last executing test programs: 7m38.88362031s ago: executing program 3 (id=869): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r1}, 0x20) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) 7m37.845836514s ago: executing program 3 (id=870): inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000cdd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x101000) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x7da2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa1000000000000070e000000ffffffb7020000ffffff1fb7030000"], &(0x7f0000000100)='GPL\x00', 0x4, 0x98, &(0x7f0000004480)=""/152}, 0x94) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000740)={0x2020}, 0x2020) r2 = userfaultfd(0x80001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000040)={0x30000000}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xf, &(0x7f0000000200)={0x800000000008, 0x8000002000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000000, 0x4010, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r3, &(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10) creat(&(0x7f0000000340)='./file0\x00', 0x14) getpid() mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001f8, 0x0) 7m36.094854074s ago: executing program 3 (id=873): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x200000000000017f, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1ac57000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create(0x7) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000380)) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) 7m34.809376895s ago: executing program 3 (id=875): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x38}, 0x29}, 0x1c, 0x0}, 0x20000000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x10008}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x3}], @vti_common_policy, @IFLA_VTI_REMOTE={0x8, 0x5, @broadcast}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa5, 0x30, 0x51b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x98}}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0xf7}, &(0x7f00000000c0)=0x8) 7m32.401565303s ago: executing program 3 (id=883): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x10b301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045518, &(0x7f0000002a40)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000045c0)={0x1040, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0xa, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x1040}}, 0x40) 7m31.139285815s ago: executing program 3 (id=886): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$unix(r1, &(0x7f0000000000)="96e1825a8935527e2e610c701cea2bb564c4f3345c6a44b804bc2842519c666846c34acc07959ab1775837fe47f7d71eb72ae94e20ca5d34dcc577b4bebc0efe60e6fcb7f0aa9cb21196ab6f65d5e43b36c44f8887a13103f665e9fd646b65e2f4a9ba21d5214c4a6c936bc78f2f59c7a1bf221a1171c6cd4881942dd7acb7803ad6a8f4b8841bc19b805d9ab9765bd220c0b6ac8b051815481268175ff7409d4b1bf71b36818e8bf3c1", 0xfffffffffffffd2e, 0x20044801, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') 7m15.469161161s ago: executing program 32 (id=886): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$unix(r1, &(0x7f0000000000)="96e1825a8935527e2e610c701cea2bb564c4f3345c6a44b804bc2842519c666846c34acc07959ab1775837fe47f7d71eb72ae94e20ca5d34dcc577b4bebc0efe60e6fcb7f0aa9cb21196ab6f65d5e43b36c44f8887a13103f665e9fd646b65e2f4a9ba21d5214c4a6c936bc78f2f59c7a1bf221a1171c6cd4881942dd7acb7803ad6a8f4b8841bc19b805d9ab9765bd220c0b6ac8b051815481268175ff7409d4b1bf71b36818e8bf3c1", 0xfffffffffffffd2e, 0x20044801, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') 3m16.633520094s ago: executing program 1 (id=1453): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x0, 0x3, 0x0, 0x84, 0x1}, 0x50) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000040)=0x6, 0x4) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x80000040, 0x0, 0x2, {0x1, @win={{0x8, 0x3, 0x4, 0x7fffffff}, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x3d}}, 0x6}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a007d11ac1984d080e100000a000000000000080000000008000400", @ANYRES32=0x0, @ANYBLOB="140005"], 0x38}}, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) close(0xffffffffffffffff) bind$alg(r1, &(0x7f0000000980)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x40000000000000}, {0x0, 0x100}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}, @extra_flags={0x8, 0x18, 0x8}]}, 0x144}}, 0x0) r3 = accept4$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000240)=0x10, 0xc0800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x710, 0x10, 0x7, 0x6, {{0x1f, 0x4, 0x1, 0x6, 0x7c, 0x65, 0x0, 0x6, 0x4, 0x0, @multicast2, @private=0xa010102, {[@lsrr={0x83, 0x23, 0x35, [@private=0xa010102, @multicast2, @local, @multicast2, @broadcast, @local, @multicast1, @empty]}, @timestamp_addr={0x44, 0x14, 0xe1, 0x1, 0x1, [{@rand_addr=0x64010100, 0x9}, {@rand_addr=0x64010100, 0x5}]}, @timestamp_addr={0x44, 0x2c, 0xbc, 0x1, 0xf, [{@empty, 0x8}, {@remote, 0x10}, {@empty, 0x1}, {@broadcast, 0x1}, {@broadcast, 0x1}]}, @noop, @end]}}}}}) sendmsg$inet(r3, &(0x7f0000000940)={&(0x7f0000000280)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000500)="3248e72bc8711b080d500f376f3b7cf4278dd4b4a8512ec776b26ea9936dd2c46f3240344d071a7b178c1a39fc0f240e0b2407f839954047747f71e8ac058e7c90bd42098cb17aa11d0d8fc303ea5eaaa06a31e0c81893a686b96fea705e39e703211dfe16589673730d8def5ae8b2bb9d78bc3e1a10ce890a0b6018494c99271b319d9da2c83359814bdb6722082689ce113ddfe1ff33a78e6e1b03de0d0f0eeab97d4b8e073eae69c57625b447449efa56cfbf7cf0324de15f1d699e88b9488b00f0742b903fb1e714575e45545ff6199b00ed12c21b9f87a2dba9d7a4d69b8860ed850e3b1062315108c390af0b98922fb6913f3c", 0xf6}, {&(0x7f0000000600)="e6243de3e348099fa6f17b86c0d223931d30ae6dec35cd4e2d6ea57a47c3f31cb98f2786ca6a7cba45c4bbb745267a116218871f21d1531a13109879e13704148168430dcb5044b2786e7fd50edafff89b60f3beda6f5018d70fbc14f00e6329c67d2df4463f164b27d4052b2585b693d55bf0c8f8ddbdc0351c5231cd6ef0b0cafbe1ceaa37f0c4cc6432182c4ccb11fb13e26ea134659bf58105df58fb6d1926c44fa7a0c5a5c96aa698c248503eb7b30b93daef5643f0e08644e60aac32023db67ce422d37baec25ad767406b3dfa52360989bb7548e415abf752f1a07ae56c48834c0ac15b21f60439d76027c7568d8e68", 0xf3}, {&(0x7f00000002c0)="76d0928dac251c0520a4f30216def370b3c483beb64041e14e0c43a4e8e7af64", 0x20}], 0x3, &(0x7f0000000840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x32}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0x48, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x23, 0x62, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote, @broadcast, @rand_addr=0x64010100, @rand_addr=0x64010102, @private=0xa010102, @local]}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0xe, [0xf]}, @ssrr={0x89, 0xb, 0xed, [@dev={0xac, 0x14, 0x14, 0x26}, @private=0xa010100]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @empty}}}], 0x100}, 0x40) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000a10000000000000000000010851000000600000018180000", @ANYRES32=r6, @ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff00000000100000009500000000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000a0000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xda, &(0x7f0000000340)=""/218}, 0x94) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000000040)={0x1, 0x7f}) 3m15.72712848s ago: executing program 1 (id=1461): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc52b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xf9, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "0e233cc0"}]}}, 0x0}, 0x0) mount$bind(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1193094, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x6, 0x5}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r1, 0x80045430, 0x20000000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000800)) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4080) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1, 0x3, 0x4, 0x404, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0xd}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000007c0)=0x40000000) 3m10.147232078s ago: executing program 1 (id=1472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) nanosleep(&(0x7f0000000300), 0x0) unshare(0x2c020400) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r4}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, 0x10, 0x10, 0xfffffffc, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setrlimit(0xe, &(0x7f00000004c0)={0x8, 0xa}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)=0x3) r8 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x148, 0x358, 0x358, 0x148, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0xff000000, 0x0, 'xfrm0\x00', 'team_slave_1\x00', {}, {}, 0x33}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0xd, 0x3, 'syz0\x00', {0x17}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x240) r9 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r9, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet(r9, &(0x7f0000000400)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640006000000003552bde5c064c6", 0x15}, {&(0x7f0000000600)="174640b6d80fb2eedc81ba60cc0800", 0xf}], 0x2}}], 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) 3m8.186495503s ago: executing program 1 (id=1476): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = open(&(0x7f0000000300)='.\x00', 0xa000, 0x124) mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000140)=""/114) futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100), 0x2) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x44, r4, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0a}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, 0x44}}, 0x40000) sched_setattr(0x0, 0x0, 0x0) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) bind$qrtr(r7, &(0x7f0000000200), 0xc) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x28, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x4800) r9 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x12a, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) close(r10) 2m59.351469084s ago: executing program 1 (id=1493): inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000cdd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x101000) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x7da2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa1000000000000070e000000ffffffb7020000ffffff1fb7030000"], &(0x7f0000000100)='GPL\x00', 0x4, 0x98, &(0x7f0000004480)=""/152}, 0x94) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000740)={0x2020}, 0x2020) r3 = userfaultfd(0x80001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000040)={0x30000000}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000000, 0x4010, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r4, &(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10) creat(&(0x7f0000000340)='./file0\x00', 0x14) getpid() mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001f8, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) 2m57.648851516s ago: executing program 2 (id=1494): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x29, &(0x7f0000000200)={0x0}}, 0x24000815) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x5, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x14) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xe099, 0x0, 0x1, 0xb5}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x10, 0x800, 0x2bbbe, 0x0, 0x2, 0x4, {0x0, 0x0, 0x1}, {0x207, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x1, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x9}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x40a00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f00000000c0)) 2m56.239228895s ago: executing program 2 (id=1496): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x33, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1], &(0x7f0000000700)='GPL\x00', 0x0, 0xffffffffffffff20, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='devlink_hwmsg\x00', r2}, 0x18) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0xffff0001}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r7, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60ff00f50014060000000000000000000000ffffac041415fe8000000000020000000000000000aac2472ce2", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b0f, &(0x7f0000000480)={'wlan1\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000340)={0x0, &(0x7f0000000500), &(0x7f0000000340), 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2}) close(0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="03006d9018048436a5f1e28c4e6af4073921000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) 2m54.725772345s ago: executing program 2 (id=1498): socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001fc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="55e62dbd7000fcdbdf251700000008000300", @ANYRES32=r4], 0x28}}, 0x20004000) (async) write$tun(r0, &(0x7f0000000200)={@void, @void, @llc={@llc={0xd4, 0x7e, "798c", "1d5d2cce340a532397a76fe643cd009257"}}}, 0x15) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x40, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000040000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000004000000000000000000000000000000000003d0000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = socket(0x2b, 0x1, 0x1) (async) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYRESDEC=r5, @ANYRES32=0x0, @ANYRES8=r2, @ANYRESOCT=r8, @ANYRES8=r7, @ANYRESDEC=r0, @ANYRES8=0x0], 0x18) (async) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) socket$packet(0x11, 0x2, 0x300) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="f6037cb5a6ff0540cdabeecdb9050000000109021b00020000000009049c0000010351000904000000ffffff00"], 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) 2m54.593386615s ago: executing program 1 (id=1499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000027c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}}, 0x38}, 0x1, 0x0, 0x0, 0x24044084}, 0x0) getresgid(&(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r8 = io_uring_setup(0x3c5, &(0x7f0000000200)={0x0, 0xafa, 0x12, 0x2, 0xc6}) socket$isdn(0x22, 0x2, 0x26) close_range(r8, 0xffffffffffffffff, 0x0) close(r7) socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400010000002000128008000100677470001400028005000600d800000000"], 0x40}, 0x1, 0x0, 0x0, 0x24040854}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = dup(r11) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000000c0)="66b8006800000f23c80f21f86635080000000f23f80f00d166b8519900000f23d00f21f86635000000000f23f80f20e06635400000000f22e02665f30f22e40f0f14a0b806018ed00f0fbd0070bf360f23892e650f32", 0x56}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040041}, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 2m53.951002764s ago: executing program 2 (id=1502): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x8, 0xf, {0x0}, {}, 0x7, 0x4}) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r5) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x2c, r7, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4020050) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e5f, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000080)={0x7, 0xe9, 0x1, 0x100, 0x4, 0x8000, 0x658b, 0x0, r9}, &(0x7f0000000180)=0x20) fsetxattr$trusted_overlay_nlink(r3, &(0x7f00000000c0), &(0x7f0000000100)={'U+', 0x8000000000000001}, 0x16, 0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xdddc8000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) 2m51.547178269s ago: executing program 2 (id=1506): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$kcm(r0, &(0x7f0000001c80)={&(0x7f0000000040)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80, &(0x7f0000000700)=[{&(0x7f00000000c0)="64044acf0fdffb2f857b0de32e1e08fc30ffe91a1e9f4861c5b0e65e11688a87f0b4ce13023affd3f81259c85198e6dba6f6dc9a4f97f1e271145f66d3c66c01839fd78449ce31c2e7c00994618dd32aa06385c3e07912d286ebaa12ad017e0403b11dad997e8909aa18e34cff7bbf3006cb09dbeac8865b61e708fbe6cf2490960c717220382ef7e74eeef8107da8c31e750d7fb4fee8f7", 0x98}, {&(0x7f0000000180)="114d43163dcd005daf7111cd3c48db4681fb04d190fc66d21bcfbc7448821b8a2a16459091bac683744a3d", 0x2b}, {&(0x7f00000001c0)="485376181e161868ad4b6cf8ce8242fc00ae3acc5bb2979d75bfe0a7b5725e8a9ab45367f99f77f1f3f4a69a45a93bcef8f3ff23bfcb256d0bb95228e15b4fafdcd8e601eb30704a1da5d0ca8dd4de4c2347d01b96928c802a93ce1c3d4f70aa58f08e96779e2f6eb4c5157ed87c99b04c9fad59031867e223729725c8144ec3495bf735dd13c5a502d1d3ecc26b24980f8a212ad96f4dae751af35a8bd8ad550c37ba0c1fe84a4d24fa6d2f3924324cae", 0xb1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="900d41247b5b395f7a08d88b35488fd0867a092b5c2cda52c1b78bdfb28bec144522ed4b803f8f8bad7bda9a0cbda315b99418151201255da83b32292ba0ae4a162b45c3a3b75c42063455b98a8241c11a28b80c38778ceccd77e9355a74a718b80e5f186bbe56e9893206ee46d63c6138f9d6173c66bd86e3c7a11abf36ad40e1c78a21b5063160f2b1061a47c90f9794b000afca79358f701b36dbe1fed462d0e8585635e8751d6eeb993782dc08944501f212651f46009ddada0233c73d6726e8d64402f8095d71f78cf944bffd871c2341eb57e89208da0e6caf8d677677c9f0d2e0b3e7f2f19fa5f3b93f32d6a04c98903993", 0xf5}, {&(0x7f00000003c0)="5d3c6a482296a6d8fe1b38fda72f0c1c45a67757b20f1ff2ec6ca790bc6c3eab74da6fab52a14a136f5efe53f98eeec212cb4ced6d85b68c77cae6cec593121577578d879c8ac2a7c7d641b1939b0acf758b8831a4ebd1b5151f062f8c2912be2a0e2f3c89ae13d7ce8c9ad944676f743abc70f9b20237c58ec58d131654b511acb44454315c130a6195a847290aa3066229489d1f90c7a9a6b4e359de2a", 0x9e}, {&(0x7f0000000480)="7ddc1c60d85bc95d18254aedf770e7d7c3924ef9f8173c101b555025b82b721d1d2665923474a60a05e19ac7d87dd09b512e41fcd23e2f5a1b8e7089ab33d85564f6afb80fe46b93d57669ccb23741e5b2f46e9abdd8c1956fc19c6e87c63e14e7760e4fd2bf56cae067ad77e21297f64eca01c0c1c6158dc330b6", 0x7b}, {&(0x7f0000000500)="bd69e454d05aca7701155e03cd58d0bb01f4cfd1a4896666f0164132ea1565b287d19dec77c6ddd3640191bd405a9d406821ae129aa684d40fcbc24471ebb7ce577e7ba5b275f0e061c25744818ac6898dc7039a6584197e9a52d8b7f7061fb9302cc69b22859f167ce87c110e53a6df638d864f5011d572cc9e79aabb494e684b419453733ecddbddd4eb7886113b6d55e8d037669fa19a76f216255ec279e33e5ec0f9ecc2a110cf4a6f34c10f7ba2b4a4240b6c3ccf95ac9fe01d1e01855f60983c6cee77a912", 0xc8}, {&(0x7f0000000600)="3d4477bb0b268a5c7f3e79c7a6791c938541e30141a85c1b8ed66c6e20a8a9edc6f685e3a53429ae1ff8eb58660457bcf3cdccbde2b072d051fdc8fe28edfd630732afdf8239b5f6de98905852942557495ab5ead99510607f5e0c00de30e0e822e5d10756522dc5562ba99d7d20fc92ca50e2473b9ea48cf734314d5dd32a04bfeba1f8d413fef5d357c194e3cccd69e700eec971fd6736aeec07cf2ceef8502bb185f5e1cbfb78b309a83b2b8d46ce4ad6a165bb57bb1a0eebdad47c39a3e02a3e57541eded7cac5f75e0f82f1fddb1a04af24f99864180dc114b27968028cf06ac531ed", 0xe5}], 0x9, &(0x7f00000007c0)=[{0xd8, 0x88, 0x7fff, "8d4e69e9793dc94fd9f64248284628a48bc18ae0d98b7f3f53b9d4da3f1b6ec66f87a46678df17d591049241de723853e9186bef6a88ce83ab30c4ff3eebafb055c3514f13b12d5ffe710a3956baa54a8e7d02a1114dd0072d83088bd491dee3b8d89eaca696a874c3e5699bc1160cec2bbf4804cf191be4c173a0a185906d98466b39a3d3a6fe69f34700633f4132f5de32ed6f8eb8f5f762eb965bba951069b53ef852c62d223996f82ad0363fd1a9ca66cd38db37536ebf42302a3b4017387cb369e8ef"}, {0x88, 0x113, 0x0, "e2cedd05cdb5b56fafe348fbe75216f526ab9c5a7c7c3ae83e704548425da5cb38b1c19bff7d91da934dcb40ba84f68a7f6219e496f13f4b05764e1ba6e7d6f1f4281ad5b8398b123b1c786fed03729591f0cd55dd5318585a1d28a44d605057db1c5857dccd1880b14b831ab89fa1ec1c9248"}, {0xd0, 0x107, 0xffffffff, "4d675165fae75dbc4f81c20b9e522757574004ab26b96e8f89f7e228246845cf4b4cea0942341dea205e4eeedf79eedda4174e9488dad6da3b883b8d6b6166980b7313cc6f19589cbefe656d4b04f4300cff15a551023e6d57b61de55f4f9e8e697592a36b35d7eb568574cdbb4f742bec2aab3fdbc64c96e738319f9f2b52100c486e8aa978bf149917639b9cbfea54f1ebaf81736afd02e602cd820e4cbbd3f30eca39a9922dd43ecfcb0b3eae2f434b6e3d3618f749eb85610682451b6c6c"}, {0xa8, 0x3a, 0x10001, "bd1d657d883cac4ce435e4a3145f8f75bf599a2b5bc6b46fc7981bd5b227db4c1b03bf51107450738170659de2caf91a4e100a2265d3d93b8c169311cb278f7ee9ce2443d512f49fcee3609a859f5bb84ee67b6e80fcccc6350693f90fc84a9bfdffa7613e12bc71aea9adfd02f5ef528021576116f801670078455ea9bf336c516a9f5247bbc9d61ebf2d0ac91efdd678845b"}, {0x1010, 0x104, 0x1, "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"}, {0x78, 0x101, 0x3, "a40149db038c5363872d3b6f117841ded43bdb489407ed4a8ee171973da47c2590211ea1604d8776cfaa1e0d8aa2d20251a99c1ee74823750e9c63d0b82d35a71cd8309c0b3e4867e84221d6a2aee0395942aaac898b3b01bca34a12601bb47e5afea2f3"}, {0x50, 0x108, 0x5, "cf958419063a5e240a3b47e71642b64ac2fdf8469f8399d9ff68c03bca2be23dc5fbc94aa1cfc31e1ccdf1b47cc95c6b1b634d0051e117c8ce1d4c"}, {0xa0, 0x10a, 0x6, "70dbb4f01687f70c33b31909c67bddd9ea1bf4c5a514d98331d998d018c81f4e53e17cdf33b044a25f55dacefff587fca519d85f6e1824596b2b36608f47c76bb9b1fb3b0128c5df778a99479397fc1fdf6d89028cf38cad402eb7a8f86136e04cf8a939bfb932ed1c075ed2ba61dbb907808a444c57e35e76121fd1238b774d1ae037f1a0ba68801c"}, {0x48, 0x115, 0x1000, "28101d2514678107e25dd97d7f265d8037d65244c053f41ea8d4c1a6f3414105ddfc58f7c1bf3d8f17e6a043f00b3c9f99e46017159ba6"}], 0x1498}, 0x40080) r1 = add_key$user(&(0x7f0000001cc0), &(0x7f0000001d00)={'syz', 0x0}, &(0x7f0000001d40)="2b91e6596dc61f4e324910d4927c23a54e888bdf5e650d7f8b00d8f55d475c9149ddf3d393af96459260b3d8de932fe9ec68f950cb8038aaf90ec613aaf3ad52e4d70327ab61af4aa97ec4925734452058cd1cb17fd96c8a34edb5169b28576661c1d6b77c6561c9d04bed4af0c1565020a42c3d79b395359c9ae866ce8bddccf9", 