last executing test programs: 14m21.569027945s ago: executing program 0 (id=571): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="010000000400000008000000010000f200010000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300)=r4, 0x12) write$cgroup_freezer_state(r3, &(0x7f00000004c0)='FROZEN\x00', 0x7) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="bd70b3c77d4162ed3adaa7d33697833d59a0cbcb2a41708cc6e490c152b630069d", 0x21) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1}, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b15, &(0x7f0000000080)={'wlan0\x00'}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000080)={0x10, [0x1, 0x3ff, 0x1], [{0x82, 0x6, 0x0, 0x1, 0x1, 0x1}, {0xa5, 0x2, 0x1, 0x1, 0x0, 0x1}, {0x8000, 0x2, 0x1, 0x1}, {0x1, 0x8, 0x0, 0x1}, {0x4, 0x2, 0x0, 0x0, 0x1, 0x1}, {0x8, 0x1}, {0xd, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x401, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x8, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x4, 0x0, 0x1, 0x1}, {0xc, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x2}], 0x10001}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x5, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0xc, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9ed, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x90000000, 0x7, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffc, 0xffbffff8, 0x1000, 0x100, 0x1, 0x3f8, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x2, 0x4, 0x0, 0x0, 0x6], [0x714, 0x20000, 0x0, 0xffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0xb5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x40, 0x40, 0x5, 0xe, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x5, 0x55], [0x0, 0x0, 0x0, 0x5d71, 0x0, 0xbd8f, 0x1, 0x4, 0x0, 0xfffffffd, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, 0x2, 0x0, 0x10001, 0x810, 0x2, 0x0, 0x10000000, 0x800000, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0xffffffff, 0x7fff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xc09, 0x6, 0xfffffffc, 0x1, 0x1d, 0x10, 0x0, 0x4, 0x80000000], [0x4, 0x0, 0x2, 0xfffffffe, 0x400, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x0, 0x7ce1, 0x0, 0x0, 0x0, 0x5, 0x7e4, 0x2, 0x0, 0x8, 0xfffffc01, 0x91a, 0x3, 0x0, 0xdca2, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x2001, 0xfffffffd, 0x80, 0xffffffff, 0xffffffff, 0x0, 0xae, 0x0, 0xc, 0x400000, 0x2, 0x0, 0x10200000, 0x0, 0x9, 0x0, 0x0, 0x40008001, 0x40000, 0x2, 0x1]}, 0x45c) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) write(r8, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r9, 0x4028700f, &(0x7f0000000240)={0x0, 0x0, {0x13, 0x2f, 0x6, 0x1f, 0x2, 0x8, 0x5, 0x163, 0xffffffffffffffff}}) 14m21.479294847s ago: executing program 0 (id=573): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000f40), 0x0, 0x0) 14m21.319358911s ago: executing program 0 (id=574): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40008c1) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(0xffffffffffffffff, 0xc008aec1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) truncate(&(0x7f0000000000)='./file0/file0/file0\x00', 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sctp\x00') r4 = open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x5090880b, 0x0, 0x10, 0xd, 0x40, 0x0, 0x0, 0x2f, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x80, {0x1fffffffffffffc, 0x2, 0x5, 0x400007, 0xa003, 0x1ff, {0x8, 0x10000000005, 0x6, 0x40007d, 0x2, 0x3f45, 0xc05, 0x6, 0xa, 0x8000, 0x0, 0x0, r2, 0xe6f, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14m21.101854157s ago: executing program 0 (id=576): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14m20.797244594s ago: executing program 0 (id=578): r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x5, 0x0, 0x4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) r2 = syz_open_dev$video(&(0x7f00000021c0), 0x1, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10, &(0x7f0000002240)={0xa, 0x4e20, 0x7, @local, 0x8}, 0x18) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002280), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f00000022c0)) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000002300)={0x1, 0x2, 0x2}) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000002340)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000002380)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000002400)}, 0x400000}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000002440)=0x2) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000002480)=0x9) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f00000024c0)={0x1}) syz_usb_connect(0x0, 0x2b, &(0x7f0000002540)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff00000007058102"], 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./dev/ttyUSB0\x00', 0x2, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000025c0)={0x1, &(0x7f0000002600)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) ioctl$COMEDI_UNLOCK(r5, 0x6406) close_range(r6, 0xffffffffffffffff, 0x0) write(r1, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x39, 0x1, @thr={&(0x7f0000000180)="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", &(0x7f0000001180)="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"}}) 14m18.462749062s ago: executing program 0 (id=591): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="010000000400000008000000010000f200010000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300)=r4, 0x12) write$cgroup_freezer_state(r3, &(0x7f00000004c0)='FROZEN\x00', 0x7) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="bd70b3c77d4162ed3adaa7d33697833d59a0cbcb2a41708cc6e490c152b630069d", 0x21) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1}, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b15, &(0x7f0000000080)={'wlan0\x00'}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000080)={0x10, [0x1, 0x3ff, 0x1], [{0x82, 0x6, 0x0, 0x1, 0x1, 0x1}, {0xa5, 0x2, 0x1, 0x1, 0x0, 0x1}, {0x8000, 0x2, 0x1, 0x1}, {0x1, 0x8, 0x0, 0x1}, {0x4, 0x2, 0x0, 0x0, 0x1, 0x1}, {0x8, 0x1}, {0xd, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x401, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x8, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x4, 0x0, 0x1, 0x1}, {0xc, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x2}], 0x10001}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x5, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0xc, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9ed, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x90000000, 0x7, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffc, 0xffbffff8, 0x1000, 0x100, 0x1, 0x3f8, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x2, 0x4, 0x0, 0x0, 0x6], [0x714, 0x20000, 0x0, 0xffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0xb5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x40, 0x40, 0x5, 0xe, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x5, 0x55], [0x0, 0x0, 0x0, 0x5d71, 0x0, 0xbd8f, 0x1, 0x4, 0x0, 0xfffffffd, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, 0x2, 0x0, 0x10001, 0x810, 0x2, 0x0, 0x10000000, 0x800000, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0xffffffff, 0x7fff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xc09, 0x6, 0xfffffffc, 0x1, 0x1d, 0x10, 0x0, 0x4, 0x80000000], [0x4, 0x0, 0x2, 0xfffffffe, 0x400, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x0, 0x7ce1, 0x0, 0x0, 0x0, 0x5, 0x7e4, 0x2, 0x0, 0x8, 0xfffffc01, 0x91a, 0x3, 0x0, 0xdca2, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x2001, 0xfffffffd, 0x80, 0xffffffff, 0xffffffff, 0x0, 0xae, 0x0, 0xc, 0x400000, 0x2, 0x0, 0x10200000, 0x0, 0x9, 0x0, 0x0, 0x40008001, 0x40000, 0x2, 0x1]}, 0x45c) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) write(r8, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r9, 0x4028700f, &(0x7f0000000240)={0x0, 0x0, {0x13, 0x2f, 0x6, 0x1f, 0x2, 0x8, 0x5, 0x163, 0xffffffffffffffff}}) 14m3.407778013s ago: executing program 32 (id=591): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="010000000400000008000000010000f200010000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300)=r4, 0x12) write$cgroup_freezer_state(r3, &(0x7f00000004c0)='FROZEN\x00', 0x7) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="bd70b3c77d4162ed3adaa7d33697833d59a0cbcb2a41708cc6e490c152b630069d", 0x21) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1}, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b15, &(0x7f0000000080)={'wlan0\x00'}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000080)={0x10, [0x1, 0x3ff, 0x1], [{0x82, 0x6, 0x0, 0x1, 0x1, 0x1}, {0xa5, 0x2, 0x1, 0x1, 0x0, 0x1}, {0x8000, 0x2, 0x1, 0x1}, {0x1, 0x8, 0x0, 0x1}, {0x4, 0x2, 0x0, 0x0, 0x1, 0x1}, {0x8, 0x1}, {0xd, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x401, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x8, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x4, 0x0, 0x1, 0x1}, {0xc, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x2}], 0x10001}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x5, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0xc, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9ed, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x90000000, 0x7, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffc, 0xffbffff8, 0x1000, 0x100, 0x1, 0x3f8, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x2, 0x4, 0x0, 0x0, 0x6], [0x714, 0x20000, 0x0, 0xffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0xb5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x40, 0x40, 0x5, 0xe, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x5, 0x55], [0x0, 0x0, 0x0, 0x5d71, 0x0, 0xbd8f, 0x1, 0x4, 0x0, 0xfffffffd, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, 0x2, 0x0, 0x10001, 0x810, 0x2, 0x0, 0x10000000, 0x800000, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0xffffffff, 0x7fff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xc09, 0x6, 0xfffffffc, 0x1, 0x1d, 0x10, 0x0, 0x4, 0x80000000], [0x4, 0x0, 0x2, 0xfffffffe, 0x400, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x0, 0x7ce1, 0x0, 0x0, 0x0, 0x5, 0x7e4, 0x2, 0x0, 0x8, 0xfffffc01, 0x91a, 0x3, 0x0, 0xdca2, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x2001, 0xfffffffd, 0x80, 0xffffffff, 0xffffffff, 0x0, 0xae, 0x0, 0xc, 0x400000, 0x2, 0x0, 0x10200000, 0x0, 0x9, 0x0, 0x0, 0x40008001, 0x40000, 0x2, 0x1]}, 0x45c) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) write(r8, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r9, 0x4028700f, &(0x7f0000000240)={0x0, 0x0, {0x13, 0x2f, 0x6, 0x1f, 0x2, 0x8, 0x5, 0x163, 0xffffffffffffffff}}) 2m19.543820029s ago: executing program 3 (id=2260): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) set_mempolicy(0x3, &(0x7f0000000080)=0x2, 0x8) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x1040, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40043d0d, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) io_uring_setup(0x178d, &(0x7f0000000300)={0x0, 0x400052c1, 0x100, 0xfffffffa, 0xc}) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0xfffffffffffffff9, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x1, 0x0, 0x800000000004, 0x0, 0x80000000, 0xfffffffffffffffd, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c27c70ce6125797e7a869c6d70443c03e53b5abd92c5080e1b2d865abd50649c3be1410f3deb987a89456383ceba51ed71ebdf72a38bcdd6f0f71a7e9f7"], 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002000000ff"], 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) unshare(0x62040200) exit(0xffff) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) 2m18.311551449s ago: executing program 2 (id=2508): syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e20, @empty}], 0x10) syz_open_dev$usbmon(&(0x7f00000003c0), 0x80000001, 0x28100) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000d03000000b85ba123469d944958af20000000000000000105000000200000010e0000"], 0x0, 0x42, 0x0, 0x0, 0x3}, 0x28) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000005c0)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1}, 0xe) sendmmsg$inet_sctp(r3, &(0x7f0000000600)=[{&(0x7f0000000680)=@in={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x30}, {&(0x7f0000000700)=@in6={0xa, 0x4e23, 0xa8, @private0, 0x2}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000780)="e7e2f92fb585766089af8707efc85b76ff9adbeae4cec352e75f9856d80a4f3857f06a05ec249cdf4d438ec66dd60684086ec0867e788275847019e3d5", 0x3d}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="200000000000000084000000080000000000000000000000000000000000000018000000000000008400000007000000ac141429000000001800000000000000845acc00000007000000ac1e01010000000020000000000000008400000008000000fe800000000000000000000000000035"], 0x70, 0x1}], 0x2, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) recvmmsg$unix(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r4, 0x890b, &(0x7f0000000880)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb') bind$x25(r4, &(0x7f00000008c0), 0x12) connect$x25(r4, &(0x7f0000000900)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000940)={'bond0\x00', 0x2000}) socket$nl_generic(0x10, 0x3, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000980)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) 1m58.784520289s ago: executing program 3 (id=2260): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) set_mempolicy(0x3, &(0x7f0000000080)=0x2, 0x8) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x1040, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40043d0d, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) io_uring_setup(0x178d, &(0x7f0000000300)={0x0, 0x400052c1, 0x100, 0xfffffffa, 0xc}) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0xfffffffffffffff9, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x1, 0x0, 0x800000000004, 0x0, 0x80000000, 0xfffffffffffffffd, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c27c70ce6125797e7a869c6d70443c03e53b5abd92c5080e1b2d865abd50649c3be1410f3deb987a89456383ceba51ed71ebdf72a38bcdd6f0f71a7e9f7"], 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002000000ff"], 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) unshare(0x62040200) exit(0xffff) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) 1m56.673790281s ago: executing program 2 (id=2508): syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e20, @empty}], 0x10) syz_open_dev$usbmon(&(0x7f00000003c0), 0x80000001, 0x28100) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000d03000000b85ba123469d944958af20000000000000000105000000200000010e0000"], 0x0, 0x42, 0x0, 0x0, 0x3}, 0x28) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000005c0)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1}, 0xe) sendmmsg$inet_sctp(r3, &(0x7f0000000600)=[{&(0x7f0000000680)=@in={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x30}, {&(0x7f0000000700)=@in6={0xa, 0x4e23, 0xa8, @private0, 0x2}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000780)="e7e2f92fb585766089af8707efc85b76ff9adbeae4cec352e75f9856d80a4f3857f06a05ec249cdf4d438ec66dd60684086ec0867e788275847019e3d5", 0x3d}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="200000000000000084000000080000000000000000000000000000000000000018000000000000008400000007000000ac141429000000001800000000000000845acc00000007000000ac1e01010000000020000000000000008400000008000000fe800000000000000000000000000035"], 0x70, 0x1}], 0x2, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) recvmmsg$unix(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r4, 0x890b, &(0x7f0000000880)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb') bind$x25(r4, &(0x7f00000008c0), 0x12) connect$x25(r4, &(0x7f0000000900)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000940)={'bond0\x00', 0x2000}) socket$nl_generic(0x10, 0x3, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000980)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) 1m23.243605743s ago: executing program 3 (id=2260): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) set_mempolicy(0x3, &(0x7f0000000080)=0x2, 0x8) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x1040, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40043d0d, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) io_uring_setup(0x178d, &(0x7f0000000300)={0x0, 0x400052c1, 0x100, 0xfffffffa, 0xc}) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0xfffffffffffffff9, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x1, 0x0, 0x800000000004, 0x0, 0x80000000, 0xfffffffffffffffd, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c27c70ce6125797e7a869c6d70443c03e53b5abd92c5080e1b2d865abd50649c3be1410f3deb987a89456383ceba51ed71ebdf72a38bcdd6f0f71a7e9f7"], 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002000000ff"], 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) unshare(0x62040200) exit(0xffff) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) 1m20.93376888s ago: executing program 2 (id=2508): syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e20, @empty}], 0x10) syz_open_dev$usbmon(&(0x7f00000003c0), 0x80000001, 0x28100) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000d03000000b85ba123469d944958af20000000000000000105000000200000010e0000"], 0x0, 0x42, 0x0, 0x0, 0x3}, 0x28) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000005c0)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1}, 0xe) sendmmsg$inet_sctp(r3, &(0x7f0000000600)=[{&(0x7f0000000680)=@in={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x30}, {&(0x7f0000000700)=@in6={0xa, 0x4e23, 0xa8, @private0, 0x2}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000780)="e7e2f92fb585766089af8707efc85b76ff9adbeae4cec352e75f9856d80a4f3857f06a05ec249cdf4d438ec66dd60684086ec0867e788275847019e3d5", 0x3d}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="200000000000000084000000080000000000000000000000000000000000000018000000000000008400000007000000ac141429000000001800000000000000845acc00000007000000ac1e01010000000020000000000000008400000008000000fe800000000000000000000000000035"], 0x70, 0x1}], 0x2, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) recvmmsg$unix(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r4, 0x890b, &(0x7f0000000880)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb') bind$x25(r4, &(0x7f00000008c0), 