syzkaller login: [ 262.698309][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 262.717358][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 271.168914][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:38237' (ECDSA) to the list of known hosts. 1970/01/01 00:05:22 fuzzer started 1970/01/01 00:05:34 dialing manager at localhost:37149 [ 343.708133][ T2026] cgroup: Unknown subsys name 'net' [ 344.916233][ T2026] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:05:44 syscalls: 2870 1970/01/01 00:05:44 code coverage: enabled 1970/01/01 00:05:44 comparison tracing: enabled 1970/01/01 00:05:44 extra coverage: enabled 1970/01/01 00:05:44 delay kcov mmap: mmap returned an invalid pointer 1970/01/01 00:05:44 setuid sandbox: enabled 1970/01/01 00:05:44 namespace sandbox: enabled 1970/01/01 00:05:44 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:05:44 fault injection: enabled 1970/01/01 00:05:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:05:44 net packet injection: enabled 1970/01/01 00:05:44 net device setup: enabled 1970/01/01 00:05:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:05:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:05:44 USB emulation: enabled 1970/01/01 00:05:44 hci packet injection: /dev/vhci does not exist 1970/01/01 00:05:44 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:05:44 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:05:45 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:05:50 fetching corpus: 50, signal 26634/30087 (executing program) 1970/01/01 00:05:53 fetching corpus: 100, signal 40056/44833 (executing program) 1970/01/01 00:05:57 fetching corpus: 149, signal 49749/55704 (executing program) 1970/01/01 00:06:00 fetching corpus: 199, signal 56349/63546 (executing program) 1970/01/01 00:06:03 fetching corpus: 248, signal 61316/69624 (executing program) 1970/01/01 00:06:06 fetching corpus: 298, signal 70866/79917 (executing program) 1970/01/01 00:06:08 fetching corpus: 348, signal 74330/84403 (executing program) 1970/01/01 00:06:10 fetching corpus: 398, signal 77144/88201 (executing program) 1970/01/01 00:06:13 fetching corpus: 448, signal 81485/93282 (executing program) 1970/01/01 00:06:14 fetching corpus: 498, signal 84382/97049 (executing program) 1970/01/01 00:06:16 fetching corpus: 548, signal 86545/100057 (executing program) 1970/01/01 00:06:18 fetching corpus: 598, signal 90006/104189 (executing program) 1970/01/01 00:06:22 fetching corpus: 648, signal 92849/107750 (executing program) 1970/01/01 00:06:25 fetching corpus: 698, signal 95596/111094 (executing program) 1970/01/01 00:06:28 fetching corpus: 748, signal 97904/114057 (executing program) 1970/01/01 00:06:31 fetching corpus: 798, signal 101078/117788 (executing program) 1970/01/01 00:06:34 fetching corpus: 848, signal 103655/120863 (executing program) 1970/01/01 00:06:36 fetching corpus: 898, signal 105204/123099 (executing program) 1970/01/01 00:06:40 fetching corpus: 948, signal 106895/125402 (executing program) 1970/01/01 00:06:43 fetching corpus: 997, signal 109173/128116 (executing program) 1970/01/01 00:06:46 fetching corpus: 1047, signal 111258/130564 (executing program) 1970/01/01 00:06:48 fetching corpus: 1097, signal 112928/132784 (executing program) 1970/01/01 00:06:51 fetching corpus: 1147, signal 117231/136913 (executing program) 1970/01/01 00:06:54 fetching corpus: 1197, signal 119059/139068 (executing program) 1970/01/01 00:06:56 fetching corpus: 1247, signal 120166/140697 (executing program) 1970/01/01 00:06:58 fetching corpus: 1297, signal 121238/142236 (executing program) 1970/01/01 00:07:00 fetching corpus: 1347, signal 123353/144579 (executing program) 1970/01/01 00:07:03 fetching corpus: 1397, signal 124631/146216 (executing program) 1970/01/01 00:07:05 fetching corpus: 1447, signal 126444/148261 (executing program) 1970/01/01 00:07:07 fetching corpus: 1497, signal 128247/150252 (executing program) 1970/01/01 00:07:10 fetching corpus: 1546, signal 129659/151972 (executing program) 1970/01/01 00:07:12 fetching corpus: 1596, signal 131182/153655 (executing program) 1970/01/01 00:07:14 fetching corpus: 1646, signal 132715/155329 (executing program) 1970/01/01 00:07:16 fetching corpus: 1695, signal 133995/156796 (executing program) 1970/01/01 00:07:18 fetching corpus: 1745, signal 135229/158195 (executing program) 1970/01/01 00:07:21 fetching corpus: 1794, signal 136463/159598 (executing program) 1970/01/01 00:07:23 fetching corpus: 1844, signal 138082/161193 (executing program) 1970/01/01 00:07:26 fetching corpus: 1894, signal 140394/163269 (executing program) 1970/01/01 00:07:29 fetching corpus: 1944, signal 141794/164708 (executing program) 1970/01/01 00:07:32 fetching corpus: 1994, signal 142684/165837 (executing program) 1970/01/01 00:07:35 fetching corpus: 2044, signal 143818/167085 (executing program) 1970/01/01 00:07:37 fetching corpus: 2094, signal 144660/168110 (executing program) 1970/01/01 00:07:39 fetching corpus: 2144, signal 146164/169547 (executing program) 1970/01/01 00:07:42 fetching corpus: 2194, signal 147527/170825 (executing program) 1970/01/01 00:07:44 fetching corpus: 2244, signal 148754/172003 (executing program) 1970/01/01 00:07:46 fetching corpus: 2294, signal 149764/173054 (executing program) 1970/01/01 00:07:48 fetching corpus: 2344, signal 150828/174116 (executing program) 1970/01/01 00:07:51 fetching corpus: 2394, signal 152067/175204 (executing program) 1970/01/01 00:07:55 fetching corpus: 2443, signal 153204/176287 (executing program) 1970/01/01 00:07:58 fetching corpus: 2493, signal 154705/177558 (executing program) 1970/01/01 00:08:01 fetching corpus: 2543, signal 156033/178645 (executing program) 1970/01/01 00:08:03 fetching corpus: 2593, signal 156840/179475 (executing program) 1970/01/01 00:08:05 fetching corpus: 2643, signal 157641/180314 (executing program) 1970/01/01 00:08:09 fetching corpus: 2693, signal 160485/182115 (executing program) 1970/01/01 00:08:11 fetching corpus: 2743, signal 161923/183160 (executing program) 1970/01/01 00:08:13 fetching corpus: 2792, signal 162984/184007 (executing program) 1970/01/01 00:08:16 fetching corpus: 2841, signal 163782/184713 (executing program) 1970/01/01 00:08:18 fetching corpus: 2891, signal 164504/185391 (executing program) 1970/01/01 00:08:20 fetching corpus: 2941, signal 165301/186069 (executing program) 1970/01/01 00:08:23 fetching corpus: 2991, signal 166023/186683 (executing program) 1970/01/01 00:08:27 fetching corpus: 3041, signal 166766/187304 (executing program) 1970/01/01 00:08:29 fetching corpus: 3089, signal 167810/188044 (executing program) 1970/01/01 00:08:31 fetching corpus: 3139, signal 168665/188669 (executing program) 1970/01/01 00:08:34 fetching corpus: 3189, signal 169457/189264 (executing program) 1970/01/01 00:08:36 fetching corpus: 3239, signal 170062/189812 (executing program) 1970/01/01 00:08:39 fetching corpus: 3289, signal 170843/190393 (executing program) 1970/01/01 00:08:41 fetching corpus: 3339, signal 171393/190833 (executing program) 1970/01/01 00:08:43 fetching corpus: 3389, signal 172032/191322 (executing program) 1970/01/01 00:08:47 fetching corpus: 3439, signal 172831/191827 (executing program) 1970/01/01 00:08:49 fetching corpus: 3489, signal 173757/192370 (executing program) 1970/01/01 00:08:52 fetching corpus: 3538, signal 174791/192892 (executing program) 1970/01/01 00:08:54 fetching corpus: 3588, signal 175761/193366 (executing program) 1970/01/01 00:08:56 fetching corpus: 3638, signal 176317/193740 (executing program) 1970/01/01 00:08:58 fetching corpus: 3688, signal 177086/194185 (executing program) 1970/01/01 00:09:01 fetching corpus: 3738, signal 177748/194553 (executing program) 1970/01/01 00:09:04 fetching corpus: 3788, signal 178519/194923 (executing program) 1970/01/01 00:09:07 fetching corpus: 3838, signal 179299/195283 (executing program) 1970/01/01 00:09:09 fetching corpus: 3888, signal 180193/195696 (executing program) 1970/01/01 00:09:11 fetching corpus: 3938, signal 181096/196071 (executing program) 1970/01/01 00:09:14 fetching corpus: 3988, signal 181711/196343 (executing program) 1970/01/01 00:09:17 fetching corpus: 4038, signal 182290/196619 (executing program) 1970/01/01 00:09:20 fetching corpus: 4088, signal 182929/196902 (executing program) 1970/01/01 00:09:23 fetching corpus: 4138, signal 183602/197214 (executing program) 1970/01/01 00:09:26 fetching corpus: 4188, signal 184437/197510 (executing program) 1970/01/01 00:09:28 fetching corpus: 4238, signal 185252/197759 (executing program) 1970/01/01 00:09:29 fetching corpus: 4288, signal 186001/198015 (executing program) 1970/01/01 00:09:33 fetching corpus: 4338, signal 187061/198286 (executing program) 1970/01/01 00:09:36 fetching corpus: 4388, signal 187627/198459 (executing program) 1970/01/01 00:09:38 fetching corpus: 4438, signal 188208/198661 (executing program) 1970/01/01 00:09:42 fetching corpus: 4488, signal 188945/198824 (executing program) 1970/01/01 00:09:44 fetching corpus: 4538, signal 189526/198980 (executing program) 1970/01/01 00:09:46 fetching corpus: 4588, signal 190212/199133 (executing program) 1970/01/01 00:09:48 fetching corpus: 4638, signal 191019/199272 (executing program) 1970/01/01 00:09:51 fetching corpus: 4688, signal 191712/199391 (executing program) 1970/01/01 00:09:53 fetching corpus: 4738, signal 192433/199531 (executing program) 1970/01/01 00:09:55 fetching corpus: 4788, signal 193134/199622 (executing program) 1970/01/01 00:09:57 fetching corpus: 4838, signal 193665/199695 (executing program) 1970/01/01 00:10:00 fetching corpus: 4888, signal 194117/199757 (executing program) 1970/01/01 00:10:03 fetching corpus: 4938, signal 194942/199807 (executing program) 1970/01/01 00:10:06 fetching corpus: 4988, signal 195420/199808 (executing program) 1970/01/01 00:10:09 fetching corpus: 5038, signal 195902/199808 (executing program) 1970/01/01 00:10:12 fetching corpus: 5088, signal 196418/199811 (executing program) 1970/01/01 00:10:14 fetching corpus: 5126, signal 196792/199811 (executing program) 1970/01/01 00:10:14 fetching corpus: 5126, signal 196792/199811 (executing program) 1970/01/01 00:11:58 starting 2 fuzzer processes 00:11:58 executing program 0: r0 = memfd_create(&(0x7f0000000080)='O\x93?\x85\xff\x10\x05R\xe2\x05~\xb9\r\xdf\x05]\b\x00\x00\x00\xe6\x1a\x00\x00\xd2\xd4\x96\x05\x00\x00\x00{\x00\x1e7\xbcF\xeda\xda\x96\xf9\xc9\xe1\xe1\x02\xd7\xadQ\x03\x12\t\xc9\t3\x888P\xff\x00\xa4:\x81(\xf31\x94\xe1\x13\x807\xa5L\x050\xd4\x96\xcc\xa3\xc3\xbe\xf7~T\x1f', 0x0) fdatasync(r0) 00:11:58 executing program 1: mq_open(&(0x7f0000000400)='.proc/self\x00', 0x0, 0x0, 0x0) [ 753.390152][ T2039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.123405][ T2039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.156982][ T2040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.905509][ T2040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.978710][ T2039] device hsr_slave_0 entered promiscuous mode [ 766.018011][ T2039] device hsr_slave_1 entered promiscuous mode [ 767.704565][ T2040] device hsr_slave_0 entered promiscuous mode [ 767.766960][ T2040] device hsr_slave_1 entered promiscuous mode [ 767.790138][ T2040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 767.798643][ T2040] Cannot create hsr debugfs directory [ 774.328662][ T2039] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 774.465723][ T2039] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 774.564302][ T2039] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 774.914944][ T2039] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 775.701587][ T2040] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 775.854605][ T2040] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 776.014104][ T2040] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 776.144830][ T2040] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 784.258265][ T2039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.020092][ T2107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 785.069896][ T2107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 786.499533][ T2040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.968149][ T2238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 787.005499][ T2238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 791.288540][ T2107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 791.344246][ T2107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 791.425299][ T2107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 791.443430][ T2107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 791.468591][ T2107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 791.668581][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 792.225837][ T829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 792.276310][ T829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 792.526972][ T2202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 792.572239][ T2202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 792.764410][ T2039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 793.465665][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 793.470030][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 793.933706][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 793.974397][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 794.607664][ T2238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 794.624469][ T2238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 794.659984][ T2238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 794.707270][ T2238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 795.476394][ T829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 795.539919][ T829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 795.714112][ T2202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 795.759545][ T2202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 795.963216][ T2040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 796.677461][ T829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 796.688475][ T829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 807.112241][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 807.164565][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 808.085736][ T829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 808.126202][ T829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 814.114338][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 814.175875][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 814.224497][ T2039] device veth0_vlan entered promiscuous mode [ 814.278735][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 814.298655][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 814.786364][ T2039] device veth1_vlan entered promiscuous mode [ 815.408948][ T2202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 815.469227][ T2202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 815.609726][ T2202] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 815.659821][ T2202] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 815.777358][ T2040] device veth0_vlan entered promiscuous mode [ 816.106280][ T2202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 816.166243][ T2202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 816.459780][ T2039] device veth0_macvtap entered promiscuous mode [ 816.647025][ T2040] device veth1_vlan entered promiscuous mode [ 817.047660][ T2039] device veth1_macvtap entered promiscuous mode [ 818.182884][ T829] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 818.235674][ T829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 818.656559][ T2040] device veth0_macvtap entered promiscuous mode [ 818.741650][ T2039] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.746841][ T2039] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.748293][ T2039] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.749606][ T2039] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.926128][ T2107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 818.963204][ T2107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 818.979089][ T2107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 819.045328][ T2107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 819.137433][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 819.344513][ T2040] device veth1_macvtap entered promiscuous mode [ 820.945742][ T2107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 821.027188][ T2107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 821.512781][ T2720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 821.564152][ T2720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 821.739611][ T2040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.758318][ T2040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.759582][ T2040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.774111][ T2040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:13:46 executing program 1: mq_open(&(0x7f0000000400)='.proc/self\x00', 0x0, 0x0, 0x0) 00:13:46 executing program 0: r0 = memfd_create(&(0x7f0000000080)='O\x93?\x85\xff\x10\x05R\xe2\x05~\xb9\r\xdf\x05]\b\x00\x00\x00\xe6\x1a\x00\x00\xd2\xd4\x96\x05\x00\x00\x00{\x00\x1e7\xbcF\xeda\xda\x96\xf9\xc9\xe1\xe1\x02\xd7\xadQ\x03\x12\t\xc9\t3\x888P\xff\x00\xa4:\x81(\xf31\x94\xe1\x13\x807\xa5L\x050\xd4\x96\xcc\xa3\xc3\xbe\xf7~T\x1f', 0x0) fdatasync(r0) 00:13:48 executing program 1: mq_open(&(0x7f0000000400)='.proc/self\x00', 0x0, 0x0, 0x0) 00:13:49 executing program 0: r0 = memfd_create(&(0x7f0000000080)='O\x93?\x85\xff\x10\x05R\xe2\x05~\xb9\r\xdf\x05]\b\x00\x00\x00\xe6\x1a\x00\x00\xd2\xd4\x96\x05\x00\x00\x00{\x00\x1e7\xbcF\xeda\xda\x96\xf9\xc9\xe1\xe1\x02\xd7\xadQ\x03\x12\t\xc9\t3\x888P\xff\x00\xa4:\x81(\xf31\x94\xe1\x13\x807\xa5L\x050\xd4\x96\xcc\xa3\xc3\xbe\xf7~T\x1f', 0x0) fdatasync(r0) 00:13:50 executing program 1: mq_open(&(0x7f0000000400)='.proc/self\x00', 0x0, 0x0, 0x0) 00:13:52 executing program 0: r0 = memfd_create(&(0x7f0000000080)='O\x93?\x85\xff\x10\x05R\xe2\x05~\xb9\r\xdf\x05]\b\x00\x00\x00\xe6\x1a\x00\x00\xd2\xd4\x96\x05\x00\x00\x00{\x00\x1e7\xbcF\xeda\xda\x96\xf9\xc9\xe1\xe1\x02\xd7\xadQ\x03\x12\t\xc9\t3\x888P\xff\x00\xa4:\x81(\xf31\x94\xe1\x13\x807\xa5L\x050\xd4\x96\xcc\xa3\xc3\xbe\xf7~T\x1f', 0x0) fdatasync(r0) 00:13:54 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 00:13:55 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x8001, 0x3fe0000000000) 00:13:58 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 00:14:01 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x8001, 0x3fe0000000000) 00:14:03 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 00:14:06 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x8001, 0x3fe0000000000) 00:14:09 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 00:14:12 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x8001, 0x3fe0000000000) 00:14:15 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x821c}, 0x20) 00:14:18 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:14:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x821c}, 0x20) 00:14:22 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:14:23 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x821c}, 0x20) 00:14:25 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:14:26 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x821c}, 0x20) 00:14:28 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:14:29 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000200)={@my=0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:33 executing program 0: mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000fd3000/0x4000)=nil) mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000fd4000/0x1000)=nil) 00:14:33 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000200)={@my=0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:36 executing program 0: mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000fd3000/0x4000)=nil) mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000fd4000/0x1000)=nil) 00:14:38 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000200)={@my=0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:40 executing program 0: mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000fd3000/0x4000)=nil) mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000fd4000/0x1000)=nil) 00:14:42 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000200)={@my=0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:44 executing program 0: mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000fd3000/0x4000)=nil) mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000fd4000/0x1000)=nil) 00:14:48 executing program 1: mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000fd3000/0x4000)=nil) mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000fd4000/0x1000)=nil) 00:14:48 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000200)={@my=0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:51 executing program 1: mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000fd3000/0x4000)=nil) mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000fd4000/0x1000)=nil) 00:14:51 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000200)={@my=0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:53 executing program 1: mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000fd3000/0x4000)=nil) mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000fd4000/0x1000)=nil) 00:14:55 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000200)={@my=0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="9b7f", 0xffeb}], 0x1, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x0) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000040)=0x20, 0x4) read$FUSE(r1, &(0x7f0000005240)={0x2020}, 0x2020) 00:14:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000540)={0x0, 0x0, 0x7, 0xfffffffffffffffe}) 00:15:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="9b7f", 0xffeb}], 0x1, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x0) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000040)=0x20, 0x4) read$FUSE(r1, &(0x7f0000005240)={0x2020}, 0x2020) 00:15:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000540)={0x0, 0x0, 0x7, 0xfffffffffffffffe}) 00:15:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="9b7f", 0xffeb}], 0x1, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x0) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000040)=0x20, 0x4) read$FUSE(r1, &(0x7f0000005240)={0x2020}, 0x2020) 00:15:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000540)={0x0, 0x0, 0x7, 0xfffffffffffffffe}) 00:15:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000540)={0x0, 0x0, 0x7, 0xfffffffffffffffe}) 00:15:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="9b7f", 0xffeb}], 0x1, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x0) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000040)=0x20, 0x4) read$FUSE(r1, &(0x7f0000005240)={0x2020}, 0x2020) 00:15:10 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="9b7f", 0xffeb}], 0x1, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x0) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000040)=0x20, 0x4) read$FUSE(r1, &(0x7f0000005240)={0x2020}, 0x2020) 00:15:11 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="9b7f", 0xffeb}], 0x1, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x0) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000040)=0x20, 0x4) read$FUSE(r1, &(0x7f0000005240)={0x2020}, 0x2020) 00:15:12 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="9b7f", 0xffeb}], 0x1, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x0) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000040)=0x20, 0x4) read$FUSE(r1, &(0x7f0000005240)={0x2020}, 0x2020) 