0x81, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000001e00)={0x0, r1}, &(0x7f0000001e40)=""/213, 0xd5, &(0x7f0000001fc0)={&(0x7f0000001f40)={'sha384-avx2\x00'}, &(0x7f0000001f80)="1c4d0c29d722d78cfd8414d3688986c1f38445344b31a5a8f70b6d6a6da10253251c253ea7e7e4f0", 0x28}) write$cgroup_devices(r0, &(0x7f0000002000)={'b', ' *:* ', 'rwm\x00'}, 0xa) syz_open_dev$MSR(&(0x7f0000002040), 0xffff, 0x0) r2 = add_key$keyring(&(0x7f0000002100), &(0x7f0000002140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r1, &(0x7f0000002080)='cifs.idmap\x00', &(0x7f00000020c0)={'syz', 0x1}, r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = dup(r0) request_key(&(0x7f0000002180)='keyring\x00', &(0x7f00000021c0)={'syz', 0x2}, &(0x7f0000002200)='#&*#&+)/[\x00', r2) openat$cuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000002280), &(0x7f00000022c0)=0xe) fspick(r4, &(0x7f0000002300)='./file0\x00', 0x0) r5 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000002340)='/sys/fs/smackfs/access\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000002380)={0x0, 0x0, 0x4, 0x0, '\x00', [{0xfffffffe, 0xb27, 0x9, 0x29e, 0x1, 0x6}, {0x6, 0x4, 0x5, 0x6, 0x3, 0x1}], ['\x00', '\x00', '\x00', '\x00']}) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000002540)=""/4096, &(0x7f0000003540)=0x1000) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000003580)=@raw={'raw\x00', 0x9, 0x3, 0x368, 0x0, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x2d0, 0xffffffff, 0xffffffff, 0x2d0, 0xffffffff, 0x3, 0xfffffffffffffffd, {[{{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@socket2={{0x28}, 0x2}]}, @unspec=@TRACE={0x20}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2f}, @broadcast, 0x0, 0xff0000ff, 'bridge0\x00', 'wlan0\x00', {}, {}, 0x73, 0x3, 0x8}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@unspec=@comment={{0x120}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x18, 0x5, 0x4, 0x1, 'syz0\x00', 'syz0\x00', {0xd0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r6 = mq_open(&(0x7f0000003980)='b', 0x2, 0x130, &(0x7f00000039c0)={0x3, 0x5, 0x21, 0x5}) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f0000003a00)={{r6}, "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"}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000004a00)={0x2, 'veth1_vlan\x00', {0x10}, 0x1}) keyctl$get_security(0x11, r1, &(0x7f0000004a40)=""/71, 0x47) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000004ac0)={0x2, 0x4}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000004b00)={0x0, 0x3, "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"}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_misc(r0, &(0x7f0000004c40)="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", 0xff) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000004d40)={0x1, 0x2}, 0x8) r8 = creat(&(0x7f0000004d80)='./file0\x00', 0x101) ioctl$sock_inet_SIOCSIFBRDADDR(r8, 0x891a, &(0x7f0000004dc0)={'dvmrp1\x00', {0x2, 0x4e21, @local}}) readlinkat(r4, &(0x7f0000004e00)='./file0/file0\x00', &(0x7f0000004e40)=""/234, 0xea) 2m50.252333141s ago: executing program 2 (id=1508): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x73) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2, 0x30}, 0xc) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000080)={0x9, {{0xa, 0x4e22, 0x4, @loopback, 0x4}}, 0x0, 0x5, [{{0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}}, {{0xa, 0x4e24, 0x26c, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}}, {{0xa, 0x3, 0x9, @mcast2, 0x8}}, {{0xa, 0x4e22, 0x4, @local, 0x3}}, {{0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}]}, 0x310) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xff, 0x0) 2m39.483541697s ago: executing program 33 (id=1499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000027c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}}, 0x38}, 0x1, 0x0, 0x0, 0x24044084}, 0x0) getresgid(&(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r8 = io_uring_setup(0x3c5, &(0x7f0000000200)={0x0, 0xafa, 0x12, 0x2, 0xc6}) socket$isdn(0x22, 0x2, 0x26) close_range(r8, 0xffffffffffffffff, 0x0) close(r7) socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400010000002000128008000100677470001400028005000600d800000000"], 0x40}, 0x1, 0x0, 0x0, 0x24040854}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = dup(r11) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000000c0)="66b8006800000f23c80f21f86635080000000f23f80f00d166b8519900000f23d00f21f86635000000000f23f80f20e06635400000000f22e02665f30f22e40f0f14a0b806018ed00f0fbd0070bf360f23892e650f32", 0x56}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040041}, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 2m34.795445689s ago: executing program 34 (id=1508): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x73) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2, 0x30}, 0xc) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000080)={0x9, {{0xa, 0x4e22, 0x4, @loopback, 0x4}}, 0x0, 0x5, [{{0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}}, {{0xa, 0x4e24, 0x26c, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}}, {{0xa, 0x3, 0x9, @mcast2, 0x8}}, {{0xa, 0x4e22, 0x4, @local, 0x3}}, {{0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}]}, 0x310) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xff, 0x0) 2m33.947880582s ago: executing program 5 (id=1534): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@mcast1, @loopback, @mcast1, 0x2000000, 0x0, 0x7d, 0x0, 0x0, 0x2930310}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c06000000000000003d30303030303030303030303030303e30303026303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000200"/112], 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015000100000000000000df25fe88000000000000000000000000010100000000000000000000000000000001"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) 2m33.825077245s ago: executing program 5 (id=1535): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000140)=0x8, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x241, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x5}}, 0x20) 2m33.683491448s ago: executing program 5 (id=1536): ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 2m33.664501631s ago: executing program 5 (id=1537): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$unix(0x1, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x808b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) semget$private(0x0, 0x207, 0x0) r3 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES32=r1, @ANYRESDEC], 0x0) 2m32.912016333s ago: executing program 5 (id=1539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) nanosleep(&(0x7f0000000300), 0x0) unshare(0x2c020400) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r4}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, 0x10, 0x10, 0xfffffffc, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setrlimit(0xe, &(0x7f00000004c0)={0x8, 0xa}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)=0x3) r8 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x148, 0x358, 0x358, 0x148, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0xff000000, 0x0, 'xfrm0\x00', 'team_slave_1\x00', {}, {}, 0x33}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0xd, 0x3, 'syz0\x00', {0x17}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x240) r9 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r9, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet(r9, &(0x7f0000000400)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640006000000003552bde5c064c6", 0x15}, {&(0x7f0000000600)="174640b6d80fb2eedc81ba60cc0800", 0xf}], 0x2}}], 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) 2m31.664271619s ago: executing program 5 (id=1540): connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x0, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x15555555, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x20000000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x4000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000080000000000070000000c000180050002002c"], 0x20}, 0x1, 0x0, 0x0, 0x4001c000}, 0x0) listen(0xffffffffffffffff, 0x8) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x4000, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f00000002c0)=0x14) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) 2m16.380687502s ago: executing program 35 (id=1540): connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x0, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x15555555, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x20000000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x4000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000080000000000070000000c000180050002002c"], 0x20}, 0x1, 0x0, 0x0, 0x4001c000}, 0x0) listen(0xffffffffffffffff, 0x8) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x4000, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f00000002c0)=0x14) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) 2m3.256570396s ago: executing program 4 (id=1587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000180)=0x20000, 0x0}, 0x20) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) 2m2.822409218s ago: executing program 4 (id=1588): socket$can_j1939(0x1d, 0x2, 0x7) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000000b00)) fcntl$notify(r2, 0x402, 0x8000003d) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x5) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) 1m59.447225967s ago: executing program 4 (id=1590): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)='D', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000a00)='$', 0x1}], 0x1}}], 0x2, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = gettid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x6) r3 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000a40)={0x3, &(0x7f00000009c0)=[{0x848d, 0xe, 0xd, 0x4}, {0x7, 0x93, 0xb, 0xf}, {0xd, 0x10, 0x3d, 0x8}]}) sendmsg$can_raw(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=@canfd={{}, 0x3c, 0x1, 0x0, 0x0, "6b92df07c92ff5b16ae4cdf718aee1043324604bfac65a6cbb79f9dfdbdaef5e1a7c544941257d227ff5dab05790d7c04250629c171282f9b2d97b5e6f1d8ed7"}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x4004845) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x11, 0x0, 0x1000, 0x6, 0x400000, 0x1, 0x4, 0xc0000000, 0x402, 0x3, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0xfffffff9, 0x3}}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x20004810}, 0x8084) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003780)=@deltfilter={0x34f8, 0x2d, 0x300, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x10}, {0xb, 0x2}, {0xa, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @TCA_RATE={0x6, 0x5, {0x0, 0xb9}}, @filter_kind_options=@f_basic={{0xa}, {0x34b8, 0x2, [@TCA_BASIC_ACT={0x3c4, 0x3, [@m_nat={0x170, 0x17, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x401, 0x20000000, 0x9, 0x2}, @private=0xa010101, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x0, 0xffffffffffffffff, 0x3}, @empty, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x280000, 0x0, 0xe7f2, 0x7fff}, @rand_addr=0x64010100, @rand_addr=0x64010101, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xde9, 0x10000007, 0x3ff, 0x4}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x9, 0x6, 0x6, 0xfffffffe}, @rand_addr=0x64010102, @multicast2, 0xff}}]}, {0x7d, 0x6, "33d87725b17bbd2bf6c9d92fa2af18e4c7c37c04d86d55094c04e52f6631758181b52ea7de9468eb560f1371176202ba2813bf7b65b7de22289eaa831373a729e00cca333038137e5fdde33d97b63668387e187db1b5111426ccbd330807fe03d15b4e20cf97bd4e91853d3287e9d7965d02e6f3eec8387ed1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0xac, 0x11, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x1, 0x9, 0x7, 0x7}, {0xf32b, 0x8, 0x6, 0x6}, {0x49, 0x9, 0x7, 0x3}, {0x1, 0x3, 0x9, 0x6}, {0x6, 0x80, 0xf9, 0xa21}, {0x3a, 0x9, 0x1, 0x8}, {0x8, 0x6, 0x2, 0x5}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x1, 0xffffffffffffffff, 0x6, 0x2}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0xa, 0x6, "d8bf7f564e1a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x80, 0x1c, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_LABEL={0x8, 0x5, 0x3ac25}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_BOS={0x5}]}, {0x2b, 0x6, "c525bbc850f65baae824b6c675dd681babfe4278201cdef6bb70a250df4baeff8c45344424f01a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x124, 0x9, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0xc5, 0x6, "a3172414add168f2d51ab23d36ebe59683da106dfed40892e79315c97ffbea84ab4f68c5644e5083576f7d2408b76e3d5acb2d0b839d31c99d21b6f20d37636367bebd9f23593b42cf329af6d13814b0591003cd8b7c49b498cf82b67bc615c55662c83f381c4c0f4950475349798bbe92bd392688405a886b02ee4b2b0b8e2a0bc0223211e1f0e899a4fef8c0959f61f7bcdd615acec560a894c3433bf4082aef6f9e1d87d97b2bf73ea76cf74f12c5db16fbb554109911ff7b1e8e82b5915033"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_BASIC_ACT={0xd0, 0x3, [@m_skbmod={0xcc, 0x7, 0x0, 0x0, {{0xb}, {0x20, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1000}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x10}]}, {0x81, 0x6, "026a6ca2910cdca91d90244b8f114c80810ac9318a13cf328a258a1ced8cd1b64641adcb068f37a78b84ff6afba46f41cdce8544c2a41997a9c48e76a34c055d9294ada0c6658af1737c65dfad55f675d3643bc90ae7e9c6c3dc49c68299b3a3e89193afc33a28c6ad077579075fa92021e9a5fd25e05e709d7b4c8029"}, {0xc, 0x7, {0x1, 0x2f191a34d1078e03}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xffff}}, @TCA_BASIC_ACT={0x14d8, 0x3, [@m_sample={0xcc, 0x1f, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x8, 0x3, 0x4, 0x24d}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x6, 0x4, 0x3, 0x10000}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}]}, {0x58, 0x6, "cfdc590ddea182156a3494a9aa59ed5b821b0fa1f7dc89c0b8983f1e01ecb04bb02c3e30941eb606a7fe341a37afe9e5b585328ec861b22ffb8682ba79a2c1dd5813e9babdc2f44adcf6235d20b068c2ae60f416"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x80, 0x9, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x100, 0x0, 0x5, 0x0, 0x2}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_PROTO={0x6, 0x4, 0xa28b}]}, {0x28, 0x6, "c60650a94b30c0683b62bf8e0d05be5816c820881b6aa1c8910ded7872e763f76777d587"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_gact={0xb8, 0xd, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xc3d, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x6, 0x7, 0x8, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0xd, 0xff, 0xffffffffffffffff, 0x9, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x497, 0x7}}]}, {0x44, 0x6, "74b47738fb439675e737727c2f367782014345aa947b4c581486c1d9f43e43810b309f34b027e737884a45e579d0fcc96b5e219052de66704818651bee9cde01"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x88, 0x15, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xffffa918}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0x7fee}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}]}, {0x43, 0x6, "dcea08d7f910c40132babc3fc0120773b9d3e6885ac805295a60e2a0550347ecffb0ba00c00c9027024efa281c262e2e5499fc4b90778f2e5bb1829d8853ae"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_sample={0x110, 0x8, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}]}, {0xc9, 0x6, "12b4ca7612ca67c884b1a748e337326b23367594868bb9e7cdc5a8e2680220b23bbed14e4ee1a00cbcde95423eba48bcaf81b4769754643900804b155f1ee7d4109eb2120b2f394a02dcec7b3bb6094a108069100be1138d7baef21ea5bb795f0f60e32980e089073ba373a53b90567a228c9b24208969bff95f27da59304a53e422154c4c6299a3d35180ac81632f6291099354d05e06e7762236d140b56fb518c7c25e76995c4cc42f5357b019835e03202ee7080425082ad6fdeb913b2d4554e77a925c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x10bc, 0x9, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xe8, 0x6, 0x3, 0x7, 0x2}, 0x60}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x400, 0xffffffff, 0x10000000, 0x5, 0x58f85183}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x57, 0x1, 0x800, 0x4}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x563d, 0x411, 0x1, 0x6, 0x2}, 0x20}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xea, 0x3, 0x2, 0xfffffffb}, 0x79}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0xef561dd94a47c8dd, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x7c, 0x18, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}]}, {0x41, 0x6, "7e9640ca0aa5eadd28755f52dda37bc1bc8aaef8bc38e3badd50020616181fee35fc1ba1b9ec4894cfc53b5986c0e5ed6761e33042654f610161327927"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0xf}}, @TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xfffffffc, 0x7, 0x7, 0x8, 0x7f, 0x5, 0x3f2, 0x8, 0xdc, 0x5, 0x7f, 0xe81, 0x4c684d1d, 0x8, 0xff, 0x8001, 0xffffffff, 0xffff8000, 0x1109, 0x7fffffff, 0x1, 0x8, 0x0, 0x8, 0x9, 0xc36, 0x26, 0x6, 0x0, 0x87, 0xda39, 0x7fffffff, 0xfff, 0x5, 0x5, 0x944, 0xf7d, 0x39e, 0x80000001, 0x10, 0xff800000, 0x9d, 0x6, 0x8001, 0x3, 0x2, 0x7, 0x20000, 0x15, 0x400, 0x71, 0x8, 0x71, 0x4, 0x4, 0xcaf, 0x4, 0x7, 0x8, 0x4, 0x81, 0x10001, 0x7, 0x200, 0xc12e, 0x0, 0x412a6021, 0x5, 0x1, 0x2, 0xffffffff, 0x7fffffff, 0xb, 0x5, 0x1, 0xa0cb, 0x9, 0x8, 0x88, 0xff, 0x7, 0x81, 0xffffffff, 0x6, 0x877a, 0x6, 0xc0ff, 0x0, 0x66, 0x6, 0x3, 0xd, 0x3, 0x3, 0x3, 0x4, 0x100, 0xffff8000, 0x5, 0x3, 0x0, 0x6, 0x6, 0x1, 0x6000000, 0x8, 0x10001, 0x7, 0x6, 0x1, 0x101, 0x5c0d, 0x5, 0xb957, 0xfffff9e9, 0x8ad, 0xc3, 0x1, 0x8, 0x7, 0x3, 0x10, 0x2, 0x800, 0x80000001, 0x8, 0x800, 0x2, 0x63, 0x0, 0x5, 0xa, 0x6, 0x102, 0x800000, 0x2, 0x0, 0xfffff800, 0x8cce, 0x7, 0x3, 0xcc8, 0x9, 0x1, 0x2, 0x81, 0x8, 0x74c, 0xa07, 0x2, 0x10, 0x8, 0x9, 0x5, 0xa77, 0x6, 0x2, 0x3, 0x1, 0x51, 0x4, 0x4, 0x5, 0x401, 0x7b0, 0x6, 0x8, 0x3, 0xb, 0x2, 0x2, 0x4, 0x70000, 0x4, 0x9, 0x2, 0x7, 0x6, 0x19fe, 0x0, 0x5, 0x6, 0x8, 0x6, 0x74e70344, 0x0, 0xfffffffd, 0x5, 0x3, 0x4, 0x4, 0x7, 0x10001, 0x200, 0xbd, 0x3, 0x6, 0x7, 0x5, 0x0, 0x3, 0xffffffff, 0x40000000, 0x7, 0x10, 0x5, 0xfffffff8, 0x7, 0xd, 0xfff, 0x15e, 0x3f, 0x8000, 0x8, 0x891, 0x9, 0x400, 0xd6ae, 0x7fffffff, 0x8b7, 0x8000, 0x7, 0x0, 0xafa, 0x1, 0x2, 0x3, 0x9, 0x3, 0x1b00, 0x1, 0x4, 0x7, 0x0, 0x5, 0x6, 0x400, 0x3, 0xc33, 0x1a, 0x4, 0x6, 0x19, 0x4, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x101, 0xf, 0x8000, 0x5, 0x7]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0xfff3}}, @TCA_BASIC_EMATCHES={0x14c4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7be5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14a8, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1e8, 0x2, 0x0, 0x0, {{0x9, 0x9, 0xe922}, [@TCA_EM_IPT_MATCH_DATA={0x7, 0x5, "e014fb"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_DATA={0xd7, 0x5, "7410df96819f8e617690b219a21bde1369a21759662bcf799fd3fed941bde1721c6e6858a420d0d3eee068ef64b2a6c701f13c3f11cf4757f8d5112d0d3c50da87e70b8a85655995fb13db4aa948cf83e6d43679f2e44ce529b5a379d969a4bee44ce24056d095d91b2dc9cc35b0d7aedd334c993b8d4d55a0aeedb1ee2a66a00c69f221704b020a7ba6052c3912875ba5c6b3a23374b413542fa901d2be69f9db33bd8f2547c97fa78695fe80c93bc90b711c1ea6c2e819d5a854a68d9f94c9fba37bd7934ee3afebe028d35fda91e5a5971d"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_DATA={0xce, 0x5, "628ee5a3bbb010fdf5b8b15102eb6dfb7c856d56b929bec85f9d0213a1b6cdc8a86205965bd79f750917a1450bd30c2590b187bfe7ec424a53dc5a6b485d5ac4706f4b68185d04ee89b9a1282dadafd19370deb450dd279e3dff5fdc689b4131b33191f0876f8f7252285ca4029d77f70c6e9dc8eb00dd747a6fe46d11f1d126d7920fac4142efa40a8f49175de909095693e5000d5f7395f4bc4125d0049fbf30a7c3037790bf4f956d3d55505ee256a67f23f7f3c9aaa872a698564c4c4d171395db175d0111bc3d51"}]}}, @TCF_EM_CONTAINER={0xe8, 0x1, 0x0, 0x0, {{0x0, 0x0, 0xe}, "600eba27146a5f7d7a163cc0c08a6325697539b8e1e604cf240928f2d6955c1f903e70035259260dcf296052d5a67a48e9062052a4eb151daa74472c7176a9f38a2527c03a2272de337223607c69a91cb9483311b5e378722f8cfbe2dac3002f70f8ed671210ed2573468c44e562b76b8a6102c207ce9db5e15782f8f8eedbeeae7818f2b131fa521b9be752e57e2b1df9ea5be4a051e9a9fc33641308aa2611b9a6fe6a808cd4d50f3d8b91a425b0d4cd8eb45e5d0c623369e831d8e97146f798a6d56064d233ce116c28fd74d15eb400535118a75b1ff2a3aee6"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x2}, {0x200, 0xfffffffe, 0x101, 0x2, 0x5, 0x1, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x80, 0x8, 0xc}, {0x3, 0x1, 0x6}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x5, 0x2, 0xd}, {0xfffc, 0x4, 0x2, "2b341fa9"}}}, @TCF_EM_IPT={0x1030, 0x3, 0x0, 0x0, {{0xb5, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x9, 0x2, 0xecb}, {0x4, 0x1, 0x2, '\''}}}, @TCF_EM_META={0x130, 0x3, 0x0, 0x0, {{0x7, 0x4, 0xe2}, [@TCA_EM_META_RVALUE={0x23, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="5d46c50796bebb6979", @TCF_META_TYPE_VAR="dabbf67c829d4ff6", @TCF_META_TYPE_VAR="e7ad7397b78e"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xa, 0x4, 0x1}, {0xe, 0x6, 0x1}}}, @TCA_EM_META_RVALUE={0x31, 0x3, [@TCF_META_TYPE_VAR="a6e1a3633e946dcfa4", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="7cd5a919b27a2f32aca0", @TCF_META_TYPE_VAR="edb5b2aa6b68", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="6bb3c6e0", @TCF_META_TYPE_VAR="0ca12926e82985ac"]}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_VAR="e3abfc784dcb619392", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="ed2330d384"]}, @TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_VAR="8396bfee5d7797", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x4, 0x1}, {0xae3, 