] split_huge_pmd_locked+0x2b0a/0x326c
[ 5238.876434][    C0] [<ffffffff80b8bafa>] __split_huge_pmd+0x2ba/0x3e4
[ 5238.877085][    C0] [<ffffffff809f5ce0>] move_page_tables+0x97c/0x3c54
[ 5238.877678][    C0] [<ffffffff809f91ee>] copy_vma_and_data+0x236/0x694
[ 5238.878268][    C0] [<ffffffff809f9b0a>] move_vma+0x4be/0x1790
[ 5238.878813][    C0] [<ffffffff809faf68>] mremap_to+0x18c/0x3d8
[ 5238.879366][    C0] [<ffffffff809fbb5a>] do_mremap+0x9a6/0x1cf0
[ 5238.879922][    C0] [<ffffffff809fcfba>] __do_sys_mremap+0x116/0x240
[ 5238.880516][    C0] [<ffffffff809fd184>] __riscv_sys_mremap+0xa0/0x124
[ 5238.881217][    C0] [<ffffffff80078192>] syscall_handler+0x92/0x114
[ 5238.881896][    C0] [<ffffffff86391c0a>] do_trap_ecall_u+0x3d2/0x58c
[ 5238.882624][    C0] [<ffffffff863bb61e>] handle_exception+0x15e/0x16a
[ 5238.883619][    C0] Code: 7097 ff90 80e7 4580 81e3 e004 8097 ff90 80e7 9380 (9002) 8097 
[ 5238.884535][    C0] ---[ end trace 0000000000000000 ]---
[ 5238.885721][    C0] Kernel panic - not syncing: Fatal exception in interrupt
[ 5238.886344][    C0] SMP: stopping secondary CPUs

VM DIAGNOSIS:
18:29:40  Registers:
info registers vcpu 0

CPU#0
 V      =   0
 pc       ffffffff81f5e52c
 mhartid  0000000000000000
 mstatus  0000000a000001a0
 hstatus  0000000200000000
 vsstatus 0000000200000100
 mip      0000000000000220
 mie      000000000000022a
 mideleg  0000000000001666
 hideleg  0000000000000444
 medeleg  0000000000f4b509
 hedeleg  000000000000b10d
 mtvec    00000000800004f8
 stvec    ffffffff863bb4c0
 vstvec   0000000000000000
 mepc     ffffffff80090e2e
 sepc     ffffffff80bfcb7c
 vsepc    0000000000000000
 mcause   0000000000000009
 scause   0000000000000003
 vscause  0000000000000002
 mtval    0000000000000000
 stval    ffffffff80bfcb7c
 htval    0000000000000000
 mtval2   0000000000000000
 mscratch 0000000080049000
 sscratch 0000000000000000
 satp     90778000000afbe1
 x0/zero  0000000000000000 x1/ra    ffffffff81f5e4fc x2/sp    ffff8f80026f66e0 x3/gp    ffffffff89f9df20
 x4/tp    ffffaf8019509a80 x5/t0    2000000000000000 x6/t1    0000000000000001 x7/t2    2065726177647261
 x8/s0    ffff8f80026f6720 x9/s1    0000000000000000 x10/a0   ffffffff9135abc8 x11/a1   000000000000001f
 x12/a2   0000000000000000 x13/a3   ffffffff81f5e4fc x14/a4   1ffffffff226b579 x15/a5   ffff8f800006b000
 x16/a6   0000000000ff0100 x17/a7   0000000000000003 x18/s2   ffffffff9135ab80 x19/s3   0000000000000064
 x20/s4   0000000000000000 x21/s5   0000000000000000 x22/s6   0000000000000000 x23/s7   ffffffff81f5e498
 x24/s8   ffffffff9116a0dd x25/s9   fffffffef226b57b x26/s10  0000000000000010 x27/s11  000000000000000a
 x28/t3   ffffffff81f7135c x29/t4   fffff1ef004deccc x30/t5   fffff1ef004deccd x31/t6   ffffffff9116a0b7
 fcsr     0000000000000000
 f0/ft0   0000000000000000 f1/ft1   0000000000000000 f2/ft2   0000000000000000 f3/ft3   0000000000000000
 f4/ft4   0000000000000000 f5/ft5   0000000000000000 f6/ft6   0000000000000000 f7/ft7   0000000000000000
 f8/fs0   0000000000000000 f9/fs1   0000000000000000 f10/fa0  0000000000000000 f11/fa1  0000000000000000
 f12/fa2  0000000000000000 f13/fa3  0000000000000000 f14/fa4  0000000000000000 f15/fa5  0000000000000000
 f16/fa6  0000000000000000 f17/fa7  0000000000000000 f18/fs2  0000000000000000 f19/fs3  0000000000000000
 f20/fs4  0000000000000000 f21/fs5  0000000000000000 f22/fs6  0000000000000000 f23/fs7  0000000000000000
 f24/fs8  0000000000000000 f25/fs9  0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000
 f28/ft8  0000000000000000 f29/ft9  0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000
info registers vcpu 1