0x12) connect$x25(r4, &(0x7f0000000900)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000940)={'bond0\x00', 0x2000}) socket$nl_generic(0x10, 0x3, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000980)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) 56.370560623s ago: executing program 3 (id=2260): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) set_mempolicy(0x3, &(0x7f0000000080)=0x2, 0x8) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x1040, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40043d0d, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) io_uring_setup(0x178d, &(0x7f0000000300)={0x0, 0x400052c1, 0x100, 0xfffffffa, 0xc}) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0xfffffffffffffff9, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x1, 0x0, 0x800000000004, 0x0, 0x80000000, 0xfffffffffffffffd, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c27c70ce6125797e7a869c6d70443c03e53b5abd92c5080e1b2d865abd50649c3be1410f3deb987a89456383ceba51ed71ebdf72a38bcdd6f0f71a7e9f7"], 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002000000ff"], 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) unshare(0x62040200) exit(0xffff) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) 54.699528785s ago: executing program 2 (id=2508): syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e20, @empty}], 0x10) syz_open_dev$usbmon(&(0x7f00000003c0), 0x80000001, 0x28100) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000d03000000b85ba123469d944958af20000000000000000105000000200000010e0000"], 0x0, 0x42, 0x0, 0x0, 0x3}, 0x28) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000005c0)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1}, 0xe) sendmmsg$inet_sctp(r3, &(0x7f0000000600)=[{&(0x7f0000000680)=@in={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x30}, {&(0x7f0000000700)=@in6={0xa, 0x4e23, 0xa8, @private0, 0x2}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000780)="e7e2f92fb585766089af8707efc85b76ff9adbeae4cec352e75f9856d80a4f3857f06a05ec249cdf4d438ec66dd60684086ec0867e788275847019e3d5", 0x3d}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="200000000000000084000000080000000000000000000000000000000000000018000000000000008400000007000000ac141429000000001800000000000000845acc00000007000000ac1e01010000000020000000000000008400000008000000fe800000000000000000000000000035"], 0x70, 0x1}], 0x2, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) recvmmsg$unix(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r4, 0x890b, &(0x7f0000000880)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb') bind$x25(r4, &(0x7f00000008c0), 0x12) connect$x25(r4, &(0x7f0000000900)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000940)={'bond0\x00', 0x2000}) socket$nl_generic(0x10, 0x3, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000980)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) 23.637392408s ago: executing program 3 (id=2260): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) set_mempolicy(0x3, &(0x7f0000000080)=0x2, 0x8) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x1040, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40043d0d, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) io_uring_setup(0x178d, &(0x7f0000000300)={0x0, 0x400052c1, 0x100, 0xfffffffa, 0xc}) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0xfffffffffffffff9, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x1, 0x0, 0x800000000004, 0x0, 0x80000000, 0xfffffffffffffffd, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c27c70ce6125797e7a869c6d70443c03e53b5abd92c5080e1b2d865abd50649c3be1410f3deb987a89456383ceba51ed71ebdf72a38bcdd6f0f71a7e9f7"], 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002000000ff"], 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) unshare(0x62040200) exit(0xffff) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) 21.858869702s ago: executing program 2 (id=2508): syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e20, @empty}], 0x10) syz_open_dev$usbmon(&(0x7f00000003c0), 0x80000001, 0x28100) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000d03000000b85ba123469d944958af20000000000000000105000000200000010e0000"], 0x0, 0x42, 0x0, 0x0, 0x3}, 0x28) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000005c0)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1}, 0xe) sendmmsg$inet_sctp(r3, &(0x7f0000000600)=[{&(0x7f0000000680)=@in={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x30}, {&(0x7f0000000700)=@in6={0xa, 0x4e23, 0xa8, @private0, 0x2}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000780)="e7e2f92fb585766089af8707efc85b76ff9adbeae4cec352e75f9856d80a4f3857f06a05ec249cdf4d438ec66dd60684086ec0867e788275847019e3d5", 0x3d}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="200000000000000084000000080000000000000000000000000000000000000018000000000000008400000007000000ac141429000000001800000000000000845acc00000007000000ac1e01010000000020000000000000008400000008000000fe800000000000000000000000000035"], 0x70, 0x1}], 0x2, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) recvmmsg$unix(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r4, 0x890b, &(0x7f0000000880)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb') bind$x25(r4, &(0x7f00000008c0), 0x12) connect$x25(r4, &(0x7f0000000900)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000940)={'bond0\x00', 0x2000}) socket$nl_generic(0x10, 0x3, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000980)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) 8.310206196s ago: executing program 4 (id=2909): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000ac0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.457429435s ago: executing program 1 (id=2914): r0 = openat(0xffffffffffffff9c, 0x0, 0x240240, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) migrate_pages(r2, 0xfffffeff, 0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000280)={{0x2, 0x4e24, @remote}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0xe, {0x2, 0x4e22, @multicast1}, 'vlan0\x00'}) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r7, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r6, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 4.347006073s ago: executing program 4 (id=2915): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00"], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 4.302161683s ago: executing program 1 (id=2916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="bfe666358906"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) r8 = syz_open_dev$vim2m(&(0x7f0000000580), 0x407, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000000)={0x2, @vbi={0x2, 0x6, 0x6, 0x32315559, [0x1, 0xfffff801], [0x2, 0x5], 0x1}}) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x1, 0x20c95a, 0xf, 0x1, 0x83, 0x2, 0x0, 0x7f, 0xa9, 0x4d, 0x2, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0xd, 0x20002, 0x7, 0x2, 0x8006, 0x0, 0x7, 0x3c5e, 0x1, 0x24, 0x9, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x4, 0x6, 0x5, 0x3e, 0x18e, 0x5, 0x0, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5302, 0x0, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0x2, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x3, 0x7fff, 0x6, 0x400, 0x1, 0x6, 0x1, 0xff, 0xd9ef, 0xfffff57d, 0x5f31, 0x40000f, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x7, 0x7, 0x1, 0x6, 0x1, 0xfe000002, 0x8, 0x9, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x7, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x2, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x832, 0xa6, 0x4, 0xa9, 0xff, 0x0, 0xac8, 0xbf, 0x2000002, 0x80, 0x7ff, 0x4, 0x1, 0xc921, 0xa, 0xffffffff, 0x4, 0x2, 0x2120000, 0x0, 0x2006, 0x80a2ed, 0x1, 0x2], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x38, 0x3, 0x2, 0xfffffffc, 0x4, 0x7fff, 0xfffe, 0x7, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x10000, 0x5, 0xc8, 0x1, 0xfffff000, 0x1000, 0x3, 0x7e, 0x100, 0x8000, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x70d0, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1d, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c) fanotify_init(0x200, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f00000003c0)={'fscrypt:', @desc1}, &(0x7f00000008c0)={0x0, "f6bbde41dd7061c64c92a8707e2b6a018788dede3cea0fcea38464751dac11cf2c0e9fb4461e599e87678b9890361d7c5244159ca9ea8f577bf94c92d1d4bdf1", 0x34}, 0x48, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "36849cb858600378ea2788821c1f915b1bc470b3cc4b223847acceaaac15a86b460f3de2f568bf32ba09cf7bd036e36cd8c9eb239b7a440b18f1e0580f2e75c9", 0x32}, 0x48, r9) getrandom(0x0, 0x0, 0x2) ppoll(&(0x7f00000000c0)=[{r4}, {r2, 0x400}], 0x2, 0x0, 0x0, 0x0) 3.067791804s ago: executing program 1 (id=2917): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008890}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x5, 0x6ca, 0x7ff}, 0x10) mount$overlay(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)) 2.908697018s ago: executing program 1 (id=2918): r0 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000380)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "dec557407795bb6fb33ff8685215d03bb3c57615baa8f98df3165e56695e5fdfec39f4eac81f7fdf77d881d13cbf4bfe44bcb0222522c867dfa97ba205b0f762", 0x22}, 0x48, 0xfffffffffffffffd) keyctl$clear(0x7, r0) r1 = socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x480) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000000c0)=0x8000) 2.561966697s ago: executing program 4 (id=2919): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x8) write(r0, 0x0, 0x0) 1.853667674s ago: executing program 4 (id=2920): openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) fanotify_init(0x0, 0x80000) pipe2(0x0, 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 1.713290268s ago: executing program 1 (id=2921): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) open_by_handle_at(r0, &(0x7f0000000140)=@ceph_nfs_fh={0x8, 0x1, {0x80}}, 0x200001) 1.654340649s ago: executing program 4 (id=2922): ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, &(0x7f0000000500)={{0x6, 0x4, 0x6c81, 0x6}, 0x0}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf10, 0x0, 0xffff, 0x9dff, 0x15, "0500"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0x12, "0062007d8200000000000000830ff7ffffff00"}) syz_open_pts(r0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) 1.544890631s ago: executing program 1 (id=2923): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f0000000cc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.518574592s ago: executing program 2 (id=2508): syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e20, @empty}], 0x10) syz_open_dev$usbmon(&(0x7f00000003c0), 0x80000001, 0x28100) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000d03000000b85ba123469d944958af20000000000000000105000000200000010e0000"], 0x0, 0x42, 0x0, 0x0, 0x3}, 0x28) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000005c0)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1}, 0xe) sendmmsg$inet_sctp(r3, &(0x7f0000000600)=[{&(0x7f0000000680)=@in={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x30}, {&(0x7f0000000700)=@in6={0xa, 0x4e23, 0xa8, @private0, 0x2}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000780)="e7e2f92fb585766089af8707efc85b76ff9adbeae4cec352e75f9856d80a4f3857f06a05ec249cdf4d438ec66dd60684086ec0867e788275847019e3d5", 0x3d}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="200000000000000084000000080000000000000000000000000000000000000018000000000000008400000007000000ac141429000000001800000000000000845acc00000007000000ac1e01010000000020000000000000008400000008000000fe800000000000000000000000000035"], 0x70, 0x1}], 0x2, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) recvmmsg$unix(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r4, 0x890b, &(0x7f0000000880)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb') bind$x25(r4, &(0x7f00000008c0), 0x12) connect$x25(r4, &(0x7f0000000900)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000940)={'bond0\x00', 0x2000}) socket$nl_generic(0x10, 0x3, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000980)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) 277.56µs ago: executing program 4 (id=2924): r0 = openat(0xffffffffffffff9c, 0x0, 0x240240, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) migrate_pages(r2, 0xfffffeff, 0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000280)={{0x2, 0x4e24, @remote}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0xe, {0x2, 0x4e22, @multicast1}, 'vlan0\x00'}) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r7, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r6, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 0s ago: executing program 3 (id=2260): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) set_mempolicy(0x3, &(0x7f0000000080)=0x2, 0x8) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x1040, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40043d0d, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) io_uring_setup(0x178d, &(0x7f0000000300)={0x0, 0x400052c1, 0x100, 0xfffffffa, 0xc}) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0xfffffffffffffff9, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x1, 0x0, 0x800000000004, 0x0, 0x80000000, 0xfffffffffffffffd, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c27c70ce6125797e7a869c6d70443c03e53b5abd92c5080e1b2d865abd50649c3be1410f3deb987a89456383ceba51ed71ebdf72a38bcdd6f0f71a7e9f7"], 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002000000ff"], 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) unshare(0x62040200) exit(0xffff) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 3 [ 919.212770][T12708] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 919.229784][ T5814] usb 5-1: can't read configurations, error -22 [ 919.438060][ T5814] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 919.643312][ T5814] usb 5-1: Using ep0 maxpacket: 32 [ 919.682117][ T5814] usb 5-1: no configurations [ 919.695142][ T5814] usb 5-1: can't read configurations, error -22 [ 919.712444][ T5814] usb usb5-port1: attempt power cycle [ 919.873176][T16011] chnl_net:caif_netlink_parms(): no params data found [ 919.966080][T13291] usb 2-1: unit 5 not found! [ 919.990646][T13291] usb 2-1: USB disconnect, device number 46 [ 920.017488][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 920.030564][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 920.034089][T10793] hsr_slave_0: left promiscuous mode [ 920.043177][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 920.059901][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 920.068148][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 920.069298][T12277] udevd[12277]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 920.093030][T10793] hsr_slave_1: left promiscuous mode [ 920.098284][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 920.126039][T10793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 920.141759][T10793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 920.156880][ T5814] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 920.190099][T10793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 920.215250][T10793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 920.223770][ T5814] usb 5-1: Using ep0 maxpacket: 32 [ 920.229823][ T5814] usb 5-1: no configurations [ 920.244187][T10793] bridge_slave_1: left allmulticast mode [ 920.249886][T10793] bridge_slave_1: left promiscuous mode [ 920.255521][ T5814] usb 5-1: can't read configurations, error -22 [ 920.274597][T10793] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.292953][T10793] bridge_slave_0: left allmulticast mode [ 920.307444][T10793] bridge_slave_0: left promiscuous mode [ 920.313288][T10793] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.386986][T10793] veth1_macvtap: left promiscuous mode [ 920.392678][T10793] veth0_macvtap: left promiscuous mode [ 920.402734][T10793] veth1_vlan: left promiscuous mode [ 920.410449][T10793] veth0_vlan: left promiscuous mode [ 920.415968][ T5814] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 920.461183][ T5814] usb 5-1: Using ep0 maxpacket: 32 [ 920.470432][ T5814] usb 5-1: no configurations [ 920.485620][ T5814] usb 5-1: can't read configurations, error -22 [ 920.494065][ T5814] usb usb5-port1: unable to enumerate USB device [ 921.255259][ T5785] Bluetooth: hci1: command tx timeout [ 921.766255][T16049] FAULT_INJECTION: forcing a failure. [ 921.766255][T16049] name failslab, interval 1, probability 0, space 0, times 0 [ 921.792155][T16049] CPU: 0 PID: 16049 Comm: syz.4.2744 Not tainted syzkaller #0 [ 921.799682][T16049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 921.809752][T16049] Call Trace: [ 921.813035][T16049] [ 921.815969][T16049] dump_stack_lvl+0x18c/0x250 [ 921.820673][T16049] ? show_regs_print_info+0x20/0x20 [ 921.825894][T16049] ? load_image+0x420/0x420 [ 921.830417][T16049] ? __might_sleep+0xe0/0xe0 [ 921.835025][T16049] ? __lock_acquire+0x7eb0/0x7eb0 [ 921.840061][T16049] should_fail_ex+0x394/0x4c0 [ 921.844753][T16049] should_failslab+0x9/0x20 [ 921.849299][T16049] slab_pre_alloc_hook+0x59/0x300 [ 921.854350][T16049] ? tomoyo_encode+0x2ad/0x570 [ 921.859139][T16049] ? tomoyo_encode+0x2ad/0x570 [ 921.863917][T16049] __kmem_cache_alloc_node+0x53/0x250 [ 921.869306][T16049] ? tomoyo_realpath_from_path+0x5c0/0x5c0 [ 921.875137][T16049] ? tomoyo_encode+0x2ad/0x570 [ 921.879916][T16049] __kmalloc+0xa7/0x240 [ 921.884088][T16049] tomoyo_encode+0x2ad/0x570 [ 921.888692][T16049] tomoyo_realpath_from_path+0x57c/0x5c0 [ 921.894339][T16049] tomoyo_mount_permission+0x3e7/0x9d0 [ 921.899798][T16049] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 921.905522][T16049] ? kasan_set_track+0x4e/0x70 [ 921.910300][T16049] ? tomoyo_get_name+0x570/0x570 [ 921.915247][T16049] ? user_path_at_empty+0x4c/0x60 [ 921.920305][T16049] ? kasan_quarantine_put+0xd8/0x220 [ 921.925602][T16049] ? lockdep_hardirqs_on+0x98/0x150 [ 921.930807][T16049] security_sb_mount+0x87/0xc0 [ 921.935591][T16049] path_mount+0xbc/0xfa0 [ 921.939835][T16049] ? kmem_cache_free+0xf8/0x290 [ 921.944695][T16049] __se_sys_mount+0x2e7/0x3d0 [ 921.949381][T16049] ? __x64_sys_mount+0xc0/0xc0 [ 921.954158][T16049] ? lockdep_hardirqs_on+0x98/0x150 [ 921.959359][T16049] ? __x64_sys_mount+0x20/0xc0 [ 921.964128][T16049] do_syscall_64+0x55/0xb0 [ 921.968547][T16049] ? clear_bhb_loop+0x40/0x90 [ 921.973226][T16049] ? clear_bhb_loop+0x40/0x90 [ 921.977919][T16049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 921.983826][T16049] RIP: 0033:0x7f064cf9e1d9 [ 921.988270][T16049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.007894][T16049] RSP: 002b:00007f064df15028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 922.016323][T16049] RAX: ffffffffffffffda RBX: 00007f064d225fa0 RCX: 00007f064cf9e1d9 [ 922.024327][T16049] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000000 [ 922.032388][T16049] RBP: 00007f064d035888 R08: 0000200000000280 R09: 0000000000000000 [ 922.040567][T16049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 922.048560][T16049] R13: 00007f064d226038 R14: 00007f064d225fa0 R15: 00007fffd2029a98 [ 922.056568][T16049] [ 922.074085][T16049] ERROR: Out of memory at tomoyo_realpath_from_path. [ 922.222358][ T5785] Bluetooth: hci2: command tx timeout [ 922.699234][T10793] team0 (unregistering): Port device team_slave_1 removed [ 922.802886][T10793] team0 (unregistering): Port device team_slave_0 removed [ 922.878846][T10793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.951198][T10793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.339825][ T5785] Bluetooth: hci1: command tx timeout [ 923.376907][T10793] bond0 (unregistering): Released all slaves [ 923.556552][T16011] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.569656][T16011] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.584355][T16011] bridge_slave_0: entered allmulticast mode [ 923.591693][T16011] bridge_slave_0: entered promiscuous mode [ 923.703893][T16011] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.745252][T16011] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.793720][T16011] bridge_slave_1: entered allmulticast mode [ 923.813062][T16068] nvme_fabrics: missing parameter 'transport=%s' [ 923.823643][T16068] nvme_fabrics: missing parameter 'nqn=%s' [ 923.839740][T16011] bridge_slave_1: entered promiscuous mode [ 924.071919][T16011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.132627][T16011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.503666][ T5785] Bluetooth: hci2: command tx timeout [ 925.131257][T16011] team0: Port device team_slave_0 added [ 925.159382][T16011] team0: Port device team_slave_1 added [ 925.424404][ T5785] Bluetooth: hci1: command tx timeout [ 926.000469][T10793] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.211500][T16011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.240677][T16011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.273628][T16011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.292805][T16011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 926.300385][T16011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.344751][T16011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.449648][T10793] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.533489][ T5785] Bluetooth: hci2: command tx timeout [ 926.591484][T10793] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.687577][T10793] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.718231][T16011] hsr_slave_0: entered promiscuous mode [ 926.725594][T16011] hsr_slave_1: entered promiscuous mode [ 926.732443][T16011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 926.740794][T16011] Cannot create hsr debugfs directory [ 926.756335][T16026] chnl_net:caif_netlink_parms(): no params data found [ 926.813979][T11819] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 926.823984][T14735] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 927.015458][T11819] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 927.023596][T14735] usb 5-1: Using ep0 maxpacket: 32 [ 927.031851][T11819] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 927.044250][T11819] usb 2-1: New USB device found, idVendor=04b4, idProduct=931e, bcdDevice= 0.40 [ 927.052386][T14735] usb 5-1: no configurations [ 927.054101][T11819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.066405][T14735] usb 5-1: can't read configurations, error -22 [ 927.066428][T11819] usb 2-1: Product: syz [ 927.077501][T11819] usb 2-1: Manufacturer: syz [ 927.082144][T11819] usb 2-1: SerialNumber: syz [ 927.180410][T16026] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.196556][T16026] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.204646][T16026] bridge_slave_0: entered allmulticast mode [ 927.211839][T16026] bridge_slave_0: entered promiscuous mode [ 927.244872][T14735] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 927.263212][T16026] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.296693][T16026] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.311895][T16026] bridge_slave_1: entered allmulticast mode [ 927.321744][T16026] bridge_slave_1: entered promiscuous mode [ 927.433397][T14735] usb 5-1: Using ep0 maxpacket: 32 [ 927.444443][T14735] usb 5-1: no configurations [ 927.454744][T14735] usb 5-1: can't read configurations, error -22 [ 927.480349][T14735] usb usb5-port1: attempt power cycle [ 927.493341][ T5785] Bluetooth: hci1: command tx timeout [ 927.512316][T16026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.729678][T16026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.880113][T16026] team0: Port device team_slave_0 added [ 927.916547][T14735] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 927.945645][T16026] team0: Port device team_slave_1 added [ 927.956713][T14735] usb 5-1: Using ep0 maxpacket: 32 [ 927.962714][T14735] usb 5-1: no configurations [ 927.967687][T14735] usb 5-1: can't read configurations, error -22 [ 928.021958][T16026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.031014][T16026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.066582][T16026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.085115][T16026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.092172][T16026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.120527][T16026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.123405][T14735] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 928.174189][T14735] usb 5-1: Using ep0 maxpacket: 32 [ 928.180256][T14735] usb 5-1: no configurations [ 928.185330][T14735] usb 5-1: can't read configurations, error -22 [ 928.198735][T14735] usb usb5-port1: unable to enumerate USB device [ 928.316946][T16026] hsr_slave_0: entered promiscuous mode [ 928.324197][T16026] hsr_slave_1: entered promiscuous mode [ 928.330424][T16026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 928.338415][T16026] Cannot create hsr debugfs directory [ 928.438909][T16011] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 928.484306][T16011] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 928.504864][T16011] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 928.581488][T16011] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 928.613459][ T5785] Bluetooth: hci2: command tx timeout [ 928.701178][T11819] usb 2-1: unit 5 not found! [ 928.748711][T11819] usb 2-1: USB disconnect, device number 47 [ 928.800987][T12277] udevd[12277]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 928.982767][T10793] hsr_slave_0: left promiscuous mode [ 928.999646][T10793] hsr_slave_1: left promiscuous mode [ 929.008989][T10793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 929.017064][T10793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.035356][T10793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 929.052498][T10793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 929.062114][T10793] bridge_slave_1: left allmulticast mode [ 929.068374][T10793] bridge_slave_1: left promiscuous mode [ 929.074542][T10793] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.085082][T10793] bridge_slave_0: left allmulticast mode [ 929.090876][T10793] bridge_slave_0: left promiscuous mode [ 929.097469][T10793] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.141554][T10793] veth1_macvtap: left promiscuous mode [ 929.147848][T10793] veth0_macvtap: left promiscuous mode [ 929.154146][T10793] veth1_vlan: left promiscuous mode [ 929.159689][T10793] veth0_vlan: left promiscuous mode [ 929.655793][T16144] overlayfs: missing 'lowerdir' [ 930.339218][T10793] team0 (unregistering): Port device team_slave_1 removed [ 930.410099][T10793] team0 (unregistering): Port device team_slave_0 removed [ 930.503344][T10793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 930.591701][T10793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 930.988823][T10793] bond0 (unregistering): Released all slaves [ 932.491255][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.505523][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.191564][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 934.191580][ T28] audit: type=1326 audit(1791613330.721:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16166 comm="syz.4.2758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064cf9e1d9 code=0x7ffc0000 [ 934.253824][T16011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.284533][ T28] audit: type=1326 audit(1791613330.721:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16166 comm="syz.4.2758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064cf9e1d9 code=0x7ffc0000 [ 934.290932][T16011] 8021q: adding VLAN 0 to HW filter on device team0 [ 934.317011][ T28] audit: type=1326 audit(1791613330.721:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16166 comm="syz.4.2758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064cf9e1d9 code=0x7ffc0000 [ 934.367548][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.374790][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 934.405495][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.412703][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 934.430892][ T28] audit: type=1326 audit(1791613330.721:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16166 comm="syz.4.2758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064cf9e1d9 code=0x7ffc0000 [ 934.465415][ T28] audit: type=1326 audit(1791613330.721:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16166 comm="syz.4.2758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f064cf9e1d9 code=0x7ffc0000 [ 934.548623][ T28] audit: type=1326 audit(1791613330.721:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16166 comm="syz.4.2758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064cf9e1d9 code=0x7ffc0000 [ 934.623368][ T28] audit: type=1326 audit(1791613330.721:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16166 comm="syz.4.2758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064cf9e1d9 code=0x7ffc0000 [ 934.701513][ T28] audit: type=1326 audit(1791613330.761:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16166 comm="syz.4.2758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064cf9e1d9 code=0x7ffc0000 [ 934.728410][T16026] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 934.779219][ T28] audit: type=1326 audit(1791613330.761:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16166 comm="syz.4.2758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064cf9e1d9 code=0x7ffc0000 [ 934.804573][T16026] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 934.824213][T16026] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 934.850122][T16026] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 934.868193][ T28] audit: type=1326 audit(1791613330.761:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16166 comm="syz.4.2758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f064cf9e1d9 code=0x7ffc0000 [ 935.249639][T16026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.399966][T16026] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.434991][T16011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 935.490346][T13982] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.497507][T13982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 935.527318][T16189] nvme_fabrics: missing parameter 'transport=%s' [ 935.533803][T16189] nvme_fabrics: missing parameter 'nqn=%s' [ 935.594978][T13982] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.602166][T13982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.818269][T16011] veth0_vlan: entered promiscuous mode [ 935.857513][T16011] veth1_vlan: entered promiscuous mode [ 935.976781][T16011] veth0_macvtap: entered promiscuous mode [ 936.008767][T16011] veth1_macvtap: entered promiscuous mode [ 936.141076][T16011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.193425][T16011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.233450][T16011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.263313][T16011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.273197][T16011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.319136][T16011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.342051][T16011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.375102][T16011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.403349][T16011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.420110][T16011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.451137][T16011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.465187][T16011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.486567][T16011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.498667][T16011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.552179][T16011] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.562981][T16011] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.573461][T16011] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.582205][T16011] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.711259][T16026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.733397][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 936.863540][T14735] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 936.916063][T16026] veth0_vlan: entered promiscuous mode [ 936.923362][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 936.936811][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 936.956340][ T9] usb 5-1: config 0 has no interfaces? [ 936.970964][ T9] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 936.989439][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.000918][ T9] usb 5-1: Product: syz [ 937.010725][ T9] usb 5-1: Manufacturer: syz [ 937.020791][ T9] usb 5-1: SerialNumber: syz [ 937.036871][T16026] veth1_vlan: entered promiscuous mode [ 937.036926][ T9] usb 5-1: config 0 descriptor?? [ 937.056637][T14735] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 937.081515][T14735] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 937.094222][T14735] usb 2-1: New USB device found, idVendor=04b4, idProduct=931e, bcdDevice= 0.40 [ 937.104418][T14735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.120971][T14735] usb 2-1: Product: syz [ 937.125564][T14735] usb 2-1: Manufacturer: syz [ 937.130208][T14735] usb 2-1: SerialNumber: syz [ 937.137838][T16026] veth0_macvtap: entered promiscuous mode [ 937.166855][T16026] veth1_macvtap: entered promiscuous mode [ 937.196425][T16026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 937.207714][T16026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.219362][T16026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 937.230070][T16026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.240053][T16026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 937.250652][T16026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.273423][T16026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 937.286902][T16026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.300980][T16026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 937.322459][T16026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 937.353402][T16026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.370763][T16026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 937.382679][T16026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.399160][T16026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 937.423876][T16026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.441317][T16026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 937.452384][T16026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.470232][T16026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 937.484278][T16026] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.493197][T16026] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.503907][T16026] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.512718][T16026] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.256773][ T2943] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.025545][T14735] usb 2-1: unit 5 not found! [ 939.069248][ T2943] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.089929][T14735] usb 2-1: USB disconnect, device number 48 [ 939.195980][ T2943] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.276773][ T2943] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.552242][ T23] usb 5-1: USB disconnect, device number 31 [ 940.295811][T16304] overlayfs: missing 'lowerdir' [ 940.376043][T16306] FAULT_INJECTION: forcing a failure. [ 940.376043][T16306] name failslab, interval 1, probability 0, space 0, times 0 [ 940.404639][T16306] CPU: 1 PID: 16306 Comm: syz.1.2764 Not tainted syzkaller #0 [ 940.412168][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 940.422250][T16306] Call Trace: [ 940.425546][T16306] [ 940.428498][T16306] dump_stack_lvl+0x18c/0x250 [ 940.433273][T16306] ? show_regs_print_info+0x20/0x20 [ 940.438484][T16306] ? load_image+0x420/0x420 [ 940.443019][T16306] ? __might_sleep+0xe0/0xe0 [ 940.447730][T16306] ? __lock_acquire+0x7eb0/0x7eb0 [ 940.452769][T16306] should_fail_ex+0x394/0x4c0 [ 940.457471][T16306] should_failslab+0x9/0x20 [ 940.461988][T16306] slab_pre_alloc_hook+0x59/0x300 [ 940.467020][T16306] ? tomoyo_encode+0x2ad/0x570 [ 940.471786][T16306] ? tomoyo_encode+0x2ad/0x570 [ 940.476580][T16306] __kmem_cache_alloc_node+0x53/0x250 [ 940.481986][T16306] ? tomoyo_realpath_from_path+0x5c0/0x5c0 [ 940.487805][T16306] ? tomoyo_encode+0x2ad/0x570 [ 940.492567][T16306] __kmalloc+0xa7/0x240 [ 