0xc4}}}, @TCA_EM_META_LVALUE={0x38, 0x2, [@TCF_META_TYPE_VAR="02284a072f0857ab4b14", @TCF_META_TYPE_VAR='Bg', @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="2e9939e5d5dcf0de", @TCF_META_TYPE_VAR="98af94794f7ee8", @TCF_META_TYPE_VAR="c6698689bd", @TCF_META_TYPE_VAR="67d8", @TCF_META_TYPE_VAR="676221e6adfb7588d671"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x3, 0x2}, {0x8, 0x2a, 0x2}}}, @TCA_EM_META_RVALUE={0x1f, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="3aa8cc", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="59b4d983d1987073", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x22, 0x2, [@TCF_META_TYPE_VAR="dceccf27e144e46126", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="cbb7113d", @TCF_META_TYPE_VAR='>', @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x7ff}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}]}]}, @TCA_BASIC_EMATCHES={0x264, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffd}}, @TCA_EMATCH_TREE_LIST={0x168, 0x2, 0x0, 0x1, [@TCF_EM_META={0x4c, 0x3, 0x0, 0x0, {{0x6, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="fe8c697a92", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="65825974546a60bc"]}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="dd", @TCF_META_TYPE_VAR="b23bd3b138", @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x0, 0x8, 0xfff9}, {0x0, 0x2, 0x2}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6}, {0x1, 0x3, 0x7}}}, @TCF_EM_IPT={0xf8, 0x3, 0x0, 0x0, {{0x5, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_DATA={0xec, 0x5, "a9800e60704d4c352660bbe43c4f5e292f59e2c08774f490fa3c803f2332723a3154f3c3a52126300a8106e3b34d5104d279b91965ae6d238fbbcfcd6d24b8ab88479b7ac44f3b0b880e0aa6401b6aaf20ead670b167695747ee080974d1400dc637fafca8f33d5ded99ff8d6bb5b55a3c766f3d19e2aaa505f800763f1d0e9df4e03b6c11ae38a7077ec4e93311d27da83f85e65ec0324809a9c88f1c395e839b88e039c1b4683719b00698cfebcf1307d5d19b2e6e184c599e60ff7aef6a4cf84d0bfea9876bf3c881515286651cc7d3622d976000d376ee1a03e55ad812e461d1216e58d06626"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0xb8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0xb}, {{0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0x78, 0x2, 0x0, 0x0, {{0x0, 0x0, 0x61}, "3ddb38587e7aaae0af953c752279898e6542dc00ba3cf963b176fe98ccc3458801864f27daad77fd444a765fcf0c0585438e102c91167c3419b92abe737cf88163efb400c658a3103aa2219ad71aa59dcc43e397c25316cf32445f33b53ac05566e6e91ee1548e2b1424"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xf}, {{0x1, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7, 0x7, 0x9}, {{0x2}, {0x3, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0x8001}, {{0x3, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}]}]}]}}]}, 0x34f8}}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local, 0x6}, 0x400, "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"}, 0x418, 0x7fffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000100020000000000000001954500100f000"/32], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYBLOB="2f0000000400000000000000", @ANYRES32, @ANYBLOB="4abf38ebe6170f6b62114e93c639ff9512b81d4936d08e7f7be5ab3d28cf125a5570fa6dd80fd18b63ecb05ab82f2aa5c465cb92513fe805d774de6740509693823b1d54ac744b16b907af42b86ef619d24285086f9fc240d87f310b67e5996e4855a6f9c5883d2b8ed89bb09bac7514584479fdb06d6c7b66187f6311b12ea349f02efb496b6dd8bd24eb1837d11f3097475ccf4b5c21a2aad9ca5ea8f9471c8b197d9ee06f9eb48bf1bfe211864cfb40ed1497335ada9c14663112bccdec039ee2aae022221a303bf5f800cfde73fb303fbaf04542988b87fc9a5a", @ANYRES64=0x0], 0x20) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r4, 0x7ac, &(0x7f0000000080)={&(0x7f0000000e00)={{@host, 0x6}, {@local, 0x2}, 0x400, "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"}, 0x418, 0x800}) r10 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r10, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 1m58.372426275s ago: executing program 4 (id=1592): timer_create(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt(r0, 0xff, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700e, 0x0) 1m57.85073287s ago: executing program 4 (id=1594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) nanosleep(&(0x7f0000000300), 0x0) unshare(0x2c020400) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r4}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setrlimit(0xe, &(0x7f00000004c0)={0x8, 0xa}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x3) r7 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x148, 0x358, 0x358, 0x148, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0xff000000, 0x0, 'xfrm0\x00', 'team_slave_1\x00', {}, {}, 0x33}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0xd, 0x3, 'syz0\x00', {0x17}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x240) r8 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r8, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet(r8, &(0x7f0000000400)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640006000000003552bde5c064c6", 0x15}, {&(0x7f0000000600)="174640b6d80fb2eedc81ba60cc0800", 0xf}], 0x2}}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) 1m55.360579461s ago: executing program 4 (id=1598): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000e00)={0x28, 0x4, 0x0, {0x1}}, 0x28) socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x110, 0xffffffffffffffff, 0xffffc000) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x38415261}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x90}}, 0x0) 1m54.294051449s ago: executing program 36 (id=1598): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000e00)={0x28, 0x4, 0x0, {0x1}}, 0x28) socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x110, 0xffffffffffffffff, 0xffffc000) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x38415261}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x90}}, 0x0) 9.508138075s ago: executing program 0 (id=1682): syz_usb_connect(0x5, 0x2d, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000032, r4, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x1e00) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000000c0)=0x1) 5.953811364s ago: executing program 0 (id=1683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) nanosleep(0x0, 0x0) unshare(0x2c020400) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, 0x10, 0x10, 0xfffffffc, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) setrlimit(0xe, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x148, 0x358, 0x358, 0x148, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0xff000000, 0x0, 'xfrm0\x00', 'team_slave_1\x00', {}, {}, 0x33}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0xd, 0x3, 'syz0\x00', {0x17}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x240) r6 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r6, &(0x7f0000000400)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640006000000003552bde5c064c6", 0x15}, {&(0x7f0000000600)="174640b6d80fb2eedc81ba60cc0800", 0xf}], 0x2}}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 4.917193901s ago: executing program 0 (id=1684): socket$packet(0x11, 0x3, 0x300) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc6e, 0x0, 0x0, 0x0, 0xffff}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4044004) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) socket$kcm(0x2c, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 4.639635275s ago: executing program 0 (id=1685): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000e00)={0x28, 0x4, 0x0, {0x1}}, 0x28) socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x110, 0xffffffffffffffff, 0xffffc000) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x38415261}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x90}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x1}, 0x48) socket(0x10, 0x3, 0x0) 3.828201713s ago: executing program 0 (id=1686): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x0, &(0x7f0000000940)=ANY=[@ANYRES8=r0], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'netdevsim0\x00', @random="010000201000"}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448d4, &(0x7f00000002c0)={0x4, 0x2, '\x00', 0x0, 0x4}) 0s ago: executing program 0 (id=1687): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @private1, 0x1000}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0xfff3}, {}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40020) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000001ec0)={0x0, &(0x7f0000001e80)}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 's value: 3 [ 592.389399][ T7471] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 592.401288][ T7471] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.411804][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 593.435396][ T7471] usb 3-1: Product: syz [ 593.439677][ T7471] usb 3-1: Manufacturer: syz [ 593.450681][ T7471] usb 3-1: SerialNumber: syz [ 594.482436][ T7471] usb 3-1: 0:2 : does not exist [ 594.623453][T10496] Bluetooth: MGMT ver 1.23 [ 594.815778][T10498] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 597.429033][T10511] sctp: failed to load transform for md5: -2 [ 597.913469][T10522] 9pnet_fd: Insufficient options for proto=fd [ 598.269403][ T7471] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 598.642320][T10525] xt_CT: No such helper "syz0" [ 598.869200][ T7471] usb 3-1: USB disconnect, device number 21 [ 598.961306][T10525] [U] ^C [ 599.362513][T10541] nvme_fabrics: unknown parameter or missing value 'ó' in ctrl creation request [ 604.620780][T10588] xt_CT: No such helper "syz0" [ 604.883592][T10588] [U] ^C [ 605.136660][T10587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1201'. [ 605.146091][T10587] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 605.298169][T10595] 9pnet_fd: Insufficient options for proto=fd [ 605.893005][ T5899] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 606.892395][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 606.907182][ T5899] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 606.917452][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.926369][ T5899] usb 2-1: Product: syz [ 606.930606][ T5899] usb 2-1: Manufacturer: syz [ 606.941364][ T5899] usb 2-1: SerialNumber: syz [ 606.968576][ T5899] r8152-cfgselector 2-1: Unknown version 0x0000 [ 606.977008][ T5899] r8152-cfgselector 2-1: config 0 descriptor?? [ 608.078191][T10605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.088326][T10605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.098811][ T5899] r8152-cfgselector 2-1: Needed 1 retries to read version [ 608.106806][ T5899] r8152-cfgselector 2-1: Unknown version 0x0000 [ 608.114714][ T5899] r8152-cfgselector 2-1: bad CDC descriptors [ 608.331476][ T5899] r8152-cfgselector 2-1: USB disconnect, device number 16 [ 609.194989][T10632] xt_CT: No such helper "syz0" [ 610.104363][T10632] [U] ^C [ 610.286844][T10639] fuse: Unknown parameter '' [ 610.304771][T10639] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1229'. [ 610.332394][T10642] FAULT_INJECTION: forcing a failure. [ 610.332394][T10642] name failslab, interval 1, probability 0, space 0, times 0 [ 610.388463][T10642] CPU: 0 UID: 0 PID: 10642 Comm: syz.0.1231 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 610.388502][T10642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 610.388517][T10642] Call Trace: [ 610.388525][T10642] [ 610.388535][T10642] dump_stack_lvl+0x189/0x250 [ 610.388567][T10642] ? __pfx____ratelimit+0x10/0x10 [ 610.388591][T10642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 610.388615][T10642] ? __pfx__printk+0x10/0x10 [ 610.388646][T10642] ? __pfx___might_resched+0x10/0x10 [ 610.388670][T10642] ? fs_reclaim_acquire+0x7d/0x100 [ 610.388701][T10642] should_fail_ex+0x414/0x560 [ 610.388730][T10642] should_failslab+0xa8/0x100 [ 610.388756][T10642] __kmalloc_noprof+0xcb/0x4f0 [ 610.388776][T10642] ? tomoyo_encode+0x28b/0x550 [ 610.388809][T10642] tomoyo_encode+0x28b/0x550 [ 610.388844][T10642] tomoyo_realpath_from_path+0x58d/0x5d0 [ 610.388885][T10642] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 610.388909][T10642] tomoyo_path_number_perm+0x1e8/0x5a0 [ 610.388936][T10642] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 610.388978][T10642] ? __lock_acquire+0xab9/0xd20 [ 610.389022][T10642] ? __fget_files+0x2a/0x420 [ 610.389050][T10642] ? __fget_files+0x2a/0x420 [ 610.389073][T10642] ? __fget_files+0x3a0/0x420 [ 610.389096][T10642] ? __fget_files+0x2a/0x420 [ 610.389125][T10642] security_file_ioctl+0xcb/0x2d0 [ 610.389153][T10642] __se_sys_ioctl+0x47/0x170 [ 610.389188][T10642] do_syscall_64+0xfa/0x3b0 [ 610.389211][T10642] ? lockdep_hardirqs_on+0x9c/0x150 [ 610.389234][T10642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.389253][T10642] ? clear_bhb_loop+0x60/0xb0 [ 610.389280][T10642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.389301][T10642] RIP: 0033:0x7f29dbb8e9a9 [ 610.389321][T10642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.389340][T10642] RSP: 002b:00007f29dca6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 610.389364][T10642] RAX: ffffffffffffffda RBX: 00007f29dbdb5fa0 RCX: 00007f29dbb8e9a9 [ 610.389380][T10642] RDX: 0000200000000280 RSI: 00000000c0189378 RDI: 0000000000000005 [ 610.389394][T10642] RBP: 00007f29dca6f090 R08: 0000000000000000 R09: 0000000000000000 [ 610.389407][T10642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.389420][T10642] R13: 0000000000000000 R14: 00007f29dbdb5fa0 R15: 00007ffee7891768 [ 610.389453][T10642] [ 610.389476][T10642] ERROR: Out of memory at tomoyo_realpath_from_path. [ 611.833225][T10657] 9pnet_fd: Insufficient options for proto=fd [ 616.423101][T10684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1240'. [ 616.433014][T10684] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 617.673020][T10692] xt_CT: No such helper "syz0" [ 617.781633][T10692] [U] ^C [ 620.744922][T10731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1252'. [ 620.756198][T10731] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 623.300456][T10745] xt_CT: No such helper "syz0" [ 624.412738][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.419110][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.245012][T10741] [U] ^C [ 626.422029][T10748] [U] ^C [ 630.463472][T10784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1268'. [ 631.752988][T10785] [U] ^C [ 631.756327][T10788] xt_CT: No such helper "syz0" [ 631.866335][T10791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1270'. [ 631.877099][T10791] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 632.429923][T10801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1271'. [ 632.441221][T10801] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 632.572671][T10803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1274'. [ 636.211932][ T7474] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 636.673105][T10833] [U] ^C [ 636.785975][ T7474] usb 2-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=28.97 [ 636.824530][ T7474] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.901700][ T7474] usb 2-1: Product: syz [ 636.905977][ T7474] usb 2-1: Manufacturer: syz [ 636.910616][ T7474] usb 2-1: SerialNumber: syz [ 637.183151][ T7474] usb 2-1: config 0 descriptor?? [ 637.190260][ T7474] usb 2-1: can't set config #0, error -71 [ 637.253727][ T7474] usb 2-1: USB disconnect, device number 17 [ 637.255983][T10850] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1287'. [ 637.296611][T10850] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 638.821346][T10861] vivid-007: ================= START STATUS ================= [ 638.845247][T10861] vivid-007: Generate PTS: true [ 638.877910][T10861] vivid-007: Generate SCR: true [ 638.891831][T10861] tpg source WxH: 720x576 (Y'CbCr) [ 638.897120][T10861] tpg field: 4 [ 638.900555][T10861] tpg crop: (0,0)/720x576 [ 638.928271][T10861] tpg compose: (0,0)/720x576 [ 638.950833][T10861] tpg colorspace: 1 [ 638.967643][T10861] tpg transfer function: 0/0 [ 638.995627][T10861] tpg Y'CbCr encoding: 0/0 [ 639.012706][T10861] tpg quantization: 0/0 [ 639.029589][T10861] tpg RGB range: 0/2 [ 639.052887][T10861] vivid-007: ================== END STATUS ================== [ 641.136573][T10874] 9pnet_fd: Insufficient options for proto=fd [ 641.163726][T10874] syz.5.1292 (10874): /proc/10873/oom_adj is deprecated, please use /proc/10873/oom_score_adj instead. [ 642.705707][T10886] batman_adv: batadv0: Adding interface: dummy0 [ 642.741354][T10886] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 642.812672][T10886] batman_adv: batadv0: Interface activated: dummy0 [ 642.866144][T10887] batadv0: mtu less than device minimum [ 642.889308][T10887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 642.901127][T10887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 642.912622][T10887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 642.924023][T10887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 642.935445][T10887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 642.946854][T10887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 642.958265][T10887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 642.969658][T10887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 642.981017][T10887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 643.832198][T10889] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1294'. [ 644.913298][T10900] [U] ^C [ 645.246820][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1300'. [ 645.559756][T10905] batman_adv: batadv0: Adding interface: dummy0 [ 645.615543][T10905] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.739548][T10905] batman_adv: batadv0: Interface activated: dummy0 [ 646.391348][T10920] xt_l2tp: missing protocol rule (udp|l2tpip) [ 648.806835][T10953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1315'. [ 648.816085][T10953] net_ratelimit: 11 callbacks suppressed [ 648.816103][T10953] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 649.132288][T10945] [U] ^C [ 649.238981][T10961] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1316'. [ 650.847870][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1324'. [ 650.971280][T10984] netlink: 'syz.2.1325': attribute type 2 has an invalid length. [ 651.498527][T10984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1325'. [ 652.983780][T10971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1320'. [ 653.399950][T11004] syzkaller0: entered promiscuous mode [ 653.416555][T11004] syzkaller0: entered allmulticast mode [ 654.435047][T11008] [U] ^C [ 655.206328][T11015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1332'. [ 655.479597][T11021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1333'. [ 655.495775][T11021] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 657.110979][T11035] FAULT_INJECTION: forcing a failure. [ 657.110979][T11035] name failslab, interval 1, probability 0, space 0, times 0 [ 657.124763][T11035] CPU: 0 UID: 0 PID: 11035 Comm: syz.1.1338 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 657.124810][T11035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 657.124823][T11035] Call Trace: [ 657.124831][T11035] [ 657.124841][T11035] dump_stack_lvl+0x189/0x250 [ 657.124886][T11035] ? __pfx____ratelimit+0x10/0x10 [ 657.124909][T11035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 657.124931][T11035] ? __pfx__printk+0x10/0x10 [ 657.124963][T11035] ? __pfx___might_resched+0x10/0x10 [ 657.124991][T11035] should_fail_ex+0x414/0x560 [ 657.125017][T11035] ? translate_table+0x19b/0x2040 [ 657.125045][T11035] should_failslab+0xa8/0x100 [ 657.125071][T11035] __kvmalloc_node_noprof+0x161/0x5f0 [ 657.125094][T11035] ? translate_table+0x19b/0x2040 [ 657.125129][T11035] translate_table+0x19b/0x2040 [ 657.125174][T11035] ? __lock_acquire+0xab9/0xd20 [ 657.125199][T11035] ? __pfx_translate_table+0x10/0x10 [ 657.125232][T11035] ? __might_fault+0xb0/0x130 [ 657.125275][T11035] ? _copy_from_user+0x94/0xb0 [ 657.125309][T11035] do_ip6t_set_ctl+0x970/0xce0 [ 657.125341][T11035] ? get_pid_task+0x20/0x1f0 [ 657.125370][T11035] ? rcu_is_watching+0x15/0xb0 [ 657.125392][T11035] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 657.125444][T11035] ? __pfx___mutex_lock+0x10/0x10 [ 657.125468][T11035] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 657.125503][T11035] ? __lock_acquire+0xab9/0xd20 [ 657.125528][T11035] nf_setsockopt+0x26c/0x290 [ 657.125567][T11035] rawv6_setsockopt+0x23b/0x5b0 [ 657.125592][T11035] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 657.125626][T11035] ? sock_common_setsockopt+0x36/0xc0 [ 657.125652][T11035] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 657.125682][T11035] do_sock_setsockopt+0x17c/0x1b0 [ 657.125722][T11035] __x64_sys_setsockopt+0x13f/0x1b0 [ 657.125761][T11035] do_syscall_64+0xfa/0x3b0 [ 657.125784][T11035] ? lockdep_hardirqs_on+0x9c/0x150 [ 657.125807][T11035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.125828][T11035] ? clear_bhb_loop+0x60/0xb0 [ 657.125864][T11035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.125885][T11035] RIP: 0033:0x7f0ec798e9a9 [ 657.125904][T11035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.125923][T11035] RSP: 002b:00007f0ec884c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 657.125946][T11035] RAX: ffffffffffffffda RBX: 00007f0ec7bb5fa0 RCX: 