last executing test programs: 17m49.692389949s ago: executing program 2 (id=3): ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000000)={'team_slave_1\x00', {0x2, 0x4e22, @private=0xa010104}}) eventfd2(0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x22) setxattr$security_capability(0x0, &(0x7f0000000380), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000480)=ANY=[], 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private=0xa010100, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x1, 0x0, 0x4, 0x4, 0x1, 0x0, 0x8, 0x20000000000003}, {0x7fffffff, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in=@empty, 0x4d3, 0x3c}, 0xa, @in=@remote, 0xffffffff, 0x4, 0x0, 0x0, 0x790, 0x4000000, 0x3}}, 0x10a) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 17m47.565021157s ago: executing program 2 (id=6): socket$nl_route(0x10, 0x3, 0x0) unshare(0x10070100) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x318, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000005c0), 0x6e, &(0x7f0000000640)}, 0x140) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r3 = getpgid(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r5, 0xb03}, 0x14}, 0x1, 0x0, 0x0, 0x14040080}, 0x4000814) r6 = syz_pidfd_open(r3, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) setns(r7, 0x66020000) mount$9p_fd(0x0, &(0x7f00000017c0)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x2, 0x8, 0x1}, 0x50) 17m46.102962667s ago: executing program 2 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) getpgrp(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000280)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000019280)=ANY=[@ANYBLOB='new default '], 0x2a, 0x0) add_key(&(0x7f00000192c0)='encrypted\x00', &(0x7f0000019300), &(0x7f0000019340), 0xca, 0xfffffffffffffffe) r2 = getpgid(r0) fcntl$setownex(r1, 0xf, &(0x7f0000000200)={0x1, r2}) add_key$user(0x0, &(0x7f00000193c0), &(0x7f0000019400), 0x0, 0xfffffffffffffffd) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 17m44.076014527s ago: executing program 2 (id=8): timerfd_create(0x9, 0x0) timerfd_create(0x9, 0x0) socket$inet6(0xa, 0x3, 0x1) socket(0xa, 0x1, 0x0) unshare(0x22020600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x20000, 0x3000000, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x10000, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x800, 0x1, 0x5}}], 0x1, 0x0, 0x0) 17m27.564297455s ago: executing program 32 (id=8): timerfd_create(0x9, 0x0) timerfd_create(0x9, 0x0) socket$inet6(0xa, 0x3, 0x1) socket(0xa, 0x1, 0x0) unshare(0x22020600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x20000, 0x3000000, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x10000, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x800, 0x1, 0x5}}], 0x1, 0x0, 0x0) 15m57.673225875s ago: executing program 33 (id=84): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4010d00, 0x0) r2 = socket(0x11, 0x803, 0x40000000) rt_sigprocmask(0x0, &(0x7f0000000c80)={[0xfffffeffffffffff]}, 0x0, 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x4, &(0x7f0000000cc0)=0x0) io_submit(r4, 0x1, &(0x7f0000000d00)=[&(0x7f0000000d40)={0x0, 0x0, 0x0, 0x8, 0x4, r3, 0x0}]) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) 12m59.998886195s ago: executing program 4 (id=258): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2100004}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r3, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x16}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x4008011) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12m53.241951414s ago: executing program 4 (id=271): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000700)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000740)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000840), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0x4, &(0x7f00000009c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000000a00)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000a40)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000b40), 0x1f2, 0x10, &(0x7f0000000b80), 0xfffffe51}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000bc0)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000e40)='$|', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)="a37d3b31", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f00)}}], 0x3, 0x4040881) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000f40)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000f80)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000001f80)=0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001fc0)={0x0, 0x0}) io_setup(0x8, &(0x7f0000002040)) 12m49.734386526s ago: executing program 4 (id=273): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/sda\x00', 0x4d802, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x8046, 0x7f) faccessat(0xffffffffffffff9c, 0x0, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000400)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) bind$packet(r3, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, &(0x7f0000000440)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x1, 0x7, 0x2, 0x182, 0x2, 0x10, 0xf1, 0x800, 0x1, 0x5, 0x0, 0x29, 0x0, 0xf48, 0x9, 0xfffffffffffffffa], 0xe000}) r5 = socket(0x10, 0x803, 0x0) socket(0xa, 0x3, 0x87) socket(0xa, 0x3, 0x87) sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfd, {0xa, 0x78, 0x0, 0xfe}, [@IFA_FLAGS={0x8, 0x8, 0x320}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 12m32.857040711s ago: executing program 34 (id=273): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/sda\x00', 0x4d802, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x8046, 0x7f) faccessat(0xffffffffffffff9c, 0x0, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000400)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) bind$packet(r3, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, &(0x7f0000000440)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x1, 0x7, 0x2, 0x182, 0x2, 0x10, 0xf1, 0x800, 0x1, 0x5, 0x0, 0x29, 0x0, 0xf48, 0x9, 0xfffffffffffffffa], 0xe000}) r5 = socket(0x10, 0x803, 0x0) socket(0xa, 0x3, 0x87) socket(0xa, 0x3, 0x87) sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfd, {0xa, 0x78, 0x0, 0xfe}, [@IFA_FLAGS={0x8, 0x8, 0x320}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6m18.035650392s ago: executing program 1 (id=741): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c80)=@delchain={0x384, 0x65, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x13c, 0x2, [@TCA_BPF_ACT={0x138, 0x1, [@m_simple={0x134, 0x1, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x10, 0x10000006, 0xce6b, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x24aa7000, 0x7, 0x8, 0x80000001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x876f, 0x96, 0x3, 0x40, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x3, 0x8, 0x9, 0xe34}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x6, 0x2, 0xb, 0x5}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x85, 0x6, "9209be6ac2eb68ec44c03ad03ccfd5c9aff753ae7cef446e9abdc2009e245df08fa6cf4268a294d87a0186536d0c2458f0e060a1f4dfab45c4880975e027452a67ff09dc0cda2d51a28cf3834caa7aa64015620886e3c095d93664d00664ede4714e13cbf7a559b27b8e74bc4f58e2418eea9cf3966ac82d194b992695034782aa"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x20c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xf}}, @TCA_MATCHALL_ACT={0x1e0, 0x2, [@m_connmark={0x1dc, 0xa, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x9, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x8, 0x8, 0x3ff}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x3, 0x1800, 0x7fff}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff7, 0x2, 0x7, 0x7ff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x718, 0x6, 0x6, 0x1, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x3, 0x7, 0x2}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x3, 0x9, 0x9}, 0x7}}]}, {0xe5, 0x6, "68d5f9b35942b1a9b81011af8ef9f58903979090153440330e71926cf16dfa6a95a63229ec1e046036f5951acc832298a090af5f8dd4c4eda121fe5c11e2758323235d7d4065e102fca2803e8455bbe375423a5083d857379e566a6b55eaa2a53c32659a3eed4669754e022d685f3904836ee46af5a86c45f1a6ba4ad03ce912f0b3be3d485456cdbcd0db56ba63218491a6c93c649f1201f2dcdfb54f743ff852af6a7de13cd0d2252b2d6743c0774446a19f08b9f2c77f986ea287dabf7581d911194d13e1f29884a2081bbf43fce2a1a2b767905dd62ad427703c4290d86deb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xf}}]}}]}, 0x384}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4040080, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 6m15.036411891s ago: executing program 1 (id=745): syz_usb_connect(0x6, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff00070581"], 0x0) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c800000010102030109"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x10, &(0x7f0000000400)={0x0, 0x1, 0x8, "ebaa550303010000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 6m13.178290434s ago: executing program 1 (id=749): unshare(0x24020400) socket$packet(0x11, 0x2, 0x300) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x8050) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x2d, 0x0, 0x1, 0xfffff038}, {0x28, 0x0, 0xfd, 0x1}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x5f) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket(0x2b, 0x80801, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'geneve0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="580000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000021200000300012800c0001006d6163766c616e0020000280080003000000000008000100100000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r5, @ANYBLOB="04d6276a55e4a3a8dbe124019fc0ad2df755763d35b07196454ff19976513e9b02b6b487f9d7e6b226d88dc4ec49d018f0a87cfb7bdf9c7c755e8de96e2e98bb9b96b09027b9cfec4647bb811910e198914845784a2da7e3a186d7fa9d9f35e3a53c0113ec898da54b8a14f6cd470da81152657197e7b06c6a9a9c5f4c312a21b5db1e352c2d09a6fa89fcfd4443d78af8eeb7419477fa12372c9a80edcfcd9cdaf894bc34bd1e18a89c24a6b3a56900"/189], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11e, 0x1, &(0x7f0000000280)=0x400, 0xffffffffffffff09) recvmsg$can_j1939(r4, &(0x7f0000000680)={&(0x7f0000000340)=@l2, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/1, 0x1}, {&(0x7f0000000540)=""/168, 0xa8}], 0x3, &(0x7f0000000640)=""/9, 0x9}, 0x0) ioctl(r3, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r3, 0x8914, &(0x7f0000000000)='lapb0\x00'/40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000700)={0x0, 0x4076cbba9945d516, &(0x7f0000000740)={0x0, 0x14}}, 0x0) 6m12.373210682s ago: executing program 1 (id=753): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) 6m11.726127673s ago: executing program 1 (id=754): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000500)={0x0, 0x30b5, 0x800, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x2, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f3, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x0, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r6) 6m10.573984794s ago: executing program 1 (id=755): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r4, 0x0, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) read$FUSE(r1, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003020000082505a1a44033eb7b7f010902740002010890020904000001020d00000524060001052400ffff0d240f0100000000000000000006391addff000c241ba10210008500efff0808241c7f000701000424012e0f2ba767a98cb46c"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) unshare(0x42000000) 5m54.341845024s ago: executing program 35 (id=755): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r4, 0x0, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) read$FUSE(r1, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003020000082505a1a44033eb7b7f010902740002010890020904000001020d00000524060001052400ffff0d240f0100000000000000000006391addff000c241ba10210008500efff0808241c7f000701000424012e0f2ba767a98cb46c"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) unshare(0x42000000) 5m19.333665777s ago: executing program 0 (id=812): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c80)=@delchain={0x5c0, 0x65, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x13c, 0x2, [@TCA_BPF_ACT={0x138, 0x1, [@m_simple={0x134, 0x1, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x10, 0x10000006, 0xce6b, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x24aa7000, 0x7, 0x8, 0x80000001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x876f, 0x96, 0x3, 0x40, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x3, 0x8, 0x9, 0xe34}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x6, 0x2, 0xb, 0x5}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x85, 0x6, "9209be6ac2eb68ec44c03ad03ccfd5c9aff753ae7cef446e9abdc2009e245df08fa6cf4268a294d87a0186536d0c2458f0e060a1f4dfab45c4880975e027452a67ff09dc0cda2d51a28cf3834caa7aa64015620886e3c095d93664d00664ede4714e13cbf7a559b27b8e74bc4f58e2418eea9cf3966ac82d194b992695034782aa"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x448, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xf}}, @TCA_MATCHALL_ACT={0x1fc, 0x2, [@m_connmark={0x1f8, 0xa, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x9, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x8, 0x8, 0x3ff}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x3, 0x1800, 0x7fff}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff7, 0x2, 0x7, 0x7ff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x9, 0x20000000, 0x2, 0x800}, 0x38}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x718, 0x6, 0x6, 0x1, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x3, 0x7, 0x2}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x3, 0x9, 0x9}, 0x7}}]}, {0xe5, 0x6, "68d5f9b35942b1a9b81011af8ef9f58903979090153440330e71926cf16dfa6a95a63229ec1e046036f5951acc832298a090af5f8dd4c4eda121fe5c11e2758323235d7d4065e102fca2803e8455bbe375423a5083d857379e566a6b55eaa2a53c32659a3eed4669754e022d685f3904836ee46af5a86c45f1a6ba4ad03ce912f0b3be3d485456cdbcd0db56ba63218491a6c93c649f1201f2dcdfb54f743ff852af6a7de13cd0d2252b2d6743c0774446a19f08b9f2c77f986ea287dabf7581d911194d13e1f29884a2081bbf43fce2a1a2b767905dd62ad427703c4290d86deb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xf}}, @TCA_MATCHALL_ACT={0x228, 0x2, [@m_csum={0x174, 0x0, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x400003, 0x47, 0x3, 0x80000000, 0x6}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7ff, 0x0, 0x3, 0x2}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0xfffffffffffffffc, 0x8, 0x3}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x530e, 0x9, 0x20000000, 0x7, 0xffffffff}, 0x1}}]}, {0xd5, 0x6, "8e742964a8bbfb3154844346644898de0354ee45597bbff6c1b4802726b2ca8b75ce550388c84cc686666dc0fd3ccd01f955cd351f6e0aee4e337b55bb5388a3b58420edfc59ade1349d7cc503101571895e677b64e3bfb9a5173fb1e737612ff18132f5bd2bc66d3b55ecbba2b5457b250035617dcdbdaec682f131f66bed12f8c9f14ba127f64337200b93d2baa76f2745a3aef055faebdf58456bed30345b2e556053be34feea35f858cc9db91981b08dd47caadf768a0b6974308b6864e3b32b95e11458f632c8a4b3de3d407dd970"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0xb0, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0x81, 0x6, "19a3153d78f1563aa910b5ab1c345795a9c5fdb59e62e379667c969fec3a63a2410c14f25058686dc1f35162d1d61c9ef33f76b41308aa85786484bbc8df8cd7d6f79c7a8afa3f46c074bafc6b8e22601dba54f54cf84920df14f7fa820566ce9a7c7c8be49fd463ca5e2ee142b1b380dd4e27c637e5eed7dc23e89360"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x5c0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4040080, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5m18.628042994s ago: executing program 0 (id=814): socket(0x400000000010, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000340)=0x4, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000004c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000005c0), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000600), 0x80002c1, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000680)) 5m13.906653231s ago: executing program 0 (id=816): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80003, 0xff) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) read$FUSE(0xffffffffffffffff, &(0x7f00000014c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000003500)={0x10, 0xfffffffffffffffe, r2}, 0x66) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10, 0x7) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r3, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f00000002c0)=0x2e8d, 0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000340)=0xd) r4 = open(&(0x7f0000000380)='./bus\x00', 0x143142, 0x80) sendfile(0xffffffffffffffff, r4, 0x0, 0x1000000201002) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0xd4) io_setup(0x5, &(0x7f0000000140)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) io_submit(r6, 0x2, &(0x7f0000000180)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x10, r5, 0x0}, 0x0]) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000100)={0x400a, 0x7, 0x80, 0x40e0, 0xc}) 5m13.18132079s ago: executing program 0 (id=818): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80003, 0xff) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) read$FUSE(0xffffffffffffffff, &(0x7f00000014c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000003500)={0x10, 0xfffffffffffffffe, r2}, 0x66) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10, 0x7) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r3, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f00000002c0)=0x2e8d, 0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000340)=0xd) r4 = open(&(0x7f0000000380)='./bus\x00', 0x143142, 0x80) sendfile(0xffffffffffffffff, r4, 0x0, 0x1000000201002) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0xd4) io_setup(0x5, &(0x7f0000000140)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) io_submit(r6, 0x2, &(0x7f0000000180)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x10, r5, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x8, 0x0, r5, 0x0}]) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, 0x0) 5m12.582085124s ago: executing program 0 (id=820): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c80)=@delchain={0x638, 0x65, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x13c, 0x2, [@TCA_BPF_ACT={0x138, 0x1, [@m_simple={0x134, 0x1, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x10, 0x10000006, 0xce6b, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x24aa7000, 0x7, 0x8, 0x80000001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x876f, 0x96, 0x3, 0x40, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x3, 0x8, 0x9, 0xe34}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x6, 0x2, 0xb, 0x5}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x85, 0x6, "9209be6ac2eb68ec44c03ad03ccfd5c9aff753ae7cef446e9abdc2009e245df08fa6cf4268a294d87a0186536d0c2458f0e060a1f4dfab45c4880975e027452a67ff09dc0cda2d51a28cf3834caa7aa64015620886e3c095d93664d00664ede4714e13cbf7a559b27b8e74bc4f58e2418eea9cf3966ac82d194b992695034782aa"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x4c0, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xf}}, @TCA_MATCHALL_ACT={0x1fc, 0x2, [@m_connmark={0x1f8, 0xa, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x9, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x8, 0x8, 0x3ff}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x3, 0x1800, 0x7fff}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff7, 0x2, 0x7, 0x7ff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x9, 0x20000000, 0x2, 0x800}, 0x38}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x718, 0x6, 0x6, 0x1, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x3, 0x7, 0x2}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x3, 0x9, 0x9}, 0x7}}]}, {0xe5, 