00:15:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="9b7f", 0xffeb}], 0x1, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x0) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000040)=0x20, 0x4) read$FUSE(r1, &(0x7f0000005240)={0x2020}, 0x2020) 00:15:16 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="9b7f", 0xffeb}], 0x1, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x0) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000040)=0x20, 0x4) read$FUSE(r1, &(0x7f0000005240)={0x2020}, 0x2020) 00:15:17 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="9b7f", 0xffeb}], 0x1, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x0) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000040)=0x20, 0x4) read$FUSE(r1, &(0x7f0000005240)={0x2020}, 0x2020) 00:15:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @sit={{0x8}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x6}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_REMOTE={0x8, 0x2, @multicast1}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6}]}}}]}, 0x68}}, 0x0) [ 921.562160][ C0] hrtimer: interrupt took 2245400 ns 00:15:23 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x19, 0x0, &(0x7f0000001340)) 00:15:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @sit={{0x8}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x6}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_REMOTE={0x8, 0x2, @multicast1}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6}]}}}]}, 0x68}}, 0x0) 00:15:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x19, 0x0, &(0x7f0000001340)) 00:15:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @sit={{0x8}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x6}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_REMOTE={0x8, 0x2, @multicast1}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6}]}}}]}, 0x68}}, 0x0) 00:15:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x19, 0x0, &(0x7f0000001340)) 00:15:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @sit={{0x8}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x6}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_REMOTE={0x8, 0x2, @multicast1}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6}]}}}]}, 0x68}}, 0x0) 00:15:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x19, 0x0, &(0x7f0000001340)) 00:15:34 executing program 0: prctl$PR_SET_MM_EXE_FILE(0x25, 0x100000, 0xffffffffffffffff) 00:15:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x24}}, 0x0) 00:15:36 executing program 0: prctl$PR_SET_MM_EXE_FILE(0x25, 0x100000, 0xffffffffffffffff) 00:15:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x24}}, 0x0) 00:15:39 executing program 0: prctl$PR_SET_MM_EXE_FILE(0x25, 0x100000, 0xffffffffffffffff) 00:15:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x24}}, 0x0) 00:15:43 executing program 0: prctl$PR_SET_MM_EXE_FILE(0x25, 0x100000, 0xffffffffffffffff) 00:15:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x24}}, 0x0) 00:15:47 executing program 0: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000040)=""/4) 00:15:50 executing program 0: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000040)=""/4) 00:15:51 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x30}}) 00:15:53 executing program 0: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000040)=""/4) 00:15:54 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x30}}) 00:15:55 executing program 0: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000040)=""/4) 00:15:58 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x30}}) 00:15:59 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x30}}) 00:16:02 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x30}}) 00:16:04 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x30}}) 00:16:07 executing program 1: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) 00:16:08 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x30}}) 00:16:10 executing program 1: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) 00:16:13 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000900), 0x82001, 0x0) write$vga_arbiter(r0, &(0x7f0000000140)=@other={'unlock', ' ', 'mem'}, 0xb) 00:16:13 executing program 1: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) 00:16:15 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000900), 0x82001, 0x0) write$vga_arbiter(r0, &(0x7f0000000140)=@other={'unlock', ' ', 'mem'}, 0xb) 00:16:16 executing program 1: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) 00:16:17 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000900), 0x82001, 0x0) write$vga_arbiter(r0, &(0x7f0000000140)=@other={'unlock', ' ', 'mem'}, 0xb) 00:16:19 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x8001, 0x0) write$sequencer(r0, &(0x7f0000000000)=[@v={0x93, 0x0, 0x0, 0x0, @generic}, @x={0x94, 0x0, "45df320822b9"}, @t={0x81, 0x5}, @v={0x93, 0x0, 0xa0}], 0x20) 00:16:20 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000900), 0x82001, 0x0) write$vga_arbiter(r0, &(0x7f0000000140)=@other={'unlock', ' ', 'mem'}, 0xb) 00:16:22 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x8001, 0x0) write$sequencer(r0, &(0x7f0000000000)=[@v={0x93, 0x0, 0x0, 0x0, @generic}, @x={0x94, 0x0, "45df320822b9"}, @t={0x81, 0x5}, @v={0x93, 0x0, 0xa0}], 0x20) 00:16:23 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x8001, 0x0) write$sequencer(r0, &(0x7f0000000000)=[@v={0x93, 0x0, 0x0, 0x0, @generic}, @x={0x94, 0x0, "45df320822b9"}, @t={0x81, 0x5}, @v={0x93, 0x0, 0xa0}], 0x20) 00:16:25 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x8001, 0x0) write$sequencer(r0, &(0x7f0000000000)=[@v={0x93, 0x0, 0x0, 0x0, @generic}, @x={0x94, 0x0, "45df320822b9"}, @t={0x81, 0x5}, @v={0x93, 0x0, 0xa0}], 0x20) 00:16:26 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x8001, 0x0) write$sequencer(r0, &(0x7f0000000000)=[@v={0x93, 0x0, 0x0, 0x0, @generic}, @x={0x94, 0x0, "45df320822b9"}, @t={0x81, 0x5}, @v={0x93, 0x0, 0xa0}], 0x20) 00:16:27 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x8001, 0x0) write$sequencer(r0, &(0x7f0000000000)=[@v={0x93, 0x0, 0x0, 0x0, @generic}, @x={0x94, 0x0, "45df320822b9"}, @t={0x81, 0x5}, @v={0x93, 0x0, 0xa0}], 0x20) 00:16:28 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x8001, 0x0) write$sequencer(r0, &(0x7f0000000000)=[@v={0x93, 0x0, 0x0, 0x0, @generic}, @x={0x94, 0x0, "45df320822b9"}, @t={0x81, 0x5}, @v={0x93, 0x0, 0xa0}], 0x20) 00:16:31 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1e, 0x59, 0xd6, 0x40, 0x1d50, 0x606f, 0x6cca, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x50, 0x48, 0xb2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) 00:16:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@empty}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) socket$kcm(0x29, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000001240), 0x6, 0x341) [ 995.755757][ T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 996.317123][ T20] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=6c.ca [ 996.323624][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.459911][ T20] usb 2-1: config 0 descriptor?? [ 997.165908][ T20] gs_usb 2-1:0.0: Configuring for 1 interfaces 00:16:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@empty}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) socket$kcm(0x29, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000001240), 0x6, 0x341) [ 998.264755][ T20] usb 2-1: USB disconnect, device number 2 00:16:40 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1e, 0x59, 0xd6, 0x40, 0x1d50, 0x606f, 0x6cca, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x50, 0x48, 0xb2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) 00:16:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@empty}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) socket$kcm(0x29, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000001240), 0x6, 0x341) [ 1004.374644][ T2202] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1004.824558][ T2202] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=6c.ca [ 1004.826256][ T2202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.056755][ T2202] usb 2-1: config 0 descriptor?? [ 1005.874635][ T2202] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 1006.565819][ T2202] usb 2-1: USB disconnect, device number 3 00:16:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@empty}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) socket$kcm(0x29, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000001240), 0x6, 0x341) 00:16:51 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1e, 0x59, 0xd6, 0x40, 0x1d50, 0x606f, 0x6cca, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x50, 0x48, 0xb2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) 00:16:53 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1e, 0x59, 0xd6, 0x40, 0x1d50, 0x606f, 0x6cca, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x50, 0x48, 0xb2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) [ 1017.314067][ T2671] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1017.825920][ T2671] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=6c.ca [ 1017.827666][ T2671] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.066313][ T2671] usb 2-1: config 0 descriptor?? [ 1018.674253][ T2028] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1019.125320][ T2671] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 1019.157661][ T2028] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=6c.ca [ 1019.159617][ T2028] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.391353][ T2028] usb 1-1: config 0 descriptor?? [ 1020.044432][ T2671] usb 2-1: USB disconnect, device number 4 [ 1020.517825][ T2028] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 1021.707107][ T2028] usb 1-1: USB disconnect, device number 2 00:17:04 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1e, 0x59, 0xd6, 0x40, 0x1d50, 0x606f, 0x6cca, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x50, 0x48, 0xb2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) 00:17:05 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1e, 0x59, 0xd6, 0x40, 0x1d50, 0x606f, 0x6cca, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x50, 0x48, 0xb2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) [ 1028.565130][ T2107] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1029.035356][ T2107] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=6c.ca [ 1029.037108][ T2107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.114288][ T20] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1029.293612][ T2107] usb 2-1: config 0 descriptor?? [ 1029.556107][ T20] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=6c.ca [ 1029.558009][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.808555][ T20] usb 1-1: config 0 descriptor?? [ 1030.399674][ T2107] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 1030.684696][ T20] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 1031.317299][ T2107] usb 2-1: USB disconnect, device number 5 [ 1031.733858][ T20] usb 1-1: USB disconnect, device number 3 00:17:15 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1e, 0x59, 0xd6, 0x40, 0x1d50, 0x606f, 0x6cca, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x50, 0x48, 0xb2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) 00:17:18 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1e, 0x59, 0xd6, 0x40, 0x1d50, 0x606f, 0x6cca, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x50, 0x48, 0xb2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) [ 1039.783208][ T2724] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1040.208884][ T2724] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=6c.ca [ 1040.213366][ T2724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.355658][ T2724] usb 1-1: config 0 descriptor?? [ 1040.816872][ T20] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1041.245735][ T20] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=6c.ca [ 1041.249103][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.507147][ T20] usb 2-1: config 0 descriptor?? [ 1041.784072][ T2724] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 1042.426926][ T20] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 1043.004336][ T2724] usb 1-1: USB disconnect, device number 4 [ 1043.652705][ T20] usb 2-1: USB disconnect, device number 6 00:17:26 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1e, 0x59, 0xd6, 0x40, 0x1d50, 0x606f, 0x6cca, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x50, 0x48, 0xb2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) 00:17:26 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1e, 0x59, 0xd6, 0x40, 0x1d50, 0x606f, 0x6cca, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x50, 0x48, 0xb2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) [ 1049.503709][ T2028] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1049.943471][ T20] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1050.025552][ T2028] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=6c.ca [ 1050.026968][ T2028] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.149828][ T2028] usb 1-1: config 0 descriptor?? [ 1050.345941][ T20] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=6c.ca [ 1050.347690][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.519937][ T20] usb 2-1: config 0 descriptor?? [ 1051.013971][ T2028] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 1051.315822][ T20] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 1051.733085][ T2028] usb 1-1: USB disconnect, device number 5 [ 1052.224803][ T20] usb 2-1: USB disconnect, device number 7 00:17:34 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1e, 0x59, 0xd6, 0x40, 0x1d50, 0x606f, 0x6cca, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x50, 0x48, 0xb2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) 00:17:34 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1e, 0x59, 0xd6, 0x40, 0x1d50, 0x606f, 0x6cca, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x50, 0x48, 0xb2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) [ 1057.015135][ T2028] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1057.393517][ T83] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1057.655100][ T2028] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=6c.ca [ 1057.656800][ T2028] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.835782][ T83] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=6c.ca [ 1057.837467][ T83] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.852636][ T2028] usb 2-1: config 0 descriptor?? [ 1058.012700][ T83] usb 1-1: config 0 descriptor?? [ 1058.677816][ T2028] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 1058.747695][ T83] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 1059.534217][ T83] usb 1-1: USB disconnect, device number 6 [ 1059.789094][ T20] usb 2-1: USB disconnect, device number 8 00:17:42 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1e, 0x59, 0xd6, 0x40, 0x1d50, 0x606f, 0x6cca, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x50, 0x48, 0xb2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) 00:17:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@empty}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) socket$kcm(0x29, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000001240), 0x6, 0x341) [ 1065.723061][ T20] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1066.105479][ T20] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=6c.ca [ 1066.107113][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.334356][ T20] usb 1-1: config 0 descriptor?? [ 1067.335267][ T20] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 1068.378195][ T20] usb 1-1: USB disconnect, device number 7 00:17:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@empty}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) socket$kcm(0x29, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000001240), 