00007f0ec798e9a9 [ 657.125962][T11035] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 657.125974][T11035] RBP: 00007f0ec884c090 R08: 0000000000000728 R09: 0000000000000000 [ 657.125987][T11035] R10: 0000200000001300 R11: 0000000000000246 R12: 0000000000000001 [ 657.126001][T11035] R13: 0000000000000000 R14: 00007f0ec7bb5fa0 R15: 00007ffd9a3b0058 [ 657.126032][T11035] [ 657.486699][T11039] loop6: detected capacity change from 0 to 7 [ 657.749602][T11039] Dev loop6: unable to read RDB block 7 [ 657.762661][T11039] loop6: unable to read partition table [ 657.768830][T11039] loop6: partition table beyond EOD, truncated [ 657.776309][T11039] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 658.533749][T11049] [U] ^C [ 659.471703][ T7474] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 659.886343][ T7474] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 659.911810][ T7474] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 659.932002][ T7474] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 659.941106][ T7474] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.184763][ T7474] usb 6-1: GET_CAPABILITIES returned 0 [ 660.215098][ T7474] usbtmc 6-1:16.0: can't read capabilities [ 660.388739][ T978] usb 6-1: USB disconnect, device number 3 [ 661.182545][T11074] netlink: 'syz.1.1350': attribute type 5 has an invalid length. [ 663.404837][T11097] [U] ^C [ 664.630070][T11106] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 665.031427][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'. [ 665.119521][T11117] team0: No ports can be present during mode change [ 665.215244][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'. [ 665.228528][T11121] netlink: 'syz.0.1363': attribute type 5 has an invalid length. [ 668.731029][T11137] [U] ^C [ 671.990693][T11153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1370'. [ 672.060998][T11117] team0 (unregistering): Port device team_slave_0 removed [ 672.142083][T11117] team0 (unregistering): Port device team_slave_1 removed [ 672.619957][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 672.619982][ T30] audit: type=1326 audit(1753397923.758:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11157 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ba5b2ab89 code=0x7ffc0000 [ 672.928925][ T30] audit: type=1326 audit(1753397923.768:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11157 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ba5b2ab89 code=0x7ffc0000 [ 672.974877][ T30] audit: type=1326 audit(1753397923.818:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11157 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ba5b2ab89 code=0x7ffc0000 [ 673.733427][ T30] audit: type=1326 audit(1753397924.118:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11157 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ba5b2ab89 code=0x7ffc0000 [ 673.756511][ T30] audit: type=1326 audit(1753397924.118:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11157 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba5b8e9a9 code=0x7ffc0000 [ 674.045064][ T30] audit: type=1326 audit(1753397924.118:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11157 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ba5b2ab89 code=0x7ffc0000 [ 674.170255][ T30] audit: type=1326 audit(1753397924.118:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11157 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba5b8e9a9 code=0x7ffc0000 [ 674.218800][ T30] audit: type=1326 audit(1753397924.118:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11157 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba5b8e9a9 code=0x7ffc0000 [ 674.258363][ T30] audit: type=1326 audit(1753397924.118:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11157 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ba5b2ab89 code=0x7ffc0000 [ 674.364328][ T30] audit: type=1326 audit(1753397924.118:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11157 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba5b8e9a9 code=0x7ffc0000 [ 677.609752][T11188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1380'. [ 677.676749][T11192] tipc: Started in network mode [ 677.696396][T11192] tipc: Node identity f6551bc21976, cluster identity 4711 [ 677.717687][T11192] tipc: Enabled bearer , priority 0 [ 677.758213][T11195] syzkaller0: entered promiscuous mode [ 677.783029][T11195] syzkaller0: entered allmulticast mode [ 678.923783][T10190] tipc: Node number set to 4012055490 [ 678.978268][T11195] tipc: Resetting bearer [ 679.040938][ T30] kauditd_printk_skb: 162 callbacks suppressed [ 679.040970][ T30] audit: type=1326 audit(1753397930.178:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11196 comm="syz.1.1385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ec798e9a9 code=0x0 [ 679.467180][T11187] tipc: Resetting bearer [ 679.940287][T11203] xt_CT: No such helper "syz0" [ 680.278568][T11203] [U] ^C [ 681.179490][T11210] xt_CT: No such helper "syz0" [ 681.323045][T11210] [U] ^C [ 681.484360][T11187] tipc: Disabling bearer [ 685.817437][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.739403][T11262] xt_CT: No such helper "syz0" [ 686.804905][ T30] audit: type=1326 audit(1753397937.938:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11254 comm="syz.1.1399" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ec798e9a9 code=0x0 [ 687.053635][T11262] [U] ^C [ 687.709360][T11281] netlink: 'syz.0.1403': attribute type 5 has an invalid length. [ 687.754935][T11265] could not allocate digest TFM handle digest_null [ 687.953191][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 688.179437][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 688.590555][ T10] usb 3-1: New USB device found, idVendor=5fc9, idProduct=0061, bcdDevice=cd.47 [ 688.590605][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.590630][ T10] usb 3-1: Product: syz [ 688.590649][ T10] usb 3-1: Manufacturer: syz [ 688.590668][ T10] usb 3-1: SerialNumber: syz [ 688.790781][ T10] usb 3-1: config 0 descriptor?? [ 690.730735][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1407'. [ 690.741236][T11294] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 692.182935][ T10] usb 3-1: USB disconnect, device number 22 [ 692.963546][T11319] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1414'. [ 693.256104][T11329] vcan0: tx drop: invalid da for name 0x0000000000000900 [ 693.540930][T11335] netlink: 'syz.1.1417': attribute type 3 has an invalid length. [ 693.620152][T11335] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1417'. [ 695.225789][ T7474] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 695.438137][ T7474] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 695.488212][ T7474] usb 3-1: config 0 has no interface number 1 [ 695.521292][ T7474] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 695.585168][ T7474] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.870006][ T7474] usb 3-1: config 0 descriptor?? [ 696.457820][ T7474] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 696.490430][ T7474] usb 3-1: MIDIStreaming interface descriptor not found [ 698.398892][ T7474] gspca_main: spca561-2.14.0 probing abcd:cdee [ 698.861974][ T7474] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 698.965333][ T7474] usb 3-1: USB disconnect, device number 23 [ 699.389501][T11385] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1431'. [ 699.402169][T11385] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 699.907595][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1430'. [ 700.928156][T11394] ptrace attach of "./syz-executor exec"[5836] was attempted by "./syz-executor exec"[11394] [ 702.414133][T11400] xt_CT: No such helper "syz0" [ 702.536875][T11400] [U] ^C [ 702.755109][T11394] batadv1: entered promiscuous mode [ 702.788742][T11394] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 703.083854][T11407] fuse: Bad value for 'fd' [ 703.279234][T11407] Invalid source name [ 703.911728][T11407] UBIFS error (pid: 11407): cannot open "./file0", error -22 [ 704.116187][T11416] FAULT_INJECTION: forcing a failure. [ 704.116187][T11416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.148907][T11416] CPU: 1 UID: 0 PID: 11416 Comm: syz.4.1442 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 704.148940][T11416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 704.148954][T11416] Call Trace: [ 704.148964][T11416] [ 704.148974][T11416] dump_stack_lvl+0x189/0x250 [ 704.149005][T11416] ? __pfx____ratelimit+0x10/0x10 [ 704.149029][T11416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 704.149054][T11416] ? __pfx__printk+0x10/0x10 [ 704.149081][T11416] ? __might_fault+0xb0/0x130 [ 704.149115][T11416] should_fail_ex+0x414/0x560 [ 704.149143][T11416] _copy_from_user+0x2d/0xb0 [ 704.149174][T11416] do_ip_setsockopt+0x3c0/0x2d00 [ 704.149208][T11416] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 704.149254][T11416] ? __fget_files+0x2a/0x420 [ 704.149282][T11416] ip_setsockopt+0x66/0x110 [ 704.149307][T11416] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 704.149337][T11416] do_sock_setsockopt+0x17c/0x1b0 [ 704.149374][T11416] __x64_sys_setsockopt+0x13f/0x1b0 [ 704.149412][T11416] do_syscall_64+0xfa/0x3b0 [ 704.149435][T11416] ? lockdep_hardirqs_on+0x9c/0x150 [ 704.149470][T11416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.149491][T11416] ? clear_bhb_loop+0x60/0xb0 [ 704.149516][T11416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.149536][T11416] RIP: 0033:0x7f1ba5b8e9a9 [ 704.149554][T11416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.149574][T11416] RSP: 002b:00007f1ba39f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 704.149596][T11416] RAX: ffffffffffffffda RBX: 00007f1ba5db5fa0 RCX: 00007f1ba5b8e9a9 [ 704.149611][T11416] RDX: 0000000000000016 RSI: 0000000000000000 RDI: 0000000000000003 [ 704.149624][T11416] RBP: 00007f1ba39f6090 R08: 0000000000000004 R09: 0000000000000000 [ 704.149637][T11416] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.149650][T11416] R13: 0000000000000000 R14: 00007f1ba5db5fa0 R15: 00007ffc60ee80e8 [ 704.149690][T11416] [ 704.671705][T11099] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 704.694770][T11422] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1443'. [ 704.915055][T11099] usb 6-1: Using ep0 maxpacket: 32 [ 704.937870][T11099] usb 6-1: unable to get BOS descriptor or descriptor too short [ 705.343367][T11099] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 705.378941][T11424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1444'. [ 705.571832][T11099] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 705.586568][T11099] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 705.596351][T11099] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 706.206747][T11099] usb 6-1: language id specifier not provided by device, defaulting to English [ 706.358444][T11099] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 706.370605][T11099] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.385970][T11099] usb 6-1: Manufacturer: 泘⭸ãŸì’—袾磦䓓걙모莨컺èœìƒ„㘙îŠçŸ†ä¨â²’拤 [ 706.396696][T11099] usb 6-1: SerialNumber: syz [ 706.570147][T11418] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 707.028679][T11418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.219982][T11418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.888686][T11445] xt_CT: No such helper "syz0" [ 707.966874][T11445] [U] ^C [ 708.050328][T11099] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 708.128787][T11099] usb 6-1: USB disconnect, device number 4 [ 709.273847][T11458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1450'. [ 709.600014][T11474] netlink: 'syz.1.1453': attribute type 5 has an invalid length. [ 711.055426][T11491] xt_CT: No such helper "syz0" [ 711.110928][T11491] [U] ^C [ 711.209839][T11490] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1460'. [ 711.498059][T10190] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 711.854018][T11501] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 711.862014][T11501] UDF-fs: Scanning with blocksize 512 failed [ 711.870852][T11501] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 712.097178][T11501] UDF-fs: Scanning with blocksize 1024 failed [ 712.122199][T10190] usb 2-1: Using ep0 maxpacket: 16 [ 712.172884][T11501] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 712.181238][T10190] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.193043][T10190] usb 2-1: config 0 interface 0 has no altsetting 0 [ 712.200068][T10190] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 712.202224][T11501] UDF-fs: Scanning with blocksize 2048 failed [ 712.224321][T11501] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 712.241181][T11501] UDF-fs: Scanning with blocksize 4096 failed [ 712.249765][T10190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.279524][T10190] usb 2-1: config 0 descriptor?? [ 712.947201][T11514] FAULT_INJECTION: forcing a failure. [ 712.947201][T11514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.983807][T11514] CPU: 0 UID: 0 PID: 11514 Comm: syz.4.1467 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 712.983838][T11514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 712.983851][T11514] Call Trace: [ 712.983859][T11514] [ 712.983869][T11514] dump_stack_lvl+0x189/0x250 [ 712.983908][T11514] ? __pfx____ratelimit+0x10/0x10 [ 712.983930][T11514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 712.983952][T11514] ? __pfx__printk+0x10/0x10 [ 712.983985][T11514] ? __might_fault+0xb0/0x130 [ 712.984016][T11514] should_fail_ex+0x414/0x560 [ 712.984042][T11514] _copy_from_user+0x2d/0xb0 [ 712.984071][T11514] ___sys_sendmsg+0x158/0x2a0 [ 712.984104][T11514] ? __pfx____sys_sendmsg+0x10/0x10 [ 712.984171][T11514] ? __fget_files+0x2a/0x420 [ 712.984192][T11514] ? __fget_files+0x3a0/0x420 [ 712.984225][T11514] __x64_sys_sendmsg+0x19b/0x260 [ 712.984258][T11514] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 712.984298][T11514] ? __pfx_ksys_write+0x10/0x10 [ 712.984315][T11514] ? rcu_is_watching+0x15/0xb0 [ 712.984341][T11514] ? do_syscall_64+0xbe/0x3b0 [ 712.984368][T11514] do_syscall_64+0xfa/0x3b0 [ 712.984389][T11514] ? lockdep_hardirqs_on+0x9c/0x150 [ 712.984409][T11514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.984429][T11514] ? clear_bhb_loop+0x60/0xb0 [ 712.984453][T11514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.984472][T11514] RIP: 0033:0x7f1ba5b8e9a9 [ 712.984489][T11514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.984507][T11514] RSP: 002b:00007f1ba39f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 712.984529][T11514] RAX: ffffffffffffffda RBX: 00007f1ba5db5fa0 RCX: 00007f1ba5b8e9a9 [ 712.984544][T11514] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 712.984556][T11514] RBP: 00007f1ba39f6090 R08: 0000000000000000 R09: 0000000000000000 [ 712.984568][T11514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.984580][T11514] R13: 0000000000000000 R14: 00007f1ba5db5fa0 R15: 00007ffc60ee80e8 [ 712.984610][T11514] [ 713.199551][ C0] vkms_vblank_simulate: vblank timer overrun [ 713.812806][T11519] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 714.998647][T11511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 715.029537][T11511] input: syz0 as /devices/virtual/input/input13 [ 716.191750][T11099] usb 2-1: USB disconnect, device number 18 [ 717.320562][T11542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1473'. [ 717.416059][T11536] [U] ^C [ 717.429890][T11543] xt_CT: No such helper "syz0" [ 717.542843][T11542] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 722.472410][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 723.282593][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 723.306657][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 723.323974][ T10] usb 6-1: config 0 has no interface number 0 [ 723.336800][ T10] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 723.352304][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.377267][ T10] usb 6-1: Product: syz [ 723.384607][ T10] usb 6-1: Manufacturer: syz [ 723.397771][ T10] usb 6-1: SerialNumber: syz [ 723.423907][ T10] usb 6-1: config 0 descriptor?? [ 723.542612][T11588] openvswitch: netlink: Missing valid actions attribute. [ 723.565909][T11588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 723.918286][ T10] ftdi_sio 6-1:0.4: FTDI USB Serial Device converter detected [ 723.955721][ T10] usb 6-1: Detected FT232R [ 724.650743][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 724.660236][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 724.829018][T11595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1488'. [ 724.845700][T11595] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 724.971518][ T10] ftdi_sio 6-1:0.4: GPIO initialisation failed: -71 [ 725.120829][ T10] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 725.149918][ T10] usb 6-1: USB disconnect, device number 5 [ 725.165663][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 725.422152][ T10] ftdi_sio 6-1:0.4: device disconnected [ 726.311447][T11606] xt_CT: No such helper "syz0" [ 726.482636][T11606] [U] ^C [ 728.409942][T11621] [U] ^C [ 730.184430][T11632] netlink: 'syz.4.1495': attribute type 5 has an invalid length. [ 730.492473][ T7474] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 731.562014][T11640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1498'. [ 732.024724][T11649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1499'. [ 732.042437][T11654] openvswitch: netlink: Missing valid actions attribute. [ 732.049754][T11654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 732.093573][T11647] tipc: Enabled bearer , priority 0 [ 732.254859][T11649] delete_channel: no stack [ 732.422389][T11649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1499'. [ 732.980596][T11663] xt_CT: No such helper "syz0" [ 733.474458][ T7472] tipc: Node number set to 3605130072 [ 733.485878][T11663] [U] ^C [ 733.535963][T11647] syzkaller0: entered promiscuous mode [ 733.586096][T11647] syzkaller0: entered allmulticast mode [ 733.706729][T11670] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1503'. [ 733.717701][T11670] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 734.632886][T11649] tipc: Resetting bearer [ 735.716641][T11677] [U] ^C [ 735.979737][T11683] fuse: Bad value for 'fd' [ 736.004752][T11683] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1509'. [ 741.982216][T11721] xt_CT: No such helper "syz0" [ 742.697021][T11723] xt_CT: No such helper "syz0" [ 742.804658][T11723] [U] ^C^C [ 744.219529][T11732] [U] ^C [ 746.434478][ T5825] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 746.591164][ T5825] usb 1-1: device descriptor read/64, error -71 [ 746.739166][T11748] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 746.867964][ T5825] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 747.031850][ T5825] usb 1-1: device descriptor read/64, error -71 [ 747.150845][ T5825] usb usb1-port1: attempt power cycle [ 747.235030][T10208] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 747.258882][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.276089][T10208] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 747.293582][T10208] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 747.315329][T10208] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 747.324282][T10208] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 747.531979][ T5825] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 747.572952][ T5825] usb 1-1: device descriptor read/8, error -71 [ 748.696454][ T5825] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 748.745988][ T5825] usb 1-1: device descriptor read/8, error -71 [ 748.874809][ T5825] usb usb1-port1: unable to enumerate USB device [ 749.411901][ T5854] Bluetooth: hci2: command tx timeout [ 749.862289][T11765] xt_CT: No such helper "syz0" [ 750.023358][T11765] [U] ^C [ 751.491777][ T5854] Bluetooth: hci2: command tx timeout [ 751.693053][T10190] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 751.832289][T10190] usb 1-1: device descriptor read/64, error -71 [ 751.925378][T10208] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 751.936464][T10208] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 751.946344][T10208] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 751.955591][T10208] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 751.963644][T10208] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 752.076530][T10190] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 752.187715][T11782] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1534'. [ 752.222614][T10190] usb 1-1: device descriptor read/64, error -71 [ 752.340411][T10190] usb usb1-port1: attempt power cycle [ 752.590747][T11649] tipc: Disabling bearer [ 752.682801][T10190] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 752.712603][T10190] usb 1-1: device descriptor read/8, error -71 [ 752.952661][T10190] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 752.983396][T10190] usb 1-1: device descriptor read/8, error -71 [ 753.104891][T10190] usb usb1-port1: unable to enumerate USB device [ 753.544657][T11749] chnl_net:caif_netlink_parms(): no params data found [ 753.571679][ T5854] Bluetooth: hci2: command tx timeout [ 754.051841][ T5854] Bluetooth: hci3: command tx timeout [ 754.177337][T11801] xt_CT: No such helper "syz0" [ 754.380969][T11801] [U] ^C [ 754.518722][ T796] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.584164][T11811] loop4: detected capacity change from 0 to 524255232 [ 754.693959][T11807] loop4: detected capacity change from 524255232 to 524287936 [ 754.873367][T11816] netlink: 'syz.5.1540': attribute type 20 has an invalid length. [ 754.956550][ T796] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.414176][T11777] chnl_net:caif_netlink_parms(): no params data found [ 755.485985][ T796] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.651706][ T5854] Bluetooth: hci2: command tx timeout [ 755.720368][ T796] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.764571][T11749] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.777010][T11749] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.789065][T11749] bridge_slave_0: entered allmulticast mode [ 755.805212][T11749] bridge_slave_0: entered promiscuous mode [ 755.818482][T11749] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.856075][T11749] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.882409][T11749] bridge_slave_1: entered allmulticast mode [ 755.900377][T11749] bridge_slave_1: entered promiscuous mode [ 756.004139][T11749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.018495][T11749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.260323][ T5854] Bluetooth: hci3: command tx timeout [ 757.250440][T11749] team0: Port device team_slave_0 added [ 757.258740][T11835] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 757.446768][T11749] team0: Port device team_slave_1 added [ 757.479074][T11839] IPv6: addrconf: prefix option has invalid lifetime [ 757.524287][T11777] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.555826][T11777] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.571940][T11777] bridge_slave_0: entered allmulticast mode [ 757.592630][T11777] bridge_slave_0: entered promiscuous mode [ 757.600750][T11777] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.613209][T11777] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.620486][T11777] bridge_slave_1: entered allmulticast mode [ 757.635857][T11777] bridge_slave_1: entered promiscuous mode [ 758.302114][ T5854] Bluetooth: hci3: command tx timeout [ 758.645429][T11749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.658589][T11749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.717964][T11749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.742676][T11845] bridge0: entered promiscuous mode [ 758.748460][T11845] macvlan2: entered promiscuous mode [ 758.848148][T11777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.875968][T11777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.886498][ T796] bridge_slave_1: left allmulticast mode [ 758.912456][ T796] bridge_slave_1: left promiscuous mode [ 758.918341][ T796] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.965451][T11848] netlink: 'syz.4.1550': attribute type 5 has an invalid length. [ 758.975570][ T796] bridge_slave_0: left allmulticast mode [ 758.981315][ T796] bridge_slave_0: left promiscuous mode [ 759.062399][ T796] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.190308][T11852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1551'. [ 759.204899][T11852] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 760.382595][ T5854] Bluetooth: hci3: command tx timeout [ 762.530781][ T796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.584748][ T796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.629556][ T796] bond0 (unregistering): Released all slaves [ 762.685047][T11749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.692314][T11749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.756789][T11749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.126223][T11777] team0: Port device team_slave_0 added [ 763.562495][ T796] tipc: Left network mode [ 763.678997][T11777] team0: Port device team_slave_1 added [ 764.868575][T11777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.901909][T11777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.927881][ C1] vkms_vblank_simulate: vblank timer overrun [ 764.940391][T11777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.961300][T11777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.974968][T11777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 765.007720][T11777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.967458][T11749] hsr_slave_0: entered promiscuous mode [ 765.976613][T11749] hsr_slave_1: entered promiscuous mode [ 765.991005][T11749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 766.020572][T11749] Cannot create hsr debugfs directory [ 766.041840][ T30] audit: type=1326 audit(1753398017.188:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11889 comm="syz.0.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 766.082720][ T30] audit: type=1326 audit(1753398017.218:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11889 comm="syz.0.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 766.104517][ C1] vkms_vblank_simulate: vblank timer overrun [ 766.111361][ T30] audit: type=1326 audit(1753398017.218:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11889 comm="syz.0.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 766.133776][ T30] audit: type=1326 audit(1753398017.218:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11889 comm="syz.0.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 766.155324][ C1] vkms_vblank_simulate: vblank timer overrun [ 766.171117][ T30] audit: type=1326 audit(1753398017.218:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11889 comm="syz.0.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 766.205634][ T30] audit: type=1326 audit(1753398017.218:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11889 comm="syz.0.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 766.206451][T11777] hsr_slave_0: entered promiscuous mode [ 766.235141][ T30] audit: type=1326 audit(1753398017.218:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11889 comm="syz.0.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 766.235198][ T30] audit: type=1326 audit(1753398017.218:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11889 comm="syz.0.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 766.235243][ T30] audit: type=1326 audit(1753398017.218:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11889 comm="syz.0.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 766.256903][ C1] vkms_vblank_simulate: vblank timer overrun [ 766.259469][T11777] hsr_slave_1: entered promiscuous mode [ 766.303468][ T30] audit: type=1326 audit(1753398017.218:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11889 comm="syz.0.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 766.382656][T11777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 766.390835][T11777] Cannot create hsr debugfs directory [ 766.530400][ T796] hsr_slave_0: left promiscuous mode [ 766.536887][ T796] hsr_slave_1: left promiscuous mode [ 766.543321][ T796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.550792][ T796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.572381][ T796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.580015][ T796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.647080][ T796] veth1_macvtap: left promiscuous mode [ 766.676292][ T796] veth0_macvtap: left promiscuous mode [ 766.688447][ T796] veth1_vlan: left promiscuous mode [ 766.694711][ T796] veth0_vlan: left promiscuous mode [ 768.195374][T11906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1566'. [ 769.701105][T11913] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 769.972176][ T7474] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 770.311698][ T7474] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 770.321639][ T7474] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 770.331352][ T7474] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 770.369856][ T7474] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 770.379844][ T7474] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.396814][ T7474] usb 1-1: Product: syz [ 770.401051][ T7474] usb 1-1: Manufacturer: syz [ 770.406046][ T7474] usb 1-1: SerialNumber: syz [ 770.429068][ T7474] hub 1-1:1.0: bad descriptor, ignoring hub [ 770.436392][ T7474] hub 1-1:1.0: probe with driver hub failed with error -5 [ 770.664828][ T7474] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 771.681001][T11923] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 774.276910][T10208] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 774.287025][T10208] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 774.295141][T10208] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 774.322510][T10208] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 774.392534][T10208] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 775.085538][ T5899] usb 1-1: USB disconnect, device number 27 [ 775.094664][ T5899] usblp0: removed [ 776.116691][T11946] loop6: detected capacity change from 0 to 524287999 [ 776.124646][T11946] Buffer I/O error on dev loop6, logical block 0, async page read [ 776.134986][T11946] Buffer I/O error on dev loop6, logical block 0, async page read [ 776.153689][T11946] Buffer I/O error on dev loop6, logical block 0, async page read [ 776.192414][T11946] Buffer I/O error on dev loop6, logical block 0, async page read [ 776.233734][T11946] Buffer I/O error on dev loop6, logical block 0, async page read [ 776.243140][T11946] Buffer I/O error on dev loop6, logical block 0, async page read [ 776.298562][T11946] Buffer I/O error on dev loop6, logical block 0, async page read [ 776.315348][T11946] Buffer I/O error on dev loop6, logical block 0, async page read [ 776.382394][T11946] ldm_validate_partition_table(): Disk read failed. [ 776.395430][T11946] Buffer I/O error on dev loop6, logical block 0, async page read [ 776.426248][T11946] Buffer I/O error on dev loop6, logical block 0, async page read [ 776.437061][T11946] Dev loop6: unable to read RDB block 0 [ 776.444538][T11946] loop6: unable to read partition table [ 776.450572][T11946] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 776.452420][ T5854] Bluetooth: hci1: command tx timeout [ 777.960091][T11777] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 778.165859][T11777] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 778.571691][ T5854] Bluetooth: hci1: command tx timeout [ 779.056988][T11956] xt_CT: No such helper "syz0" [ 779.063783][T11956] [U] ^C [ 779.282095][T11777] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 779.363074][T11777] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 779.727280][T11749] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 779.764615][T11917] chnl_net:caif_netlink_parms(): no params data found [ 779.867934][T11749] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 779.924368][T11749] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 780.039393][T11749] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 781.101779][ T5854] Bluetooth: hci1: command tx timeout [ 781.304474][T11917] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.322515][T11917] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.331182][T11917] bridge_slave_0: entered allmulticast mode [ 781.350627][T11917] bridge_slave_0: entered promiscuous mode [ 781.383415][T11917] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.548347][T11917] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.772364][T11917] bridge_slave_1: entered allmulticast mode [ 782.281783][T11917] bridge_slave_1: entered promiscuous mode [ 782.681469][T11917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.764216][T11917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.066874][T11917] team0: Port device team_slave_0 added [ 783.138538][T11917] team0: Port device team_slave_1 added [ 783.172043][ T5854] Bluetooth: hci1: command tx timeout [ 783.604591][T11777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.755266][T11917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.807024][T11917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.994431][T11917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.320823][ T796] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.427689][T11917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.451914][T11917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 784.477871][ C1] vkms_vblank_simulate: vblank timer overrun [ 784.610305][T11917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.530922][ T796] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.650450][T11917] hsr_slave_0: entered promiscuous mode [ 785.679908][T11917] hsr_slave_1: entered promiscuous mode [ 785.728502][T11777] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.227200][ T796] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.568214][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.575505][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.748088][ T796] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.601022][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.608302][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.825603][T11749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.219312][T11777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 789.283331][T11777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 790.515758][T12035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1597'. [ 790.526976][T12035] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 790.534492][T11749] 8021q: adding VLAN 0 to HW filter on device team0 [ 791.115699][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.122911][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.272501][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.279736][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.381917][ T796] bridge_slave_1: left allmulticast mode [ 791.387642][ T796] bridge_slave_1: left promiscuous mode [ 791.432992][ T796] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.485523][ T796] bridge_slave_0: left allmulticast mode [ 791.491241][ T796] bridge_slave_0: left promiscuous mode [ 791.523658][ T796] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.440285][T10208] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 793.455910][T10208] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 793.466263][T10208] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 793.475116][T10208] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 793.482934][T10208] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 793.613569][ T796] bond1 (unregistering): (slave vlan2): Releasing active interface [ 795.571858][ T5854] Bluetooth: hci4: command tx timeout [ 795.581081][ T796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.604979][ T796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.651196][ T796] bond0 (unregistering): Released all slaves [ 796.222812][ T796] bond1 (unregistering): Released all slaves [ 796.371855][T11917] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 796.404430][T11917] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 796.543020][ T796] tipc: Left network mode [ 796.645353][T11917] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 796.654919][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1604'. [ 796.833734][T11917] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 797.029080][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 797.029100][ T30] audit: type=1326 audit(1753398048.168:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.0.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 797.136251][ T30] audit: type=1326 audit(1753398048.168:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.0.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 797.165181][ T796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 797.206162][ T796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.206158][ T30] audit: type=1326 audit(1753398048.208:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.0.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 797.206207][ T30] audit: type=1326 audit(1753398048.208:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.0.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 797.256836][ T30] audit: type=1326 audit(1753398048.208:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.0.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 797.278850][ T30] audit: type=1326 audit(1753398048.208:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.0.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 797.280022][ T796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.300933][ T30] audit: type=1326 audit(1753398048.208:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.0.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 797.300984][ T30] audit: type=1326 audit(1753398048.208:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.0.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 797.301032][ T30] audit: type=1326 audit(1753398048.208:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.0.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 797.301079][ T30] audit: type=1326 audit(1753398048.208:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.0.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 797.401760][ T796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.487748][ T796] veth1_macvtap: left promiscuous mode [ 797.517859][ T796] veth0_macvtap: left promiscuous mode [ 797.531580][ T796] veth1_vlan: left promiscuous mode [ 797.544935][ T796] veth0_vlan: left promiscuous mode [ 797.651912][ T5854] Bluetooth: hci4: command tx timeout [ 799.548911][ T796] team0 (unregistering): Port device team_slave_1 removed [ 799.651320][ T796] team0 (unregistering): Port device team_slave_0 removed [ 799.735371][ T5854] Bluetooth: hci4: command tx timeout [ 801.635514][T11777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.812153][ T5854] Bluetooth: hci4: command tx timeout [ 802.216925][T12076] openvswitch: netlink: Tunnel attr 6 has unexpected len 1 expected 0 [ 802.647944][T11917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.958794][T11917] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.124240][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.131466][ T6102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.159373][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.166589][ T6102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.438032][ T796] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.575050][T12088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1607'. [ 803.584702][T12088] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 803.876352][T12048] chnl_net:caif_netlink_parms(): no params data found [ 804.197589][ T796] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.456133][ T796] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.576902][T11749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.710154][ T796] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.080507][T12048] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.101225][T12048] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.129860][T12048] bridge_slave_0: entered allmulticast mode [ 805.171474][T12048] bridge_slave_0: entered promiscuous mode [ 805.200507][T12048] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.229063][T12048] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.261959][T12048] bridge_slave_1: entered allmulticast mode [ 805.270737][T12048] bridge_slave_1: entered promiscuous mode [ 805.816489][T12048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.833213][T12048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.853711][T11777] veth0_vlan: entered promiscuous mode [ 807.357008][T12048] team0: Port device team_slave_0 added [ 807.412139][T12048] team0: Port device team_slave_1 added [ 807.518640][T11777] veth1_vlan: entered promiscuous mode [ 807.719209][T12121] FAULT_INJECTION: forcing a failure. [ 807.719209][T12121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 807.768838][T12121] CPU: 1 UID: 0 PID: 12121 Comm: syz.0.1611 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 807.768870][T12121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 807.768883][T12121] Call Trace: [ 807.768890][T12121] [ 807.768907][T12121] dump_stack_lvl+0x189/0x250 [ 807.768933][T12121] ? __pfx____ratelimit+0x10/0x10 [ 807.768953][T12121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 807.768972][T12121] ? __pfx__printk+0x10/0x10 [ 807.769005][T12121] should_fail_ex+0x414/0x560 [ 807.769028][T12121] _copy_to_user+0x31/0xb0 [ 807.769056][T12121] simple_read_from_buffer+0xe1/0x170 [ 807.769079][T12121] proc_fail_nth_read+0x1df/0x250 [ 807.769103][T12121] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 807.769127][T12121] ? rw_verify_area+0x258/0x650 [ 807.769156][T12121] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 807.769179][T12121] vfs_read+0x200/0x980 [ 807.769210][T12121] ? __pfx___mutex_lock+0x10/0x10 [ 807.769231][T12121] ? __pfx_vfs_read+0x10/0x10 [ 807.769260][T12121] ? __fget_files+0x2a/0x420 [ 807.769283][T12121] ? __fget_files+0x3a0/0x420 [ 