0x6, "68d5f9b35942b1a9b81011af8ef9f58903979090153440330e71926cf16dfa6a95a63229ec1e046036f5951acc832298a090af5f8dd4c4eda121fe5c11e2758323235d7d4065e102fca2803e8455bbe375423a5083d857379e566a6b55eaa2a53c32659a3eed4669754e022d685f3904836ee46af5a86c45f1a6ba4ad03ce912f0b3be3d485456cdbcd0db56ba63218491a6c93c649f1201f2dcdfb54f743ff852af6a7de13cd0d2252b2d6743c0774446a19f08b9f2c77f986ea287dabf7581d911194d13e1f29884a2081bbf43fce2a1a2b767905dd62ad427703c4290d86deb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xf}}, @TCA_MATCHALL_ACT={0x298, 0x2, [@m_csum={0x170, 0x0, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x400003, 0x47, 0x3, 0x80000000, 0x6}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7ff, 0x0, 0x3, 0x2}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0xfffffffffffffffc, 0x8, 0x3}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x530e, 0x9, 0x20000000, 0x7, 0xffffffff}, 0x1}}]}, {0xd2, 0x6, "8e742964a8bbfb3154844346644898de0354ee45597bbff6c1b4802726b2ca8b75ce550388c84cc686666dc0fd3ccd01f955cd351f6e0aee4e337b55bb5388a3b58420edfc59ade1349d7cc503101571895e677b64e3bfb9a5173fb1e737612ff18132f5bd2bc66d3b55ecbba2b5457b250035617dcdbdaec682f131f66bed12f8c9f14ba127f64337200b93d2baa76f2745a3aef055faebdf58456bed30345b2e556053be34feea35f858cc9db91981b08dd47caadf768a0b6974308b6864e3b32b95e11458f632c8a4b3de3d40"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x124, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0xf5, 0x6, "19a3153d78f1563aa910b5ab1c345795a9c5fdb59e62e379667c969fec3a63a2410c14f25058686dc1f35162d1d61c9ef33f76b41308aa85786484bbc8df8cd7d6f79c7a8afa3f46c074bafc6b8e22601dba54f54cf84920df14f7fa820566ce9a7c7c8be49fd463ca5e2ee142b1b380dd4e27c637e5eed7dc23e893606abf917d1645a88f80bd0099ddaaf047e8176c59ee4ad3dd6c16189178332362837467598d104a879c0c3e38990b7dbb96fafdf130365f21370f37f14adeb5658a62010e4723c745a1dc6ed8291c2cef5cdcc1f73dffaf4ee3e17efcb9f8cd33227ca75221a102d0d7e5c05c486cafa3455deb7d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x638}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4040080, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5m12.031413783s ago: executing program 0 (id=823): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r4, 0x0, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) read$FUSE(r1, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003020000082505a1a44033eb7b7f010902740002010890020904000001020d00000524060001052400ffff0d240f0100000000000000000006391addff000c241ba10210008500efff0808241c7f000701000424012e0f2ba767a98cb46c"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) 5m11.678179661s ago: executing program 5 (id=18): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff43}, 0x27) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002d40)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f000001bd40)=0x410000002) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e22}, 0x1c) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000540)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x5, 0x400055}]}}}}}}}, 0x0) 5m9.284316786s ago: executing program 5 (id=825): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r4, 0x0, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) read$FUSE(r1, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003020000082505a1a44033eb7b7f010902740002010890020904000001020d00000524060001052400ffff0d240f0100000000000000000006391addff000c241ba10210008500efff0808241c7f000701000424012e0f2ba767a98cb46c"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) 4m56.797878426s ago: executing program 36 (id=823): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r4, 0x0, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) read$FUSE(r1, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003020000082505a1a44033eb7b7f010902740002010890020904000001020d00000524060001052400ffff0d240f0100000000000000000006391addff000c241ba10210008500efff0808241c7f000701000424012e0f2ba767a98cb46c"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) 4m54.203954341s ago: executing program 37 (id=825): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r4, 0x0, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) read$FUSE(r1, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003020000082505a1a44033eb7b7f010902740002010890020904000001020d00000524060001052400ffff0d240f0100000000000000000006391addff000c241ba10210008500efff0808241c7f000701000424012e0f2ba767a98cb46c"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) 4m47.965216312s ago: executing program 7 (id=850): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) 4m42.97825983s ago: executing program 7 (id=854): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m42.310001681s ago: executing program 7 (id=855): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m42.113945371s ago: executing program 7 (id=856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x4, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r4, 0x4b46, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m40.775062664s ago: executing program 7 (id=859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') name_to_handle_at(r2, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000100)=@xfs={0x18, 0x81, {0x5, 0x1000, 0xc, 0xfffffffd}}, &(0x7f00000001c0), 0x200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00'}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) socket$unix(0x1, 0x1, 0x0) capset(0x0, 0x0) clock_nanosleep(0xb, 0x0, &(0x7f0000000240)={0x77359400}, 0xfffffffffffffffe) socket$key(0xf, 0x3, 0x2) capset(&(0x7f0000000300)={0x20071026}, &(0x7f00000004c0)={0xfffffffc, 0x3, 0xb17, 0x8, 0x5, 0xc1c}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000500), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000580)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000600)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x20, 0x20, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0xb386, 0x2, 0xd, 0x7, 0x5}}}}}, 0x0) 4m37.352692916s ago: executing program 7 (id=863): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c80)=@delchain={0x374, 0x65, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0xe4, 0x2, [@TCA_BPF_ACT={0xe0, 0x1, [@m_simple={0xdc, 0x1, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x10, 0x10000006, 0xce6b, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x24aa7000, 0x7, 0x8, 0x80000001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x876f, 0x96, 0x3, 0x40, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x6, 0x2, 0xb, 0x5}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x45, 0x6, "9209be6ac2eb68ec44c03ad03ccfd5c9aff753ae7cef446e9abdc2009e245df08fa6cf4268a294d87a0186536d0c2458f0e060a1f4dfab45c4880975e027452a67"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x254, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xf}}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xf}}, @TCA_MATCHALL_ACT={0x228, 0x2, [@m_csum={0x174, 0x0, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x400003, 0x47, 0x3, 0x80000000, 0x6}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7ff, 0x0, 0x3, 0x2}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0xfffffffffffffffc, 0x8, 0x3}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x530e, 0x9, 0x20000000, 0x7, 0xffffffff}, 0x1}}]}, {0xd5, 0x6, "8e742964a8bbfb3154844346644898de0354ee45597bbff6c1b4802726b2ca8b75ce550388c84cc686666dc0fd3ccd01f955cd351f6e0aee4e337b55bb5388a3b58420edfc59ade1349d7cc503101571895e677b64e3bfb9a5173fb1e737612ff18132f5bd2bc66d3b55ecbba2b5457b250035617dcdbdaec682f131f66bed12f8c9f14ba127f64337200b93d2baa76f2745a3aef055faebdf58456bed30345b2e556053be34feea35f858cc9db91981b08dd47caadf768a0b6974308b6864e3b32b95e11458f632c8a4b3de3d407dd970"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0xb0, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0x81, 0x6, "19a3153d78f1563aa910b5ab1c345795a9c5fdb59e62e379667c969fec3a63a2410c14f25058686dc1f35162d1d61c9ef33f76b41308aa85786484bbc8df8cd7d6f79c7a8afa3f46c074bafc6b8e22601dba54f54cf84920df14f7fa820566ce9a7c7c8be49fd463ca5e2ee142b1b380dd4e27c637e5eed7dc23e89360"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x374}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4040080, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4m21.830909586s ago: executing program 38 (id=863): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c80)=@delchain={0x374, 0x65, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0xe4, 0x2, [@TCA_BPF_ACT={0xe0, 0x1, [@m_simple={0xdc, 0x1, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x10, 0x10000006, 0xce6b, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x24aa7000, 0x7, 0x8, 0x80000001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x876f, 0x96, 0x3, 0x40, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x6, 0x2, 0xb, 0x5}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x45, 0x6, "9209be6ac2eb68ec44c03ad03ccfd5c9aff753ae7cef446e9abdc2009e245df08fa6cf4268a294d87a0186536d0c2458f0e060a1f4dfab45c4880975e027452a67"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x254, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xf}}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xf}}, @TCA_MATCHALL_ACT={0x228, 0x2, [@m_csum={0x174, 0x0, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x400003, 0x47, 0x3, 0x80000000, 0x6}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7ff, 0x0, 0x3, 0x2}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0xfffffffffffffffc, 0x8, 0x3}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x530e, 0x9, 0x20000000, 0x7, 0xffffffff}, 0x1}}]}, {0xd5, 0x6, "8e742964a8bbfb3154844346644898de0354ee45597bbff6c1b4802726b2ca8b75ce550388c84cc686666dc0fd3ccd01f955cd351f6e0aee4e337b55bb5388a3b58420edfc59ade1349d7cc503101571895e677b64e3bfb9a5173fb1e737612ff18132f5bd2bc66d3b55ecbba2b5457b250035617dcdbdaec682f131f66bed12f8c9f14ba127f64337200b93d2baa76f2745a3aef055faebdf58456bed30345b2e556053be34feea35f858cc9db91981b08dd47caadf768a0b6974308b6864e3b32b95e11458f632c8a4b3de3d407dd970"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0xb0, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0x81, 0x6, "19a3153d78f1563aa910b5ab1c345795a9c5fdb59e62e379667c969fec3a63a2410c14f25058686dc1f35162d1d61c9ef33f76b41308aa85786484bbc8df8cd7d6f79c7a8afa3f46c074bafc6b8e22601dba54f54cf84920df14f7fa820566ce9a7c7c8be49fd463ca5e2ee142b1b380dd4e27c637e5eed7dc23e89360"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x374}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4040080, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2m25.297067217s ago: executing program 8 (id=1053): syz_usb_connect(0x4, 0x32, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x8) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r0, 0x2000) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000340)=0x1, 0x10, 0x4) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x7ff, 0x200) fcntl$notify(r3, 0x402, 0x8000003d) r4 = socket$inet(0x2, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x7, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000005c0)={0x1, &(0x7f0000000780)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m23.340283552s ago: executing program 8 (id=1055): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m23.162521475s ago: executing program 8 (id=1056): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10401, 0x4, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_score_adj\x00') fcntl$setstatus(r2, 0x4, 0x40800) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$mouse(&(0x7f0000000500), 0x0, 0x2) readv(r3, &(0x7f0000000540)=[{&(0x7f0000000580)=""/58, 0x3a}], 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c00)={'syz0\x00', {0x4007, 0x6, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x8000, 0x7f, 0x6, 0x4a, 0xfffffff2, 0x5f, 0x1, 0x0, 0xffffad37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x208f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x7, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x3, 0x80, 0xfffffffa, 0x5, 0x6, 0x8, 0x4, 0x4, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x2, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xd37f, 0x4, 0x9, 0x5a2, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7ffd, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40003, 0x9, 0x8, 0x82, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x121, 0x40009, 0x4, 0x3], [0x0, 0xbb31, 0x3, 0xfffffffc, 0x2, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7ffd, 0x8ffff, 0x4, 0x3, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x8, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9601, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x9, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) r4 = syz_open_dev$evdev(&(0x7f0000000b80), 0x3, 0x822b01) write$char_usb(r4, &(0x7f0000000bc0)="e2", 0x918) socket$nl_route(0x10, 0x3, 0x0) 2m22.959081519s ago: executing program 8 (id=1058): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000380)={0x4, 0x0, [{0xc0000001, 0x2, 0x1, 0x6, 0x7, 0x10001, 0x44}, {0xc0000000, 0xffff7fff, 0x2, 0x80000001, 0x1, 0x3ff, 0x2}, {0x80000008, 0xb, 0x2, 0x0, 0x8, 0x37b5c985, 0x9}, {0x80000007, 0x33, 0x4, 0xe, 0x10000, 0x0, 0x1}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m22.895946808s ago: executing program 8 (id=1059): unshare(0x24020400) socket$packet(0x11, 0x2, 0x300) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bd980000", @ANYRES16=r2, @ANYBLOB="01002cbd7080ffdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x8050) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x2d, 0x0, 0x1, 0xfffff038}, {0x28, 0x0, 0xfd, 0x1}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x5f) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket(0x2b, 0x80801, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'geneve0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="580000001000ffff25bd7000fbdbdf", @ANYRES32=0x0, @ANYBLOB="0000000021200000300012800c0001006d6163766c616e0020000280080003000000000008000100100000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r6, @ANYBLOB="04d6276a55e4a3a8dbe124019fc0ad2df755763d35b07196454ff19976513e9b02b6b487f9d7e6b226d88dc4ec49d018f0a87cfb7bdf9c7c755e8de96e2e98bb9b96b09027b9cfec4647bb811910e198914845784a2da7e3a186d7fa9d9f35e3a53c0113ec898da54b8a14f6cd470da81152657197e7b06c6a9a9c5f4c312a21b5db1e352c2d09a6fa89fcfd4443d78af8eeb7419477fa12372c9a80edcfcd9cdaf894bc34bd1e18a89c24a6b3a56900"/189], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11e, 0x1, &(0x7f0000000280)=0x400, 0xffffffffffffff09) recvmsg$can_j1939(r5, &(0x7f0000000680)={&(0x7f0000000340)=@l2, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/1, 0x1}, {&(0x7f0000000540)=""/168, 0xa8}], 0x3, &(0x7f0000000640)=""/9, 0x9}, 0x0) ioctl(r4, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r4, 0x8914, &(0x7f0000000000)='lapb0\x00'/40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000700)={0x0, 0x4076cbba9945d516, &(0x7f0000000740)={0x0, 0x14}}, 0x0) 2m21.632998089s ago: executing program 8 (id=1062): r0 = socket$inet_smc(0x2b, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = openat(0xffffffffffffff9c, 0x0, 0x401, 0x0) write(r1, &(0x7f0000000300), 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000080), 0x4) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x410000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r2, &(0x7f0000000000)='270', 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) unshare(0x40000000) 2m6.454167243s ago: executing program 39 (id=1062): r0 = socket$inet_smc(0x2b, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = openat(0xffffffffffffff9c, 0x0, 0x401, 0x0) write(r1, &(0x7f0000000300), 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000080), 0x4) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x410000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r2, &(0x7f0000000000)='270', 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) unshare(0x40000000) 19.096096841s ago: executing program 6 (id=1202): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x4, 0xa100) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) write$UHID_INPUT(r1, &(0x7f00000003c0)={0xc, {"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", 0x1000}}, 0x1006) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f0000001400)={"4f90d728f4808accc919710e431a2b3da3b2848aa60b86afa53842cff834", 0x7f, 0x2, 0x0, 0xfffffffc, 0x9, 0xd, 0xb, 0x1, [0x10000, 0x7, 0x6, 0xfffffffd, 0xfffff801, 0x2, 0x0, 0xffffffff, 0x7fff, 0x2, 0x5, 0x8, 0x8000, 0x2, 0x0, 0x7fffffff, 0x20000, 0x8893, 0x80000000]}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) unshare(0x22020600) openat$fuse(0xffffffffffffff9c, &(0x7f0000001500), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/timer_list\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000) 16.896783281s ago: executing program 6 (id=1204): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r1 = syz_clone(0x40000080, &(0x7f0000000000)="3d3e489f992280d85f10065a3a14862e8a7ba19f0b8eef", 0x17, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)="29c35e0420b76cbb1321d2980ff478a2b0658052f6925edb6d4450198bd7") prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r1, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = userfaultfd(0x801) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001400090401000000000000002d000000010000000500020008"], 0x20}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x12, r2, 0xec776000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) accept(r5, 0x0, 0x0) 13.497728712s ago: executing program 3 (id=1206): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff09) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x3, 0x10d}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x10, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x4000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x40170, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4e48, 0x400, 0x2, 0x367}}], 0x1, &(0x7f0000000840)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xffb9, 0x4, 0x0, 0x0}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32d}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffb, 0x200, 0x1006, 0x80015a, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x4000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x1, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x43, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r16, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) 12.098752117s ago: executing program 4 (id=1074): setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000440)={0x20000014}) epoll_wait(r0, &(0x7f0000000480)=[{}], 0x1, 0x400) 11.695558463s ago: executing program 3 (id=1207): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0xa0fdcc4cac358d07, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x143102) writev(r1, &(0x7f0000000240)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, r0}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000640)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000680)={0x0, 0x1}, 0x1}, 0x94) r5 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000740)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000780), 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1a, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000900)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 8.254951491s ago: executing program 3 (id=1208): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) 7.297627715s ago: executing program 3 (id=1209): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x4, 0xa100) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x98, r3, 0x1, 0x0, 0x8000000, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0xe, 0x2, @broadcast}, {0x5}}]}]}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x30, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x16, 0x0, 0x0, @uid}]}, @nested={0x4, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) write$UHID_INPUT(r1, &(0x7f00000003c0)={0xc, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) ioctl$SNDCTL_SYNTH_ID(r4, 