0x6, 0x341) 00:17:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@empty}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) socket$kcm(0x29, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000001240), 0x6, 0x341) 00:17:54 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 00:17:57 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x800c5012, &(0x7f0000000080)) 00:17:57 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 00:18:02 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x800c5012, &(0x7f0000000080)) 00:18:03 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 00:18:08 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x800c5012, &(0x7f0000000080)) 00:18:10 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 00:18:13 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x800c5012, &(0x7f0000000080)) 00:18:15 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 00:18:17 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 00:18:18 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 00:18:20 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 00:18:22 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 00:18:22 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 00:18:25 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/cgroups\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x17812, r0, 0x10000000) 00:18:26 executing program 1: syz_open_dev$amidi(&(0x7f0000000040), 0xebc, 0x101081) r0 = syz_open_dev$amidi(&(0x7f0000000040), 0xebc, 0x101081) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)) 00:18:28 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/cgroups\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x17812, r0, 0x10000000) 00:18:28 executing program 1: syz_open_dev$amidi(&(0x7f0000000040), 0xebc, 0x101081) r0 = syz_open_dev$amidi(&(0x7f0000000040), 0xebc, 0x101081) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)) 00:18:31 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/cgroups\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x17812, r0, 0x10000000) 00:18:32 executing program 1: syz_open_dev$amidi(&(0x7f0000000040), 0xebc, 0x101081) r0 = syz_open_dev$amidi(&(0x7f0000000040), 0xebc, 0x101081) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)) 00:18:33 executing program 0: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/cgroups\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x17812, r0, 0x10000000) 00:18:34 executing program 1: syz_open_dev$amidi(&(0x7f0000000040), 0xebc, 0x101081) r0 = syz_open_dev$amidi(&(0x7f0000000040), 0xebc, 0x101081) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)) 00:18:37 executing program 0: syz_open_dev$amidi(&(0x7f0000000040), 0xebc, 0x101081) r0 = syz_open_dev$amidi(&(0x7f0000000040), 0xebc, 0x101081) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)) 00:18:38 executing program 1: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/cgroups\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x17812, r0, 0x10000000) 00:18:39 executing program 0: syz_open_dev$amidi(&(0x7f0000000040), 0xebc, 0x101081) r0 = syz_open_dev$amidi(&(0x7f0000000040), 0xebc, 0x101081) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)) 00:18:41 executing program 1: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/cgroups\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x17812, r0, 0x10000000) 00:18:42 executing program 0: syz_open_dev$amidi(&(0x7f0000000040), 0xebc, 0x101081) r0 = syz_open_dev$amidi(&(0x7f0000000040), 0xebc, 0x101081) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)) 00:18:44 executing program 1: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/cgroups\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x17812, r0, 0x10000000) 00:18:46 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000004c0)={@empty}, 0x14) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) dup3(r1, r0, 0x0) 00:18:49 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x4, &(0x7f0000000640)=@framed={{}, [@alu={0x6, 0x0, 0xc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 00:18:50 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000004c0)={@empty}, 0x14) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) dup3(r1, r0, 0x0) 00:18:51 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x4, &(0x7f0000000640)=@framed={{}, [@alu={0x6, 0x0, 0xc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 00:18:52 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000004c0)={@empty}, 0x14) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) dup3(r1, r0, 0x0) 00:18:54 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x4, &(0x7f0000000640)=@framed={{}, [@alu={0x6, 0x0, 0xc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 00:18:55 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000004c0)={@empty}, 0x14) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) dup3(r1, r0, 0x0) 00:18:56 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x4, &(0x7f0000000640)=@framed={{}, [@alu={0x6, 0x0, 0xc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 00:19:00 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000004c0)={@empty}, 0x14) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) dup3(r1, r0, 0x0) 00:19:01 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000004c0)={@empty}, 0x14) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) dup3(r1, r0, 0x0) 00:19:03 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000004c0)={@empty}, 0x14) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) dup3(r1, r0, 0x0) 00:19:04 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000004c0)={@empty}, 0x14) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) dup3(r1, r0, 0x0) 00:19:06 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000004c0)={@empty}, 0x14) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) dup3(r1, r0, 0x0) 00:19:06 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000004c0)={@empty}, 0x14) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) dup3(r1, r0, 0x0) 00:19:10 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000000), 0xebc, 0x81) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000000200)) 00:19:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1}, 0x1c) 00:19:13 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000000), 0xebc, 0x81) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000000200)) 00:19:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1}, 0x1c) 00:19:16 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000000), 0xebc, 0x81) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000000200)) 00:19:20 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000000), 0xebc, 0x81) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000000200)) 00:19:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1}, 0x1c) 00:19:24 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000000), 0xebc, 0x81) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000000200)) 00:19:27 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000000), 0xebc, 0x81) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000000200)) 00:19:31 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000000), 0xebc, 0x81) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000000200)) 00:19:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1}, 0x1c) 00:19:37 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x80000000, 0x8, [0x0, 0x0]}) 00:19:40 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x80000000, 0x8, [0x0, 0x0]}) 00:19:42 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x80000000, 0x8, [0x0, 0x0]}) 00:19:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x80000000, 0x8, [0x0, 0x0]}) 00:19:45 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x80000000, 0x8, [0x0, 0x0]}) 00:19:46 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x80000000, 0x8, [0x0, 0x0]}) 00:19:48 