807.769302][T12121] ? __fget_files+0x2a/0x420 [ 807.769329][T12121] ksys_read+0x145/0x250 [ 807.769346][T12121] ? __pfx_ksys_read+0x10/0x10 [ 807.769360][T12121] ? rcu_is_watching+0x15/0xb0 [ 807.769384][T12121] ? do_syscall_64+0xbe/0x3b0 [ 807.769407][T12121] do_syscall_64+0xfa/0x3b0 [ 807.769425][T12121] ? lockdep_hardirqs_on+0x9c/0x150 [ 807.769443][T12121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.769461][T12121] ? clear_bhb_loop+0x60/0xb0 [ 807.769482][T12121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.769498][T12121] RIP: 0033:0x7f29dbb8d3bc [ 807.769514][T12121] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 807.769530][T12121] RSP: 002b:00007f29dca6f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 807.769549][T12121] RAX: ffffffffffffffda RBX: 00007f29dbdb5fa0 RCX: 00007f29dbb8d3bc [ 807.769562][T12121] RDX: 000000000000000f RSI: 00007f29dca6f0a0 RDI: 0000000000000003 [ 807.769573][T12121] RBP: 00007f29dca6f090 R08: 0000000000000000 R09: 0000000000000000 [ 807.769584][T12121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.769594][T12121] R13: 0000000000000000 R14: 00007f29dbdb5fa0 R15: 00007ffee7891768 [ 807.769621][T12121] [ 808.015456][T12048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.022543][T12048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.048558][T12048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.061605][T12048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.068600][T12048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.094617][T12048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.831792][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.000932][T12048] hsr_slave_0: entered promiscuous mode [ 809.042909][T12048] hsr_slave_1: entered promiscuous mode [ 809.049478][T12048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 809.093794][T12048] Cannot create hsr debugfs directory [ 809.127347][ T796] : left allmulticast mode [ 809.132115][ T796] : left promiscuous mode [ 809.138710][ T796] bridge0: port 1() entered disabled state [ 809.162601][ T7472] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 809.244250][T10208] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 809.258399][T10208] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 809.267748][T10208] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 809.318704][T10208] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 809.333453][T10208] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 809.412623][ T7472] usb 1-1: Using ep0 maxpacket: 16 [ 809.434862][ T7472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 809.447012][ T7472] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 809.457329][ T7472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.467571][ T7472] usb 1-1: config 0 descriptor?? [ 809.978966][ T7472] uclogic 0003:5543:0781.0004: hidraw0: USB HID v0.04 Device [HID 5543:0781] on usb-dummy_hcd.0-1/input0 [ 810.309660][ T7472] usb 1-1: USB disconnect, device number 28 [ 810.598482][ T796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 810.637011][ T796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.668944][ T796] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 810.712314][ T796] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 810.750243][ T796] bond0 (unregistering): Released all slaves [ 811.299250][T11917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.502982][T10208] Bluetooth: hci6: command tx timeout [ 811.669594][T11777] veth0_macvtap: entered promiscuous mode [ 811.869083][T11777] veth1_macvtap: entered promiscuous mode [ 812.095978][T12140] syz.0.1614: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 812.206576][T12140] CPU: 1 UID: 0 PID: 12140 Comm: syz.0.1614 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 812.206611][T12140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 812.206625][T12140] Call Trace: [ 812.206634][T12140] [ 812.206643][T12140] dump_stack_lvl+0x189/0x250 [ 812.206677][T12140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 812.206703][T12140] ? __pfx__printk+0x10/0x10 [ 812.206733][T12140] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 812.206761][T12140] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 812.206791][T12140] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 812.206820][T12140] warn_alloc+0x214/0x310 [ 812.206846][T12140] ? stack_depot_save_flags+0x40/0x900 [ 812.206875][T12140] ? __pfx_warn_alloc+0x10/0x10 [ 812.206902][T12140] ? kasan_save_track+0x4f/0x80 [ 812.206937][T12140] ? xskq_create+0x56/0x170 [ 812.206957][T12140] ? xsk_init_queue+0xb0/0x110 [ 812.206976][T12140] ? xsk_setsockopt+0x43f/0x710 [ 812.207007][T12140] ? do_sock_setsockopt+0x17c/0x1b0 [ 812.207039][T12140] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 812.207070][T12140] ? do_syscall_64+0xfa/0x3b0 [ 812.207092][T12140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.207124][T12140] __vmalloc_node_range_noprof+0x125/0x12f0 [ 812.207182][T12140] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 812.207209][T12140] ? xskq_create+0x56/0x170 [ 812.207233][T12140] ? __kasan_kmalloc+0x93/0xb0 [ 812.207257][T12140] vmalloc_user_noprof+0xad/0xf0 [ 812.207281][T12140] ? xskq_create+0xbf/0x170 [ 812.207304][T12140] xskq_create+0xbf/0x170 [ 812.207328][T12140] xsk_init_queue+0xb0/0x110 [ 812.207354][T12140] xsk_setsockopt+0x43f/0x710 [ 812.207392][T12140] ? __pfx_xsk_setsockopt+0x10/0x10 [ 812.207429][T12140] ? __fget_files+0x2a/0x420 [ 812.207456][T12140] ? __fget_files+0x2a/0x420 [ 812.207490][T12140] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 812.207511][T12140] ? __pfx_xsk_setsockopt+0x10/0x10 [ 812.207549][T12140] do_sock_setsockopt+0x17c/0x1b0 [ 812.207587][T12140] __x64_sys_setsockopt+0x13f/0x1b0 [ 812.207626][T12140] do_syscall_64+0xfa/0x3b0 [ 812.207650][T12140] ? lockdep_hardirqs_on+0x9c/0x150 [ 812.207673][T12140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.207694][T12140] ? clear_bhb_loop+0x60/0xb0 [ 812.207721][T12140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.207742][T12140] RIP: 0033:0x7f29dbb8e9a9 [ 812.207763][T12140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.207782][T12140] RSP: 002b:00007f29dca2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 812.207806][T12140] RAX: ffffffffffffffda RBX: 00007f29dbdb6160 RCX: 00007f29dbb8e9a9 [ 812.207822][T12140] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 812.207835][T12140] RBP: 00007f29dbc10d69 R08: 0000000000000052 R09: 0000000000000000 [ 812.207849][T12140] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 812.207862][T12140] R13: 0000000000000000 R14: 00007f29dbdb6160 R15: 00007ffee7891768 [ 812.207894][T12140] [ 812.208021][T12140] Mem-Info: [ 812.549631][ T796] hsr_slave_0: left promiscuous mode [ 812.577321][ T796] hsr_slave_1: left promiscuous mode [ 812.581694][T12140] active_anon:162 inactive_anon:752 isolated_anon:0 [ 812.581694][T12140] active_file:1401 inactive_file:863 isolated_file:0 [ 812.581694][T12140] unevictable:769 dirty:10 writeback:0 [ 812.581694][T12140] slab_reclaimable:7880 slab_unreclaimable:100640 [ 812.581694][T12140] mapped:31034 shmem:862 pagetables:884 [ 812.581694][T12140] sec_pagetables:0 bounce:0 [ 812.581694][T12140] kernel_misc_reclaimable:0 [ 812.581694][T12140] free:711845 free_pcp:9166 free_cma:0 [ 812.600451][ T796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 812.651482][ T796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.694902][ T796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 812.724212][ T796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 812.769237][T12140] Node 0 active_anon:540kB inactive_anon:356kB active_file:1744kB inactive_file:720kB unevictable:1536kB isolated(anon):128kB isolated(file):0kB mapped:94504kB dirty:20kB writeback:0kB shmem:1688kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11380kB pagetables:2980kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 812.886782][ T796] veth1_macvtap: left promiscuous mode [ 812.892815][T12140] Node 1 active_anon:112kB inactive_anon:2380kB active_file:3880kB inactive_file:2756kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:37264kB dirty:48kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:372kB pagetables:616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 812.941718][ T796] veth0_macvtap: left promiscuous mode [ 812.947502][ T796] veth1_vlan: left promiscuous mode [ 812.972491][T12140] Node 0 DMA free:10156kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:100kB local_pcp:40kB free_cma:0kB [ 813.101716][T12140] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 813.137524][T12140] Node 0 DMA32 free:74896kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:2048KB free_highatomic:256KB active_anon:516kB inactive_anon:356kB active_file:752kB inactive_file:608kB unevictable:1536kB writepending:24kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:4360kB local_pcp:2244kB free_cma:0kB [ 813.182318][T12140] lowmem_reserve[]: 0 0 1 1 1 [ 813.188127][T12140] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:48kB active_file:1060kB inactive_file:44kB unevictable:0kB writepending:4kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:32kB free_cma:0kB [ 813.232065][T12140] lowmem_reserve[]: 0 0 0 0 0 [ 813.236893][T12140] Node 1 Normal free:2728916kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:112kB inactive_anon:2332kB active_file:3968kB inactive_file:2764kB unevictable:1540kB writepending:60kB present:4194300kB managed:4111164kB mlocked:4kB bounce:0kB free_pcp:33636kB local_pcp:6984kB free_cma:0kB [ 813.368559][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 813.377076][T12140] lowmem_reserve[]: 0 0 0 0 0 [ 813.379961][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 813.399779][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 813.408120][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 813.416119][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 813.416490][T12140] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10156kB [ 813.539498][T12140] Node 0 DMA32: 1*4kB (U) 37*8kB (ME) 290*16kB (UME) 228*32kB (UME) 129*64kB (UME) 58*128kB (ME) 15*256kB (UMEH) 0*512kB 6*1024kB (U) 1*2048kB (U) 0*4096kB = 39948kB [ 813.577697][ T5854] Bluetooth: hci6: command tx timeout [ 813.608279][T12140] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 813.621166][T12140] Node 1 Normal: 2*4kB (ME) 2*8kB (UM) 1*16kB (U) 1*32kB (U) 2*64kB (UM) 2*128kB (UE) 3*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (U) 663*4096kB (M) = 2721992kB [ 813.638553][T12140] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 813.648448][T12140] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 813.658551][T12140] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 813.668506][T12140] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 813.679415][T12140] 3182 total pagecache pages [ 813.684368][T12140] 79 pages in swap cache [ 813.689311][T12140] Free swap = 108336kB [ 813.693813][T12140] Total swap = 124996kB [ 813.698092][T12140] 2097051 pages RAM [ 813.702291][T12140] 0 pages HighMem/MovableOnly [ 813.707124][T12140] 424695 pages reserved [ 813.711325][T12140] 0 pages cma reserved [ 815.491653][ T5854] Bluetooth: hci2: command tx timeout [ 815.672063][ T5854] Bluetooth: hci6: command tx timeout [ 815.973834][ T796] team0 (unregistering): Port device team_slave_1 removed [ 816.161869][T12156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1617'. [ 816.330643][ T796] team0 (unregistering): Port device team_slave_0 removed [ 817.591590][ T5854] Bluetooth: hci2: command tx timeout [ 817.741884][ T5854] Bluetooth: hci6: command tx timeout [ 818.028488][T12167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1620'. [ 818.039040][T12167] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 819.654123][ T5854] Bluetooth: hci2: command tx timeout [ 820.659567][T11917] veth0_vlan: entered promiscuous mode [ 821.125388][T11917] veth1_vlan: entered promiscuous mode [ 821.159933][ T796] IPVS: stop unused estimator thread 0... [ 821.170504][T12048] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 821.731753][ T5854] Bluetooth: hci2: command tx timeout [ 822.109765][T12186] xt_CT: No such helper "syz0" [ 822.321290][T12048] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 822.513245][T12048] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 823.523005][T12194] xt_CT: No such helper "syz0" [ 823.600493][T12048] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 823.614823][T12194] [U] ^C [ 824.509243][T12126] chnl_net:caif_netlink_parms(): no params data found [ 824.914011][T12142] chnl_net:caif_netlink_parms(): no params data found [ 825.321264][T11917] veth0_macvtap: entered promiscuous mode [ 825.809468][T11917] veth1_macvtap: entered promiscuous mode [ 825.996042][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 826.026258][T12220] netlink: 'syz.0.1628': attribute type 18 has an invalid length. [ 826.045040][T12220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1628'. [ 826.382037][ T7472] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 826.417330][T12126] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.445976][T12126] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.469627][T12126] bridge_slave_0: entered allmulticast mode [ 826.494591][T12126] bridge_slave_0: entered promiscuous mode [ 826.569919][ T7472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.620275][ T7472] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 826.660770][T12126] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.675975][T12126] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.693172][T12126] bridge_slave_1: entered allmulticast mode [ 826.704933][T12126] bridge_slave_1: entered promiscuous mode [ 826.723586][ T7472] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 826.792851][ T7472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.799377][T11917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 826.886932][ T7472] usb 1-1: config 0 descriptor?? [ 827.034598][T12142] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.052452][T12142] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.076891][T12142] bridge_slave_0: entered allmulticast mode [ 827.139699][T12142] bridge_slave_0: entered promiscuous mode [ 827.316950][T12142] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.359745][ T7472] ortek 0003:1223:3F07.0005: unknown main item tag 0x6 [ 827.383794][T12142] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.391794][ T7472] ortek 0003:1223:3F07.0005: reserved main item tag 0xe [ 827.402201][T12142] bridge_slave_1: entered allmulticast mode [ 827.435880][ T7472] ortek 0003:1223:3F07.0005: ignoring exceeding usage max [ 827.455545][T12142] bridge_slave_1: entered promiscuous mode [ 827.467070][ T7472] ortek 0003:1223:3F07.0005: ignoring exceeding usage max [ 827.489641][ T7472] ortek 0003:1223:3F07.0005: usage index exceeded [ 827.509158][ T7472] ortek 0003:1223:3F07.0005: item 0 2 2 2 parsing failed [ 827.546145][ T7472] ortek 0003:1223:3F07.0005: probe with driver ortek failed with error -22 [ 827.636647][T12126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.652260][ T7472] usb 1-1: USB disconnect, device number 29 [ 828.028250][T12142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.052899][T12126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.134385][T11917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 828.165028][T11917] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.212947][T11917] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.232008][T11917] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.297566][T11917] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.387108][T12142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.449092][ T5854] Bluetooth: hci0: unexpected event for opcode 0x2035 [ 828.652616][T12126] team0: Port device team_slave_0 added [ 829.239849][T12126] team0: Port device team_slave_1 added [ 829.475921][T12230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1631'. [ 829.487215][T12230] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 829.791670][T12142] team0: Port device team_slave_0 added [ 829.882656][T12142] team0: Port device team_slave_1 added [ 830.737537][T12126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.787420][T12126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.132019][T12126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.192518][T12142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.232476][T12142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.308672][T12142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.442284][T12142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.449821][T12142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 833.601948][T12142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.858770][T12126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.891957][T12126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.987183][T10208] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 835.011397][T10208] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 835.031628][T10208] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 835.040564][T10208] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 835.052376][T12126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.076203][T10208] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 835.243098][ T7474] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 835.430296][ T7474] usb 1-1: config 7 has an invalid interface number: 252 but max is 0 [ 835.442282][ T7474] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 835.465784][ T7474] usb 1-1: config 7 has no interface number 0 [ 835.481844][ T7474] usb 1-1: config 7 interface 252 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 835.573784][ T7474] usb 1-1: config 7 interface 252 has no altsetting 0 [ 835.613581][ T7474] usb 1-1: string descriptor 0 read error: -22 [ 835.620089][ T7474] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 835.629937][ T7474] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.633067][T12126] hsr_slave_0: entered promiscuous mode [ 835.673366][T12126] hsr_slave_1: entered promiscuous mode [ 835.683252][T12126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 835.690956][T12126] Cannot create hsr debugfs directory [ 835.852347][T12142] hsr_slave_0: entered promiscuous mode [ 835.872471][T12142] hsr_slave_1: entered promiscuous mode [ 835.892835][T12142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 835.900556][T12142] Cannot create hsr debugfs directory [ 836.080336][T12256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.125922][T12256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.524169][T12048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 836.812654][ T796] bridge_slave_1: left allmulticast mode [ 836.822717][ T796] bridge_slave_1: left promiscuous mode [ 836.830062][ T796] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.860061][ T796] bridge_slave_0: left allmulticast mode [ 836.867193][ T796] bridge_slave_0: left promiscuous mode [ 836.880121][ T796] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.919513][ T796] bridge_slave_1: left allmulticast mode [ 836.926083][ T796] bridge_slave_1: left promiscuous mode [ 836.935492][ T796] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.973589][ T796] bridge_slave_0: left allmulticast mode [ 836.980041][ T796] bridge_slave_0: left promiscuous mode [ 836.987604][ T796] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.181934][ T5854] Bluetooth: hci1: command tx timeout [ 838.015446][ T796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.054097][T11099] usb 1-1: USB disconnect, device number 30 [ 838.082539][ T796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.107813][ T796] bond0 (unregistering): Released all slaves [ 839.338284][ T5854] Bluetooth: hci1: command tx timeout [ 841.421863][ T5854] Bluetooth: hci1: command tx timeout [ 841.625048][ T796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 841.794008][ T796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 841.814278][ T796] bond0 (unregistering): Released all slaves [ 843.992672][ T5854] Bluetooth: hci1: command tx timeout [ 844.097230][T12048] 8021q: adding VLAN 0 to HW filter on device team0 [ 844.423793][ T796] hsr_slave_0: left promiscuous mode [ 844.430021][ T796] hsr_slave_1: left promiscuous mode [ 844.474108][ T796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 844.493051][ T796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 844.535355][ T796] hsr_slave_0: left promiscuous mode [ 844.549848][ T796] hsr_slave_1: left promiscuous mode [ 844.569926][ T796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 844.604394][ T796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 844.702257][ T796] veth1_macvtap: left promiscuous mode [ 844.709193][ T796] veth0_macvtap: left promiscuous mode [ 844.715940][ T796] veth1_vlan: left promiscuous mode [ 844.721788][ T796] veth0_vlan: left promiscuous mode [ 846.562740][ T796] team0 (unregistering): Port device team_slave_1 removed [ 846.681632][ T796] team0 (unregistering): Port device team_slave_0 removed [ 849.764040][ T796] team0 (unregistering): Port device