0xc08c5114, &(0x7f0000001400)={"4f90d728f4808accc919710e431a2b3da3b2848aa60b86afa53842cff834", 0x7f, 0x2, 0x0, 0xfffffffc, 0x9, 0xd, 0xb, 0x1, [0x10000, 0x7, 0x6, 0xfffffffd, 0xfffff801, 0x2, 0x0, 0xffffffff, 0x7fff, 0x2, 0x5, 0x8, 0x8000, 0x2, 0x0, 0x7fffffff, 0x20000, 0x8893, 0x80000000]}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) unshare(0x22020600) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001500), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r6, 0xe503, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, r5, 0xfffff000) syz_clone3(&(0x7f0000001580)={0x180801600, &(0x7f0000001600), 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) 7.028217869s ago: executing program 6 (id=1210): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff09) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x3, 0x10d}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x10, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x4000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x40170, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4e48, 0x400, 0x2, 0x367}}], 0x1, &(0x7f0000000840)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xffb9, 0x4, 0x0, 0x0}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32d}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffb, 0x200, 0x1006, 0x80015a, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x4000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x1, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x43, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) 5.814516892s ago: executing program 4 (id=1211): r0 = socket$inet_smc(0x2b, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000300), 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000080), 0x4) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x410000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r2, &(0x7f0000000000)='270', 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) unshare(0x40000000) 5.605964215s ago: executing program 6 (id=1212): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x40004) recvmmsg(r0, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000001b80)}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/68, 0x44}, {&(0x7f0000003240)=""/53, 0x35}, {&(0x7f0000003280)=""/122, 0x7a}, {&(0x7f0000003300)=""/36, 0x24}, {&(0x7f0000003340)=""/179, 0xb3}, {&(0x7f0000003400)=""/187, 0xbb}], 0x7}, 0x3e}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xf}, {{0x0, 0x0, 0x0}, 0x4}], 0x8, 0x40, 0x0) 5.235263291s ago: executing program 6 (id=1213): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r1 = syz_clone(0x40000080, &(0x7f0000000000)="3d3e489f992280d85f10065a3a14862e8a7ba19f0b8eef", 0x17, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)="29c35e0420b76cbb1321d2980ff478a2b0658052f6925edb6d4450198bd7") prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r1, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = userfaultfd(0x801) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001400090401000000000000002d000000010000000500020008"], 0x20}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x12, r2, 0xec776000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) accept(r5, 0x0, 0x0) 4.754848299s ago: executing program 3 (id=1214): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x427a7000) write$cgroup_devices(r3, 0x0, 0x6) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) socket(0x40000000015, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000080)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000c000000000000000000008018110000", @ANYRES32, @ANYBLOB="0200000000000000b702000014000000b70300003f0000008500000083000000bf0920000000000055490100000000009500000000000000bf91"], 0x0, 0xb, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e1f, @rand_addr=0x64810100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e21, @multicast2}, 0x255, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$midi(0x4, 0x0, 0x0, 0x0) 898.430385ms ago: executing program 4 (id=1215): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_devices(r3, 0x0, 0x6) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x80000006, @loopback, 0xefce}, 0x1c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000280)="64f3460f7f3f430f01c9c74424004b000000c74424022aab0000ff1c24c744240012000000c74424020e000000ff2c2466baf80cb88c0b948bef66bafc0c66ed66b80a000f00d066baf80cb8e648e88eef66bafc0cb093ee36f2ad470f01cf8fc93099f0", 0x64}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e1f, @rand_addr=0x64810100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e21, @multicast2}, 0x255, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 761.129164ms ago: executing program 3 (id=1216): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="2013a935fac7a5860500000000000000bd"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=1217): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x4, 0xa100) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x98, r2, 0x1, 0x0, 0x8000000, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0xe, 0x2, @broadcast}, {0x5}}]}]}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x30, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x16, 0x0, 0x0, @uid}]}, @nested={0x4, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, &(0x7f0000001400)={"4f90d728f4808accc919710e431a2b3da3b2848aa60b86afa53842cff834", 0x7f, 0x2, 0x0, 0xfffffffc, 0x9, 0xd, 0xb, 0x1, [0x10000, 0x7, 0x6, 0xfffffffd, 0xfffff801, 0x2, 0x0, 0xffffffff, 0x7fff, 0x2, 0x5, 0x8, 0x8000, 0x2, 0x0, 0x7fffffff, 0x20000, 0x8893, 0x80000000]}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001500), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r5, 0xe503, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, r4, 0xfffff000) syz_clone3(&(0x7f0000001580)={0x180801600, &(0x7f0000001600), 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) kernel console output (not intermixed with test programs): 8348] pwc: recv_control_msg error -32 req 02 val 2100 [ 925.409837][ T8348] pwc: recv_control_msg error -71 req 02 val 2200 [ 925.420528][ T8348] pwc: recv_control_msg error -71 req 06 val 0600 [ 925.423924][ T8348] pwc: recv_control_msg error -71 req 04 val 1500 [ 925.435848][ T8348] pwc: recv_control_msg error -71 req 02 val 2500 [ 925.439882][ T8348] pwc: recv_control_msg error -71 req 02 val 2400 [ 925.444684][ T8348] pwc: recv_control_msg error -71 req 02 val 2600 [ 925.445181][ T8348] pwc: recv_control_msg error -71 req 02 val 2900 [ 925.446551][ T8348] pwc: recv_control_msg error -71 req 02 val 2800 [ 925.448287][ T8348] pwc: recv_control_msg error -71 req 04 val 1100 [ 925.448765][ T8348] pwc: recv_control_msg error -71 req 04 val 1200 [ 925.488719][ T8348] pwc: Registered as video103. [ 925.518025][T10782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 925.552818][T10782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 925.562712][T10782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 925.581544][T10782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 925.598892][T10782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 925.772947][ T8348] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input6 [ 925.916602][T11046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.916620][T11046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.916640][T11046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.932420][T11046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.932436][T11046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.932464][T11046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.200440][ T8348] usb 7-1: USB disconnect, device number 12 [ 927.700557][ T5251] 8021q: adding VLAN 0 to HW filter on device eth12 [ 928.657813][ T5597] Bluetooth: hci4: command tx timeout [ 929.121753][T10782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 929.195995][T10782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 929.197722][T10782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 929.205610][T10782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 929.216895][T10782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 929.397325][T11046] hsr_slave_0: entered promiscuous mode [ 929.398376][T11046] hsr_slave_1: entered promiscuous mode [ 929.398964][T11046] debugfs: 'hsr0' already exists in 'hsr' [ 929.398988][T11046] Cannot create hsr debugfs directory [ 929.943424][T10104] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 930.094174][T10104] usb 7-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 930.095531][T10104] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.149159][T10104] usb 7-1: config 0 descriptor?? [ 930.177675][T10104] pwc: Samsung MPC-C10 USB webcam detected. [ 930.386875][T10104] pwc: send_video_command error -71 [ 930.386915][T10104] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 930.387016][T10104] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 930.425232][T10104] usb 7-1: USB disconnect, device number 13 [ 930.633395][T11240] rxe_eth0 speed is unknown, defaulting to 1000 [ 930.753062][T10782] Bluetooth: hci4: command tx timeout [ 931.370390][T10782] Bluetooth: hci2: command tx timeout [ 931.800711][T10104] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 931.946930][T10104] usb 7-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 931.948412][T10104] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.008262][T10104] usb 7-1: config 0 descriptor?? [ 932.011996][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.8.926'. [ 932.056641][T10104] pwc: Samsung MPC-C10 USB webcam detected. [ 932.419470][T10104] pwc: recv_control_msg error -32 req 02 val 2b00 [ 932.421390][T10104] pwc: recv_control_msg error -32 req 02 val 2700 [ 932.422086][T10104] pwc: recv_control_msg error -32 req 04 val 1700 [ 932.424098][T10104] pwc: recv_control_msg error -32 req 02 val 2c00 [ 932.440776][T10104] pwc: recv_control_msg error -32 req 04 val 1000 [ 932.466804][T10104] pwc: recv_control_msg error -32 req 04 val 1300 [ 932.471036][T10104] pwc: recv_control_msg error -32 req 04 val 1400 [ 932.676879][T10104] pwc: recv_control_msg error -32 req 02 val 2100 [ 932.712019][T10104] pwc: recv_control_msg error -71 req 02 val 2200 [ 932.713202][T10104] pwc: recv_control_msg error -71 req 06 val 0600 [ 932.715284][T10104] pwc: recv_control_msg error -71 req 04 val 1500 [ 932.715758][T10104] pwc: recv_control_msg error -71 req 02 val 2500 [ 932.716198][T10104] pwc: recv_control_msg error -71 req 02 val 2400 [ 932.716635][T10104] pwc: recv_control_msg error -71 req 02 val 2600 [ 932.718120][T10104] pwc: recv_control_msg error -71 req 02 val 2900 [ 932.718564][T10104] pwc: recv_control_msg error -71 req 02 val 2800 [ 932.720249][T10104] pwc: recv_control_msg error -71 req 04 val 1100 [ 932.720892][T10104] pwc: recv_control_msg error -71 req 04 val 1200 [ 932.757303][T10104] pwc: Registered as video103. [ 932.773163][T10104] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input7 [ 932.813410][ T5597] Bluetooth: hci4: command tx timeout [ 932.845438][ T1132] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.900901][T10104] usb 7-1: USB disconnect, device number 14 [ 933.227622][T11272] rxe_eth0 speed is unknown, defaulting to 1000 [ 933.266595][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.8.927'. [ 933.443544][ T5597] Bluetooth: hci2: command tx timeout [ 933.844298][ T5597] Bluetooth: hci3: command 0x0406 tx timeout [ 933.924222][T10104] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 933.955070][T11361] netlink: 4 bytes leftover after parsing attributes in process `syz.8.930'. [ 934.017515][ T1132] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.074286][T10104] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 934.075933][T10104] usb 7-1: too many endpoints for config 0 interface 0 altsetting 5: 70, using maximum allowed: 30 [ 934.075976][T10104] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.076002][T10104] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 70 [ 934.076027][T10104] usb 7-1: config 0 interface 0 has no altsetting 0 [ 934.076058][T10104] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.160086][T10104] usb 7-1: config 0 descriptor?? [ 934.488926][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.8.931'. [ 934.602545][T10104] hid_parser_main: 4 callbacks suppressed [ 934.602569][T10104] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 934.602596][T10104] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 934.602621][T10104] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 934.602646][T10104] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 934.602670][T10104] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 934.602694][T10104] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 934.602719][T10104] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 934.602744][T10104] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 934.602769][T10104] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 934.602794][T10104] cougar 0003:060B:500A.0005: unknown main item tag 0x0 [ 934.602842][T10104] cougar 0003:060B:500A.0005: unbalanced collection at end of report description [ 934.694752][T10104] cougar 0003:060B:500A.0005: parse failed [ 934.694879][T10104] cougar 0003:060B:500A.0005: probe with driver cougar failed with error -22 [ 934.870576][ T5838] usb 7-1: USB disconnect, device number 15 [ 934.885264][T10782] Bluetooth: hci4: command tx timeout [ 934.920555][ T1132] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.117329][T10782] Bluetooth: hci2: command tx timeout [ 936.996623][ T1132] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.706509][T11435] binder: 11434:11435 ioctl 4018620d 0 returned -22 [ 938.198844][T10782] Bluetooth: hci2: command tx timeout [ 938.449251][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.8.941'. [ 939.272395][T11436] syz.6.939 (11436): drop_caches: 2 [ 939.579013][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.943'. [ 941.316493][ T1132] bridge_slave_1: left allmulticast mode [ 941.316528][ T1132] bridge_slave_1: left promiscuous mode [ 941.316788][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.475247][ T1132] bridge_slave_0: left allmulticast mode [ 941.475281][ T1132] bridge_slave_0: left promiscuous mode [ 941.475572][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.806248][ T1132] bridge_slave_1: left allmulticast mode [ 941.806291][ T1132] bridge_slave_1: left promiscuous mode [ 941.806542][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.755416][ T1132] bridge_slave_0: left allmulticast mode [ 942.755452][ T1132] bridge_slave_0: left promiscuous mode [ 942.755670][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.674179][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 943.757440][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 943.795316][ T1132] bond0 (unregistering): Released all slaves [ 943.846254][T10782] Bluetooth: hci0: command 0x0406 tx timeout [ 944.363978][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 944.444963][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 944.466348][ T1132] bond0 (unregistering): Released all slaves [ 944.554970][T11526] FAULT_INJECTION: forcing a failure. [ 944.554970][T11526] name failslab, interval 1, probability 0, space 0, times 1 [ 944.562088][T11526] CPU: 1 UID: 0 PID: 11526 Comm: syz.6.950 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 944.562117][T11526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 944.562135][T11526] Call Trace: [ 944.562144][T11526] [ 944.562153][T11526] dump_stack_lvl+0xe8/0x150 [ 944.562195][T11526] should_fail_ex+0x46b/0x600 [ 944.562221][T11526] ? sock_alloc_inode+0x2c/0x1a0 [ 944.562238][T11526] should_failslab+0xa8/0x100 [ 944.562255][T11526] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 944.562277][T11526] ? ops_init+0x7b/0x5d0 [ 944.562293][T11526] ? setup_net+0x118/0x350 [ 944.562310][T11526] ? sock_alloc_inode+0x2c/0x1a0 [ 944.562330][T11526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.562352][T11526] ? __pfx_sock_alloc_inode+0x10/0x10 [ 944.562371][T11526] sock_alloc_inode+0x2c/0x1a0 [ 944.562386][T11526] ? __pfx_sock_alloc_inode+0x10/0x10 [ 944.562400][T11526] alloc_inode+0x6a/0x1b0 [ 944.562419][T11526] sock_create_lite+0x8b/0x510 [ 944.562439][T11526] __netlink_kernel_create+0xc8/0x720 [ 944.562464][T11526] ? __pfx___netlink_kernel_create+0x10/0x10 [ 944.562487][T11526] ? diag_net_init+0xa5/0x140 [ 944.562508][T11526] diag_net_init+0xba/0x140 [ 944.562525][T11526] ? __pfx_diag_net_init+0x10/0x10 [ 944.562543][T11526] ? __pfx_sock_diag_rcv+0x10/0x10 [ 944.562558][T11526] ? __pfx_sock_diag_bind+0x10/0x10 [ 944.562579][T11526] ? __rt_spin_lock_init+0x3e/0x50 [ 944.562600][T11526] ops_init+0x35d/0x5d0 [ 944.562626][T11526] setup_net+0x118/0x350 [ 944.562645][T11526] ? __pfx_setup_net+0x10/0x10 [ 944.562665][T11526] ? __ns_common_init+0x2fc/0x4a0 [ 944.562689][T11526] copy_net_ns+0x53b/0x780 [ 944.562708][T11526] create_new_namespaces+0x3f0/0x6b0 [ 944.562730][T11526] ? security_capable+0x7e/0x2c0 [ 944.562752][T11526] unshare_nsproxy_namespaces+0x149/0x190 [ 944.562775][T11526] ksys_unshare+0x5d8/0x970 [ 944.562808][T11526] ? __pfx_ksys_unshare+0x10/0x10 [ 944.562836][T11526] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 944.562854][T11526] __x64_sys_unshare+0x38/0x50 [ 944.562876][T11526] do_syscall_64+0x166/0x520 [ 944.562896][T11526] ? trace_irq_disable+0x3b/0x140 [ 944.562914][T11526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.562929][T11526] ? clear_bhb_loop+0x70/0xc0 [ 944.562947][T11526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.562966][T11526] RIP: 0033:0x7f8fc857e559 [ 944.562985][T11526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.562998][T11526] RSP: 002b:00007f8fc67d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 944.563016][T11526] RAX: ffffffffffffffda RBX: 00007f8fc8805fa0 RCX: 00007f8fc857e559 [ 944.563028][T11526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 944.563037][T11526] RBP: 00007f8fc8615ab8 R08: 0000000000000000 R09: 0000000000000000 [ 944.563047][T11526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 944.563056][T11526] R13: 00007f8fc8806038 R14: 00007f8fc8805fa0 R15: 00007ffdc28cab08 [ 944.563082][T11526] [ 944.795660][T11541] bond1: entered allmulticast mode [ 944.944962][T11240] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.945117][T11240] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.945232][T11240] bridge_slave_0: entered allmulticast mode [ 944.948529][T11240] bridge_slave_0: entered promiscuous mode [ 945.172294][T11240] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.172411][T11240] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.172557][T11240] bridge_slave_1: entered allmulticast mode [ 945.196019][T11240] bridge_slave_1: entered promiscuous mode [ 945.792956][T11559] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 947.368331][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 947.368402][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 947.844362][T11272] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.844858][T11272] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.877351][T11272] bridge_slave_0: entered allmulticast mode [ 947.988689][T11272] bridge_slave_0: entered promiscuous mode [ 949.051211][T11272] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.051338][T11272] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.051589][T11272] bridge_slave_1: entered allmulticast mode [ 949.076039][T11272] bridge_slave_1: entered promiscuous mode [ 949.269776][T11240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.270409][T11046] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 949.324055][T11046] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 