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x80000000, 0x8, [0x0, 0x0]}) 00:19:49 executing program 0: r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) writev(r0, &(0x7f0000001640)=[{0x0, 0x800000}, {&(0x7f0000000300)="a6", 0x1}], 0x2) 00:19:52 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/31, 0x1f}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 00:19:52 executing program 0: r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) writev(r0, &(0x7f0000001640)=[{0x0, 0x800000}, {&(0x7f0000000300)="a6", 0x1}], 0x2) 00:19:54 executing program 0: r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) writev(r0, &(0x7f0000001640)=[{0x0, 0x800000}, {&(0x7f0000000300)="a6", 0x1}], 0x2) 00:19:55 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/31, 0x1f}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 00:19:57 executing program 0: r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) writev(r0, &(0x7f0000001640)=[{0x0, 0x800000}, {&(0x7f0000000300)="a6", 0x1}], 0x2) 00:19:59 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/31, 0x1f}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 00:20:01 executing program 0: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/31, 0x1f}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 00:20:04 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/31, 0x1f}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 00:20:06 executing program 0: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/31, 0x1f}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 00:20:10 executing program 1: r0 = syz_io_uring_setup(0x369c, &(0x7f0000000540), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8, &(0x7f0000000000), 0x1000000) 00:20:12 executing program 0: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/31, 0x1f}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 00:20:14 executing program 1: r0 = syz_io_uring_setup(0x369c, &(0x7f0000000540), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8, &(0x7f0000000000), 0x1000000) 00:20:18 executing program 1: r0 = syz_io_uring_setup(0x369c, &(0x7f0000000540), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8, &(0x7f0000000000), 0x1000000) 00:20:18 executing program 0: r0 = syz_io_uring_setup(0x369c, &(0x7f0000000540), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8, &(0x7f0000000000), 0x1000000) 00:20:20 executing program 0: r0 = syz_io_uring_setup(0x369c, &(0x7f0000000540), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8, &(0x7f0000000000), 0x1000000) 00:20:21 executing program 1: r0 = syz_io_uring_setup(0x369c, &(0x7f0000000540), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8, &(0x7f0000000000), 0x1000000) 00:20:23 executing program 0: r0 = syz_io_uring_setup(0x369c, &(0x7f0000000540), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8, &(0x7f0000000000), 0x1000000) 00:20:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000001940)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 1229.626346][ T3363] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1230.250018][ T3363] BUG: Bad page map in process syz-executor.1 pte:ffffaf8022178170 pmd:288ddc01 [ 1230.259495][ T3363] addr:00000000001f6000 vm_flags:00000071 anon_vma:0000000000000000 mapping:ffffaf800bffb4d0 index:d6 [ 1230.263708][ T3363] file:memfd:syz-shared-mem fault:shmem_fault mmap:shmem_mmap readpage:0x0 [ 1230.266990][ T3363] CPU: 0 PID: 3363 Comm: syz-executor.1 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 1230.268607][ T3363] Hardware name: riscv-virtio,qemu (DT) [ 1230.269695][ T3363] Call Trace: [ 1230.271181][ T3363] [] dump_backtrace+0x2e/0x3c [ 1230.273202][ T3363] [] show_stack+0x34/0x40 [ 1230.274400][ T3363] [] dump_stack_lvl+0xe4/0x150 [ 1230.275782][ T3363] [] dump_stack+0x1c/0x24 [ 1230.277747][ T3363] [] print_bad_pte+0x3d4/0x4a0 [ 1230.280129][ T3363] [] vm_normal_page+0x20c/0x22a [ 1230.281663][ T3363] [] unmap_page_range+0x6d0/0x13f0 [ 1230.283084][ T3363] [] unmap_vmas+0x1d0/0x366 [ 1230.285107][ T3363] [] exit_mmap+0x15c/0x412 [ 1230.286351][ T3363] [] mmput+0xee/0x2c2 [ 1230.288338][ T3363] [] do_exit+0x6f2/0x18fc [ 1230.289473][ T3363] [] do_group_exit+0x90/0x17e [ 1230.291277][ T3363] [] get_signal+0x3b8/0x1754 [ 1230.293151][ T3363] [] do_notify_resume+0x11a/0xa56 [ 1230.294495][ T3363] [] ret_from_exception+0x0/0x10 [ 1230.298754][ T3363] Disabling lock debugging due to kernel taint 00:20:29 executing program 0: clock_adjtime(0x0, &(0x7f00000011c0)={0x7f, 0x0, 0x100000000000000}) [ 1230.471889][ T3363] BUG: Bad page map in process syz-executor.1 pte:ffffffff801110e4 pmd:288ddc01 [ 1230.473135][ T3363] addr:00000000001f7000 vm_flags:00000071 anon_vma:0000000000000000 mapping:ffffaf800bffb4d0 index:d7 [ 1230.474321][ T3363] file:memfd:syz-shared-mem fault:shmem_fault mmap:shmem_mmap readpage:0x0 [ 1230.475898][ T3363] CPU: 0 PID: 3363 Comm: syz-executor.1 Tainted: G B 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 1230.477142][ T3363] Hardware name: riscv-virtio,qemu (DT) [ 1230.477799][ T3363] Call Trace: [ 1230.478361][ T3363] [] dump_backtrace+0x2e/0x3c [ 1230.479420][ T3363] [] show_stack+0x34/0x40 [ 1230.481115][ T3363] [] dump_stack_lvl+0xe4/0x150 [ 1230.482284][ T3363] [] dump_stack+0x1c/0x24 [ 1230.483400][ T3363] [] print_bad_pte+0x3d4/0x4a0 [ 1230.485329][ T3363] [] vm_normal_page+0x20c/0x22a [ 1230.486438][ T3363] [] unmap_page_range+0x6d0/0x13f0 [ 1230.487707][ T3363] [] unmap_vmas+0x1d0/0x366 [ 1230.489272][ T3363] [] exit_mmap+0x15c/0x412 [ 1230.490800][ T3363] [] mmput+0xee/0x2c2 [ 1230.492368][ T3363] [] do_exit+0x6f2/0x18fc [ 1230.493455][ T3363] [] do_group_exit+0x90/0x17e [ 1230.495094][ T3363] [] get_signal+0x3b8/0x1754 [ 1230.496943][ T3363] [] do_notify_resume+0x11a/0xa56 [ 1230.498198][ T3363] [] ret_from_exception+0x0/0x10 [ 1230.511994][ T3363] BUG: Bad page map in process syz-executor.1 pte:ffffaf80221781b0 pmd:288ddc01 [ 1230.513197][ T3363] addr:00000000001fe000 vm_flags:00000071 anon_vma:0000000000000000 mapping:ffffaf800bffb4d0 index:de [ 1230.514369][ T3363] file:memfd:syz-shared-mem fault:shmem_fault mmap:shmem_mmap readpage:0x0 [ 1230.517025][ T3363] CPU: 0 PID: 3363 Comm: syz-executor.1 Tainted: G B 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 1230.518659][ T3363] Hardware name: riscv-virtio,qemu (DT) [ 1230.520194][ T3363] Call Trace: [ 1230.521237][ T3363] [] dump_backtrace+0x2e/0x3c [ 1230.522328][ T3363] [] show_stack+0x34/0x40 [ 1230.523306][ T3363] [] dump_stack_lvl+0xe4/0x150 [ 1230.524497][ T3363] [] dump_stack+0x1c/0x24 [ 1230.526262][ T3363] [] print_bad_pte+0x3d4/0x4a0 [ 1230.527523][ T3363] [] vm_normal_page+0x20c/0x22a [ 1230.528521][ T3363] [] unmap_page_range+0x6d0/0x13f0 [ 1230.529877][ T3363] [] unmap_vmas+0x1d0/0x366 [ 1230.531597][ T3363] [] exit_mmap+0x15c/0x412 [ 1230.532619][ T3363] [] mmput+0xee/0x2c2 [ 1230.534221][ T3363] [] do_exit+0x6f2/0x18fc [ 1230.535308][ T3363] [] do_group_exit+0x90/0x17e [ 1230.536299][ T3363] [] get_signal+0x3b8/0x1754 [ 1230.537349][ T3363] [] do_notify_resume+0x11a/0xa56 [ 1230.538379][ T3363] [] ret_from_exception+0x0/0x10 [ 1230.612589][ T3363] BUG: Bad page map in process syz-executor.1 pte:ffffffff801110e4 pmd:288ddc01 [ 1230.613543][ T3363] addr:00000000001ff000 vm_flags:00000071 anon_vma:0000000000000000 mapping:ffffaf800bffb4d0 index:df [ 1230.614539][ T3363] file:memfd:syz-shared-mem fault:shmem_fault mmap:shmem_mmap readpage:0x0 [ 1230.615806][ T3363] CPU: 0 PID: 3363 Comm: syz-executor.1 Tainted: G B 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 1230.616821][ T3363] Hardware name: riscv-virtio,qemu (DT) [ 1230.617358][ T3363] Call Trace: [ 1230.617798][ T3363] [] dump_backtrace+0x2e/0x3c [ 1230.618791][ T3363] [] show_stack+0x34/0x40 [ 1230.619670][ T3363] [] dump_stack_lvl+0xe4/0x150 [ 1230.621350][ T3363] [] dump_stack+0x1c/0x24 [ 1230.622130][ T3363] [] print_bad_pte+0x3d4/0x4a0 [ 1230.623119][ T3363] [] vm_normal_page+0x20c/0x22a [ 1230.624323][ T3363] [] unmap_page_range+0x6d0/0x13f0 [ 1230.625844][ T3363] [] unmap_vmas+0x1d0/0x366 [ 1230.626739][ T3363] [] exit_mmap+0x15c/0x412 [ 1230.627651][ T3363] [] mmput+0xee/0x2c2 [ 1230.629365][ T3363] [] do_exit+0x6f2/0x18fc [ 1230.630234][ T3363] [] do_group_exit+0x90/0x17e [ 1230.631404][ T3363] [] get_signal+0x3b8/0x1754 [ 1230.632171][ T3363] [] do_notify_resume+0x11a/0xa56 [ 1230.632876][ T3363] [] ret_from_exception+0x0/0x10 00:20:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000001940)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 00:20:30 executing program 0: clock_adjtime(0x0, &(0x7f00000011c0)={0x7f, 0x0, 0x100000000000000}) [ 1231.662047][ T3367] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 00:20:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000001940)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 00:20:31 executing program 0: clock_adjtime(0x0, &(0x7f00000011c0)={0x7f, 0x0, 0x100000000000000}) [ 1232.587905][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 00:20:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000001940)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 00:20:32 executing program 0: clock_adjtime(0x0, &(0x7f00000011c0)={0x7f, 0x0, 0x100000000000000}) [ 1233.687334][ T3375] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 00:20:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='3\x00\x00\x00\x00\x00\x00\x00.']}) [ 1235.465475][ T3379] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1235.467375][ T3379] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1235.468956][ T3379] netdevsim netdevsim0: Falling back to sysfs fallback for: . 00:20:34 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0xa, 0x0, 0x0) 00:20:35 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0xa, 0x0, 0x0) 00:20:36 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0xa, 0x0, 0x0) 00:20:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='3\x00\x00\x00\x00\x00\x00\x00.']}) 00:20:37 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0xa, 0x0, 0x0) [ 1238.549394][ T3389] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1238.555235][ T3389] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1238.557592][ T3389] netdevsim netdevsim0: Falling back to sysfs fallback for: . 00:20:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='3\x00\x00\x00\x00\x00\x00\x00.']}) 00:20:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='3\x00\x00\x00\x00\x00\x00\x00.']}) 00:20:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='3\x00\x00\x00\x00\x00\x00\x00.']}) [ 1241.978746][ T3398] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1242.013043][ T3398] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1242.015351][ T3398] netdevsim netdevsim0: Falling back to sysfs fallback for: . 00:20:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='3\x00\x00\x00\x00\x00\x00\x00.']}) 00:20:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='3\x00\x00\x00\x00\x00\x00\x00.']}) [ 1245.392049][ T3405] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1245.395415][ T3405] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1245.397672][ T3405] netdevsim netdevsim1: Falling back to sysfs fallback for: . 00:20:48 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0xa, 0x0, 0x0) 00:20:48 executing program 1: prlimit64(0x0, 0x6, &(0x7f0000000000), 0x0) syz_clone3(&(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:20:48 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0xa, 0x0, 0x0) 00:20:49 executing program 1: prlimit64(0x0, 0x6, &(0x7f0000000000), 0x0) syz_clone3(&(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:20:49 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0xa, 0x0, 0x0) 00:20:50 executing program 1: prlimit64(0x0, 0x6, &(0x7f0000000000), 0x0) syz_clone3(&(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:20:51 executing program 0: prlimit64(0x0, 0x6, &(0x7f0000000000), 0x0) syz_clone3(&(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:20:51 executing program 1: prlimit64(0x0, 0x6, &(0x7f0000000000), 0x0) syz_clone3(&(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:20:52 executing program 0: prlimit64(0x0, 0x6, &(0x7f0000000000), 0x0) syz_clone3(&(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:20:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000048c0)=ANY=[@ANYBLOB="500000001000070800"/20, @ANYRES32=0x0, @ANYBLOB="00000000ffffffef1c001a8018000a8014000700ff0100000000000000000000000000011400030076657468315f766972745f77696669"], 0x50}}, 0x0) 00:20:53 executing program 0: prlimit64(0x0, 0x6, &(0x7f0000000000), 0x0) syz_clone3(&(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:20:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000048c0)=ANY=[@ANYBLOB="500000001000070800"/20, @ANYRES32=0x0, @ANYBLOB="00000000ffffffef1c001a8018000a8014000700ff0100000000000000000000000000011400030076657468315f766972745f77696669"], 0x50}}, 0x0) 00:20:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x0, 0x0, 0x1800000}, {0xfd00}]}) 00:20:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000048c0)=ANY=[@ANYBLOB="500000001000070800"/20, @ANYRES32=0x0, @ANYBLOB="00000000ffffffef1c001a8018000a8014000700ff0100000000000000000000000000011400030076657468315f766972745f77696669"], 0x50}}, 0x0) 00:20:56 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x0, 0x0, 0x1800000}, {0xfd00}]}) 00:20:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000048c0)=ANY=[@ANYBLOB="500000001000070800"/20, @ANYRES32=0x0, @ANYBLOB="00000000ffffffef1c001a8018000a8014000700ff0100000000000000000000000000011400030076657468315f766972745f77696669"], 0x50}}, 0x0) 00:20:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x0, 0x0, 0x1800000}, {0xfd00}]}) 00:20:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x0, 0x0, 0x1800000}, {0xfd00}]}) VM DIAGNOSIS: 05:10:50 Registers: info registers vcpu 0 pc ffffffff8010b250 mhartid 0000000000000000 mstatus 00000000000001a0 mip 00000000000000a0 mie 000000000000020a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff801226d4 sepc ffffffff801226d4 mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff831a197a x2/sp ffffaf802217a650 x3/gp ffffffff85863ac0 x4/tp ffffaf800c48b080 x5/t0 0000000000046000 x6/t1 6eb5b38153efcb00 x7/t2 0000000000000000 x8/s0 ffffaf802217a660 x9/s1 ffffaf800c48baf0 x10/a0 0000000000000120 x11/a1 00000000000f0000 x12/a2 0000000000010002 x13/a3 0000000000000000 x14/a4 0000000000000001 x15/a5 ffffaf805a9c8840 x16/a6 0000000000f00000 x17/a7 ffffffff8018e490 x18/s2 0000000000000000 x19/s3 ffffffff84b787b0 x20/s4 ffffaf800c48c080 x21/s5 ffffffff8343c840 x22/s6 ffffffffffffffff x23/s7 0000000000000120 x24/s8 ffffffff86c1a620 x25/s9 0000000000000003 x26/s10 ffffffff858296b8 x27/s11 ffffaf802217a860 x28/t3 fffffffff3f3f300 x29/t4 ffffffff80112282 x30/t5 1ffff5f00442f4cc x31/t6 ffffaf802217b1d8 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff801165d6 mhartid 0000000000000001 mstatus 00000000000001a0 mip 00000000000000a2 mie 000000000000020a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8010b250 sepc ffffffff801165e0 mcause 8000000000000003 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff801165c2 x2/sp ffffaf800eb36c20 x3/gp ffffffff85863ac0 x4/tp ffffaf800eaa48c0 x5/t0 0000000000046000 x6/t1 6eb5b38153efcb00 x7/t2 00000000216af401 x8/s0 ffffaf800eb36d80 x9/s1 ffffffff8343c840 x10/a0 ffffaf805a9e4840 x11/a1 0000000000000003 x12/a2 1ffff5f00b53c908 x13/a3 ffffffff801165c2 x14/a4 0000000000000000 x15/a5 0000000000000120 x16/a6 0000000000f00000 x17/a7 ffffffff8010219e x18/s2 ffffffff86c1a620 x19/s3 ffffaf805a9e4840 x20/s4 0000000000000000 x21/s5 ffffffff84b73e00 x22/s6 0000000000000000 x23/s7 ffffaf800eaa48c0 x24/s8 ffffffff8010219e x25/s9 ffffffff85889780 x26/s10 1ffff5f001d66d8c x27/s11 0000000000000000 x28/t3 fffffffff3f3f300 x29/t4 ffffffff80112282 x30/t5 1ffff5f001d66d68 x31/t6 0000000000000004 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000