CPU#1
 V      =   0
 pc       ffffffff800875e6
 mhartid  0000000000000001
 mstatus  0000000a000001a0
 hstatus  0000000200000000
 vsstatus 0000000200000100
 mip      0000000000000020
 mie      000000000000022a
 mideleg  0000000000001666
 hideleg  0000000000000444
 medeleg  0000000000f4b509
 hedeleg  000000000000b10d
 mtvec    00000000800004f8
 stvec    ffffffff863bb4c0
 vstvec   0000000000000000
 mepc     ffffffff805044ac
 sepc     ffffffff805044ac
 vsepc    0000000000000000
 mcause   8000000000000003
 scause   8000000000000001
 vscause  0000000000000002
 mtval    0000000000000000
 stval    0000000000000000
 htval    0000000000000000
 mtval2   0000000000000000
 mscratch 0000000080047000
 sscratch 0000000000000000
 satp     906a1000000b33d1
 x0/zero  0000000000000000 x1/ra    ffffffff800875e2 x2/sp    ffff8f8000017e10 x3/gp    ffffffff89f9df20
 x4/tp    ffffaf801c87b500 x5/t0    ffff8f8000010000 x6/t1    fffffffef1415538 x7/t2    0000000000000023
 x8/s0    ffff8f8000017e40 x9/s1    ffffffff8680cf28 x10/a0   0000000000000001 x11/a1   0000000000000004
 x12/a2   0000000000000001 x13/a3   ffffffff800875e2 x14/a4   0000000000000000 x15/a5   ffffaf801c87b500
 x16/a6   fffffffef1415539 x17/a7   0000000000000003 x18/s2   0000000000000001 x19/s3   ffffffff8665f000
 x20/s4   ffffffff8008732c x21/s5   ffffaf8011e8c800 x22/s6   0000000000000000 x23/s7   0000000000000001
 x24/s8   0000000000000007 x25/s9   ffffffff9136c6e8 x26/s10  ffffffff8686d460 x27/s11  0000000000000004
 x28/t3   ffffffff87d89ca8 x29/t4   fffffffef1415538 x30/t5   fffffffef1415539 x31/t6   ffffaf8021b04026
 fcsr     0000000000000000
 f0/ft0   0000000000000000 f1/ft1   0000000000000000 f2/ft2   0000000000000000 f3/ft3   0000000000000000
 f4/ft4   0000000000000000 f5/ft5   0000000000000000 f6/ft6   0000000000000000 f7/ft7   0000000000000000
 f8/fs0   0000000000000000 f9/fs1   0000000000000000 f10/fa0  0000000000000000 f11/fa1  0000000000000000
 f12/fa2  0000000000000000 f13/fa3  0000000000000000 f14/fa4  0000000000000000 f15/fa5  0000000000000000
 f16/fa6  0000000000000000 f17/fa7  0000000000000000 f18/fs2  0000000000000000 f19/fs3  0000000000000000
 f20/fs4  0000000000000000 f21/fs5  0000000000000000 f22/fs6  0000000000000000 f23/fs7  0000000000000000
 f24/fs8  0000000000000000 f25/fs9  0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000
 f28/ft8  0000000000000000 f29/ft9  0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000