949.393641][T11240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.827272][T11046] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 949.891719][T11046] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 949.906735][T11272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.955575][T11046] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 950.024906][T11046] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 950.032339][T11272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.205734][T11046] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 950.269181][T11046] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 950.407097][T11240] team0: Port device team_slave_0 added [ 952.025285][T11240] team0: Port device team_slave_1 added [ 952.099713][T11272] team0: Port device team_slave_0 added [ 952.182948][T11272] team0: Port device team_slave_1 added [ 952.241613][T11240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.241630][T11240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.241655][T11240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.292761][T11240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.292779][T11240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.292804][T11240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.300601][T11272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.300618][T11272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.300643][T11272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.335013][T11272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.335029][T11272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.335054][T11272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.506835][T11272] hsr_slave_0: entered promiscuous mode [ 954.508177][T11272] hsr_slave_1: entered promiscuous mode [ 954.509066][T11272] debugfs: 'hsr0' already exists in 'hsr' [ 954.509090][T11272] Cannot create hsr debugfs directory [ 954.532681][T11240] hsr_slave_0: entered promiscuous mode [ 954.534159][T11240] hsr_slave_1: entered promiscuous mode [ 954.535046][T11240] debugfs: 'hsr0' already exists in 'hsr' [ 954.535069][T11240] Cannot create hsr debugfs directory [ 955.153595][T11662] random: crng reseeded on system resumption [ 955.790166][ T5251] 8021q: adding VLAN 0 to HW filter on device eth1 [ 956.283880][ T1132] hsr_slave_0: left promiscuous mode [ 956.303475][ T1132] hsr_slave_1: left promiscuous mode [ 956.304283][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 956.304301][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.364293][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 956.364314][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.533451][ T1132] hsr_slave_0: left promiscuous mode [ 956.553439][ T1132] hsr_slave_1: left promiscuous mode [ 956.554425][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 956.554443][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.594668][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 956.594697][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.675748][ T1132] veth1_macvtap: left promiscuous mode [ 956.675816][ T1132] veth0_macvtap: left promiscuous mode [ 956.675960][ T1132] veth1_vlan: left promiscuous mode [ 956.833933][ T1132] veth1_macvtap: left promiscuous mode [ 956.834043][ T1132] veth0_macvtap: left promiscuous mode [ 956.834298][ T1132] veth1_vlan: left promiscuous mode [ 956.834503][ T1132] veth0_vlan: left promiscuous mode [ 956.961219][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.6.977'. [ 957.744875][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 957.803937][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 957.959209][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.8.978'. [ 958.516733][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 958.574055][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 960.220172][T11703] FAULT_INJECTION: forcing a failure. [ 960.220172][T11703] name failslab, interval 1, probability 0, space 0, times 0 [ 960.220210][T11703] CPU: 0 UID: 0 PID: 11703 Comm: syz.6.980 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 960.220233][T11703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 960.220245][T11703] Call Trace: [ 960.220253][T11703] [ 960.220261][T11703] dump_stack_lvl+0xe8/0x150 [ 960.220295][T11703] should_fail_ex+0x46b/0x600 [ 960.220330][T11703] should_failslab+0xa8/0x100 [ 960.220358][T11703] ? __proc_create+0x560/0xae0 [ 960.220384][T11703] kmem_cache_alloc_noprof+0x9e/0x690 [ 960.220412][T11703] ? __proc_create+0x560/0xae0 [ 960.220439][T11703] __proc_create+0x560/0xae0 [ 960.220461][T11703] ? rt_write_unlock+0x19e/0x360 [ 960.220486][T11703] ? __pfx___proc_create+0x10/0x10 [ 960.220506][T11703] ? rt_write_unlock+0x1aa/0x360 [ 960.220530][T11703] ? proc_register+0x5d8/0x7f0 [ 960.220552][T11703] proc_create_data+0xa5/0x1a0 [ 960.220577][T11703] cache_register_net+0x464/0x4c0 [ 960.220600][T11703] nfsd_idmap_init+0x96/0x1f0 [ 960.220617][T11703] ? nfsd_net_init+0x5b/0x530 [ 960.220644][T11703] nfsd_net_init+0x71/0x530 [ 960.220670][T11703] ops_init+0x35d/0x5d0 [ 960.220704][T11703] setup_net+0x118/0x350 [ 960.220727][T11703] ? __pfx_setup_net+0x10/0x10 [ 960.220753][T11703] ? __ns_common_init+0x2fc/0x4a0 [ 960.220784][T11703] copy_net_ns+0x53b/0x780 [ 960.220810][T11703] create_new_namespaces+0x3f0/0x6b0 [ 960.220838][T11703] ? security_capable+0x7e/0x2c0 [ 960.220866][T11703] unshare_nsproxy_namespaces+0x149/0x190 [ 960.220895][T11703] ksys_unshare+0x5d8/0x970 [ 960.220927][T11703] ? __pfx_ksys_unshare+0x10/0x10 [ 960.220961][T11703] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 960.220984][T11703] __x64_sys_unshare+0x38/0x50 [ 960.221009][T11703] do_syscall_64+0x166/0x520 [ 960.221034][T11703] ? trace_irq_disable+0x3b/0x140 [ 960.221057][T11703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.221077][T11703] ? clear_bhb_loop+0x70/0xc0 [ 960.221100][T11703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.221118][T11703] RIP: 0033:0x7f8fc857e559 [ 960.221136][T11703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 960.221152][T11703] RSP: 002b:00007f8fc67d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 960.221174][T11703] RAX: ffffffffffffffda RBX: 00007f8fc8805fa0 RCX: 00007f8fc857e559 [ 960.221188][T11703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 960.221201][T11703] RBP: 00007f8fc8615ab8 R08: 0000000000000000 R09: 0000000000000000 [ 960.221213][T11703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 960.221225][T11703] R13: 00007f8fc8806038 R14: 00007f8fc8805fa0 R15: 00007ffdc28cab08 [ 960.221257][T11703] [ 960.629156][T10782] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 960.644565][T10782] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 960.673195][T10782] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 960.728211][T10782] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 960.743632][T10782] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 961.373416][ T998] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 961.523951][ T998] usb 7-1: Using ep0 maxpacket: 16 [ 961.524911][ T998] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 961.526499][ T998] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 961.526522][ T998] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 961.529470][ T998] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.529494][ T998] usb 7-1: Product: syz [ 961.529507][ T998] usb 7-1: Manufacturer: syz [ 961.529521][ T998] usb 7-1: SerialNumber: syz [ 961.640265][ T998] usb 7-1: 0:2 : does not exist [ 961.815403][ T5251] 8021q: adding VLAN 0 to HW filter on device eth2 [ 962.068082][ T998] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 962.883380][ T5597] Bluetooth: hci5: command tx timeout [ 962.992736][ T998] usb 7-1: USB disconnect, device number 16 [ 963.028555][T11719] rxe_eth0 speed is unknown, defaulting to 1000 [ 963.557563][ T5251] 8021q: adding VLAN 0 to HW filter on device eth3 [ 963.748556][T11741] udevd[11741]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 964.033603][ T998] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 964.660453][ T998] usb 7-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 964.951776][ T998] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 964.951809][ T998] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 964.975971][ T998] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 964.975997][ T998] usb 7-1: Product: syz [ 964.976011][ T998] usb 7-1: Manufacturer: syz [ 965.073307][ T5597] Bluetooth: hci5: command tx timeout [ 965.101609][ T998] mos7840 7-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 965.291743][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.8.990'. [ 965.579409][ T998] mos7840 ttyUSB0: probe with driver mos7840 failed with error -32 [ 965.761400][T11795] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 965.761400][T11795] The task syz.8.991 (11795) triggered the difference, watch for misbehavior. [ 965.974638][ T5251] 8021q: adding VLAN 0 to HW filter on device eth4 [ 966.722120][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.8.992'. [ 967.123931][ T5597] Bluetooth: hci5: command tx timeout [ 967.437333][ T5980] usb 7-1: USB disconnect, device number 17 [ 967.496521][ T5980] mos7840 7-1:1.0: device disconnected [ 967.509117][T11835] bond2: entered allmulticast mode [ 967.825831][T11719] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.825927][T11719] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.826094][T11719] bridge_slave_0: entered allmulticast mode [ 967.830701][T11719] bridge_slave_0: entered promiscuous mode [ 967.850897][T11719] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.851025][T11719] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.851210][T11719] bridge_slave_1: entered allmulticast mode [ 967.857310][T11719] bridge_slave_1: entered promiscuous mode [ 967.875806][T11844] FAULT_INJECTION: forcing a failure. [ 967.875806][T11844] name failslab, interval 1, probability 0, space 0, times 0 [ 967.875839][T11844] CPU: 1 UID: 0 PID: 11844 Comm: syz.6.995 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 967.875861][T11844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 967.875872][T11844] Call Trace: [ 967.875879][T11844] [ 967.875888][T11844] dump_stack_lvl+0xe8/0x150 [ 967.875921][T11844] should_fail_ex+0x46b/0x600 [ 967.875956][T11844] should_failslab+0xa8/0x100 [ 967.875978][T11844] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 967.876015][T11844] ? cache_create_net+0x2f/0x240 [ 967.876033][T11844] ? cache_create_net+0x2f/0x240 [ 967.876058][T11844] kmemdup_noprof+0x2b/0x70 [ 967.876083][T11844] cache_create_net+0x2f/0x240 [ 967.876102][T11844] ? cache_register_net+0x46e/0x4c0 [ 967.876124][T11844] nfsd_idmap_init+0xed/0x1f0 [ 967.876141][T11844] ? nfsd_net_init+0x5b/0x530 [ 967.876166][T11844] nfsd_net_init+0x71/0x530 [ 967.876191][T11844] ops_init+0x35d/0x5d0 [ 967.876223][T11844] setup_net+0x118/0x350 [ 967.876246][T11844] ? __pfx_setup_net+0x10/0x10 [ 967.876270][T11844] ? __ns_common_init+0x2fc/0x4a0 [ 967.876299][T11844] copy_net_ns+0x53b/0x780 [ 967.876324][T11844] create_new_namespaces+0x3f0/0x6b0 [ 967.876352][T11844] ? security_capable+0x7e/0x2c0 [ 967.876379][T11844] unshare_nsproxy_namespaces+0x149/0x190 [ 967.876407][T11844] ksys_unshare+0x5d8/0x970 [ 967.876439][T11844] ? __pfx_ksys_unshare+0x10/0x10 [ 967.876473][T11844] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 967.876495][T11844] __x64_sys_unshare+0x38/0x50 [ 967.876520][T11844] do_syscall_64+0x166/0x520 [ 967.876544][T11844] ? trace_irq_disable+0x3b/0x140 [ 967.876567][T11844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.876586][T11844] ? clear_bhb_loop+0x70/0xc0 [ 967.876608][T11844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.876626][T11844] RIP: 0033:0x7f8fc857e559 [ 967.876642][T11844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.876658][T11844] RSP: 002b:00007f8fc67d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 967.876678][T11844] RAX: ffffffffffffffda RBX: 00007f8fc8805fa0 RCX: 00007f8fc857e559 [ 967.876692][T11844] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 967.876703][T11844] RBP: 00007f8fc8615ab8 R08: 0000000000000000 R09: 0000000000000000 [ 967.876715][T11844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 967.876726][T11844] R13: 00007f8fc8806038 R14: 00007f8fc8805fa0 R15: 00007ffdc28cab08 [ 967.876757][T11844] [ 967.947210][T11719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 967.955960][T11719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 968.011139][T11719] team0: Port device team_slave_0 added [ 968.015573][T11719] team0: Port device team_slave_1 added [ 968.120787][T11719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 968.120803][T11719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.120828][T11719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 968.137612][T11719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.137628][T11719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.138863][T11719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 969.525319][ T5597] Bluetooth: hci5: command tx timeout [ 969.631911][T11719] hsr_slave_0: entered promiscuous mode [ 969.632672][T11719] hsr_slave_1: entered promiscuous mode [ 969.645679][T11855] rxe_eth0 speed is unknown, defaulting to 1000 [ 969.813550][ T5980] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 969.984157][ T5980] usb 7-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 970.032476][ T5980] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 970.032507][ T5980] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 970.059704][ T5980] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 970.059731][ T5980] usb 7-1: Product: syz [ 970.059744][ T5980] usb 7-1: Manufacturer: syz [ 970.095993][ T5980] mos7840 7-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 970.665933][ T5980] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 970.730119][ T5980] usb 7-1: USB disconnect, device number 18 [ 970.749828][ T5980] mos7840 7-1:1.0: device disconnected [ 971.346966][T11272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 971.389942][T11272] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 971.676523][T11272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 971.723216][T11272] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 971.853997][T11272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 971.933011][T11272] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 972.289920][T11272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 972.318692][T11272] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 972.663596][ T1132] bridge_slave_1: left allmulticast mode [ 972.663634][ T1132] bridge_slave_1: left promiscuous mode [ 972.663890][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.825413][ T1132] bridge_slave_0: left allmulticast mode [ 972.825448][ T1132] bridge_slave_0: left promiscuous mode [ 972.831847][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.853449][ T5322] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 973.005758][ T5322] usb 7-1: Using ep0 maxpacket: 32 [ 973.006700][ T5322] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 973.011422][ T5322] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.011448][ T5322] usb 7-1: Product: syz [ 973.011461][ T5322] usb 7-1: Manufacturer: syz [ 973.011474][ T5322] usb 7-1: SerialNumber: syz [ 973.020442][ T5322] usb 7-1: config 0 descriptor?? [ 973.031285][ T5322] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 973.031759][ T5322] dvb-usb: bulk message failed: -22 (4/0) [ 973.031776][ T5322] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 973.031901][ T5322] dvb-usb: bulk message failed: -22 (5/0) [ 973.031914][ T5322] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 973.077830][ T5322] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 973.079522][ T5322] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 973.079578][ T5322] usb 7-1: media controller created [ 973.099184][ T5322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 973.127020][ T5322] usb 7-1: selecting invalid altsetting 3 [ 973.127040][ T5322] ttusb2: set interface to alts=3 failed [ 973.183493][ T5322] DVB: Unable to find symbol tda10086_attach() [ 973.183509][ T5322] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 973.184623][ T5322] dvb-usb: bulk message failed: -22 (4/0) [ 973.184642][ T5322] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 973.184769][ T5322] dvb-usb: bulk message failed: -22 (5/0) [ 973.184782][ T5322] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 973.184849][ T5322] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 973.218404][ T1132] bridge_slave_1: left allmulticast mode [ 973.218438][ T1132] bridge_slave_1: left promiscuous mode [ 973.218677][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.294880][ T5322] usb 7-1: USB disconnect, device number 19 [ 973.339961][ T5322] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 973.416377][ T1132] bridge_slave_0: left allmulticast mode [ 973.416414][ T1132] bridge_slave_0: left promiscuous mode [ 973.416650][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.693952][ T1132] bridge_slave_1: left allmulticast mode [ 973.693990][ T1132] bridge_slave_1: left promiscuous mode [ 973.694268][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.857525][ T1132] bridge_slave_0: left allmulticast mode [ 973.857560][ T1132] bridge_slave_0: left promiscuous mode [ 973.857795][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.133403][ T5838] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 974.333422][ T5838] usb 7-1: Using ep0 maxpacket: 16 [ 974.335497][ T5838] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 974.336997][ T5838] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 974.337020][ T5838] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 974.339253][ T5838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.339275][ T5838] usb 7-1: Product: syz [ 974.339289][ T5838] usb 7-1: Manufacturer: syz [ 974.339302][ T5838] usb 7-1: SerialNumber: syz [ 974.409643][ T5838] usb 7-1: 0:2 : does not exist [ 974.564940][ T5838] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 974.604649][ T5838] usb 7-1: USB disconnect, device number 20 [ 974.690078][T11741] udevd[11741]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 974.728940][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 974.804115][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 974.867074][ T1132] bond0 (unregistering): Released all slaves [ 975.105222][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.142543][T11963] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 975.224566][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.305433][ T1132] bond0 (unregistering): Released all slaves [ 975.834131][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.913957][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.978530][ T1132] bond0 (unregistering): Released all slaves [ 976.078394][T11965] FAULT_INJECTION: forcing a failure. [ 976.078394][T11965] name failslab, interval 1, probability 0, space 0, times 0 [ 976.078430][T11965] CPU: 1 UID: 0 PID: 11965 Comm: syz.6.1003 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 976.078453][T11965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 976.078467][T11965] Call Trace: [ 976.078476][T11965] [ 976.078485][T11965] dump_stack_lvl+0xe8/0x150 [ 976.078519][T11965] should_fail_ex+0x46b/0x600 [ 976.078555][T11965] should_failslab+0xa8/0x100 [ 976.078578][T11965] ? __proc_create+0x560/0xae0 [ 976.078598][T11965] kmem_cache_alloc_noprof+0x9e/0x690 [ 976.078629][T11965] ? __proc_create+0x560/0xae0 [ 976.078656][T11965] __proc_create+0x560/0xae0 [ 976.078678][T11965] ? rt_write_unlock+0x19e/0x360 [ 976.078705][T11965] ? __pfx___proc_create+0x10/0x10 [ 