team_slave_1 removed [ 849.969448][ T796] team0 (unregistering): Port device team_slave_0 removed [ 852.021454][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.028990][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.940732][T12250] chnl_net:caif_netlink_parms(): no params data found [ 859.769512][T10208] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 859.867617][T10208] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 859.893151][T10208] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 860.106407][T10208] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 860.231130][T10208] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 860.824953][T12312] fuse: Bad value for 'fd' [ 861.357756][T12316] fuse: Unknown parameter '' [ 861.402628][T12316] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1648'. [ 861.493901][T12250] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.504537][T12250] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.513145][T12250] bridge_slave_0: entered allmulticast mode [ 861.520534][T12250] bridge_slave_0: entered promiscuous mode [ 861.633482][T12250] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.641425][T12250] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.676341][T12250] bridge_slave_1: entered allmulticast mode [ 861.752703][T12250] bridge_slave_1: entered promiscuous mode [ 862.210514][T12250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.313701][T12250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.391615][T10208] Bluetooth: hci3: command tx timeout [ 863.268732][T12250] team0: Port device team_slave_0 added [ 863.415184][T12250] team0: Port device team_slave_1 added [ 863.616184][T12126] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 864.462298][T10208] Bluetooth: hci3: command tx timeout [ 864.655226][T12126] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 864.772461][T12250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 864.794060][T12250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 864.822907][T12250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 864.896313][T12126] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 864.905748][T11814] syz.5.1540: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 864.928808][T12126] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 864.943936][T11814] CPU: 0 UID: 0 PID: 11814 Comm: syz.5.1540 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 864.943959][T11814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 864.943970][T11814] Call Trace: [ 864.943977][T11814] [ 864.943984][T11814] dump_stack_lvl+0x189/0x250 [ 864.944010][T11814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 864.944029][T11814] ? __pfx__printk+0x10/0x10 [ 864.944050][T11814] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 864.944070][T11814] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 864.944091][T11814] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 864.944112][T11814] warn_alloc+0x214/0x310 [ 864.944136][T11814] ? __pfx_warn_alloc+0x10/0x10 [ 864.944162][T11814] ? __get_vm_area_node+0x28f/0x300 [ 864.944179][T11814] ? relay_open_buf+0x217/0xd40 [ 864.944201][T11814] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 864.944241][T11814] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 864.944262][T11814] ? rcu_is_watching+0x15/0xb0 [ 864.944281][T11814] ? relay_open_buf+0x217/0xd40 [ 864.944298][T11814] ? relay_open_buf+0x217/0xd40 [ 864.944315][T11814] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 864.944332][T11814] ? relay_open_buf+0x217/0xd40 [ 864.944348][T11814] ? trace_kmalloc+0x1f/0xd0 [ 864.944362][T11814] ? relay_open_buf+0x17c/0xd40 [ 864.944384][T11814] relay_open_buf+0x217/0xd40 [ 864.944411][T11814] relay_open+0x427/0x920 [ 864.944435][T11814] do_blk_trace_setup+0x591/0x9d0 [ 864.944467][T11814] blk_trace_setup+0x116/0x1f0 [ 864.944495][T11814] ? __pfx_blk_trace_setup+0x10/0x10 [ 864.944530][T11814] ? rcu_is_watching+0x15/0xb0 [ 864.944549][T11814] sg_ioctl+0xaf3/0x2230 [ 864.944571][T11814] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 864.944593][T11814] ? __pfx_sg_ioctl+0x10/0x10 [ 864.944612][T11814] ? irqentry_exit+0x74/0x90 [ 864.944629][T11814] ? lockdep_hardirqs_on+0x9c/0x150 [ 864.944648][T11814] ? __pfx_sg_ioctl+0x10/0x10 [ 864.944671][T11814] ? __pfx_sg_ioctl+0x10/0x10 [ 864.944692][T11814] ? __se_sys_ioctl+0xea/0x170 [ 864.944718][T11814] ? __pfx_sg_ioctl+0x10/0x10 [ 864.944738][T11814] __se_sys_ioctl+0xf9/0x170 [ 864.944764][T11814] do_syscall_64+0xfa/0x3b0 [ 864.944784][T11814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.944799][T11814] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 864.944814][T11814] ? clear_bhb_loop+0x60/0xb0 [ 864.944833][T11814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.944847][T11814] RIP: 0033:0x7fd32eb8e9a9 [ 864.944862][T11814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.944876][T11814] RSP: 002b:00007fd32f9c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 864.944893][T11814] RAX: ffffffffffffffda RBX: 00007fd32edb6240 RCX: 00007fd32eb8e9a9 [ 864.944905][T11814] RDX: 0000200000000b40 RSI: 00000000c0481273 RDI: 0000000000000006 [ 864.944921][T11814] RBP: 00007fd32ec10d69 R08: 0000000000000000 R09: 0000000000000000 [ 864.944931][T11814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 864.944941][T11814] R13: 0000000000000000 R14: 00007fd32edb6240 R15: 00007ffd9b80b118 [ 864.944964][T11814] [ 864.944971][T11814] Mem-Info: [ 865.210402][T12336] loop2: detected capacity change from 0 to 7 [ 865.280631][T11814] active_anon:87 inactive_anon:1296 isolated_anon:0 [ 865.280631][T11814] active_file:1810 inactive_file:926 isolated_file:0 [ 865.280631][T11814] unevictable:768 dirty:243 writeback:0 [ 865.280631][T11814] slab_reclaimable:6191 slab_unreclaimable:102116 [ 865.280631][T11814] mapped:35073 shmem:769 pagetables:3248 [ 865.280631][T11814] sec_pagetables:0 bounce:0 [ 865.280631][T11814] kernel_misc_reclaimable:0 [ 865.280631][T11814] free:167372 free_pcp:26783 free_cma:0 [ 865.304218][T12250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.334656][T11814] Node 0 active_anon:44kB inactive_anon:56kB active_file:180kB inactive_file:92kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:79004kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10640kB pagetables:2828kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 865.372208][T12336] loop2: [ 865.375278][T12336] loop2: partition table partially beyond EOD, truncated [ 865.379087][T12250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.418919][T12250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.438195][T11814] Node 1 active_anon:304kB inactive_anon:5128kB active_file:7060kB inactive_file:3612kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:61388kB dirty:964kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:844kB pagetables:10164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 865.548528][T11814] Node 0 DMA free:10156kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:100kB local_pcp:40kB free_cma:0kB [ 865.633283][T11814] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 865.639266][T11814] Node 0 DMA32 free:43696kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:8192KB free_highatomic:1392KB active_anon:40kB inactive_anon:52kB active_file:180kB inactive_file:92kB unevictable:1536kB writepending:8kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:40440kB local_pcp:20504kB free_cma:0kB [ 865.701093][T12250] hsr_slave_0: entered promiscuous mode [ 865.708421][T11814] lowmem_reserve[]: 0 0 1 1 1 [ 865.717902][T12250] hsr_slave_1: entered promiscuous mode [ 865.719208][T11814] Node 0 [ 865.725175][T12250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 865.725214][T11814] Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:8kB free_cma:0kB [ 865.736906][T12250] Cannot create hsr debugfs directory [ 865.778050][T12306] chnl_net:caif_netlink_parms(): no params data found [ 865.800131][T11814] lowmem_reserve[]: 0 0 0 0 0 [ 865.807797][T11814] Node 1 Normal free:615208kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:304kB inactive_anon:5228kB active_file:7060kB inactive_file:3612kB unevictable:1536kB writepending:664kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:67344kB local_pcp:4268kB free_cma:0kB [ 865.850821][T11814] lowmem_reserve[]: 0 0 0 0 0 [ 865.861279][T11814] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB [ 865.862612][ T7474] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 865.881060][T11814] (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10156kB [ 865.897075][T11814] Node 0 DMA32: 54*4kB (UMEH) 289*8kB (UMEH) 381*16kB (UMEH) 270*32kB (UMEH) 141*64kB (UMEH) 68*128kB (UMEH) 24*256kB (UMEH) 3*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 43696kB [ 865.926719][T11814] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 865.939386][T11814] Node 1 Normal: 57*4kB (UME) 30*8kB (UM) 10*16kB (ME) 18*32kB (UM) 26*64kB (UM) 20*128kB (UME) 19*256kB (UM) 14*512kB (M) 15*1024kB (UME) 8*2048kB (M) 140*4096kB (M) = 622644kB [ 865.959045][T11814] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 865.988041][T11814] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 865.998203][T11814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 866.019234][T11814] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 866.031978][ T7474] usb 1-1: Using ep0 maxpacket: 16 [ 866.044316][T11814] 3757 total pagecache pages [ 866.049356][T11814] 252 pages in swap cache [ 866.057576][ T7474] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 866.074944][T11814] Free swap = 109872kB [ 866.081772][ T7474] usb 1-1: config 0 has no interface number 0 [ 866.088062][ T7474] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.101980][T11814] Total swap = 124996kB [ 866.106219][T11814] 2097051 pages RAM [ 866.110038][T11814] 0 pages HighMem/MovableOnly [ 866.116928][T11814] 424695 pages reserved [ 866.121161][T11814] 0 pages cma reserved [ 866.143245][ T7474] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.157731][ T7474] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 866.181632][ T7474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.249230][ T7474] usb 1-1: config 0 descriptor?? [ 866.383538][T12306] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.390999][T12306] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.401042][T12306] bridge_slave_0: entered allmulticast mode [ 866.414278][T12306] bridge_slave_0: entered promiscuous mode [ 866.435652][T12306] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.443019][T12306] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.450435][T12306] bridge_slave_1: entered allmulticast mode [ 866.458823][T12306] bridge_slave_1: entered promiscuous mode [ 866.612145][T10208] Bluetooth: hci3: command tx timeout [ 866.731998][T12306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.775060][T12306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.891956][ T7474] uclogic 0003:28BD:0071.0006: pen parameters not found [ 866.899008][ T7474] uclogic 0003:28BD:0071.0006: interface is invalid, ignoring [ 866.918327][ T7474] usb 1-1: USB disconnect, device number 31 [ 867.069625][T12306] team0: Port device team_slave_0 added [ 867.095239][T12306] team0: Port device team_slave_1 added [ 867.275727][T12306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.291087][T12306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 867.318731][T12306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.405453][T12306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.422012][T12306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 867.483148][T12306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.442076][T12355] xt_CT: No such helper "syz0" [ 868.573424][T12355] [U] ^C [ 868.699784][ T796] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.701649][T10208] Bluetooth: hci3: command tx timeout [ 869.186058][ T796] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.390623][T12142] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 869.432529][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 869.443109][ T796] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.444086][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 869.471783][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 869.482910][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 869.490707][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 869.523675][T12306] hsr_slave_0: entered promiscuous mode [ 869.531235][T12306] hsr_slave_1: entered promiscuous mode [ 869.539179][T12306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 869.547277][T12306] Cannot create hsr debugfs directory [ 869.654070][T12142] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 869.676111][T12142] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 869.905753][ T796] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.947057][T12142] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 870.138923][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.784498][ T5854] Bluetooth: hci4: command tx timeout [ 873.475094][ T796] bridge_slave_1: left allmulticast mode [ 873.504191][ T796] bridge_slave_1: left promiscuous mode [ 873.515534][ T796] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.838649][ T5854] Bluetooth: hci4: command tx timeout [ 874.228517][T12394] xt_CT: No such helper "syz0" [ 874.456649][T12394] [U] ^C [ 874.567297][ T796] bridge_slave_0: left allmulticast mode [ 874.601792][ T796] bridge_slave_0: left promiscuous mode [ 874.610628][ T796] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.767927][ T796] bridge_slave_1: left allmulticast mode [ 874.798442][ T796] bridge_slave_1: left promiscuous mode [ 874.840453][ T796] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.878679][ T796] bridge_slave_0: left allmulticast mode [ 874.911843][ T796] bridge_slave_0: left promiscuous mode [ 874.919131][ T796] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.961667][ T7472] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 875.120894][ T7472] usb 1-1: device descriptor read/64, error -71 [ 875.411728][ T7472] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 875.622078][ T7472] usb 1-1: device descriptor read/64, error -71 [ 875.766784][ T7472] usb usb1-port1: attempt power cycle [ 875.895833][T10208] Bluetooth: hci4: command tx timeout [ 875.922680][T10208] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 875.952265][T10208] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 875.991858][T10208] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 876.006748][T10208] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 876.017436][T10208] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 876.191836][ C1] vkms_vblank_simulate: vblank timer overrun [ 876.211867][ T7472] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 876.242732][ T7472] usb 1-1: device descriptor read/8, error -71 [ 876.493378][ C1] vkms_vblank_simulate: vblank timer overrun [ 876.567562][ C1] vkms_vblank_simulate: vblank timer overrun [ 876.623701][ T7472] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 876.662674][ T7472] usb 1-1: device descriptor read/8, error -71 [ 876.711601][ C1] vkms_vblank_simulate: vblank timer overrun [ 876.772576][ T7472] usb usb1-port1: unable to enumerate USB device [ 876.863516][ C1] vkms_vblank_simulate: vblank timer overrun [ 877.976370][ T5854] Bluetooth: hci4: command tx timeout [ 878.061228][ T796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.074084][ T5854] Bluetooth: hci2: command tx timeout [ 878.116199][ T796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.143879][ T796] bond0 (unregistering): Released all slaves [ 878.418123][ C1] vkms_vblank_simulate: vblank timer overrun [ 878.729183][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 878.729201][ T30] audit: type=1326 audit(1753398129.858:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12405 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 878.794480][ T30] audit: type=1326 audit(1753398129.858:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12405 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 878.817629][ C1] vkms_vblank_simulate: vblank timer overrun [ 878.889411][ T30] audit: type=1326 audit(1753398129.858:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12405 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 878.948467][ T30] audit: type=1326 audit(1753398129.858:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12405 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 878.971359][ C1] vkms_vblank_simulate: vblank timer overrun [ 878.997248][ T30] audit: type=1326 audit(1753398129.858:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12405 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 879.020094][ C1] vkms_vblank_simulate: vblank timer overrun [ 879.072345][ T5899] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 879.113056][ T30] audit: type=1326 audit(1753398129.908:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12405 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 879.143562][ C1] vkms_vblank_simulate: vblank timer overrun [ 879.167194][ T30] audit: type=1326 audit(1753398129.908:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12405 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 879.221425][ T30] audit: type=1326 audit(1753398129.908:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12405 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 879.249966][ C1] vkms_vblank_simulate: vblank timer overrun [ 879.282539][ T30] audit: type=1326 audit(1753398129.928:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12405 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 879.344594][ C1] vkms_vblank_simulate: vblank timer overrun [ 879.363236][ T5899] usb 1-1: config 0 has no interfaces? [ 879.368391][ T30] audit: type=1326 audit(1753398129.928:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12405 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29dbb8e9a9 code=0x7ffc0000 [ 879.400705][ C1] vkms_vblank_simulate: vblank timer overrun [ 879.453820][ C1] vkms_vblank_simulate: vblank timer overrun [ 879.474140][ T5899] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 879.501634][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.543197][ T5899] usb 1-1: Product: syz [ 879.549834][ T5899] usb 1-1: Manufacturer: syz [ 879.565191][ T5899] usb 1-1: SerialNumber: syz [ 879.607519][ T5899] usb 1-1: config 0 descriptor?? [ 879.868176][ T5899] usb 1-1: USB disconnect, device number 36 [ 880.132278][ T5854] Bluetooth: hci2: command tx timeout [ 880.340711][ T796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 880.402071][ T796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 880.449948][ T796] bond0 (unregistering): Released all slaves [ 881.910257][T12415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1670'. [ 882.221648][ T5854] Bluetooth: hci2: command tx timeout [ 882.394764][ T796] hsr_slave_0: left promiscuous mode [ 882.400777][ T796] hsr_slave_1: left promiscuous mode [ 882.461735][ T796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.522675][ T796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.568678][ T796] hsr_slave_0: left promiscuous mode [ 882.575978][ T796] hsr_slave_1: left promiscuous mode [ 882.613993][ T796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.656434][ T796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.695680][ T796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.721979][ T796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.818602][ T796] veth1_macvtap: left promiscuous mode [ 882.831661][ T796] veth0_macvtap: left promiscuous mode [ 882.837469][ T796] veth1_vlan: left promiscuous mode [ 882.857493][ T796] veth0_vlan: left promiscuous mode [ 884.292066][ T5854] Bluetooth: hci2: command tx timeout [ 884.459595][ T796] team0 (unregistering): Port device team_slave_1 removed [ 884.522837][ T796] team0 (unregistering): Port device team_slave_0 removed [ 886.986409][T12436] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1677'. [ 887.572375][ T796] team0 (unregistering): Port device team_slave_1 removed [ 887.692710][ T796] team0 (unregistering): Port device team_slave_0 removed [ 888.862839][T12363] chnl_net:caif_netlink_parms(): no params data found [ 889.351618][T11667] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 889.538683][T12363] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.552592][T12363] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.561968][T11667] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.572581][T12363] bridge_slave_0: entered allmulticast mode [ 889.580470][T11667] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 889.594522][T12363] bridge_slave_0: entered promiscuous mode [ 889.604640][T12363] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.612265][T11667] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 889.623447][T12363] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.630656][T12363] bridge_slave_1: entered allmulticast mode [ 889.641640][T11667] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 889.675937][T11667] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 889.689394][T12363] bridge_slave_1: entered promiscuous mode [ 889.714373][T11667] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 889.723658][T11667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 889.741726][T11667] usb 1-1: Product: syz [ 889.751874][T11667] usb 1-1: Manufacturer: syz [ 889.756533][T11667] usb 1-1: SerialNumber: syz [ 889.780227][T11667] usb 1-1: config 0 descriptor?? [ 889.990781][T11667] radio-si470x 1-1:0.0: DeviceID=0xc8c8 ChipID=0x0000 [ 890.011713][T11667] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 890.052848][T11667] radio-si470x 1-1:0.0: software version 200, hardware version 200 [ 890.060957][T11667] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 890.114785][T12250] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 890.166468][T12250] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 890.200793][T12363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.218586][T12363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.256236][T11667] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 890.356783][T12250] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 890.457501][T11667] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 890.565178][T12363] team0: Port device team_slave_0 added [ 890.572358][T11667] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 890.585723][T12363] team0: Port device team_slave_1 added [ 890.595809][T11667] usb 1-1: USB disconnect, device number 37 [ 890.628757][T12250] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 890.750269][T12399] chnl_net:caif_netlink_parms(): no params data found [ 890.984605][T12250] kthread_run failed with err -4 [ 890.999406][T12363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.031517][T12363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 891.145103][T12363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.342499][T12363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.401423][T12363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 891.517762][T12363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 891.792020][T12458] syzkaller1: entered promiscuous mode [ 891.807808][T12458] syzkaller1: entered allmulticast mode [ 891.869555][T10208] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 891.881978][T10208] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 891.894286][T10208] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 891.903312][T10208] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 891.914177][T10208] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 892.096081][T12399] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.112056][T12399] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.119939][T12399] bridge_slave_0: entered allmulticast mode [ 892.133667][T12399] bridge_slave_0: entered promiscuous mode [ 892.144377][T12399] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.151677][T12399] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.159048][T12399] bridge_slave_1: entered allmulticast mode [ 892.168313][T12399] bridge_slave_1: entered promiscuous mode [ 892.204246][T12363] hsr_slave_0: entered promiscuous mode [ 892.222111][T12363] hsr_slave_1: entered promiscuous mode [ 892.499731][T12399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.534271][T12399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.721687][ T5899] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 892.866689][T12399] team0: Port device team_slave_0 added [ 892.886627][T12399] team0: Port device team_slave_1 added [ 892.892376][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 892.919412][ T5899] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 892.936821][ T5899] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 892.980223][ T5899] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 893.008963][ T5899] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 893.027019][ T5899] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 893.036644][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.175082][T12306] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 893.244331][T12399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.251611][T12399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.278719][ T5899] usb 1-1: GET_CAPABILITIES returned 0 [ 893.278768][T12399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.301952][ T5899] usbtmc 1-1:16.0: can't read capabilities [ 893.329249][T12306] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 893.424241][T12306] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 893.444465][T12399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.452452][T12399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.491745][T12399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.993141][T10208] Bluetooth: hci1: command tx timeout [ 894.413475][T12306] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 894.971326][T12399] hsr_slave_0: entered promiscuous mode [ 894.997082][T12399] hsr_slave_1: entered promiscuous mode [ 895.016081][T12399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 895.024120][T12399] Cannot create hsr debugfs directory [ 895.583189][ T5899] usb 1-1: USB disconnect, device number 38 [ 896.081970][T10208] Bluetooth: hci1: command tx timeout [ 896.702187][T12465] chnl_net:caif_netlink_parms(): no params data found [ 897.758851][T12363] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 897.778657][T12363] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 897.848927][T12363] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 897.877520][T12363] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 897.910562][T12465] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.919411][T12465] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.927045][T12465] bridge_slave_0: entered allmulticast mode [ 897.936487][T12465] bridge_slave_0: entered promiscuous mode [ 897.956927][T12306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 897.981795][T12465] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.992464][T12465] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.000341][T12465] bridge_slave_1: entered allmulticast mode [ 898.011339][T12465] bridge_slave_1: entered promiscuous mode [ 898.119691][T12465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 898.133812][T12465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.143289][T10208] Bluetooth: hci1: command tx timeout [ 898.225098][ T796] bridge_slave_1: left allmulticast mode [ 898.232401][ T796] bridge_slave_1: left promiscuous mode [ 898.239510][ T796] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.262193][ T796] bridge_slave_0: left allmulticast mode [ 898.268677][ T796] bridge_slave_0: left promiscuous mode [ 898.283817][ T796] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.309197][ T796] bridge_slave_1: left allmulticast mode [ 898.328354][ T796] bridge_slave_1: left promiscuous mode [ 898.341354][ T796] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.366420][ T796] bridge_slave_0: left allmulticast mode [ 898.379606][ T796] bridge_slave_0: left promiscuous mode [ 898.400167][ T796] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.414632][ T796] bridge_slave_1: left allmulticast mode [ 898.420363][ T796] bridge_slave_1: left promiscuous mode [ 898.445496][ T796] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.467669][ T796] bridge_slave_0: left allmulticast mode [ 898.481367][ T796] bridge_slave_0: left promiscuous mode [ 898.487741][ T796] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.809485][ T796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 898.842963][ T796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 898.869644][ T796] bond0 (unregistering): Released all slaves [ 899.347412][ T796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.379501][ T796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.409576][ T796] bond0 (unregistering): Released all slaves [ 900.029685][ T796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.093015][ T796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.123809][ T796] bond0 (unregistering): Released all slaves [ 900.231726][T10208] Bluetooth: hci1: command tx timeout [ 901.216554][T12465] team0: Port device team_slave_0 added [ 901.266739][T12306] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.303995][T12503] loop2: detected capacity change from 0 to 7 [ 901.315642][T12503] loop2: [ 901.318676][T12503] loop2: partition table partially beyond EOD, truncated [ 901.397689][ T796] hsr_slave_0: left promiscuous mode [ 901.430950][ T796] hsr_slave_1: left promiscuous mode [ 901.437131][ T796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.481766][ T796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.523268][ T796] hsr_slave_0: left promiscuous mode [ 901.543519][ T796] hsr_slave_1: left promiscuous mode [ 901.549678][ T796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.604396][ T796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.700273][ T796] hsr_slave_0: left promiscuous mode [ 902.093473][ T796] hsr_slave_1: left promiscuous mode [ 902.107951][ T796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 902.172792][ T796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.802115][ T796] team0 (unregistering): Port device team_slave_1 removed [ 902.874221][ T796] team0 (unregistering): Port device team_slave_0 removed [ 903.949702][ T796] team0 (unregistering): Port device team_slave_1 removed [ 904.081783][ T796] team0 (unregistering): Port device team_slave_0 removed [ 905.241856][ T796] team0 (unregistering): Port device team_slave_1 removed [ 905.322062][ T796] team0 (unregistering): Port device team_slave_0 removed [ 905.925597][T12465] team0: Port device team_slave_1 added [ 906.016260][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.023486][ T6102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 906.313259][T12465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.612718][ T31] INFO: task syz.5.1540:11815 blocked for more than 143 seconds. [ 906.620929][ T31] Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 [ 906.987812][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 906.996857][T12465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.022056][ T31] task:syz.5.1540 state:D stack:28904 pid:11815 tgid:11804 ppid:9309 task_flags:0x400040 flags:0x00004004 [ 907.054145][ T31] Call Trace: [ 907.062458][ T31] [ 907.071538][T12465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.072338][ T31] __schedule+0x16aa/0x4c90 [ 907.112589][ T31] ? schedule+0x165/0x360 [ 907.132021][ T31] ? __pfx___schedule+0x10/0x10 [ 907.147805][ T31] ? schedule+0x91/0x360 [ 907.183054][ T31] schedule+0x165/0x360 [ 907.187297][ T31] schedule_preempt_disabled+0x13/0x30 [ 907.291527][ T31] __mutex_lock+0x724/0xe80 [ 907.296129][ T31] ? __mutex_lock+0x51b/0xe80 [ 907.300873][ T31] ? blk_trace_remove+0x20/0x40 [ 907.321530][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 907.326679][ T31] blk_trace_remove+0x20/0x40 [ 907.331421][ T31] sg_ioctl+0x47b/0x2230 [ 907.365832][ T31] ? __pfx_sg_ioctl+0x10/0x10 [ 907.370582][ T31] ? __fget_files+0x2a/0x420 [ 907.390968][ T31] ? __fget_files+0x3a0/0x420 [ 907.401496][ T31] ? __fget_files+0x2a/0x420 [ 907.406324][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 907.421500][ T31] ? __pfx_sg_ioctl+0x10/0x10 [ 907.426270][ T31] __se_sys_ioctl+0xf9/0x170 [ 907.430913][ T31] do_syscall_64+0xfa/0x3b0 [ 907.461733][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 907.467026][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.501509][ T31] ? clear_bhb_loop+0x60/0xb0 [ 907.506288][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.521601][ T31] RIP: 0033:0x7fd32eb8e9a9 [ 907.526091][ T31] RSP: 002b:00007fd32f9a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 907.534681][ T31] RAX: ffffffffffffffda RBX: 00007fd32edb6320 RCX: 00007fd32eb8e9a9 [ 907.542923][ T31] RDX: 0000000020000000 RSI: 0000000000001276 RDI: 0000000000000006 [ 907.552979][ T31] RBP: 00007fd32ec10d69 R08: 0000000000000000 R09: 0000000000000000 [ 907.569004][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 907.601564][ T31] R13: 0000000000000001 R14: 00007fd32edb6320 R15: 00007ffd9b80b118 [ 907.609638][ T31] [ 907.641587][ T31] [ 907.641587][ T31] Showing all locks held in the system: [ 907.715995][T10795] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.723257][T10795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.924850][T12465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.936894][ T31] 1 lock held by pool_workqueue_/3: [ 907.944195][ T31] #0: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 907.948515][T12465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.955702][ T31] 3 locks held by kworker/0:0/9: [ 908.002213][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 908.013960][ T31] #1: ffffc900000e7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 908.025925][ T31] #2: ffffffff8f509ec8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 908.036739][ T31] 1 lock held by khungtaskd/31: [ 908.041903][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 908.066032][ T31] 5 locks held by kworker/u8:5/796: [ 908.071340][ T31] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 908.081788][T12465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.101921][ T31] #1: ffffc90003537bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 908.181856][ T31] #2: ffffffff8f4fd2d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 908.191300][ T31] #3: ffff88803241d4e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x2f0 [ 908.222146][ T31] #4: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 908.233338][ T31] 3 locks held by kworker/u8:10/3005: [ 908.241929][ T31] #0: ffff88802ff29948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 908.261841][ T31] #1: ffffc9000bc67bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 908.274978][ T31] #2: ffffffff8f509ec8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 908.284968][ T31] 2 locks held by getty/5597: [ 908.289658][ T31] #0: ffff888030fe40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 908.299585][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 908.334501][ T31] 2 locks held by kworker/u8:8/10795: [ 908.339914][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 908.427451][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 908.439085][ T31] 3 locks held by syz.5.1540/11814: [ 908.444605][ T31] 1 lock held by syz.5.1540/11815: [ 908.449751][ T31] #0: ffff888144321cb0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove+0x20/0x40 [ 908.459779][ T31] 8 locks held by syz-executor/12399: [ 908.465273][ T31] #0: ffff888035354428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 908.474312][ T31] #1: ffff8880344ce488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 908.491957][ T31] #2: ffff8881443d61e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 908.502128][ T31] #3: ffffffff8ed976a8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 908.512517][ T31] #4: ffff88802820d0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 908.541586][ T31] #5: ffff888058eba250 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 908.551884][ T31] #6: ffffffff8f509ec8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xdb/0x670 [ 908.561779][ T31] #7: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 908.572823][ T31] 1 lock held by syz.0.1687/12513: [ 908.582002][ T31] #0: ffffffff8f509ec8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 908.614268][ T31] [ 908.616641][ T31] ============================================= [ 908.616641][ T31] [ 908.625772][ T31] NMI backtrace for cpu 1 [ 908.625790][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 908.625814][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 908.625828][ T31] Call Trace: [ 908.625836][ T31] [ 908.625844][ T31] dump_stack_lvl+0x189/0x250 [ 908.625872][ T31] ? __wake_up_klogd+0xd9/0x110 [ 908.625903][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 908.625927][ T31] ? __pfx__printk+0x10/0x10 [ 908.625968][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 908.626003][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 908.626031][ T31] ? _printk+0xcf/0x120 [ 908.626063][ T31] ? __pfx__printk+0x10/0x10 [ 908.626092][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 908.626128][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 908.626163][ T31] watchdog+0xfee/0x1030 [ 908.626197][ T31] ? watchdog+0x1de/0x1030 [ 908.626237][ T31] kthread+0x711/0x8a0 [ 908.626269][ T31] ? __pfx_watchdog+0x10/0x10 [ 908.626298][ T31] ? __pfx_kthread+0x10/0x10 [ 908.626328][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 908.626348][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 908.626368][ T31] ? __pfx_kthread+0x10/0x10 [ 908.626397][ T31] ret_from_fork+0x3fc/0x770 [ 908.626421][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 908.626466][ T31] ? __switch_to_asm+0x39/0x70 [ 908.626491][ T31] ? __switch_to_asm+0x33/0x70 [ 908.626516][ T31] ? __pfx_kthread+0x10/0x10 [ 908.626545][ T31] ret_from_fork_asm+0x1a/0x30 [ 908.626589][ T31] [ 908.626597][ T31] Sending NMI from CPU 1 to CPUs 0: [ 908.783981][ C0] NMI backtrace for cpu 0 [ 908.783998][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 908.784020][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 908.784032][ C0] Workqueue: bat_events batadv_nc_worker [ 908.784066][ C0] RIP: 0010:lock_acquire+0xda/0x360 [ 908.784085][ C0] Code: 9c 92 83 b8 ec 0a 00 00 00 0f 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 4c 89 74 24 10 4d 89 fe 4c 8b 7c 24 30 48 c7 c7 c4 68 99 8d e8 39 69 c8 09 65 ff 05 22 96 fe 10 45 31 [ 908.784100][ C0] RSP: 0018:ffffc900001278d0 EFLAGS: 00000246 [ 908.784114][ C0] RAX: ffff88801d2e0000 RBX: 0000000000000000 RCX: 3e633d00dc68a300 [ 908.784127][ C0] RDX: 0000000000000000 RSI: ffffffff8b6914d6 RDI: 1ffff1102d9a9813 [ 908.784140][ C0] RBP: ffffffff8b34b807 R08: 0000000000000001 R09: 0000000000000000 [ 908.784151][ C0] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: 0000000000000000 [ 908.784163][ C0] R13: ffff88816cd4c098 R14: 0000000000000001 R15: 0000000000000246 [ 908.784175][ C0] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 908.784190][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 908.784201][ C0] CR2: 00007f89145f7470 CR3: 00000000338ba000 CR4: 00000000003526f0 [ 908.784217][ C0] Call Trace: [ 908.784224][ C0] [ 908.784231][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 908.784251][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 908.784273][ C0] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 908.784290][ C0] _raw_spin_lock_bh+0x36/0x50 [ 908.784306][ C0] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 908.784322][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 908.784341][ C0] batadv_nc_purge_paths+0xe7/0x3b0 [ 908.784366][ C0] batadv_nc_worker+0x369/0x610 [ 908.784395][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 908.784416][ C0] process_scheduled_works+0xade/0x17b0 [ 908.784451][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 908.784485][ C0] worker_thread+0x8a0/0xda0 [ 908.784520][ C0] kthread+0x711/0x8a0 [ 908.784545][ C0] ? __pfx_worker_thread+0x10/0x10 [ 908.784564][ C0] ? __pfx_kthread+0x10/0x10 [ 908.784588][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 908.784604][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 908.784622][ C0] ? __pfx_kthread+0x10/0x10 [ 908.784645][ C0] ret_from_fork+0x3fc/0x770 [ 908.784664][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 908.784684][ C0] ? __switch_to_asm+0x39/0x70 [ 908.784705][ C0] ? __switch_to_asm+0x33/0x70 [ 908.784727][ C0] ? __pfx_kthread+0x10/0x10 [ 908.784751][ C0] ret_from_fork_asm+0x1a/0x30 [ 908.784782][ C0] [ 909.041572][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 909.041603][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 909.041630][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 909.041645][ T31] Call Trace: [ 909.041655][ T31] [ 909.041665][ T31] dump_stack_lvl+0x99/0x250 [ 909.041696][ T31] ? __asan_memcpy+0x40/0x70 [ 909.041736][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 909.041761][ T31] ? __pfx__printk+0x10/0x10 [ 909.041802][ T31] panic+0x2db/0x790 [ 909.041831][ T31] ? __pfx_panic+0x10/0x10 [ 909.041853][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 909.041883][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 909.041916][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 909.041957][ T31] watchdog+0x102d/0x1030 [ 909.041992][ T31] ? watchdog+0x1de/0x1030 [ 909.042031][ T31] kthread+0x711/0x8a0 [ 909.042064][ T31] ? __pfx_watchdog+0x10/0x10 [ 909.042094][ T31] ? __pfx_kthread+0x10/0x10 [ 909.042125][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 909.042146][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 909.042167][ T31] ? __pfx_kthread+0x10/0x10 [ 909.042196][ T31] ret_from_fork+0x3fc/0x770 [ 909.042238][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 909.042267][ T31] ? __switch_to_asm+0x39/0x70 [ 909.042293][ T31] ? __switch_to_asm+0x33/0x70 [ 909.042319][ T31] ? __pfx_kthread+0x10/0x10 [ 909.042349][ T31] ret_from_fork_asm+0x1a/0x30 [ 909.042393][ T31] [ 909.042764][ T31] Kernel Offset: disabled