940.496760][T16306] tomoyo_encode+0x2ad/0x570 [ 940.501384][T16306] tomoyo_realpath_from_path+0x57c/0x5c0 [ 940.507052][T16306] tomoyo_mount_permission+0x3e7/0x9d0 [ 940.512519][T16306] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 940.518188][T16306] ? kasan_set_track+0x4e/0x70 [ 940.522959][T16306] ? tomoyo_get_name+0x570/0x570 [ 940.527900][T16306] ? user_path_at_empty+0x4c/0x60 [ 940.532960][T16306] ? kasan_quarantine_put+0xd8/0x220 [ 940.538253][T16306] ? lockdep_hardirqs_on+0x98/0x150 [ 940.543464][T16306] security_sb_mount+0x87/0xc0 [ 940.548237][T16306] path_mount+0xbc/0xfa0 [ 940.552831][T16306] ? kmem_cache_free+0xf8/0x290 [ 940.557699][T16306] __se_sys_mount+0x2e7/0x3d0 [ 940.562474][T16306] ? __x64_sys_mount+0xc0/0xc0 [ 940.567246][T16306] ? lockdep_hardirqs_on+0x98/0x150 [ 940.572461][T16306] ? __x64_sys_mount+0x20/0xc0 [ 940.577254][T16306] do_syscall_64+0x55/0xb0 [ 940.581677][T16306] ? clear_bhb_loop+0x40/0x90 [ 940.586370][T16306] ? clear_bhb_loop+0x40/0x90 [ 940.591054][T16306] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 940.596955][T16306] RIP: 0033:0x7f0d0039e1d9 [ 940.601371][T16306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.620991][T16306] RSP: 002b:00007f0d011f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 940.629508][T16306] RAX: ffffffffffffffda RBX: 00007f0d00625fa0 RCX: 00007f0d0039e1d9 [ 940.637487][T16306] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000000 [ 940.645543][T16306] RBP: 00007f0d00435888 R08: 0000200000000280 R09: 0000000000000000 [ 940.653512][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 940.661487][T16306] R13: 00007f0d00626038 R14: 00007f0d00625fa0 R15: 00007fff86790218 [ 940.669476][T16306] [ 940.694229][T16306] ERROR: Out of memory at tomoyo_realpath_from_path. [ 940.928894][ T2943] hsr_slave_0: left promiscuous mode [ 940.950886][ T2943] hsr_slave_1: left promiscuous mode [ 940.962727][ T2943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 940.980997][T12708] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 940.985742][ T2943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.001478][T12708] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 941.002346][ T2943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 941.023509][ T2943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 941.031041][T12708] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 941.034673][ T2943] bridge_slave_1: left allmulticast mode [ 941.049778][ T2943] bridge_slave_1: left promiscuous mode [ 941.056537][T12708] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 941.056632][ T2943] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.072479][T12708] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 941.082654][T12708] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 941.083881][ T2943] bridge_slave_0: left allmulticast mode [ 941.117658][ T2943] bridge_slave_0: left promiscuous mode [ 941.124764][ T2943] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.160512][ T2943] veth1_macvtap: left promiscuous mode [ 941.166214][ T2943] veth0_macvtap: left promiscuous mode [ 941.173506][ T2943] veth1_vlan: left promiscuous mode [ 941.180460][ T2943] veth0_vlan: left promiscuous mode [ 942.719760][T12708] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 942.732585][T12708] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 942.744545][T12708] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 942.772800][T12708] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 942.793624][T12708] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 942.810369][T12708] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 942.986920][T16350] nvme_fabrics: missing parameter 'transport=%s' [ 942.993479][T16350] nvme_fabrics: missing parameter 'nqn=%s' [ 943.183344][ T5785] Bluetooth: hci1: command tx timeout [ 943.408341][ T2943] team0 (unregistering): Port device team_slave_1 removed [ 943.462242][ T2943] team0 (unregistering): Port device team_slave_0 removed [ 943.473607][ T5844] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 943.518008][ T2943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 943.572245][ T2943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 943.673572][ T5844] usb 5-1: Using ep0 maxpacket: 32 [ 943.685081][ T5844] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 943.696081][ T5844] usb 5-1: config 0 has no interfaces? [ 943.705290][ T5844] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 943.714949][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.723135][ T5844] usb 5-1: Product: syz [ 943.728547][ T5844] usb 5-1: Manufacturer: syz [ 943.733209][ T5844] usb 5-1: SerialNumber: syz [ 943.741008][ T5844] usb 5-1: config 0 descriptor?? [ 944.009096][ T2943] bond0 (unregistering): Released all slaves [ 944.136195][T16332] syzkaller0: entered allmulticast mode [ 944.859151][ T5785] Bluetooth: hci2: command tx timeout [ 945.261129][ T5785] Bluetooth: hci1: command tx timeout [ 946.247958][T14735] usb 5-1: USB disconnect, device number 32 [ 946.934064][ T5785] Bluetooth: hci2: command tx timeout [ 947.333523][ T5785] Bluetooth: hci1: command tx timeout [ 947.550014][T16384] overlayfs: missing 'lowerdir' [ 948.100248][T16312] chnl_net:caif_netlink_parms(): no params data found [ 948.619778][T16345] chnl_net:caif_netlink_parms(): no params data found [ 948.897592][ T2943] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.947037][T16312] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.975071][T16312] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.982367][T16312] bridge_slave_0: entered allmulticast mode [ 949.015874][ T5785] Bluetooth: hci2: command tx timeout [ 949.023654][T16312] bridge_slave_0: entered promiscuous mode [ 949.183003][ T2943] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.227343][T16312] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.267945][T16419] nvme_fabrics: missing parameter 'transport=%s' [ 949.274587][T16419] nvme_fabrics: missing parameter 'nqn=%s' [ 949.311613][T16312] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.381137][T16312] bridge_slave_1: entered allmulticast mode [ 949.420920][ T5785] Bluetooth: hci1: command tx timeout [ 949.453760][T16312] bridge_slave_1: entered promiscuous mode [ 950.048107][ T2943] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.093731][ T5785] Bluetooth: hci2: command tx timeout [ 952.077867][ T2943] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.387398][T16312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.430939][T16436] FAULT_INJECTION: forcing a failure. [ 952.430939][T16436] name failslab, interval 1, probability 0, space 0, times 0 [ 952.438665][T16312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.445011][T16436] CPU: 0 PID: 16436 Comm: syz.1.2784 Not tainted syzkaller #0 [ 952.460528][T16436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 952.470625][T16436] Call Trace: [ 952.473940][T16436] [ 952.476895][T16436] dump_stack_lvl+0x18c/0x250 [ 952.481607][T16436] ? show_regs_print_info+0x20/0x20 [ 952.486845][T16436] ? load_image+0x420/0x420 [ 952.491394][T16436] ? __might_sleep+0xe0/0xe0 [ 952.496032][T16436] ? __lock_acquire+0x7eb0/0x7eb0 [ 952.501089][T16436] should_fail_ex+0x394/0x4c0 [ 952.505811][T16436] should_failslab+0x9/0x20 [ 952.510359][T16436] slab_pre_alloc_hook+0x59/0x300 [ 952.515413][T16436] ? ovl_init_fs_context+0x13c/0x510 [ 952.520772][T16436] __kmem_cache_alloc_node+0x53/0x250 [ 952.526277][T16436] ? ovl_init_fs_context+0x13c/0x510 [ 952.531596][T16436] kmalloc_trace+0x2a/0xe0 [ 952.536056][T16436] ovl_init_fs_context+0x13c/0x510 [ 952.541205][T16436] alloc_fs_context+0x618/0x7a0 [ 952.546098][T16436] do_new_mount+0x10e/0xa40 [ 952.550637][T16436] __se_sys_mount+0x2e7/0x3d0 [ 952.555361][T16436] ? __x64_sys_mount+0xc0/0xc0 [ 952.560146][T16436] ? lockdep_hardirqs_on+0x98/0x150 [ 952.565364][T16436] ? __x64_sys_mount+0x20/0xc0 [ 952.570135][T16436] do_syscall_64+0x55/0xb0 [ 952.574560][T16436] ? clear_bhb_loop+0x40/0x90 [ 952.579250][T16436] ? clear_bhb_loop+0x40/0x90 [ 952.583926][T16436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 952.589835][T16436] RIP: 0033:0x7f0d0039e1d9 [ 952.594249][T16436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.613866][T16436] RSP: 002b:00007f0d011f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 952.622287][T16436] RAX: ffffffffffffffda RBX: 00007f0d00625fa0 RCX: 00007f0d0039e1d9 [ 952.630260][T16436] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000000 [ 952.638236][T16436] RBP: 00007f0d00435888 R08: 0000200000000280 R09: 0000000000000000 [ 952.646211][T16436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 952.654299][T16436] R13: 00007f0d00626038 R14: 00007f0d00625fa0 R15: 00007fff86790218 [ 952.662290][T16436] [ 952.715378][T16345] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.730082][T16345] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.744774][T16345] bridge_slave_0: entered allmulticast mode [ 952.761812][T16345] bridge_slave_0: entered promiscuous mode [ 952.838420][T16345] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.851293][T16345] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.859499][T16345] bridge_slave_1: entered allmulticast mode [ 952.867714][T16345] bridge_slave_1: entered promiscuous mode [ 952.882495][T16312] team0: Port device team_slave_0 added [ 952.974053][T16312] team0: Port device team_slave_1 added [ 953.092858][T16345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.300816][T16443] FAULT_INJECTION: forcing a failure. [ 953.300816][T16443] name failslab, interval 1, probability 0, space 0, times 0 [ 953.313489][T16443] CPU: 0 PID: 16443 Comm: syz.1.2786 Not tainted syzkaller #0 [ 953.320941][T16443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 953.331014][T16443] Call Trace: [ 953.334294][T16443] [ 953.337218][T16443] dump_stack_lvl+0x18c/0x250 [ 953.341900][T16443] ? show_regs_print_info+0x20/0x20 [ 953.347178][T16443] ? load_image+0x420/0x420 [ 953.351729][T16443] ? __might_sleep+0xe0/0xe0 [ 953.356356][T16443] ? __lock_acquire+0x7eb0/0x7eb0 [ 953.361390][T16443] should_fail_ex+0x394/0x4c0 [ 953.366085][T16443] should_failslab+0x9/0x20 [ 953.370607][T16443] slab_pre_alloc_hook+0x59/0x300 [ 953.375680][T16443] kmem_cache_alloc+0x5a/0x2c0 [ 953.380463][T16443] ? getname_flags+0xbb/0x500 [ 953.385165][T16443] getname_flags+0xbb/0x500 [ 953.389677][T16443] __x64_sys_symlinkat+0x7c/0xb0 [ 953.394646][T16443] do_syscall_64+0x55/0xb0 [ 953.399080][T16443] ? clear_bhb_loop+0x40/0x90 [ 953.403804][T16443] ? clear_bhb_loop+0x40/0x90 [ 953.408483][T16443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 953.414379][T16443] RIP: 0033:0x7f0d0039e1d9 [ 953.418834][T16443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.438447][T16443] RSP: 002b:00007f0d011f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 953.446878][T16443] RAX: ffffffffffffffda RBX: 00007f0d00625fa0 RCX: 00007f0d0039e1d9 [ 953.454865][T16443] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 953.462865][T16443] RBP: 00007f0d00435888 R08: 0000000000000000 R09: 0000000000000000 [ 953.470841][T16443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 953.478822][T16443] R13: 00007f0d00626038 R14: 00007f0d00625fa0 R15: 00007fff86790218 [ 953.486813][T16443] [ 954.331811][T16345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.397688][T16312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.413605][T16312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 954.483627][T16312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.766703][T16312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.806756][T16312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 954.894777][T16312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.989626][T16345] team0: Port device team_slave_0 added [ 955.090512][T16463] syzkaller0: entered allmulticast mode [ 955.277441][T16345] team0: Port device team_slave_1 added [ 956.368196][T16477] FAULT_INJECTION: forcing a failure. [ 956.368196][T16477] name failslab, interval 1, probability 0, space 0, times 0 [ 956.382181][T16477] CPU: 1 PID: 16477 Comm: syz.1.2789 Not tainted syzkaller #0 [ 956.389723][T16477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 956.399814][T16477] Call Trace: [ 956.403116][T16477] [ 956.406051][T16477] dump_stack_lvl+0x18c/0x250 [ 956.410726][T16477] ? show_regs_print_info+0x20/0x20 [ 956.415942][T16477] ? load_image+0x420/0x420 [ 956.420500][T16477] ? __might_sleep+0xe0/0xe0 [ 956.425196][T16477] ? __lock_acquire+0x7eb0/0x7eb0 [ 956.430246][T16477] should_fail_ex+0x394/0x4c0 [ 956.434957][T16477] should_failslab+0x9/0x20 [ 956.439495][T16477] slab_pre_alloc_hook+0x59/0x300 [ 956.444558][T16477] ? __rwlock_init+0x150/0x150 [ 956.449450][T16477] kmem_cache_alloc+0x5a/0x2c0 [ 956.454242][T16477] ? key_alloc+0x306/0x1030 [ 956.458787][T16477] key_alloc+0x306/0x1030 [ 956.463147][T16477] keyring_alloc+0x45/0xb0 [ 956.467572][T16477] lookup_user_key+0x428/0x1140 [ 956.472435][T16477] ? lookup_user_key_possessed+0x40/0x40 [ 956.478084][T16477] ? do_futex+0x35d/0x3e0 [ 956.482443][T16477] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 956.488454][T16477] ? strncpy_from_user+0x1a1/0x2f0 [ 956.493586][T16477] __se_sys_add_key+0x315/0x410 [ 956.498477][T16477] ? __x64_sys_add_key+0xc0/0xc0 [ 956.503443][T16477] ? lockdep_hardirqs_on+0x98/0x150 [ 956.508635][T16477] ? __x64_sys_add_key+0x20/0xc0 [ 956.513590][T16477] do_syscall_64+0x55/0xb0 [ 956.518034][T16477] ? clear_bhb_loop+0x40/0x90 [ 956.522771][T16477] ? clear_bhb_loop+0x40/0x90 [ 956.527466][T16477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 956.533472][T16477] RIP: 0033:0x7f0d0039e1d9 [ 956.537917][T16477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.557645][T16477] RSP: 002b:00007f0d011f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 956.566109][T16477] RAX: ffffffffffffffda RBX: 00007f0d00625fa0 RCX: 00007f0d0039e1d9 [ 956.574096][T16477] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 956.582094][T16477] RBP: 00007f0d00435888 R08: ffffffffffffffff R09: 0000000000000000 [ 956.590155][T16477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 956.598141][T16477] R13: 00007f0d00626038 R14: 00007f0d00625fa0 R15: 00007fff86790218 [ 956.606159][T16477] [ 957.344598][T16480] nvme_fabrics: missing parameter 'transport=%s' [ 957.351082][T16480] nvme_fabrics: missing parameter 'nqn=%s' [ 957.840850][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 958.073508][ T9] usb 2-1: config 0 has no interfaces? [ 958.079082][ T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 958.088331][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.119348][ T9] usb 2-1: config 0 descriptor?? [ 959.452421][T16345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.469797][T16345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.503415][T16345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.533993][T16312] hsr_slave_0: entered promiscuous mode [ 959.540839][T16312] hsr_slave_1: entered promiscuous mode [ 959.551215][T16312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 959.562480][T16312] Cannot create hsr debugfs directory [ 959.573977][T16345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.580955][T16345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.585618][ T9] usb 2-1: USB disconnect, device number 49 [ 959.625745][T16345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.838263][T16345] hsr_slave_0: entered promiscuous mode [ 959.863731][T16345] hsr_slave_1: entered promiscuous mode [ 959.869983][T16345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 959.886964][T16345] Cannot create hsr debugfs directory [ 960.287283][T16497] FAULT_INJECTION: forcing a failure. [ 960.287283][T16497] name failslab, interval 1, probability 0, space 0, times 0 [ 960.310488][T16497] CPU: 1 PID: 16497 Comm: syz.1.2793 Not tainted syzkaller #0 [ 960.318041][T16497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 960.328502][T16497] Call Trace: [ 960.331816][T16497] [ 960.334768][T16497] dump_stack_lvl+0x18c/0x250 [ 960.339476][T16497] ? show_regs_print_info+0x20/0x20 [ 960.344699][T16497] ? load_image+0x420/0x420 [ 960.349284][T16497] ? __might_sleep+0xe0/0xe0 [ 960.353941][T16497] ? __lock_acquire+0x7eb0/0x7eb0 [ 960.359022][T16497] should_fail_ex+0x394/0x4c0 [ 960.363758][T16497] should_failslab+0x9/0x20 [ 960.368310][T16497] slab_pre_alloc_hook+0x59/0x300 [ 960.373379][T16497] ? ovl_init_fs_context+0x13c/0x510 [ 960.378712][T16497] __kmem_cache_alloc_node+0x53/0x250 [ 960.384140][T16497] ? ovl_init_fs_context+0x13c/0x510 [ 960.389498][T16497] kmalloc_trace+0x2a/0xe0 [ 960.393972][T16497] ovl_init_fs_context+0x13c/0x510 [ 960.399144][T16497] alloc_fs_context+0x618/0x7a0 [ 960.404058][T16497] do_new_mount+0x10e/0xa40 [ 960.408622][T16497] __se_sys_mount+0x2e7/0x3d0 [ 960.413405][T16497] ? __x64_sys_mount+0xc0/0xc0 [ 960.418217][T16497] ? lockdep_hardirqs_on+0x98/0x150 [ 960.423466][T16497] ? __x64_sys_mount+0x20/0xc0 [ 960.428274][T16497] do_syscall_64+0x55/0xb0 [ 960.432732][T16497] ? clear_bhb_loop+0x40/0x90 [ 960.437442][T16497] ? clear_bhb_loop+0x40/0x90 [ 960.442158][T16497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 960.448100][T16497] RIP: 0033:0x7f0d0039e1d9 [ 960.452563][T16497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 960.472212][T16497] RSP: 002b:00007f0d011f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 960.480674][T16497] RAX: ffffffffffffffda RBX: 00007f0d00625fa0 RCX: 00007f0d0039e1d9 [ 960.488789][T16497] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000000 [ 960.496800][T16497] RBP: 00007f0d00435888 R08: 0000200000000280 R09: 0000000000000000 [ 960.504806][T16497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 960.512854][T16497] R13: 00007f0d00626038 R14: 00007f0d00625fa0 R15: 00007fff86790218 [ 960.520883][T16497] [ 960.964753][ T2943] hsr_slave_0: left promiscuous mode [ 960.982709][ T2943] hsr_slave_1: left promiscuous mode [ 960.993915][ T2943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 961.001847][ T2943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 961.011086][ T2943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 961.026618][ T2943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 961.038299][ T2943] bridge_slave_1: left allmulticast mode [ 961.047635][ T2943] bridge_slave_1: left promiscuous mode [ 961.148222][ T2943] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.185801][ T2943] bridge_slave_0: left allmulticast mode [ 961.191760][ T2943] bridge_slave_0: left promiscuous mode [ 961.198227][ T2943] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.250598][ T2943] veth1_macvtap: left promiscuous mode [ 961.276926][ T2943] veth0_macvtap: left promiscuous mode [ 961.303787][ T2943] veth1_vlan: left promiscuous mode [ 961.313828][ T2943] veth0_vlan: left promiscuous mode [ 962.778584][T16520] nvme_fabrics: missing parameter 'transport=%s' [ 962.793934][T16520] nvme_fabrics: missing parameter 'nqn=%s' [ 963.719568][ T2943] team0 (unregistering): Port device team_slave_1 removed [ 963.805541][ T2943] team0 (unregistering): Port device team_slave_0 removed [ 963.891341][ T2943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 964.039734][ T2943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 964.681925][ T2943] bond0 (unregistering): Released all slaves [ 965.140067][T16542] FAULT_INJECTION: forcing a failure. [ 965.140067][T16542] name failslab, interval 1, probability 0, space 0, times 0 [ 965.167917][T16542] CPU: 0 PID: 16542 Comm: syz.4.2802 Not tainted syzkaller #0 [ 965.175439][T16542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 965.185514][T16542] Call Trace: [ 965.188809][T16542] [ 965.191750][T16542] dump_stack_lvl+0x18c/0x250 [ 965.196449][T16542] ? show_regs_print_info+0x20/0x20 [ 965.201655][T16542] ? load_image+0x420/0x420 [ 965.206179][T16542] ? __might_sleep+0xe0/0xe0 [ 965.210784][T16542] ? __lock_acquire+0x7eb0/0x7eb0 [ 965.215819][T16542] should_fail_ex+0x394/0x4c0 [ 965.220509][T16542] should_failslab+0x9/0x20 [ 965.225025][T16542] slab_pre_alloc_hook+0x59/0x300 [ 965.230086][T16542] ? lockdep_softirqs_off+0x440/0x440 [ 965.235467][T16542] ? security_sb_alloc+0x41/0x120 [ 965.240507][T16542] ? security_sb_alloc+0x41/0x120 [ 965.245559][T16542] __kmem_cache_alloc_node+0x53/0x250 [ 965.250974][T16542] ? security_sb_alloc+0x41/0x120 [ 965.256020][T16542] __kmalloc+0xa7/0x240 [ 965.260324][T16542] ? __raw_spin_lock_init+0x45/0x100 [ 965.265629][T16542] security_sb_alloc+0x41/0x120 [ 965.270493][T16542] alloc_super+0x203/0x910 [ 965.274924][T16542] ? kill_litter_super+0xb0/0xb0 [ 965.279877][T16542] sget_fc+0x325/0x8d0 [ 965.283975][T16542] ? kill_litter_super+0xb0/0xb0 [ 965.288951][T16542] ? virtio_fs_zero_page_range+0x140/0x140 [ 965.294785][T16542] get_tree_nodev+0x2a/0x140 [ 965.299418][T16542] vfs_get_tree+0x8c/0x280 [ 965.303840][T16542] do_new_mount+0x24a/0xa40 [ 965.308353][T16542] __se_sys_mount+0x2e7/0x3d0 [ 965.313072][T16542] ? __x64_sys_mount+0xc0/0xc0 [ 965.317866][T16542] ? lockdep_hardirqs_on+0x98/0x150 [ 965.323096][T16542] ? __x64_sys_mount+0x20/0xc0 [ 965.327875][T16542] do_syscall_64+0x55/0xb0 [ 965.332300][T16542] ? clear_bhb_loop+0x40/0x90 [ 965.336986][T16542] ? clear_bhb_loop+0x40/0x90 [ 965.341681][T16542] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 965.347683][T16542] RIP: 0033:0x7f064cf9e1d9 [ 965.352113][T16542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.371825][T16542] RSP: 002b:00007f064df15028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 965.380255][T16542] RAX: ffffffffffffffda RBX: 00007f064d225fa0 RCX: 00007f064cf9e1d9 [ 965.388255][T16542] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000000 [ 965.396247][T16542] RBP: 00007f064d035888 R08: 0000200000000280 R09: 0000000000000000 [ 965.404521][T16542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 965.412501][T16542] R13: 00007f064d226038 R14: 00007f064d225fa0 R15: 00007fffd2029a98 [ 965.420500][T16542] [ 965.614030][T16547] netlink: 'syz.1.2804': attribute type 1 has an invalid length. [ 965.676957][T16547] 8021q: adding VLAN 0 to HW filter on device bond2 [ 965.787109][T16312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 965.849421][T16312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 966.146233][T16312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 966.206259][T16312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 966.677999][T16312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.800752][T16312] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.205863][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.213101][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.609328][T16574] nvme_fabrics: missing parameter 'transport=%s' [ 967.665683][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.672790][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 967.687902][T16574] nvme_fabrics: missing parameter 'nqn=%s' [ 967.778844][T16312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 967.789497][T16312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 967.833960][T16345] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 967.856938][T16345] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 967.884253][T16345] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 967.938198][T16345] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 968.009901][T16581] syzkaller0: entered allmulticast mode [ 968.205589][T16345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 968.279430][T16345] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.329596][T10793] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.336855][T10793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.379933][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.387139][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 968.439662][T16312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 968.657045][T16312] veth0_vlan: entered promiscuous mode [ 968.704194][T16312] veth1_vlan: entered promiscuous mode [ 968.914181][T16312] veth0_macvtap: entered promiscuous mode [ 968.946762][T16312] veth1_macvtap: entered promiscuous mode [ 969.017241][T16312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 969.053453][T16312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.083425][T16312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 969.118450][T16312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.149024][T16312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 969.183717][T16312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.224599][T16312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 969.252168][T16312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 969.283958][T16312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.307507][T16312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 969.329438][T16312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.353899][T16607] FAULT_INJECTION: forcing a failure. [ 969.353899][T16607] name failslab, interval 1, probability 0, space 0, times 0 [ 969.361172][T16312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 969.377726][T16607] CPU: 1 PID: 16607 Comm: syz.4.2813 Not tainted syzkaller #0 [ 969.385340][T16607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 969.396132][T16607] Call Trace: [ 969.399447][T16607] [ 969.402409][T16607] dump_stack_lvl+0x18c/0x250 [ 969.403277][T16312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.407105][T16607] ? show_regs_print_info+0x20/0x20 [ 969.422149][T16607] ? load_image+0x420/0x420 [ 969.426706][T16607] ? __might_sleep+0xe0/0xe0 [ 969.431344][T16607] ? __lock_acquire+0x7eb0/0x7eb0 [ 969.436502][T16607] should_fail_ex+0x394/0x4c0 [ 969.441236][T16607] should_failslab+0x9/0x20 [ 969.444777][T16312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 969.445762][T16607] slab_pre_alloc_hook+0x59/0x300 [ 969.458114][T16607] ? ovl_init_fs_context+0x57/0x510 [ 969.463355][T16607] __kmem_cache_alloc_node+0x53/0x250 [ 969.468791][T16607] ? ovl_init_fs_context+0x57/0x510 [ 969.474043][T16607] kmalloc_trace+0x2a/0xe0 [ 969.478521][T16607] ovl_init_fs_context+0x57/0x510 [ 969.483597][T16607] alloc_fs_context+0x618/0x7a0 [ 969.486849][T16312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.488475][T16607] do_new_mount+0x10e/0xa40 [ 969.501717][T16607] __se_sys_mount+0x2e7/0x3d0 [ 969.506447][T16607] ? __x64_sys_mount+0xc0/0xc0 [ 969.509964][T16312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.511227][T16607] ? lockdep_hardirqs_on+0x98/0x150 [ 969.525363][T16607] ? __x64_sys_mount+0x20/0xc0 [ 969.530161][T16607] do_syscall_64+0x55/0xb0 [ 969.534661][T16607] ? clear_bhb_loop+0x40/0x90 [ 969.539380][T16607] ? clear_bhb_loop+0x40/0x90 [ 969.543276][T16312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.544063][T16607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 969.552728][T16312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.558595][T16607] RIP: 0033:0x7f064cf9e1d9 [ 969.558616][T16607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.558632][T16607] RSP: 002b:00007f064df15028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 969.599949][T16607] RAX: ffffffffffffffda RBX: 00007f064d225fa0 RCX: 00007f064cf9e1d9 [ 969.608009][T16607] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000000 [ 969.616022][T16607] RBP: 00007f064d035888 R08: 0000200000000280 R09: 0000000000000000 [ 969.624022][T16607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 969.632109][T16607] R13: 00007f064d226038 R14: 00007f064d225fa0 R15: 00007fffd2029a98 [ 969.640143][T16607] [ 969.796881][T16345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 969.954837][T16345] veth0_vlan: entered promiscuous mode [ 970.067156][T16345] veth1_vlan: entered promiscuous mode [ 970.166712][T16345] veth0_macvtap: entered promiscuous mode [ 970.192668][T16345] veth1_macvtap: entered promiscuous mode [ 970.719361][T16345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.786176][T16345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.839292][T16345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.877800][T16345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.909088][T16345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.956070][T16345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.992691][T16345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.034412][T16345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.078884][T16345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 971.275037][T16345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.329343][T16345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.368954][T16345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.421071][T16345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.462168][T16345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.498911][T16345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.553385][T16345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.589602][T16345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.632236][T16345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 971.701052][T16345] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.766659][T16345] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.816718][T16345] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.849106][T16345] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.703796][T14736] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 973.863111][ T68] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.892500][T14736] usb 2-1: device descriptor read/64, error -71 [ 974.185350][T14736] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 974.354240][T14736] usb 2-1: device descriptor read/64, error -71 [ 974.484806][T14736] usb usb2-port1: attempt power cycle [ 974.686749][ T68] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.795931][ T68] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.882897][ T68] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.932127][T14736] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 974.995313][T14736] usb 2-1: device descriptor read/8, error -71 [ 975.283367][T14736] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 975.315020][T14736] usb 2-1: device descriptor read/8, error -71 [ 975.436452][T14736] usb usb2-port1: unable to enumerate USB device [ 976.115703][ T68] hsr_slave_0: left promiscuous mode [ 976.125596][ T68] hsr_slave_1: left promiscuous mode [ 976.142138][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 976.161729][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 976.171155][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 976.184831][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 976.193032][ T68] bridge_slave_1: left allmulticast mode [ 976.205037][ T68] bridge_slave_1: left promiscuous mode [ 976.210916][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.235315][ T68] bridge_slave_0: left allmulticast mode [ 976.245949][ T68] bridge_slave_0: left promiscuous mode [ 976.251865][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.319281][ T68] veth1_macvtap: left promiscuous mode [ 976.327723][ T68] veth0_macvtap: left promiscuous mode [ 976.340295][ T68] veth1_vlan: left promiscuous mode [ 976.349086][ T68] veth0_vlan: left promiscuous mode [ 976.444640][T12708] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 976.457555][T12708] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 976.471438][T12708] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 976.488013][T12708] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 976.513583][T12708] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 976.525348][T12708] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 977.486640][T16737] FAULT_INJECTION: forcing a failure. [ 977.486640][T16737] name failslab, interval 1, probability 0, space 0, times 0 [ 977.499620][T16737] CPU: 1 PID: 16737 Comm: syz.1.2822 Not tainted syzkaller #0 [ 977.507119][T16737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 977.517213][T16737] Call Trace: [ 977.520522][T16737] [ 977.523475][T16737] dump_stack_lvl+0x18c/0x250 [ 977.528190][T16737] ? show_regs_print_info+0x20/0x20 [ 977.533419][T16737] ? load_image+0x420/0x420 [ 977.537964][T16737] ? __might_sleep+0xe0/0xe0 [ 977.542594][T16737] ? __lock_acquire+0x7eb0/0x7eb0 [ 977.547660][T16737] should_fail_ex+0x394/0x4c0 [ 977.552399][T16737] should_failslab+0x9/0x20 [ 977.556944][T16737] slab_pre_alloc_hook+0x59/0x300 [ 977.561978][T16737] ? alloc_super+0x5a/0x910 [ 977.566502][T16737] __kmem_cache_alloc_node+0x53/0x250 [ 977.571880][T16737] ? __lock_acquire+0x7eb0/0x7eb0 [ 977.576909][T16737] ? alloc_super+0x5a/0x910 [ 977.581421][T16737] kmalloc_trace+0x2a/0xe0 [ 977.585850][T16737] alloc_super+0x5a/0x910 [ 977.590186][T16737] ? kill_litter_super+0xb0/0xb0 [ 977.595125][T16737] ? kill_litter_super+0xb0/0xb0 [ 977.600063][T16737] sget_fc+0x325/0x8d0 [ 977.604149][T16737] ? kill_litter_super+0xb0/0xb0 [ 977.609181][T16737] ? virtio_fs_zero_page_range+0x140/0x140 [ 977.614997][T16737] get_tree_nodev+0x2a/0x140 [ 977.619591][T16737] vfs_get_tree+0x8c/0x280 [ 977.624010][T16737] do_new_mount+0x24a/0xa40 [ 977.628531][T16737] __se_sys_mount+0x2e7/0x3d0 [ 977.633217][T16737] ? __x64_sys_mount+0xc0/0xc0 [ 977.637988][T16737] ? lockdep_hardirqs_on+0x98/0x150 [ 977.643199][T16737] ? __x64_sys_mount+0x20/0xc0 [ 977.647968][T16737] do_syscall_64+0x55/0xb0 [ 977.652393][T16737] ? clear_bhb_loop+0x40/0x90 [ 977.657069][T16737] ? clear_bhb_loop+0x40/0x90 [ 977.661748][T16737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 977.667655][T16737] RIP: 0033:0x7f0d0039e1d9 [ 977.672074][T16737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.691686][T16737] RSP: 002b:00007f0d011f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 977.700113][T16737] RAX: ffffffffffffffda RBX: 00007f0d00625fa0 RCX: 00007f0d0039e1d9 [ 977.708087][T16737] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000000 [ 977.716063][T16737] RBP: 00007f0d00435888 R08: 0000200000000280 R09: 0000000000000000 [ 977.724033][T16737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 977.732007][T16737] R13: 00007f0d00626038 R14: 00007f0d00625fa0 R15: 00007fff86790218 [ 977.739994][T16737] [ 977.891648][ T68] team0 (unregistering): Port device team_slave_1 removed [ 977.936700][T12708] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 978.190578][T16743] fuse: Bad value for 'fd' [ 978.341319][T12708] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 978.358653][T12708] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 978.377839][T12708] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 978.396114][T12708] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 978.407082][T12708] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 978.613759][T12708] Bluetooth: hci1: command tx timeout [ 978.621534][ T68] team0 (unregistering): Port device team_slave_0 removed [ 978.677956][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 978.746794][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.489056][ T68] bond0 (unregistering): Released all slaves [ 979.594492][T16728] syzkaller0: entered allmulticast mode [ 980.455248][T12708] Bluetooth: hci2: command tx timeout [ 980.603155][ T68] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.693910][T12708] Bluetooth: hci1: command tx timeout [ 980.948154][T16740] chnl_net:caif_netlink_parms(): no params data found [ 981.009937][T16731] chnl_net:caif_netlink_parms(): no params data found [ 981.131672][ T68] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.603433][T12708] Bluetooth: hci2: command tx timeout [ 982.615568][ T68] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.773565][T12708] Bluetooth: hci1: command tx timeout [ 982.805999][ T68] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.040946][T16740] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.048884][T16740] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.056694][T16740] bridge_slave_0: entered allmulticast mode [ 983.064084][T16740] bridge_slave_0: entered promiscuous mode [ 983.086110][T16731] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.093914][T16731] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.101173][T16731] bridge_slave_0: entered allmulticast mode [ 983.108584][T16731] bridge_slave_0: entered promiscuous mode [ 