976.078725][T11965] ? rt_write_unlock+0x1aa/0x360 [ 976.078748][T11965] ? proc_register+0x5d8/0x7f0 [ 976.078768][T11965] proc_create_data+0xa5/0x1a0 [ 976.078792][T11965] cache_register_net+0x2ae/0x4c0 [ 976.078816][T11965] nfsd_idmap_init+0x96/0x1f0 [ 976.078837][T11965] ? nfsd_net_init+0x5b/0x530 [ 976.078865][T11965] nfsd_net_init+0x71/0x530 [ 976.078892][T11965] ops_init+0x35d/0x5d0 [ 976.078925][T11965] setup_net+0x118/0x350 [ 976.078947][T11965] ? __pfx_setup_net+0x10/0x10 [ 976.078972][T11965] ? __ns_common_init+0x2fc/0x4a0 [ 976.079008][T11965] copy_net_ns+0x53b/0x780 [ 976.079034][T11965] create_new_namespaces+0x3f0/0x6b0 [ 976.079066][T11965] ? security_capable+0x7e/0x2c0 [ 976.079095][T11965] unshare_nsproxy_namespaces+0x149/0x190 [ 976.079122][T11965] ksys_unshare+0x5d8/0x970 [ 976.079155][T11965] ? __pfx_ksys_unshare+0x10/0x10 [ 976.079202][T11965] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 976.079228][T11965] __x64_sys_unshare+0x38/0x50 [ 976.079254][T11965] do_syscall_64+0x166/0x520 [ 976.079279][T11965] ? trace_irq_disable+0x3b/0x140 [ 976.079304][T11965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.079326][T11965] ? clear_bhb_loop+0x70/0xc0 [ 976.079351][T11965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.079372][T11965] RIP: 0033:0x7f8fc857e559 [ 976.079392][T11965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.079410][T11965] RSP: 002b:00007f8fc67d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 976.079432][T11965] RAX: ffffffffffffffda RBX: 00007f8fc8805fa0 RCX: 00007f8fc857e559 [ 976.079448][T11965] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 976.079462][T11965] RBP: 00007f8fc8615ab8 R08: 0000000000000000 R09: 0000000000000000 [ 976.079476][T11965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 976.079488][T11965] R13: 00007f8fc8806038 R14: 00007f8fc8805fa0 R15: 00007ffdc28cab08 [ 976.079522][T11965] [ 976.391527][T11240] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 976.466317][T11240] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 976.491978][T11240] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 976.571681][T11240] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 976.599326][T11240] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 976.638083][T11240] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 976.640199][T11240] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 976.739300][T11240] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 979.016951][T11272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.162470][T11272] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.198360][T11240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.239974][ T1412] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.240206][ T1412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.293107][ T1412] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.295970][ T1412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.649358][T11240] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.740240][ T1412] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.740448][ T1412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.846935][T10984] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.847079][T10984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.544705][T11993] syz.6.1007 (11993): drop_caches: 2 [ 980.614898][ T1132] hsr_slave_0: left promiscuous mode [ 980.654438][ T1132] hsr_slave_1: left promiscuous mode [ 980.655667][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 980.705692][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 980.947514][ T1132] hsr_slave_0: left promiscuous mode [ 980.964199][ T1132] hsr_slave_1: left promiscuous mode [ 980.965548][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.012793][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.164916][ T1132] hsr_slave_0: left promiscuous mode [ 981.183437][ T1132] hsr_slave_1: left promiscuous mode [ 981.184253][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.234433][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.835110][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 981.899024][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 982.454138][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 982.488543][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 982.953967][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 983.010119][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 984.668405][T11719] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 984.865269][T11719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 984.887661][T11719] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 984.916284][ T37] audit: type=1326 audit(1792248949.758:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12066 comm="syz.6.1019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc857e559 code=0x7ffc0000 [ 984.916335][ T37] audit: type=1326 audit(1792248949.758:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12066 comm="syz.6.1019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc857e559 code=0x7ffc0000 [ 984.986553][ T37] audit: type=1326 audit(1792248949.808:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12066 comm="syz.6.1019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f8fc857e559 code=0x7ffc0000 [ 984.989951][T11719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 985.025843][T11719] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 985.179474][T11719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 985.186450][T11719] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 985.372285][T11719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 985.455842][ T37] audit: type=1326 audit(1792248950.278:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12066 comm="syz.6.1019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc857e559 code=0x7ffc0000 [ 985.455882][ T37] audit: type=1326 audit(1792248950.308:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12066 comm="syz.6.1019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc857e559 code=0x7ffc0000 [ 986.888473][T11272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 987.150147][ T5251] 8021q: adding VLAN 0 to HW filter on device eth5 [ 987.461898][T10782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 987.510972][T10782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 987.533563][T10782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 987.600622][T10782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 987.659200][T10782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 988.250939][T11719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.394174][T11719] 8021q: adding VLAN 0 to HW filter on device team0 [ 988.502018][ T1305] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.502194][ T1305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.616138][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.616262][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.702285][T10782] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 988.765798][T10782] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 988.780924][T10782] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 988.785920][T10782] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 988.787839][T10782] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 989.033156][T12132] random: crng reseeded on system resumption [ 989.846916][T10782] Bluetooth: hci1: command tx timeout [ 990.287988][ T5251] 8021q: adding VLAN 0 to HW filter on device eth6 [ 990.401015][T12111] rxe_eth0 speed is unknown, defaulting to 1000 [ 990.593404][ T998] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 990.775825][ T998] usb 7-1: Using ep0 maxpacket: 32 [ 990.776782][ T998] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 990.800914][ T998] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.800940][ T998] usb 7-1: Product: syz [ 990.800953][ T998] usb 7-1: Manufacturer: syz [ 990.800967][ T998] usb 7-1: SerialNumber: syz [ 990.860567][ T998] usb 7-1: config 0 descriptor?? [ 990.893853][ T998] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 990.893958][ T998] dvb-usb: bulk message failed: -22 (4/0) [ 990.893975][ T998] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 990.894099][ T998] dvb-usb: bulk message failed: -22 (5/0) [ 990.894112][ T998] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 990.964004][T10782] Bluetooth: hci6: command tx timeout [ 990.966621][ T998] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 990.967390][ T998] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 990.967445][ T998] usb 7-1: media controller created [ 991.010693][ T998] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 991.117676][ T998] usb 7-1: selecting invalid altsetting 3 [ 991.117696][ T998] ttusb2: set interface to alts=3 failed [ 991.233006][ T998] DVB: Unable to find symbol tda10086_attach() [ 991.233023][ T998] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 991.250236][ T998] dvb-usb: bulk message failed: -22 (4/0) [ 991.250256][ T998] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 991.250373][ T998] dvb-usb: bulk message failed: -22 (5/0) [ 991.250386][ T998] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 991.250450][ T998] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 991.306819][ T998] usb 7-1: USB disconnect, device number 21 [ 991.468439][ T998] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 991.923848][T10782] Bluetooth: hci1: command tx timeout [ 993.043387][T10782] Bluetooth: hci6: command tx timeout [ 993.098466][T12122] rxe_eth0 speed is unknown, defaulting to 1000 [ 993.101308][ T5251] 8021q: adding VLAN 0 to HW filter on device eth7 [ 993.215068][T11719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 993.524089][T12171] rxe_eth0 speed is unknown, defaulting to 1000 [ 993.583091][ T5322] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 993.734075][ T5322] usb 7-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 993.735131][ T5322] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 993.735170][ T5322] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.742670][ T5322] usb 7-1: config 0 descriptor?? [ 994.002080][ T998] usb 7-1: USB disconnect, device number 22 [ 994.003410][T10782] Bluetooth: hci1: command tx timeout [ 994.543474][ T998] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 994.633411][ T5251] 8021q: adding VLAN 0 to HW filter on device eth8 [ 994.695811][ T998] usb 7-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 994.698000][ T998] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 994.698039][ T998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.742579][ T998] usb 7-1: config 0 descriptor?? [ 995.101485][T11719] veth0_vlan: entered promiscuous mode [ 995.125876][T10782] Bluetooth: hci6: command tx timeout [ 995.440278][T11719] veth1_vlan: entered promiscuous mode [ 995.482615][T12111] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.482806][T12111] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.482984][T12111] bridge_slave_0: entered allmulticast mode [ 995.487523][T12111] bridge_slave_0: entered promiscuous mode [ 995.541904][T12111] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.542030][T12111] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.542208][T12111] bridge_slave_1: entered allmulticast mode [ 995.566812][T12111] bridge_slave_1: entered promiscuous mode [ 995.897354][T12111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.916543][T12111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.917211][T12122] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.917337][T12122] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.917431][T12122] bridge_slave_0: entered allmulticast mode [ 995.918826][T12122] bridge_slave_0: entered promiscuous mode [ 995.961729][T12122] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.961931][T12122] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.962091][T12122] bridge_slave_1: entered allmulticast mode [ 995.980255][T12122] bridge_slave_1: entered promiscuous mode [ 996.031203][T12111] team0: Port device team_slave_0 added [ 996.054541][T12111] team0: Port device team_slave_1 added [ 996.083408][T10782] Bluetooth: hci1: command tx timeout [ 996.288030][T12122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.355164][ T5723] usb 7-1: USB disconnect, device number 23 [ 996.517674][T12122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.551883][T12111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.551901][T12111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.551927][T12111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.601124][T12111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.601141][T12111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.601163][T12111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.621560][T12122] team0: Port device team_slave_0 added [ 996.667319][T12122] team0: Port device team_slave_1 added [ 996.987582][T11719] veth0_macvtap: entered promiscuous mode [ 997.030050][T12122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 997.030068][T12122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 997.030093][T12122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.118348][T12122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 997.118366][T12122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 997.118390][T12122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.203496][T10782] Bluetooth: hci6: command tx timeout [ 997.431300][T12111] hsr_slave_0: entered promiscuous mode [ 997.432552][T12111] hsr_slave_1: entered promiscuous mode [ 997.440465][T12111] debugfs: 'hsr0' already exists in 'hsr' [ 997.440490][T12111] Cannot create hsr debugfs directory [ 997.455075][T12237] rxe_eth0 speed is unknown, defaulting to 1000 [ 997.498252][T11719] veth1_macvtap: entered promiscuous mode [ 1000.831553][T12122] hsr_slave_0: entered promiscuous mode [ 1001.006265][T12122] hsr_slave_1: entered promiscuous mode [ 1001.111037][T12122] debugfs: 'hsr0' already exists in 'hsr' [ 1001.111382][T12122] Cannot create hsr debugfs directory [ 1001.303798][T11719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1005.154322][ T5251] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1005.163196][T11719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1005.432277][T12270] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1005.432800][T12270] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1005.867169][T12270] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1005.870199][T12270] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1005.889561][T12271] rxe_eth0 speed is unknown, defaulting to 1000 [ 1006.247486][T12270] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1006.247634][T12270] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1006.290307][ T1451] bridge_slave_1: left allmulticast mode [ 1006.290345][ T1451] bridge_slave_1: left promiscuous mode [ 1006.292959][ T1451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.406023][T12270] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1006.649140][ T1451] bridge_slave_0: left allmulticast mode [ 1006.649180][ T1451] bridge_slave_0: left promiscuous mode [ 1006.649400][ T1451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.665746][T12270] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1006.665889][T12270] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1007.521669][T10782] Bluetooth: hci3: command 0x0406 tx timeout [ 1007.657546][T12270] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1007.776189][T12270] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1007.776418][T12270] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1007.836972][T12270] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1007.853484][ T1451] bridge_slave_1: left allmulticast mode [ 1007.853519][ T1451] bridge_slave_1: left promiscuous mode [ 1007.853768][ T1451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.923766][T10782] Bluetooth: hci0: command 0x0406 tx timeout [ 1007.985667][ T1451] bridge_slave_0: left allmulticast mode [ 1007.985704][ T1451] bridge_slave_0: left promiscuous mode [ 1007.985955][ T1451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.339040][T10782] Bluetooth: hci5: command 0x0c1a tx timeout [ 1008.339723][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1008.339762][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1009.313443][T10782] Bluetooth: hci1: command 0x0c1a tx timeout [ 1009.523587][T10782] Bluetooth: hci3: command 0x0406 tx timeout [ 1009.873604][T10782] Bluetooth: hci6: command 0x0c1a tx timeout [ 1010.003359][T10782] Bluetooth: hci0: command 0x0406 tx timeout [ 1010.406623][T10782] Bluetooth: hci5: command 0x0c1a tx timeout [ 1010.794101][ T1451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1010.855731][ T1451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1010.896691][ T1451] bond0 (unregistering): Released all slaves [ 1011.363543][T10782] Bluetooth: hci1: command 0x0c1a tx timeout [ 1011.415276][ T1451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1011.473908][ T1451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1011.517674][ T1451] bond0 (unregistering): Released all slaves [ 1011.943910][T10782] Bluetooth: hci6: command 0x0c1a tx timeout [ 1012.144486][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.149429][ T1412] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.151923][ T1132] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.485818][T10782] Bluetooth: hci5: command 0x0c1a tx timeout [ 1013.130001][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.130023][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.163390][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.444004][T10782] Bluetooth: hci1: command 0x0c1a tx timeout [ 1014.535372][T10782] Bluetooth: hci6: command 0x0c1a tx timeout [ 1016.061411][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.061436][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.299488][ T5251] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1016.461100][ T37] audit: type=1326 audit(1792248981.308:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12329 comm="syz.8.1053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d782e559 code=0x7ffc0000 [ 1016.478290][ T37] audit: type=1326 audit(1792248981.328:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12329 comm="syz.8.1053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fb7d782e559 code=0x7ffc0000 [ 1016.554949][ T37] audit: type=1326 audit(1792248981.408:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12329 comm="syz.8.1053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d782e559 code=0x7ffc0000 [ 1016.554990][ T37] audit: type=1326 audit(1792248981.408:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12329 comm="syz.8.1053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d782e559 code=0x7ffc0000 [ 1016.711613][ T37] audit: type=1326 audit(1792248981.508:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12329 comm="syz.8.1053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb7d782e559 code=0x7ffc0000 [ 1016.711652][ T37] audit: type=1326 audit(1792248981.538:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12329 comm="syz.8.1053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d782e559 code=0x7ffc0000 [ 1016.711676][ T37] audit: type=1326 audit(1792248981.538:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12329 comm="syz.8.1053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d782e559 code=0x7ffc0000 [ 1017.003650][ T1451] hsr_slave_0: left promiscuous mode [ 1017.023399][ T1451] hsr_slave_1: left promiscuous mode [ 1017.024793][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.051859][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.289726][ T1451] hsr_slave_0: left promiscuous mode [ 1017.333558][ T1451] hsr_slave_1: left promiscuous mode [ 1017.334797][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.344965][ T36] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1017.386983][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.493410][ T36] usb 7-1: Using ep0 maxpacket: 16 [ 1017.494238][ T36] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1017.496322][ T36] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.496344][ T36] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1017.498795][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.498817][ T36] usb 7-1: Product: syz [ 1017.498831][ T36] usb 7-1: Manufacturer: syz [ 1017.498844][ T36] usb 7-1: SerialNumber: syz [ 1017.584345][ T36] usb 7-1: 0:2 : does not exist [ 1017.782703][ T36] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1018.028955][ T36] usb 7-1: USB disconnect, device number 24 [ 1018.225442][T12364] udevd[12364]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1018.554596][T12379] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1060'. [ 1020.270682][ T1451] team0 (unregistering): Port device team_slave_1 removed [ 1021.220036][ T1451] team0 (unregistering): Port device team_slave_0 removed [ 1021.777321][ T1451] team0 (unregistering): Port device team_slave_1 removed [ 1021.833867][ T1451] team0 (unregistering): Port device team_slave_0 removed [ 1022.022142][T12353] syz_tun: entered allmulticast mode [ 1022.033113][ T5251] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1022.085371][T12391] FAULT_INJECTION: forcing a failure. [ 1022.085371][T12391] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.085410][T12391] CPU: 1 UID: 0 PID: 12391 Comm: syz.6.1063 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1022.085424][T12391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1022.085431][T12391] Call Trace: [ 1022.085435][T12391] [ 1022.085440][T12391] dump_stack_lvl+0xe8/0x150 [ 1022.085462][T12391] should_fail_ex+0x46b/0x600 [ 1022.085481][T12391] should_failslab+0xa8/0x100 [ 1022.085493][T12391] ? __proc_create+0x560/0xae0 [ 1022.085503][T12391] kmem_cache_alloc_noprof+0x9e/0x690 [ 1022.085517][T12391] ? __proc_create+0x560/0xae0 [ 1022.085531][T12391] __proc_create+0x560/0xae0 [ 1022.085545][T12391] ? __pfx___proc_create+0x10/0x10 [ 1022.085561][T12391] proc_mkdir+0x3e/0x120 [ 1022.085572][T12391] cache_register_net+0x263/0x4c0 [ 1022.085585][T12391] nfsd_idmap_init+0x160/0x1f0 [ 1022.085595][T12391] ? nfsd_net_init+0x5b/0x530 [ 1022.085609][T12391] nfsd_net_init+0x71/0x530 [ 1022.085623][T12391] ops_init+0x35d/0x5d0 [ 1022.085641][T12391] setup_net+0x118/0x350 [ 1022.085659][T12391] ? __pfx_setup_net+0x10/0x10 [ 1022.085673][T12391] ? __ns_common_init+0x2fc/0x4a0 [ 1022.085691][T12391] copy_net_ns+0x53b/0x780 [ 1022.085705][T12391] create_new_namespaces+0x3f0/0x6b0 [ 1022.085720][T12391] ? security_capable+0x7e/0x2c0 [ 1022.085735][T12391] unshare_nsproxy_namespaces+0x149/0x190 [ 1022.085750][T12391] ksys_unshare+0x5d8/0x970 [ 1022.085768][T12391] ? __pfx_ksys_unshare+0x10/0x10 [ 1022.085782][T12391] ? __pfx_ksys_write+0x10/0x10 [ 1022.085800][T12391] __x64_sys_unshare+0x38/0x50 [ 1022.085813][T12391] do_syscall_64+0x166/0x520 [ 1022.085826][T12391] ? trace_irq_disable+0x3b/0x140 [ 1022.085839][T12391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.085849][T12391] ? clear_bhb_loop+0x70/0xc0 [ 1022.085861][T12391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.085871][T12391] RIP: 0033:0x7f8fc857e559 [ 1022.085881][T12391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.085890][T12391] RSP: 002b:00007f8fc67d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1022.085901][T12391] RAX: ffffffffffffffda RBX: 00007f8fc8805fa0 RCX: 00007f8fc857e559 [ 1022.085908][T12391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1022.085914][T12391] RBP: 00007f8fc8615ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1022.085920][T12391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1022.085926][T12391] R13: 00007f8fc8806038 R14: 00007f8fc8805fa0 R15: 00007ffdc28cab08 [ 1022.085944][T12391] [ 1022.533388][T12389] rxe_eth0 speed is unknown, defaulting to 1000 [ 1028.783379][ T5744] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1028.933399][ T5744] usb 7-1: Using ep0 maxpacket: 16 [ 1028.934276][ T5744] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1028.935599][ T5744] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.935621][ T5744] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1028.938433][ T5744] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.938456][ T5744] usb 7-1: Product: syz [ 1028.938469][ T5744] usb 7-1: Manufacturer: syz [ 1028.938482][ T5744] usb 7-1: SerialNumber: syz [ 1028.955834][ T5744] usb 7-1: 0:2 : does not exist [ 1029.178292][ T5744] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1030.103906][ T5744] usb 7-1: USB disconnect, device number 25 [ 1030.162776][T12419] udevd[12419]: setting owner of /dev/bus/usb/007/025 to uid=0, gid=0 failed: No such file or directory [ 1030.304494][T12419] udevd[12419]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1030.733002][T12434] FAULT_INJECTION: forcing a failure. [ 1030.733002][T12434] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.733038][T12434] CPU: 1 UID: 0 PID: 12434 Comm: syz.6.1071 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1030.733065][T12434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1030.733076][T12434] Call Trace: [ 1030.733084][T12434] [ 1030.733092][T12434] dump_stack_lvl+0xe8/0x150 [ 1030.733125][T12434] should_fail_ex+0x46b/0x600 [ 1030.733159][T12434] should_failslab+0xa8/0x100 [ 1030.733179][T12434] ? __proc_create+0x560/0xae0 [ 1030.733199][T12434] kmem_cache_alloc_noprof+0x9e/0x690 [ 1030.733226][T12434] ? __proc_create+0x560/0xae0 [ 1030.733250][T12434] __proc_create+0x560/0xae0 [ 1030.733271][T12434] ? rt_write_unlock+0x19e/0x360 [ 1030.733294][T12434] ? __pfx___proc_create+0x10/0x10 [ 1030.733314][T12434] ? rt_write_unlock+0x1aa/0x360 [ 1030.733339][T12434] ? proc_register+0x5d8/0x7f0 [ 1030.733359][T12434] proc_create_data+0xa5/0x1a0 [ 1030.733382][T12434] cache_register_net+0x30d/0x4c0 [ 1030.733406][T12434] nfsd_idmap_init+0x160/0x1f0 [ 1030.733425][T12434] ? nfsd_net_init+0x5b/0x530 [ 1030.733450][T12434] nfsd_net_init+0x71/0x530 [ 1030.733475][T12434] ops_init+0x35d/0x5d0 [ 1030.733506][T12434] setup_net+0x118/0x350 [ 1030.733528][T12434] ? __pfx_setup_net+0x10/0x10 [ 1030.733552][T12434] ? __ns_common_init+0x2fc/0x4a0 [ 1030.733581][T12434] copy_net_ns+0x53b/0x780 [ 1030.733606][T12434] create_new_namespaces+0x3f0/0x6b0 [ 1030.733634][T12434] ? security_capable+0x7e/0x2c0 [ 1030.733661][T12434] unshare_nsproxy_namespaces+0x149/0x190 [ 1030.733691][T12434] ksys_unshare+0x5d8/0x970 [ 1030.733724][T12434] ? __pfx_ksys_unshare+0x10/0x10 [ 1030.733758][T12434] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 1030.733781][T12434] __x64_sys_unshare+0x38/0x50 [ 1030.733807][T12434] do_syscall_64+0x166/0x520 [ 1030.733831][T12434] ? trace_irq_disable+0x3b/0x140 [ 1030.733855][T12434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.733874][T12434] ? clear_bhb_loop+0x70/0xc0 [ 1030.733897][T12434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.733916][T12434] RIP: 0033:0x7f8fc857e559 [ 1030.733933][T12434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.733958][T12434] RSP: 002b:00007f8fc67d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1030.733979][T12434] RAX: ffffffffffffffda RBX: 00007f8fc8805fa0 RCX: 00007f8fc857e559 [ 1030.733994][T12434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1030.734006][T12434] RBP: 00007f8fc8615ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1030.734018][T12434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1030.734030][T12434] R13: 00007f8fc8806038 R14: 00007f8fc8805fa0 R15: 00007ffdc28cab08 [ 1030.734063][T12434] [ 1031.141401][T12438] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1031.141716][T12438] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1031.156561][T12438] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1031.157280][T12438] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1031.165433][T12438] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1033.203482][ T5597] Bluetooth: hci1: command 0x0c1a tx timeout [ 1033.203500][ T5601] Bluetooth: hci5: command 0x0c1a tx timeout [ 1033.203524][ T5597] Bluetooth: hci0: command 0x0406 tx timeout [ 1033.203533][ T5601] Bluetooth: hci3: command 0x0406 tx timeout [ 1033.203595][T10782] Bluetooth: hci6: command 0x0c1a tx timeout [ 1034.654728][T12439] rxe_eth0 speed is unknown, defaulting to 1000 [ 1035.289017][ T9527] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1035.292349][ T9527] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1035.314875][ T9527] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1035.446567][ T9527] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1035.448686][ T9527] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1037.331116][ T10] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1037.504187][ T10] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1037.505536][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.505567][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.505603][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.558407][ T10] usb 7-1: config 0 descriptor?? [ 1037.645775][T12389] syz_tun (unregistering): left allmulticast mode [ 1037.683449][ T9527] Bluetooth: hci2: command tx timeout [ 1037.782807][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 1037.782924][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1037.882516][ T10] usb 7-1: USB disconnect, device number 26 [ 1038.169062][T12111] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1038.208445][T12111] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1038.210765][T12451] rxe_eth0 speed is unknown, defaulting to 1000 [ 1038.323399][ T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1038.494385][ T10] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1038.527469][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.527504][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.527539][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.591633][ T10] usb 7-1: config 0 descriptor?? [ 1038.731892][ T1451] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.928003][T12111] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1038.962522][T12111] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1038.995363][T12111] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1039.074216][T12111] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1039.403042][T12111] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1039.425072][ T10] aiptek 7-1:0.0: Aiptek using 400 ms programming speed [ 1039.438571][T12111] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1039.495294][ T10] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input8 [ 1039.564034][ T10] input: failed to attach handler kbd to device input8, error: -5 [ 1039.625574][ T10] usb 7-1: USB disconnect, device number 27 [ 1039.729252][ T1451] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.763387][ T9527] Bluetooth: hci2: command tx timeout [ 1040.136958][ T1451] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.781084][T12122] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1040.922767][T12122] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1041.489532][ T1451] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.612297][T12122] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1041.647182][T12122] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1041.651249][T12122] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1041.702094][T12122] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1041.719293][T12122] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1041.756746][T12122] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1041.843791][ T9527] Bluetooth: hci2: command tx timeout [ 1042.080726][T12542] syzkaller0: entered promiscuous mode [ 1042.080753][T12542] syzkaller0: entered allmulticast mode [ 1042.109033][T12542] tipc: Started in network mode [ 1042.109066][T12542] tipc: Node identity 7e87ca9f793a, cluster identity 4711 [ 1042.174938][T12542] tipc: Enabled bearer , priority 0 [ 1042.341642][T12542] tipc: Resetting bearer [ 1042.383702][T12541] tipc: Resetting bearer [ 1042.499205][T12541] tipc: Disabling bearer [ 1042.603445][ T36] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1042.773611][ T36] usb 7-1: Using ep0 maxpacket: 16 [ 1042.782128][ T36] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1042.802119][ T36] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.802144][ T36] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1042.842447][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.842475][ T36] usb 7-1: Product: syz [ 1042.842489][ T36] usb 7-1: Manufacturer: syz [ 1042.842503][ T36] usb 7-1: SerialNumber: syz [ 1042.911572][ T36] usb 7-1: 0:2 : does not exist [ 1042.911665][ T36] usb 7-1: unit 6 not found! [ 1043.125676][ T36] usb 7-1: USB disconnect, device number 28 [ 1043.394272][ T1451] bridge_slave_1: left allmulticast mode [ 1043.394309][ T1451] bridge_slave_1: left promiscuous mode [ 1043.394564][ T1451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.684950][ T1451] bridge_slave_0: left allmulticast mode [ 1043.684985][ T1451] bridge_slave_0: left promiscuous mode [ 1043.685228][ T1451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.047904][ T9527] Bluetooth: hci2: command tx timeout [ 1045.623416][T12571] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 1046.408075][T10782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1046.431367][T10782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1046.433369][ T5838] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1046.441010][T10782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1046.458443][T10782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1046.460512][T10782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1046.583364][ T5838] usb 4-1: Using ep0 maxpacket: 16 [ 1046.584301][ T5838] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1046.585893][ T5838] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.585968][ T5838] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1046.586003][ T5838] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1046.590045][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.590068][ T5838] usb 4-1: Product: syz [ 1046.590081][ T5838] usb 4-1: Manufacturer: syz [ 1046.590095][ T5838] usb 4-1: SerialNumber: syz [ 1046.660590][ T5838] usb 4-1: 0:2 : does not exist [ 1046.660672][ T5838] usb 4-1: unit 6 not found! [ 1046.728321][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1087'. [ 1046.832876][ T5838] usb 4-1: USB disconnect, device number 2 [ 1046.898964][T12471] udevd[12471]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1047.384547][ T1451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.464844][ T1451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.506466][ T1451] bond0 (unregistering): Released all slaves [ 1047.517333][ T1451] bond1 (unregistering): Released all slaves [ 1047.546588][ T1451] bond2 (unregistering): Released all slaves [ 1047.946987][T12451] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.947112][T12451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.947276][T12451] bridge_slave_0: entered allmulticast mode [ 1047.950538][T12451] bridge_slave_0: entered promiscuous mode [ 1048.008337][T12451] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.008536][T12451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.008704][T12451] bridge_slave_1: entered allmulticast mode [ 1048.011403][T12451] bridge_slave_1: entered promiscuous mode [ 1048.152559][T12451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.189779][T12451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1048.654924][T10782] Bluetooth: hci3: command tx timeout [ 1048.774670][ T9527] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1048.813623][ T9527] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1048.817055][ T9527] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1048.849311][ T9527] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1048.852822][ T9527] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1049.117439][ T37] audit: type=1326 audit(1792249013.968:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12598 comm="syz.6.1092" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc857e559 code=0x7ffc0000 [ 1049.117496][ T37] audit: type=1326 audit(1792249013.968:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12598 comm="syz.6.1092" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc857e559 code=0x7ffc0000 [ 1049.132332][ T37] audit: type=1326 audit(1792249013.978:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12598 comm="syz.6.1092" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f8fc857e559 code=0x7ffc0000 [ 1049.330184][ T37] audit: type=1326 audit(1792249014.178:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12598 comm="syz.6.1092" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc857e559 code=0x7ffc0000 [ 1049.330234][ T37] audit: type=1326 audit(1792249014.178:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12598 comm="syz.6.1092" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc857e559 code=0x7ffc0000 [ 1050.318388][T12451] team0: Port device team_slave_0 added [ 1050.723351][ T9527] Bluetooth: hci3: command tx timeout [ 1051.002357][T12451] team0: Port device team_slave_1 added [ 1051.002551][T12596] syzkaller1: entered promiscuous mode [ 1051.002564][T12596] syzkaller1: entered allmulticast mode [ 1051.133315][ T9527] Bluetooth: hci4: command tx timeout [ 1051.213430][ T36] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 1051.364184][ T36] usb 7-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1051.365171][ T36] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.366914][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.366929][ T36] usb 7-1: Product: syz [ 1051.366936][ T36] usb 7-1: Manufacturer: syz [ 1051.366943][ T36] usb 7-1: SerialNumber: syz [ 1051.414671][ T36] usb 7-1: config 0 descriptor?? [ 1051.421197][ T36] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1051.739998][T12451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1051.740011][T12451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1051.740063][T12451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1051.790683][T12573] rxe_eth0 speed is unknown, defaulting to 1000 [ 1051.820724][T12451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1051.820741][T12451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1051.820767][T12451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.902495][ T36] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 1051.902611][ T36] gspca_pac7302 7-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1052.034751][ T36] usb 7-1: USB disconnect, device number 29 [ 1052.803534][ T9527] Bluetooth: hci3: command tx timeout [ 1052.807722][T12644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1096'. [ 1052.956429][T12451] hsr_slave_0: entered promiscuous mode [ 1052.974817][T12451] hsr_slave_1: entered promiscuous mode [ 1052.982897][T12451] debugfs: 'hsr0' already exists in 'hsr' [ 1052.982923][T12451] Cannot create hsr debugfs directory [ 1053.205956][ T9527] Bluetooth: hci4: command tx timeout [ 1054.883343][ T9527] Bluetooth: hci3: command tx timeout [ 1055.284587][ T9527] Bluetooth: hci4: command tx timeout [ 1055.403415][ T1451] hsr_slave_0: left promiscuous mode [ 1055.446417][ T1451] hsr_slave_1: left promiscuous mode [ 1055.447792][ T1451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1055.447817][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1055.498076][ T1451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1055.498104][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1055.573377][ T5718] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1055.745123][ T1451] veth1_macvtap: left promiscuous mode [ 1055.768797][ T1451] veth0_macvtap: left promiscuous mode [ 1055.769007][ T1451] veth1_vlan: left promiscuous mode [ 1055.769117][ T1451] veth0_vlan: left promiscuous mode [ 1055.813317][ T5718] usb 7-1: Using ep0 maxpacket: 16 [ 1055.815891][ T5718] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1055.816938][ T5718] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.816960][ T5718] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1055.819043][ T5718] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.819065][ T5718] usb 7-1: Product: syz [ 1055.819074][ T5718] usb 7-1: Manufacturer: syz [ 1055.819081][ T5718] usb 7-1: SerialNumber: syz [ 1055.870580][ T5718] usb 7-1: 0:2 : does not exist [ 1056.112471][ T5718] usb 7-1: USB disconnect, device number 30 [ 1056.794120][ T1451] team0 (unregistering): Port device team_slave_1 removed [ 1056.834018][ T1451] team0 (unregistering): Port device team_slave_0 removed [ 1057.031044][T12600] rxe_eth0 speed is unknown, defaulting to 1000 [ 1057.052240][T12653] syzkaller1: entered promiscuous mode [ 1057.052266][T12653] syzkaller1: entered allmulticast mode [ 1057.363398][ T9527] Bluetooth: hci4: command tx timeout [ 1057.383702][T12661] syzkaller1: entered promiscuous mode [ 1057.383719][T12661] syzkaller1: entered allmulticast mode [ 1059.993447][ T8347] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 1060.161124][ T8347] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1060.162099][ T8347] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1060.162116][ T8347] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1060.162133][ T8347] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1060.216794][ T8347] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.216812][ T8347] usb 7-1: Product: syz [ 1060.216819][ T8347] usb 7-1: Manufacturer: syz [ 1060.216826][ T8347] usb 7-1: SerialNumber: syz [ 1060.271443][ T8347] usb 7-1: config 0 descriptor?? [ 1060.281049][T12693] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1060.593370][ T8347] rc_core: IR keymap rc-streamzap not found [ 1060.593391][ T8347] Registered IR keymap rc-empty [ 1060.822194][ T8347] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1060.909761][ T8347] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input9 [ 1061.256568][ T8347] usb 7-1: USB disconnect, device number 31 [ 1063.402521][ T5251] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1067.007709][T12767] kvm [12766]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 1067.034193][T12767] kvm [12766]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 1067.538600][T12600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.538727][T12600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.538859][T12600] bridge_slave_0: entered allmulticast mode [ 1067.577446][T12600] bridge_slave_0: entered promiscuous mode [ 1067.590917][T12573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.590986][T12573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.591109][T12573] bridge_slave_0: entered allmulticast mode [ 1067.594422][T12573] bridge_slave_0: entered promiscuous mode [ 1067.635470][T12600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.635549][T12600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.635690][T12600] bridge_slave_1: entered allmulticast mode [ 1067.637385][T12600] bridge_slave_1: entered promiscuous mode [ 1067.660708][T12573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.660834][T12573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.661034][T12573] bridge_slave_1: entered allmulticast mode [ 1067.698012][T12573] bridge_slave_1: entered promiscuous mode [ 1067.929014][T12600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.960383][T12573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.965153][T12600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.969100][T12573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1068.291773][T12600] team0: Port device team_slave_0 added [ 1068.373590][T12573] team0: Port device team_slave_0 added [ 1068.410985][T12600] team0: Port device team_slave_1 added [ 1068.418836][T12573] team0: Port device team_slave_1 added [ 1069.268576][T12600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1069.268589][T12600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.268603][T12600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1069.273119][T12573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1069.273130][T12573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.273144][T12573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1069.388277][T12573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1069.388290][T12573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.388304][T12573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1069.391916][T12600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1069.391941][T12600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.391956][T12600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1069.766249][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1069.766319][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1071.759604][T12573] hsr_slave_0: entered promiscuous mode [ 1071.780072][T12573] hsr_slave_1: entered promiscuous mode [ 1071.781027][T12573] debugfs: 'hsr0' already exists in 'hsr' [ 1071.781052][T12573] Cannot create hsr debugfs directory [ 1071.834830][T12600] hsr_slave_0: entered promiscuous mode [ 1071.837619][T12600] hsr_slave_1: entered promiscuous mode [ 1071.838115][T12600] debugfs: 'hsr0' already exists in 'hsr' [ 1071.838130][T12600] Cannot create hsr debugfs directory [ 1072.528355][ T5251] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1073.272212][T12451] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1073.376019][T12451] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1073.437363][T12451] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1073.498387][T12451] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1075.194068][T12451] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1075.346208][T12451] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1075.567130][T12451] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1075.689004][T12451] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1078.887830][T12451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1079.009023][T12451] 8021q: adding VLAN 0 to HW filter on device team0 [ 1079.045245][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.045323][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1079.083165][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.085078][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.725188][T10854] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 1079.968528][T10854] usb 7-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1079.971973][T10854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.076998][T10854] usb 7-1: config 0 descriptor?? [ 1080.246764][T10854] pwc: Samsung MPC-C10 USB webcam detected. [ 1080.309802][T12868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.310709][T12868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.365045][ T5718] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1080.528529][ T5718] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1080.529695][ T5718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.529712][ T5718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.529732][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.607483][T10854] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1080.620247][T10854] pwc: recv_control_msg error -71 req 02 val 2700 [ 1080.624103][T10854] pwc: recv_control_msg error -71 req 04 val 1700 [ 1080.624999][T10854] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1080.627125][T10854] pwc: recv_control_msg error -71 req 04 val 1000 [ 1080.628398][T10854] pwc: recv_control_msg error -71 req 04 val 1300 [ 1080.633404][T10854] pwc: recv_control_msg error -71 req 04 val 1400 [ 1080.633913][T10854] pwc: recv_control_msg error -71 req 02 val 2000 [ 1080.634844][T10854] pwc: recv_control_msg error -71 req 02 val 2100 [ 1080.636286][T10854] pwc: recv_control_msg error -71 req 02 val 2200 [ 1080.645428][T10854] pwc: recv_control_msg error -71 req 06 val 0600 [ 1080.646130][T10854] pwc: recv_control_msg error -71 req 04 val 1500 [ 1080.646611][T10854] pwc: recv_control_msg error -71 req 02 val 2500 [ 1080.651105][T10854] pwc: recv_control_msg error -71 req 02 val 2400 [ 1080.651587][T10854] pwc: recv_control_msg error -71 req 02 val 2600 [ 1080.663598][T10854] pwc: recv_control_msg error -71 req 02 val 2900 [ 1080.665797][T10854] pwc: recv_control_msg error -71 req 02 val 2800 [ 1080.738421][T10854] pwc: recv_control_msg error -71 req 04 val 1100 [ 1080.740277][T10854] pwc: recv_control_msg error -71 req 04 val 1200 [ 1080.768132][ T5718] usb 4-1: config 0 descriptor?? [ 1080.856744][T10854] pwc: Registered as video103. [ 1080.922134][T10854] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input10 [ 1081.066803][ T5718] usbhid 4-1:0.0: can't add hid device: -71 [ 1081.066896][ T5718] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1081.119957][ T5251] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1081.222889][ T5718] usb 4-1: USB disconnect, device number 3 [ 1081.492252][T10854] usb 7-1: USB disconnect, device number 32 [ 1082.023380][ T5718] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1082.186561][ T5718] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1082.187516][ T5718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1082.187532][ T5718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1082.187553][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.319191][ T5718] usb 4-1: config 0 descriptor?? [ 1082.785257][T12872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.850077][T12872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.068651][ T1451] bridge_slave_1: left allmulticast mode [ 1083.068678][ T1451] bridge_slave_1: left promiscuous mode [ 1083.068857][ T1451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.281215][ T5718] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 1083.305700][ T5718] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 1083.309829][ T1451] bridge_slave_0: left allmulticast mode [ 1083.309852][ T1451] bridge_slave_0: left promiscuous mode [ 1083.310021][ T1451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.445314][ T5718] input: failed to attach handler kbd to device input11, error: -5 [ 1083.516568][ T5718] usb 4-1: USB disconnect, device number 4 [ 1084.449072][ T1451] bridge_slave_1: left allmulticast mode [ 1084.449105][ T1451] bridge_slave_1: left promiscuous mode [ 1084.449453][ T1451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.828822][ T1451] bridge_slave_0: left allmulticast mode [ 1084.828847][ T1451] bridge_slave_0: left promiscuous mode [ 1084.829002][ T1451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.466650][ T1451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.487342][T12894] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1086.646209][ T1451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1086.709498][ T37] audit: type=1326 audit(1792249052.542:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12898 comm="syz.3.1134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e6d0e559 code=0x7ffc0000 [ 1086.711509][ T37] audit: type=1326 audit(1792249052.552:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12898 comm="syz.3.1134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7ff8e6d0e559 code=0x7ffc0000 [ 1086.773155][ T1451] bond0 (unregistering): Released all slaves [ 1086.799287][ T37] audit: type=1326 audit(1792249052.652:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12898 comm="syz.3.1134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e6d0e559 code=0x7ffc0000 [ 1086.799328][ T37] audit: type=1326 audit(1792249052.652:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12898 comm="syz.3.1134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e6d0e559 code=0x7ffc0000 [ 1086.814958][ T37] audit: type=1326 audit(1792249052.662:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12898 comm="syz.3.1134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff8e6d0e559 code=0x7ffc0000 [ 1086.815007][ T37] audit: type=1326 audit(1792249052.662:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12898 comm="syz.3.1134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e6d0e559 code=0x7ffc0000 [ 1086.816117][ T37] audit: type=1326 audit(1792249052.662:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12898 comm="syz.3.1134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e6d0e559 code=0x7ffc0000 [ 1088.315310][ T1451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1088.373792][ T1451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1088.415425][ T1451] bond0 (unregistering): Released all slaves [ 1089.675796][T12451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1092.072865][ T5251] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1093.226364][ T1451] hsr_slave_0: left promiscuous mode [ 1093.246378][T12955] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1093.264570][ T1451] hsr_slave_1: left promiscuous mode [ 1093.265964][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1093.314219][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1093.580040][ T1451] hsr_slave_0: left promiscuous mode [ 1093.616803][ T1451] hsr_slave_1: left promiscuous mode [ 1093.617893][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1093.669715][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1094.354146][ T1451] team0 (unregistering): Port device team_slave_1 removed [ 1094.424030][ T1451] team0 (unregistering): Port device team_slave_0 removed [ 1095.385764][ T1451] team0 (unregistering): Port device team_slave_1 removed [ 1095.464088][ T1451] team0 (unregistering): Port device team_slave_0 removed [ 1096.502562][T10782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1096.553955][T10782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1096.611158][T10782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1096.663669][ T5597] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1096.687370][ T5597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1098.803634][ T9527] Bluetooth: hci1: command tx timeout [ 1099.306311][T12984] rxe_eth0 speed is unknown, defaulting to 1000 [ 1100.622762][T13031] syzkaller1: entered promiscuous mode [ 1100.622789][T13031] syzkaller1: entered allmulticast mode [ 1100.828789][T13044] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1100.874796][T13044] md: array md0 already has disks! [ 1100.893515][ T9527] Bluetooth: hci1: command tx timeout [ 1100.971833][T13044] md: could not open device unknown-block(1,1). [ 1100.971994][T13044] md: error, md_import_device() returned -16 [ 1101.846278][T12573] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1101.908058][T12573] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1101.959417][T12573] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1101.987985][T12573] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1101.992883][T13061] rxe_eth0 speed is unknown, defaulting to 1000 [ 1102.003356][ T5723] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1102.157191][ T5723] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1102.161702][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.220296][ T5723] usb 4-1: config 0 descriptor?? [ 1102.346790][T12573] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1102.390512][T12573] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1102.475053][ T5723] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1102.890140][T12573] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1102.929216][T12573] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1102.961218][ T5723] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 1102.961243][ T5723] [drm] Initialized udl on minor 1 [ 1102.963397][ T9527] Bluetooth: hci1: command tx timeout [ 1103.012250][ T5723] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1103.044507][ T5723] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1103.079665][ T5723] usb 4-1: USB disconnect, device number 5 [ 1103.980373][T12600] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1104.016447][T12600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1104.020895][T12600] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1104.108404][T12600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1104.170208][T12600] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1104.222531][T12600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1104.228566][T12600] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1104.362745][T12600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1105.051644][ T9527] Bluetooth: hci1: command tx timeout [ 1105.136956][T12984] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.137184][T12984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.137367][T12984] bridge_slave_0: entered allmulticast mode [ 1105.139663][T12984] bridge_slave_0: entered promiscuous mode [ 1105.177711][T12984] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.177871][T12984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.178046][T12984] bridge_slave_1: entered allmulticast mode [ 1105.182233][T12984] bridge_slave_1: entered promiscuous mode [ 1105.325766][ T1451] bridge_slave_1: left allmulticast mode [ 1105.325803][ T1451] bridge_slave_1: left promiscuous mode [ 1105.326115][ T1451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.496203][ T1451] bridge_slave_0: left allmulticast mode [ 1105.496228][ T1451] bridge_slave_0: left promiscuous mode [ 1105.496383][ T1451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.784521][ T1451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1106.845452][ T1451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1106.876596][ T1451] bond0 (unregistering): Released all slaves [ 1107.172779][T12984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1107.211515][T12984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1107.791294][ T5597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1107.868112][ T5597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1107.876452][ T5597] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1107.880510][ T5597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1107.881364][ T5597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1107.882830][T12984] team0: Port device team_slave_0 added [ 1108.074269][T12984] team0: Port device team_slave_1 added [ 1108.953281][ T1451] hsr_slave_0: left promiscuous mode [ 1109.155104][ T1451] hsr_slave_1: left promiscuous mode [ 1109.156343][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1109.189707][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1109.714905][ T9527] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1109.747299][ T9527] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1109.769439][ T9527] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1109.782761][ T9527] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1109.783716][ T9527] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1110.165595][ T5597] Bluetooth: hci2: command tx timeout [ 1111.275844][ T1451] team0 (unregistering): Port device team_slave_1 removed [ 1111.397252][ T1451] team0 (unregistering): Port device team_slave_0 removed [ 