983.117756][T16731] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.124994][T16731] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.132239][T16731] bridge_slave_1: entered allmulticast mode [ 983.140478][T16731] bridge_slave_1: entered promiscuous mode [ 983.148190][T16740] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.163474][T16740] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.170728][T16740] bridge_slave_1: entered allmulticast mode [ 983.201687][T16740] bridge_slave_1: entered promiscuous mode [ 983.269002][T16740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.345524][T16740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.434797][T16731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.515797][T16740] team0: Port device team_slave_0 added [ 983.525347][T16731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.618744][T16740] team0: Port device team_slave_1 added [ 983.698013][T16740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 983.713274][T16740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.791067][T16740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 984.213089][T16740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 984.314135][T16740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 984.473747][T16740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 984.565947][T16731] team0: Port device team_slave_0 added [ 984.591908][T16731] team0: Port device team_slave_1 added [ 984.623458][T12708] Bluetooth: hci2: command tx timeout [ 984.669675][T16740] hsr_slave_0: entered promiscuous mode [ 984.716733][T16740] hsr_slave_1: entered promiscuous mode [ 984.761142][T16740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 984.773771][T16740] Cannot create hsr debugfs directory [ 984.858604][T12708] Bluetooth: hci1: command tx timeout [ 985.066721][T16731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 985.083357][T16731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.143349][T16731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 985.245238][T16731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 985.252254][T16731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.308661][T16731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.954458][T16731] hsr_slave_0: entered promiscuous mode [ 985.983841][T16731] hsr_slave_1: entered promiscuous mode [ 985.998033][T16731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 986.018131][T16731] Cannot create hsr debugfs directory [ 986.693533][T12708] Bluetooth: hci2: command tx timeout [ 987.581299][T16818] syzkaller0: entered allmulticast mode [ 987.669359][ T68] hsr_slave_0: left promiscuous mode [ 987.680184][ T68] hsr_slave_1: left promiscuous mode [ 987.711733][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.729804][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.738112][T16827] overlayfs: missing 'lowerdir' [ 987.744092][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.751946][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.770250][ T68] bridge_slave_1: left allmulticast mode [ 987.783594][ T68] bridge_slave_1: left promiscuous mode [ 987.789525][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.810681][ T68] bridge_slave_0: left allmulticast mode [ 987.816801][ T68] bridge_slave_0: left promiscuous mode [ 987.829684][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.933524][ T68] veth1_macvtap: left promiscuous mode [ 987.939161][ T68] veth0_macvtap: left promiscuous mode [ 989.211085][ T68] veth1_vlan: left promiscuous mode [ 989.231474][ T68] veth0_vlan: left promiscuous mode [ 990.665774][ T68] team0 (unregistering): Port device team_slave_1 removed [ 990.747334][ T68] team0 (unregistering): Port device team_slave_0 removed [ 990.834437][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.894434][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 991.023676][T11819] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 991.221358][T11819] usb 5-1: config 0 has no interfaces? [ 991.240098][T11819] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 991.249933][T11819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.269699][T11819] usb 5-1: config 0 descriptor?? [ 991.376905][ T68] bond0 (unregistering): Released all slaves [ 991.552797][ T9] usb 5-1: USB disconnect, device number 33 [ 993.176926][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.183828][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.519368][T16731] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 993.556473][T16731] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 993.638904][T16731] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 993.673007][T16731] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 993.868577][T16740] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 993.895484][T16740] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 993.925532][T16740] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 993.965182][T16740] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 994.194192][T16731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.256778][T16740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.316376][T16731] 8021q: adding VLAN 0 to HW filter on device team0 [ 994.352950][T16740] 8021q: adding VLAN 0 to HW filter on device team0 [ 994.407198][T13982] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.414449][T13982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.431786][T13982] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.439060][T13982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.456722][T13982] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.463986][T13982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.505790][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.512941][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.487554][T16895] overlayfs: missing 'lowerdir' [ 995.626488][T16740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 995.759396][T16731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 997.126921][T16740] veth0_vlan: entered promiscuous mode [ 997.182213][T16740] veth1_vlan: entered promiscuous mode [ 997.245650][T16731] veth0_vlan: entered promiscuous mode [ 997.326912][T16731] veth1_vlan: entered promiscuous mode [ 997.416334][T16905] syzkaller0: entered allmulticast mode [ 997.443920][T16731] veth0_macvtap: entered promiscuous mode [ 997.467931][T16740] veth0_macvtap: entered promiscuous mode [ 997.514560][T16731] veth1_macvtap: entered promiscuous mode [ 997.544896][T16740] veth1_macvtap: entered promiscuous mode [ 997.614322][T16740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.643465][T16740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.673819][T16740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.703539][T16740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.725607][T16740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.755570][T16740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.784519][T16740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 997.802022][T16731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.836497][T16731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.879967][T16731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.898227][T16731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.921858][T16731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.952717][T16731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.971345][T16731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.000098][T16731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.024720][T16731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 998.048172][T16731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.081820][T16731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.103884][T16731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.130552][T16731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.164911][T16731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.181563][T16731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.209581][T16731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 998.474888][T16740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.493849][T16740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.523584][T16740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.550704][T16740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.577101][T16740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.605274][T16740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.633753][T16740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.653679][T16740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.663701][T13291] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 998.683745][T16740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 998.721559][T16740] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.756945][T16740] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.776724][T16740] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.795792][T16740] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.818028][T16731] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.830897][T16731] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.842489][T16731] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.868814][T16731] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.881679][T13291] usb 5-1: config 0 has no interfaces? [ 998.890698][T13291] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 998.913672][T13291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.942540][T13291] usb 5-1: config 0 descriptor?? [ 999.204306][ T23] usb 5-1: USB disconnect, device number 34 [ 1001.429914][T10793] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.765904][T10793] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.955741][T10793] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.128194][T10793] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.010751][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1003.037778][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1003.047878][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1003.058152][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1003.082518][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1003.090754][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1004.481051][T16995] chnl_net:caif_netlink_parms(): no params data found [ 1004.489496][ T8024] ffs_data_put(): freeing [ 1005.317430][ T5785] Bluetooth: hci1: command tx timeout [ 1005.471330][T10793] hsr_slave_0: left promiscuous mode [ 1005.494466][T10793] hsr_slave_1: left promiscuous mode [ 1005.504850][T10793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1005.512314][T10793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1005.537121][T10793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1005.546332][T10793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.557748][T12708] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1005.569894][T12708] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1005.578257][T10793] bridge_slave_1: left allmulticast mode [ 1005.586397][T12708] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1005.608509][T12708] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1005.614816][T10793] bridge_slave_1: left promiscuous mode [ 1005.622452][T12708] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1005.630096][T12708] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1005.653432][T10793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.688427][T10793] bridge_slave_0: left allmulticast mode [ 1005.713844][T10793] bridge_slave_0: left promiscuous mode [ 1005.719564][T10793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.831383][T10793] veth1_macvtap: left promiscuous mode [ 1005.843402][T10793] veth0_macvtap: left promiscuous mode [ 1005.849318][T10793] veth1_vlan: left promiscuous mode [ 1005.857993][T10793] veth0_vlan: left promiscuous mode [ 1007.333289][T12708] Bluetooth: hci1: command tx timeout [ 1007.738850][T12708] Bluetooth: hci2: command tx timeout [ 1007.968641][T10793] team0 (unregistering): Port device team_slave_1 removed [ 1008.065306][T10793] team0 (unregistering): Port device team_slave_0 removed [ 1008.129627][T10793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1008.197280][T10793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1009.120858][T10793] bond0 (unregistering): Released all slaves [ 1009.273909][T17039] syzkaller0: entered allmulticast mode [ 1009.423303][T12708] Bluetooth: hci1: command tx timeout [ 1009.439676][T16995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.463921][T16995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.471196][T16995] bridge_slave_0: entered allmulticast mode [ 1009.479305][T16995] bridge_slave_0: entered promiscuous mode [ 1009.959131][T12708] Bluetooth: hci2: command tx timeout [ 1010.058073][T16995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.119577][T16995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.177165][T16995] bridge_slave_1: entered allmulticast mode [ 1010.219379][T16995] bridge_slave_1: entered promiscuous mode [ 1010.395069][T16995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.505276][T16995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.732212][T16995] team0: Port device team_slave_0 added [ 1010.822673][T16995] team0: Port device team_slave_1 added [ 1010.917552][T16995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.925923][T16995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1011.051957][T16995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1011.494608][T12708] Bluetooth: hci1: command tx timeout [ 1011.548243][T16995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1011.658278][T16995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1011.695889][T17064] nvme_fabrics: missing parameter 'transport=%s' [ 1011.703486][T16995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1011.745303][T17064] nvme_fabrics: missing parameter 'nqn=%s' [ 1011.815136][T16995] hsr_slave_0: entered promiscuous mode [ 1011.831209][T16995] hsr_slave_1: entered promiscuous mode [ 1011.877181][T16995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1011.908614][T16995] Cannot create hsr debugfs directory [ 1011.978070][T12708] Bluetooth: hci2: command tx timeout [ 1012.355404][T10793] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.483045][T10793] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.583917][T14735] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1012.621035][T10793] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.670971][T17036] chnl_net:caif_netlink_parms(): no params data found [ 1012.730799][T10793] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.816805][T14735] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1012.838646][T14735] usb 2-1: config 0 has no interface number 0 [ 1012.865034][T14735] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1012.874361][T14735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.882384][T14735] usb 2-1: Product: syz [ 1012.887054][T14735] usb 2-1: Manufacturer: syz [ 1012.891684][T14735] usb 2-1: SerialNumber: syz [ 1012.904575][T14735] usb 2-1: config 0 descriptor?? [ 1013.088462][T17036] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.108783][T17036] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.125659][T17036] bridge_slave_0: entered allmulticast mode [ 1013.134431][T14735] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1013.139874][T17036] bridge_slave_0: entered promiscuous mode [ 1013.157411][T14735] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1013.177785][T17036] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.189060][T14735] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1013.206151][T17036] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.215481][T14735] usb 2-1: media controller created [ 1013.247821][T17036] bridge_slave_1: entered allmulticast mode [ 1013.262386][T17036] bridge_slave_1: entered promiscuous mode [ 1013.267932][T14735] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1013.365212][T17036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.406303][T17036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.684327][T17036] team0: Port device team_slave_0 added [ 1013.822595][T17036] team0: Port device team_slave_1 added [ 1014.259689][T12708] Bluetooth: hci2: command tx timeout [ 1014.425877][T14735] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1014.549771][T14735] usb 2-1: USB disconnect, device number 54 [ 1014.853066][T17036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.865949][T17036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1014.894020][T17036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1014.959345][T17036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1014.976005][T17036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1015.005258][T17036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.028544][T16995] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1015.106744][T16995] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1015.132025][T16995] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1015.256405][T17117] FAULT_INJECTION: forcing a failure. [ 1015.256405][T17117] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.274711][T17117] CPU: 1 PID: 17117 Comm: syz.1.2868 Not tainted syzkaller #0 [ 1015.282243][T17117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1015.292332][T17117] Call Trace: [ 1015.295645][T17117] [ 1015.298615][T17117] dump_stack_lvl+0x18c/0x250 [ 1015.303338][T17117] ? show_regs_print_info+0x20/0x20 [ 1015.308580][T17117] ? load_image+0x420/0x420 [ 1015.313140][T17117] ? __might_sleep+0xe0/0xe0 [ 1015.317767][T17117] ? __lock_acquire+0x7eb0/0x7eb0 [ 1015.322834][T17117] should_fail_ex+0x394/0x4c0 [ 1015.327555][T17117] should_failslab+0x9/0x20 [ 1015.332104][T17117] slab_pre_alloc_hook+0x59/0x300 [ 1015.337183][T17117] ? ovl_init_fs_context+0x13c/0x510 [ 1015.342605][T17117] __kmem_cache_alloc_node+0x53/0x250 [ 1015.348022][T17117] ? ovl_init_fs_context+0x13c/0x510 [ 1015.353365][T17117] kmalloc_trace+0x2a/0xe0 [ 1015.357826][T17117] ovl_init_fs_context+0x13c/0x510 [ 1015.362980][T17117] alloc_fs_context+0x618/0x7a0 [ 1015.367970][T17117] do_new_mount+0x10e/0xa40 [ 1015.372513][T17117] __se_sys_mount+0x2e7/0x3d0 [ 1015.377236][T17117] ? __x64_sys_mount+0xc0/0xc0 [ 1015.382040][T17117] ? lockdep_hardirqs_on+0x98/0x150 [ 1015.387270][T17117] ? __x64_sys_mount+0x20/0xc0 [ 1015.392049][T17117] do_syscall_64+0x55/0xb0 [ 1015.396471][T17117] ? clear_bhb_loop+0x40/0x90 [ 1015.401236][T17117] ? clear_bhb_loop+0x40/0x90 [ 1015.405942][T17117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1015.411849][T17117] RIP: 0033:0x7f0d0039e1d9 [ 1015.416271][T17117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.435884][T17117] RSP: 002b:00007f0d011f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1015.444393][T17117] RAX: ffffffffffffffda RBX: 00007f0d00625fa0 RCX: 00007f0d0039e1d9 [ 1015.452374][T17117] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000000 [ 1015.460433][T17117] RBP: 00007f0d00435888 R08: 0000200000000280 R09: 0000000000000000 [ 1015.468403][T17117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1015.476384][T17117] R13: 00007f0d00626038 R14: 00007f0d00625fa0 R15: 00007fff86790218 [ 1015.484373][T17117] [ 1015.502286][T17036] hsr_slave_0: entered promiscuous mode [ 1015.520290][T17036] hsr_slave_1: entered promiscuous mode [ 1015.533435][T17036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1015.541054][T17036] Cannot create hsr debugfs directory [ 1015.581396][T16995] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1015.915675][T17120] syzkaller0: entered allmulticast mode [ 1017.391609][T16995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.910453][T10793] hsr_slave_0: left promiscuous mode [ 1017.964001][T10793] hsr_slave_1: left promiscuous mode [ 1017.982957][T10793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1017.990581][T10793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.999189][T10793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1018.018982][T10793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.044581][T10793] bridge_slave_1: left allmulticast mode [ 1018.050284][T10793] bridge_slave_1: left promiscuous mode [ 1018.061785][T10793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.085524][T10793] bridge_slave_0: left allmulticast mode [ 1018.091314][T10793] bridge_slave_0: left promiscuous mode [ 1018.184518][T10793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.711750][T10793] veth1_macvtap: left promiscuous mode [ 1018.753124][T10793] veth0_macvtap: left promiscuous mode [ 1018.835521][T10793] veth1_vlan: left promiscuous mode [ 1018.891325][T10793] veth0_vlan: left promiscuous mode [ 1020.322060][T17149] nvme_fabrics: missing parameter 'transport=%s' [ 1020.331240][T17149] nvme_fabrics: missing parameter 'nqn=%s' [ 1020.997976][T10793] team0 (unregistering): Port device team_slave_1 removed [ 1021.069103][T10793] team0 (unregistering): Port device team_slave_0 removed [ 1021.135060][T10793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1021.204130][T10793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1021.741204][T10793] bond0 (unregistering): Released all slaves [ 1021.869812][T16995] 8021q: adding VLAN 0 to HW filter on device team0 [ 1021.948323][ T5776] ffs_data_put(): freeing [ 1021.959859][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.967115][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.979254][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.986506][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1022.019595][T17162] overlayfs: missing 'lowerdir' [ 1023.601174][T17036] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1023.634956][T17036] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1023.682009][T17036] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1023.716294][T17036] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1023.958310][T16995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.061949][T17036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.082162][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 1024.082177][ T28] audit: type=1326 audit(1791613420.611:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.4.2878" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064cf9e1d9 code=0x7ffc0000 [ 1024.210643][ T28] audit: type=1326 audit(1791613420.651:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.4.2878" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064cf9e1d9 code=0x7ffc0000 [ 1024.274729][T17036] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.293590][ T28] audit: type=1326 audit(1791613420.651:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.4.2878" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064cf9e1d9 code=0x7ffc0000 [ 1024.320603][T13982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.327840][T13982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.371820][T16995] veth0_vlan: entered promiscuous mode [ 1024.433871][ T28] audit: type=1326 audit(1791613420.661:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.4.2878" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f064cf9e1d9 code=0x7ffc0000 [ 1024.478357][T13982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.485616][T13982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.578667][ T28] audit: type=1326 audit(1791613420.661:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.4.2878" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064cf9e1d9 code=0x7ffc0000 [ 1024.619318][T16995] veth1_vlan: entered promiscuous mode [ 1024.644505][ T28] audit: type=1326 audit(1791613420.661:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.4.2878" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064cf9e1d9 code=0x7ffc0000 [ 1024.679822][ T28] audit: type=1326 audit(1791613420.661:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.4.2878" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064cf9e1d9 code=0x7ffc0000 [ 1024.720169][ T28] audit: type=1326 audit(1791613420.661:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.4.2878" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f064cf9e1d9 code=0x7ffc0000 [ 1024.751080][T17036] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1024.766189][T17036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1024.835783][ T28] audit: type=1326 audit(1791613420.661:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.4.2878" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064cf9e1d9 code=0x7ffc0000 [ 1024.866421][T16995] veth0_macvtap: entered promiscuous mode [ 1024.922468][T16995] veth1_macvtap: entered promiscuous mode [ 1024.959160][ T28] audit: type=1326 audit(1791613420.661:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.4.2878" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064cf9e1d9 code=0x7ffc0000 [ 1024.991933][T16995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.026200][T16995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.053417][T16995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.079829][T16995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.379437][T16995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.777219][T16995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.879869][T17202] nvme_fabrics: missing parameter 'transport=%s' [ 1025.898630][T16995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.943659][T17202] nvme_fabrics: missing parameter 'nqn=%s' [ 1026.082353][T17200] syzkaller0: entered allmulticast mode [ 1026.113845][T16995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.157343][T16995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.170896][T16995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.198435][T16995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.233268][T16995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.250779][T16995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.267544][T16995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.294117][T17036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.321596][T16995] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.337952][T16995] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.337989][T16995] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.338017][T16995] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.384760][T17214] fuse: Bad value for 'fd' [ 1031.305021][ T8024] ffs_data_put(): freeing [ 1031.379490][T17036] veth0_vlan: entered promiscuous mode [ 1031.422736][T17036] veth1_vlan: entered promiscuous mode [ 1032.646614][T17036] veth0_macvtap: entered promiscuous mode [ 1032.687137][T17036] veth1_macvtap: entered promiscuous mode [ 1032.732670][T17036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.751463][T17036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.762154][T17036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.778938][T17036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.790605][T17036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.802033][T17036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.812677][T17036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.824194][T17036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.864019][T17036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1033.256456][T14736] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 1033.332066][T17036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.364158][T17036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.380017][T17036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.390772][T17036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.407243][T17036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.420512][T17036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.437747][T17036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.450902][T17036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.485005][T17036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1033.506716][T17036] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.522247][T17036] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.542100][T17036] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.563504][T17036] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.584482][T14736] usb 2-1: not running at top speed; connect to a high speed hub [ 1033.619262][T14736] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 1033.633274][T14736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.706644][T10793] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.893070][T10793] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.916951][ C0] port100 2-1:1.0: NFC: Urb failure (status -71) [ 1033.923374][ C0] port100 2-1:1.0: NFC: Urb failure (status -71) [ 1033.930578][T14736] port100 2-1:1.0: NFC: Could not get supported command types [ 1033.943006][T14736] usb 2-1: USB disconnect, device number 55 [ 1034.020356][T10793] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.043107][T17237] overlayfs: missing 'lowerdir' [ 1034.129727][T10793] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.176845][T17262] nvme_fabrics: missing parameter 'transport=%s' [ 1035.183678][T17262] nvme_fabrics: missing parameter 'nqn=%s' [ 1035.373607][ T5814] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1035.454317][T10793] hsr_slave_0: left promiscuous mode [ 1035.460709][T10793] hsr_slave_1: left promiscuous mode [ 1035.474374][T10793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1035.481975][T10793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1035.495410][T10793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1035.502885][T10793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1035.545343][T10793] bridge_slave_1: left allmulticast mode [ 1035.551053][T10793] bridge_slave_1: left promiscuous mode [ 1035.563815][T10793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.574094][ T5814] usb 2-1: Using ep0 maxpacket: 8 [ 1035.581192][T10793] bridge_slave_0: left allmulticast mode [ 1035.584481][ T5814] usb 2-1: no configurations [ 1035.593609][T10793] bridge_slave_0: left promiscuous mode [ 1035.599393][T10793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.603970][ T5814] usb 2-1: can't read configurations, error -22 [ 1035.672937][T10793] veth1_macvtap: left promiscuous mode [ 1035.680339][T10793] veth0_macvtap: left promiscuous mode [ 1035.684569][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1035.686553][T10793] veth1_vlan: left promiscuous mode [ 1035.697828][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1035.704346][T10793] veth0_vlan: left promiscuous mode [ 1035.708751][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1035.721929][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1035.730863][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1035.743840][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1035.794418][ T5814] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1035.993522][ T5814] usb 2-1: Using ep0 maxpacket: 8 [ 1036.008940][ T5814] usb 2-1: no configurations [ 1036.019178][ T5814] usb 2-1: can't read configurations, error -22 [ 1036.026499][ T5814] usb usb2-port1: attempt power cycle [ 1036.624970][ T5814] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1036.665902][ T5814] usb 2-1: Using ep0 maxpacket: 8 [ 1036.688931][ T5814] usb 2-1: no configurations [ 1036.694238][ T5814] usb 2-1: can't read configurations, error -22 [ 1036.732296][T10793] team0 (unregistering): Port device team_slave_1 removed [ 1036.805087][T10793] team0 (unregistering): Port device team_slave_0 removed [ 1036.873276][ T5814] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1036.882710][T10793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1036.892321][T12708] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1036.902601][T12708] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1036.914349][ T5814] usb 2-1: Using ep0 maxpacket: 8 [ 1036.920519][ T5814] usb 2-1: no configurations [ 1036.928444][ T5814] usb 2-1: can't read configurations, error -22 [ 1036.928530][T12708] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1036.942888][ T5814] usb usb2-port1: unable to enumerate USB device [ 1036.946516][T12708] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1036.960188][T12708] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1036.971810][T12708] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1037.009837][T10793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1037.671785][T10793] bond0 (unregistering): Released all slaves [ 1037.826409][T12708] Bluetooth: hci1: command tx timeout [ 1038.417066][ T8024] ffs_data_put(): freeing [ 1038.570582][T17291] syzkaller0: entered allmulticast mode [ 1038.767188][T14736] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1038.890685][T17280] chnl_net:caif_netlink_parms(): no params data found [ 1038.919913][T17274] chnl_net:caif_netlink_parms(): no params data found [ 1038.994031][T14736] usb 2-1: Using ep0 maxpacket: 32 [ 1039.008131][T14736] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1039.023302][T14736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.031363][T14736] usb 2-1: Product: syz [ 1039.043407][T14736] usb 2-1: Manufacturer: syz [ 1039.048081][T14736] usb 2-1: SerialNumber: syz [ 1039.058942][T14736] usb 2-1: config 0 descriptor?? [ 1039.076924][T14736] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1039.103686][T12708] Bluetooth: hci2: command tx timeout [ 1039.357802][T10793] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.627397][T10793] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.662553][T17280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.679565][T17280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.687804][T17280] bridge_slave_0: entered allmulticast mode [ 1039.696128][T17280] bridge_slave_0: entered promiscuous mode [ 1039.710999][T17280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.718406][T17280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.729173][T17280] bridge_slave_1: entered allmulticast mode [ 1039.738543][T17280] bridge_slave_1: entered promiscuous mode [ 1039.749424][T17274] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.757555][T17274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.765455][T17274] bridge_slave_0: entered allmulticast mode [ 1039.772838][T17274] bridge_slave_0: entered promiscuous mode [ 1041.313635][T12708] Bluetooth: hci1: command tx timeout [ 1041.313898][T14736] gspca_topro: reg_w err -110 [ 1041.319077][T12708] Bluetooth: hci2: command tx timeout [ 1041.356244][T10793] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.371252][T14736] gspca_topro: Sensor soi763a [ 1041.470775][T17274] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.494418][T17274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.501723][T17274] bridge_slave_1: entered allmulticast mode [ 1041.534924][T17274] bridge_slave_1: entered promiscuous mode [ 1041.636181][T10793] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.656564][T17280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.674504][T17274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.696283][T17280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.728495][T17274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.835930][T17274] team0: Port device team_slave_0 added [ 1041.876526][T17274] team0: Port device team_slave_1 added [ 1041.909296][T17280] team0: Port device team_slave_0 added [ 1041.968450][T17280] team0: Port device team_slave_1 added [ 1042.005489][T17274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1042.012488][T17274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1042.041830][T17274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1042.092398][T17274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1042.111321][T17274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1042.155620][T17274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.168230][T17280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1042.175556][T17280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1042.199197][T17336] overlayfs: missing 'lowerdir' [ 1042.202415][T17280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1042.268786][T17280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1042.276339][T17280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1042.309581][T17280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.402316][ T23] usb 2-1: USB disconnect, device number 60 [ 1042.440815][T17274] hsr_slave_0: entered promiscuous mode [ 1042.462162][T17274] hsr_slave_1: entered promiscuous mode [ 1042.477153][T17274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1042.491931][T17274] Cannot create hsr debugfs directory [ 1042.531335][T17339] nvme_fabrics: missing parameter 'transport=%s' [ 1042.538037][T17339] nvme_fabrics: missing parameter 'nqn=%s' [ 1042.745043][T17280] hsr_slave_0: entered promiscuous mode [ 1042.756982][T17280] hsr_slave_1: entered promiscuous mode [ 1042.771883][T17280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1042.779844][T17280] Cannot create hsr debugfs directory [ 1044.363393][ T5785] Bluetooth: hci1: command tx timeout [ 1044.369293][T12708] Bluetooth: hci2: command tx timeout [ 1044.685963][T17358] syzkaller0: entered allmulticast mode [ 1045.380724][T10793] hsr_slave_0: left promiscuous mode [ 1045.575310][T10793] hsr_slave_1: left promiscuous mode [ 1045.660733][T10793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1045.745173][T10793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1045.854324][T10793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1045.930367][T10793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.036513][T10793] bridge_slave_1: left allmulticast mode [ 1046.096922][T10793] bridge_slave_1: left promiscuous mode [ 1046.166479][T10793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.221016][T10793] bridge_slave_0: left allmulticast mode [ 1046.227006][T10793] bridge_slave_0: left promiscuous mode [ 1046.232853][T10793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.279897][T10793] veth1_macvtap: left promiscuous mode [ 1046.285651][T10793] veth0_macvtap: left promiscuous mode [ 1046.291310][T10793] veth1_vlan: left promiscuous mode [ 1046.297617][T10793] veth0_vlan: left promiscuous mode [ 1046.379467][T12708] Bluetooth: hci1: command tx timeout [ 1046.453637][T12708] Bluetooth: hci2: command tx timeout [ 1047.340403][T10793] team0 (unregistering): Port device team_slave_1 removed [ 1047.401091][T10793] team0 (unregistering): Port device team_slave_0 removed [ 1047.461835][T10793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.520574][T10793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.962848][T10793] bond0 (unregistering): Released all slaves [ 1048.826637][T17280] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1048.855357][T17280] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1049.031258][T17280] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1049.481563][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1049.581350][T17280] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1049.773619][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1049.795363][ T9] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1049.810935][T17404] nvme_fabrics: missing parameter 'transport=%s' [ 1049.817439][T17404] nvme_fabrics: missing parameter 'nqn=%s' [ 1049.833287][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.851656][ T9] usb 5-1: Product: syz [ 1049.864857][ T9] usb 5-1: Manufacturer: syz [ 1049.869475][ T9] usb 5-1: SerialNumber: syz [ 1049.904711][ T9] usb 5-1: config 0 descriptor?? [ 1049.931614][ T9] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1050.351005][T17280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.496934][T17280] 8021q: adding VLAN 0 to HW filter on device team0 [ 1050.524975][T17274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1050.552750][T17151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.559971][T17151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.576629][T17274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1050.588233][T17274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1050.762938][T17274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1050.849011][T13982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.856274][T13982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.579373][ T9] gspca_topro: reg_r err -32 [ 1052.105693][ T9] gspca_topro: Sensor soi763a [ 1052.464660][ T9] usb 5-1: USB disconnect, device number 35 [ 1052.492599][T17274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.670351][T17274] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.712678][T17280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1052.775066][ T2943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.782293][ T2943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.835992][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.843257][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.876136][T17435] syzkaller0: entered allmulticast mode [ 1053.003384][T17280] veth0_vlan: entered promiscuous mode [ 1053.028319][T17280] veth1_vlan: entered promiscuous mode [ 1053.035328][ T9] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1053.101931][T17280] veth0_macvtap: entered promiscuous mode [ 1053.117338][T17280] veth1_macvtap: entered promiscuous mode [ 1053.149743][T17280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.163987][T17280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.193285][T17280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.216742][T17280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.235396][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.248523][T17280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.259721][ T9] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1053.274203][T17280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.289197][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1053.289594][T17280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1053.306106][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1053.319383][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1053.334831][ T9] usb 5-1: Product: syz [ 1053.339200][ T9] usb 5-1: Manufacturer: syz [ 1053.348703][T17280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.350198][ T9] usb 5-1: SerialNumber: syz [ 1053.366004][T17280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.380388][T17280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.396876][T17280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.397043][ T9] usb 5-1: config 0 descriptor?? [ 1053.408042][T17280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.442458][T17280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.462171][T17280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1053.482464][ T9] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 1053.517208][T17274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.556119][T17280] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.570733][T17240] udevd[17240]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1053.592747][T17280] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.608005][T17280] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.633299][T17280] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.678139][ T8088] usb 5-1: USB disconnect, device number 36 [ 1053.911650][T17460] overlayfs: missing 'lowerdir' [ 1053.922695][T17274] veth0_vlan: entered promiscuous mode [ 1053.971552][T17274] veth1_vlan: entered promiscuous mode [ 1054.138073][T17274] veth0_macvtap: entered promiscuous mode [ 1054.173386][T17274] veth1_macvtap: entered promiscuous mode [ 1054.266006][T17274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1054.319652][T17274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.359755][T17274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1054.387478][T17274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.404250][T17274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1054.419913][T17274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.435856][T17274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1054.662282][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.672954][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.742911][T17274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.756006][T17274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1054.868513][T17274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.880864][T17274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.896344][T17274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.909154][T17274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.919632][T17274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.930945][T17274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.942730][T17274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.954961][T17274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.978071][T17471] nvme_fabrics: missing parameter 'transport=%s' [ 1054.995303][T17274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1055.002862][T17471] nvme_fabrics: missing parameter 'nqn=%s' [ 1055.027099][T17274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.055451][T17274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.069382][T17274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.080842][T17274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.645311][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.703688][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1055.893960][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1055.905404][ T9] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1055.933477][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.941534][ T9] usb 2-1: Product: syz [ 1055.952275][ T9] usb 2-1: Manufacturer: syz [ 1055.963379][ T9] usb 2-1: SerialNumber: syz [ 1055.975477][ T9] usb 2-1: config 0 descriptor?? [ 1055.994432][ T9] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1056.343000][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.437718][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.566264][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=3 req=2260 state=3 status=67 (errno 32: Broken pipe) [ 1057.413927][ T9] gspca_topro: Sensor soi763a [ 1057.652047][ T9] usb 2-1: USB disconnect, device number 61 [ 1058.841335][T17519] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1059.091952][T17519] CPU: 1 PID: 17519 Comm: syz-executor Not tainted syzkaller #0 [ 1059.099659][T17519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1059.109742][T17519] Call Trace: [ 1059.113036][T17519] [ 1059.116001][T17519] dump_stack_lvl+0x18c/0x250 [ 1059.120706][T17519] ? show_regs_print_info+0x20/0x20 [ 1059.126196][T17519] ? load_image+0x420/0x420 [ 1059.130748][T17519] ? __rcu_read_unlock+0x7c/0xd0 [ 1059.135719][T17519] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1059.142169][T17519] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1059.148721][T17519] warn_alloc+0x246/0x340 [ 1059.153097][T17519] ? zone_watermark_ok_safe+0x230/0x230 [ 1059.158685][T17519] ? _raw_spin_unlock+0x28/0x40 [ 1059.163584][T17519] __vmalloc_node_range+0x661/0x1320 [ 1059.168914][T17519] ? __asan_memset+0x22/0x40 [ 1059.173562][T17519] ? free_vm_area+0x50/0x50 [ 1059.178190][T17519] ? kcov_remote_reset+0xc0/0xc0 [ 1059.183161][T17519] vmalloc_user+0x74/0x80 [ 1059.187524][T17519] ? kcov_ioctl+0x58/0x610 [ 1059.191981][T17519] kcov_ioctl+0x58/0x610 [ 1059.196259][T17519] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1059.201236][T17519] ? security_file_ioctl+0x80/0xa0 [ 1059.206381][T17519] ? kcov_remote_reset+0xc0/0xc0 [ 1059.211329][T17519] __se_sys_ioctl+0xfd/0x170 [ 1059.215931][T17519] do_syscall_64+0x55/0xb0 [ 1059.220391][T17519] ? clear_bhb_loop+0x40/0x90 [ 1059.225069][T17519] ? clear_bhb_loop+0x40/0x90 [ 1059.229748][T17519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1059.235749][T17519] RIP: 0033:0x7f852f19de6b [ 1059.240182][T17519] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1059.259900][T17519] RSP: 002b:00007fffc99c3490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1059.268323][T17519] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f852f19de6b [ 1059.276314][T17519] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000da [ 1059.284294][T17519] RBP: 00007f852f426218 R08: 0000000000000000 R09: 0000000000000000 [ 1059.292333][T17519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1059.300312][T17519] R13: 0000000000000003 R14: 00007fffc99c3748 R15: 0000000000000000 [ 1059.308303][T17519] [ 1059.334142][T17519] Mem-Info: [ 1059.337374][T17519] active_anon:4899 inactive_anon:0 isolated_anon:0 [ 1059.337374][T17519] active_file:15917 inactive_file:40451 isolated_file:0 [ 1059.337374][T17519] unevictable:768 dirty:38 writeback:0 [ 1059.337374][T17519] slab_reclaimable:10457 slab_unreclaimable:103709 [ 1059.337374][T17519] mapped:20224 shmem:1367 pagetables:509 [ 1059.337374][T17519] sec_pagetables:0 bounce:0 [ 1059.337374][T17519] kernel_misc_reclaimable:0 [ 1059.337374][T17519] free:1333735 free_pcp:9625 free_cma:0 [ 1059.417421][T17519] Node 0 active_anon:17496kB inactive_anon:0kB active_file:63668kB inactive_file:161604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60396kB dirty:152kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10900kB pagetables:1836kB sec_pagetables:0kB all_unreclaimable? no [ 1059.454720][T17519] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1059.486160][T17519] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1059.532756][T17519] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 1059.543630][T17519] Node 0 DMA32 free:1429624kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:17356kB inactive_anon:0kB active_file:63668kB inactive_file:160524kB unevictable:1536kB writepending:148kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:25256kB local_pcp:3904kB free_cma:0kB [ 1059.599200][T17519] lowmem_reserve[]: 0 0 1 1 1 [ 1059.613981][T17519] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:1080kB unevictable:0kB writepending:4kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1059.669780][T17519] lowmem_reserve[]: 0 0 0 0 0 [ 1059.681219][T17519] Node 1 Normal free:3889956kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20320kB local_pcp:10816kB free_cma:0kB [ 1059.719941][T17519] lowmem_reserve[]: 0 0 0 0 0 [ 1059.725523][T17519] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1059.738781][T17519] Node 0 DMA32: 5530*4kB (UME) 2557*8kB (UME) 2379*16kB (UME) 2131*32kB (UME) 502*64kB (UME) 185*128kB (UME) 99*256kB (UM) 45*512kB (UM) 26*1024kB (UM) 10*2048kB (UME) 282*4096kB (UM) = 1455200kB [ 1059.758895][T17519] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1059.805384][T17519] Node 1 Normal: 215*4kB (UME) 55*8kB (UME) 35*16kB (UME) 133*32kB (UME) 35*64kB (UE) 5*128kB (UM) 2*256kB (UE) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 946*4096kB (M) = 3889956kB [ 1059.858633][T17519] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1059.883679][T17519] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1059.933510][T17519] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1059.964429][T17519] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1059.993269][T17519] 57735 total pagecache pages [ 1059.998099][T17519] 0 pages in swap cache [ 1060.002280][T17519] Free swap = 124728kB [ 1060.043364][T17519] Total swap = 124996kB [ 1060.047597][T17519] 2097051 pages RAM [ 1060.051434][T17519] 0 pages HighMem/MovableOnly [ 1060.073508][T17519] 421118 pages reserved [ 1060.077817][T17519] 0 pages cma reserved [ 1060.583046][ T11] hsr_slave_0: left promiscuous mode [ 1060.597472][ T11] hsr_slave_1: left promiscuous mode [ 1060.605720][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.620386][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.630207][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1060.643919][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.653146][ T11] bridge_slave_1: left allmulticast mode [ 1060.662528][ T11] bridge_slave_1: left promiscuous mode [ 1060.671300][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.691286][ T11] bridge_slave_0: left allmulticast mode [ 1060.701191][ T11] bridge_slave_0: left promiscuous mode [ 1060.710196][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.766574][ T11] veth1_macvtap: left promiscuous mode [ 1060.772171][ T11] veth0_macvtap: left promiscuous mode [ 1060.781648][ T11] veth1_vlan: left promiscuous mode [ 1060.789757][ T11] veth0_vlan: left promiscuous mode [ 1061.633616][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1061.690223][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1061.740278][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1061.799724][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1062.231349][ T11] bond0 (unregistering): Released all slaves [ 1062.701249][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.790528][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.886298][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.986431][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.970779][ T11] hsr_slave_0: left promiscuous mode [ 1063.981654][ T11] hsr_slave_1: left promiscuous mode [ 1063.989175][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1063.997124][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1064.005314][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1064.012764][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1064.021472][ T11] bridge_slave_1: left allmulticast mode [ 1064.031921][ T11] bridge_slave_1: left promiscuous mode [ 1064.038565][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.048623][ T11] bridge_slave_0: left allmulticast mode [ 1064.057522][ T11] bridge_slave_0: left promiscuous mode [ 1064.063784][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.103224][ T11] veth1_macvtap: left promiscuous mode [ 1064.108825][ T11] veth0_macvtap: left promiscuous mode [ 1064.115342][ T11] veth1_vlan: left promiscuous mode [ 1064.120717][ T11] veth0_vlan: left promiscuous mode [ 1064.885506][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1064.945441][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1064.998651][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1065.056209][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1065.497627][ T11] bond0 (unregistering): Released all slaves