1111.893452][T12984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1111.893471][T12984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.893496][T12984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1112.013497][ T5597] Bluetooth: hci3: command tx timeout [ 1112.255824][ T5597] Bluetooth: hci2: command tx timeout [ 1112.875931][T12984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1112.875944][T12984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1112.875958][T12984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1113.278107][T12984] hsr_slave_0: entered promiscuous mode [ 1113.286916][T12984] hsr_slave_1: entered promiscuous mode [ 1113.299909][T12984] debugfs: 'hsr0' already exists in 'hsr' [ 1113.299937][T12984] Cannot create hsr debugfs directory [ 1113.884436][T13161] rxe_eth0 speed is unknown, defaulting to 1000 [ 1114.083395][ T5597] Bluetooth: hci3: command tx timeout [ 1114.323488][ T5597] Bluetooth: hci2: command tx timeout [ 1115.510586][T13186] rxe_eth0 speed is unknown, defaulting to 1000 [ 1116.163440][ T5597] Bluetooth: hci3: command tx timeout [ 1116.403359][ T5597] Bluetooth: hci2: command tx timeout [ 1118.243444][ T5597] Bluetooth: hci3: command tx timeout [ 1122.194631][T13297] syz.6.1171 (13297) used greatest stack depth: 18720 bytes left [ 1123.354966][T13161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.355066][T13161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.355248][T13161] bridge_slave_0: entered allmulticast mode [ 1123.403552][T13161] bridge_slave_0: entered promiscuous mode [ 1123.456499][T13161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.456635][T13161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.456822][T13161] bridge_slave_1: entered allmulticast mode [ 1123.459687][T13161] bridge_slave_1: entered promiscuous mode [ 1123.776345][T13161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1123.957616][T13161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.573534][T13161] team0: Port device team_slave_0 added [ 1124.877638][T13161] team0: Port device team_slave_1 added [ 1124.877959][T12984] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1124.927660][T12984] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1125.058699][T12984] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1125.090808][T12984] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1125.278530][T12984] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1125.309750][T12984] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1125.336517][T13161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.336529][T13161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.336542][T13161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.341733][T12984] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1125.438602][T12984] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1125.439757][T13186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.439879][T13186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.439986][T13186] bridge_slave_0: entered allmulticast mode [ 1125.449114][T13186] bridge_slave_0: entered promiscuous mode [ 1125.459494][T13161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.459509][T13161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.459534][T13161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.493206][T13186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.493320][T13186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.493506][T13186] bridge_slave_1: entered allmulticast mode [ 1125.499218][T13186] bridge_slave_1: entered promiscuous mode [ 1126.108297][T13186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1126.168531][T13186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1126.199066][T13161] hsr_slave_0: entered promiscuous mode [ 1126.199896][T13161] hsr_slave_1: entered promiscuous mode [ 1126.200401][T13161] debugfs: 'hsr0' already exists in 'hsr' [ 1126.200423][T13161] Cannot create hsr debugfs directory [ 1126.273812][T13186] team0: Port device team_slave_0 added [ 1126.484721][T13186] team0: Port device team_slave_1 added [ 1126.640711][T13186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1126.640728][T13186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1126.640752][T13186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1126.671049][T13186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1126.671068][T13186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1126.671093][T13186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1127.173363][ T36] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1127.308863][T13186] hsr_slave_0: entered promiscuous mode [ 1127.310165][T13186] hsr_slave_1: entered promiscuous mode [ 1127.311064][T13186] debugfs: 'hsr0' already exists in 'hsr' [ 1127.311088][T13186] Cannot create hsr debugfs directory [ 1127.323251][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 1127.341773][ T36] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1127.343021][ T36] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 1127.369218][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.369244][ T36] usb 4-1: Product: syz [ 1127.369252][ T36] usb 4-1: Manufacturer: syz [ 1127.369259][ T36] usb 4-1: SerialNumber: syz [ 1127.398738][ T36] usb 4-1: config 0 descriptor?? [ 1127.417191][ T36] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1127.417537][ T36] dvb-usb: bulk message failed: -22 (2/0) [ 1127.443496][ T36] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1127.444280][ T36] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1127.444343][ T36] usb 4-1: media controller created [ 1127.476034][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1127.503892][ T36] usb 4-1: selecting invalid altsetting 7 [ 1127.503913][ T36] cxusb: set interface failed [ 1127.503926][ T36] dvb-usb: bulk message failed: -22 (1/0) [ 1127.543763][ T36] DVB: Unable to find symbol lgdt330x_attach() [ 1127.543789][ T36] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1127.638649][ T998] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1127.663301][ T36] rc_core: IR keymap rc-dvico-portable not found [ 1127.663321][ T36] Registered IR keymap rc-empty [ 1127.668890][ T36] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1127.671318][ T36] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input12 [ 1127.706791][ T36] dvb-usb: schedule remote query interval to 100 msecs. [ 1127.706814][ T36] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1127.710384][ T36] usb 4-1: USB disconnect, device number 6 [ 1127.783282][ T998] usb 7-1: Using ep0 maxpacket: 16 [ 1127.784197][ T998] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1127.785665][ T998] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.785687][ T998] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1127.787925][ T998] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.787947][ T998] usb 7-1: Product: syz [ 1127.787960][ T998] usb 7-1: Manufacturer: syz [ 1127.787973][ T998] usb 7-1: SerialNumber: syz [ 1127.906235][ T36] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1128.030422][ T998] usb 7-1: 0:2 : does not exist [ 1128.189202][ T998] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1128.458346][ T998] usb 7-1: USB disconnect, device number 33 [ 1128.627070][T12880] udevd[12880]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1128.828304][T12984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1129.241590][T12984] 8021q: adding VLAN 0 to HW filter on device team0 [ 1129.342654][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.342866][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.379243][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.379526][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1129.529136][ T1451] bridge_slave_1: left allmulticast mode [ 1129.529175][ T1451] bridge_slave_1: left promiscuous mode [ 1129.529421][ T1451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.717707][ T1451] bridge_slave_0: left allmulticast mode [ 1129.717742][ T1451] bridge_slave_0: left promiscuous mode [ 1129.717975][ T1451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.223714][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1131.223757][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1131.303644][ T1451] bridge_slave_1: left allmulticast mode [ 1131.303682][ T1451] bridge_slave_1: left promiscuous mode [ 1131.303923][ T1451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.526274][ T1451] bridge_slave_0: left allmulticast mode [ 1131.526301][ T1451] bridge_slave_0: left promiscuous mode [ 1131.526525][ T1451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.486114][ T1451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1132.564771][ T1451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1132.626509][ T1451] bond0 (unregistering): Released all slaves [ 1133.304155][ T1451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1133.465768][ T1451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1133.555335][ T1451] bond0 (unregistering): Released all slaves [ 1138.569922][T13436] FAULT_INJECTION: forcing a failure. [ 1138.569922][T13436] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1138.569958][T13436] CPU: 1 UID: 0 PID: 13436 Comm: syz.6.1197 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1138.569981][T13436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1138.569993][T13436] Call Trace: [ 1138.570000][T13436] [ 1138.570010][T13436] dump_stack_lvl+0xe8/0x150 [ 1138.570045][T13436] should_fail_ex+0x46b/0x600 [ 1138.570083][T13436] get_futex_key+0x1b4/0x1580 [ 1138.570124][T13436] ? __pfx_get_futex_key+0x10/0x10 [ 1138.570155][T13436] ? __pfx_map_create+0x10/0x10 [ 1138.570189][T13436] futex_wake+0x119/0x600 [ 1138.570217][T13436] ? __pfx_futex_wake+0x10/0x10 [ 1138.570238][T13436] ? __sys_bpf+0xaea/0xd90 [ 1138.570267][T13436] ? __seccomp_filter+0x3e4/0x1de0 [ 1138.570296][T13436] do_futex+0x458/0x4e0 [ 1138.570322][T13436] ? __pfx_do_futex+0x10/0x10 [ 1138.570350][T13436] __se_sys_futex+0x3a8/0x450 [ 1138.570377][T13436] ? __pfx___se_sys_futex+0x10/0x10 [ 1138.570405][T13436] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 1138.570423][T13436] ? __x64_sys_futex+0x21/0xf0 [ 1138.570446][T13436] do_syscall_64+0x166/0x520 [ 1138.570471][T13436] ? trace_irq_disable+0x3b/0x140 [ 1138.570495][T13436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.570514][T13436] ? clear_bhb_loop+0x70/0xc0 [ 1138.570536][T13436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.570555][T13436] RIP: 0033:0x7f8fc857e559 [ 1138.570574][T13436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.570590][T13436] RSP: 002b:00007f8fc67d60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1138.570611][T13436] RAX: ffffffffffffffda RBX: 00007f8fc8805fa8 RCX: 00007f8fc857e559 [ 1138.570625][T13436] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8fc8805fac [ 1138.570636][T13436] RBP: 00007f8fc8805fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1138.570650][T13436] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1138.570662][T13436] R13: 00007f8fc8806038 R14: 00007ffdc28caa20 R15: 00007ffdc28cab08 [ 1138.570702][T13436] [ 1138.993297][ T1451] hsr_slave_0: left promiscuous mode [ 1139.035233][ T1451] hsr_slave_1: left promiscuous mode [ 1139.036400][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1139.075440][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1139.275033][ T1451] hsr_slave_0: left promiscuous mode [ 1139.313347][ T1451] hsr_slave_1: left promiscuous mode [ 1139.314633][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1139.367022][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1140.087797][ T1451] team0 (unregistering): Port device team_slave_1 removed [ 1140.168652][ T1451] team0 (unregistering): Port device team_slave_0 removed [ 1141.234616][ T1451] team0 (unregistering): Port device team_slave_1 removed [ 1141.340139][ T1451] team0 (unregistering): Port device team_slave_0 removed [ 1142.265002][T12984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1144.593462][T12984] veth0_vlan: entered promiscuous mode [ 1144.739702][T12984] veth1_vlan: entered promiscuous mode [ 1145.406248][T12984] veth0_macvtap: entered promiscuous mode [ 1145.425615][T12984] veth1_macvtap: entered promiscuous mode [ 1145.503478][T12984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1145.678665][T12984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1145.834080][ T1172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.834710][ T1172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.834749][ T1172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.834780][ T1172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.265187][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1147.265210][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.667390][ T1451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.667407][ T1451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1149.719304][T13161] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1150.587020][T13161] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1151.224287][T13161] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1152.855528][T13161] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1152.860955][T13161] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1153.108711][T13161] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1153.153287][T13161] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1153.251363][T13161] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1155.249357][T13161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.249893][T13186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1155.411743][T13186] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1155.434798][T13186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1155.554544][T13186] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1155.660234][T13186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1155.826546][T13186] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1155.849595][T13186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1155.915069][T13186] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1156.057811][T13161] 8021q: adding VLAN 0 to HW filter on device team0 [ 1156.110837][T13606] rxe_eth0 speed is unknown, defaulting to 1000 [ 1156.173411][ T2137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.173630][ T2137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1156.233026][ T1412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.243544][ T1412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1157.068887][T13186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1157.242251][T13186] 8021q: adding VLAN 0 to HW filter on device team0 [ 1157.334459][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.338052][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1157.411432][ T1441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.461342][ T1441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1160.188958][T13161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1160.380125][T13186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1160.756183][T13186] veth0_vlan: entered promiscuous mode [ 1160.789490][T13186] veth1_vlan: entered promiscuous mode [ 1160.963744][T10810] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1161.061349][T13683] syzkaller1: entered promiscuous mode [ 1161.061366][T13683] syzkaller1: entered allmulticast mode [ 1161.163375][T13186] veth0_macvtap: entered promiscuous mode [ 1161.169193][T10810] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1161.170721][T10810] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.170772][T10810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.232413][T13186] veth1_macvtap: entered promiscuous mode [ 1161.366147][T13186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1161.477144][T13186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1161.515305][ T1182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.517051][ T1448] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.517131][ T1448] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.517186][ T1448] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.571449][T10810] as10x_usb: device has been detected [ 1161.594952][T10810] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1161.972505][T10810] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1162.403908][T13702] INFO: trying to register non-static key. [ 1162.409752][T13702] The code is fine but needs lockdep annotation, or maybe [ 1162.416863][T13702] you didn't initialize this object before use? [ 1162.423106][T13702] turning off the locking correctness validator. [ 1162.429443][T13702] CPU: 1 UID: 0 PID: 13702 Comm: syz.3.1216 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1162.439348][T13702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1162.449426][T13702] Call Trace: [ 1162.452740][T13702] [ 1162.455683][T13702] dump_stack_lvl+0xe8/0x150 [ 1162.460295][T13702] assign_lock_key+0x133/0x150 [ 1162.465079][T13702] register_lock_class+0xcc/0x2e0 [ 1162.470123][T13702] ? __lock_acquire+0x747/0x2de0 [ 1162.475088][T13702] __lock_acquire+0x10c/0x2de0 [ 1162.479867][T13702] ? __lock_acquire+0x747/0x2de0 [ 1162.484831][T13702] ? __lock_acquire+0x747/0x2de0 [ 1162.489793][T13702] lock_acquire+0x115/0x350 [ 1162.494314][T13702] ? as102_stream_ctrl+0x27/0xc0 [ 1162.499277][T13702] ? as102_stream_ctrl+0x27/0xc0 [ 1162.504236][T13702] ? as102_stream_ctrl+0x27/0xc0 [ 1162.509190][T13702] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 1162.515273][T13702] ? as102_stream_ctrl+0x27/0xc0 [ 1162.520232][T13702] as102_stream_ctrl+0x27/0xc0 [ 1162.525021][T13702] __dvb_frontend_open+0x2ef/0xc40 [ 1162.530155][T13702] ? mutex_lock_nested+0x152/0x1d0 [ 1162.535286][T13702] ? __pfx_dvb_frontend_open+0x10/0x10 [ 1162.540761][T13702] dvb_device_open+0x258/0x350 [ 1162.545548][T13702] chrdev_open+0x4dc/0x600 [ 1162.549972][T13702] ? __pfx_chrdev_open+0x10/0x10 [ 1162.554926][T13702] ? __pfx_chrdev_open+0x10/0x10 [ 1162.559873][T13702] do_dentry_open+0x849/0x1420 [ 1162.564648][T13702] vfs_open+0x3b/0x350 [ 1162.568725][T13702] ? path_openat+0x16a9/0x20a0 [ 1162.573505][T13702] path_openat+0x16c4/0x20a0 [ 1162.578121][T13702] do_file_open+0x23e/0x4a0 [ 1162.582639][T13702] ? __pfx_do_file_open+0x10/0x10 [ 1162.587705][T13702] ? alloc_fd+0x654/0x6d0 [ 1162.592051][T13702] do_sys_openat2+0x115/0x200 [ 1162.596749][T13702] ? __pfx_do_sys_openat2+0x10/0x10 [ 1162.601973][T13702] __x64_sys_openat+0x138/0x170 [ 1162.606843][T13702] do_syscall_64+0x166/0x520 [ 1162.611452][T13702] ? trace_irq_disable+0x3b/0x140 [ 1162.616493][T13702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.622572][T13702] ? clear_bhb_loop+0x70/0xc0 [ 1162.627266][T13702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.633166][T13702] RIP: 0033:0x7ff8e6cced8e [ 1162.637591][T13702] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1162.657211][T13702] RSP: 002b:00007ff8e4f23b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1162.665645][T13702] RAX: ffffffffffffffda RBX: 00007ff8e4f246c0 RCX: 00007ff8e6cced8e [ 1162.673659][T13702] RDX: 0000000000000802 RSI: 00007ff8e4f23c00 RDI: ffffffffffffff9c [ 1162.681649][T13702] RBP: 00007ff8e4f23c00 R08: 0000000000000000 R09: 0000000000000000 [ 1162.689635][T13702] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1162.697623][T13702] R13: 00007ff8e6f96218 R14: 00007ff8e6f96180 R15: 00007fff80e49128 [ 1162.705619][T13702] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1162.715732][T10810] as10x_usb: error during firmware upload part1 [ 1162.716169][T10810] Registered device Abilis Systems DVB-Titan [ 1163.521079][T11719] syz_tun (unregistering): left allmulticast mode [ 1163.726011][ T10] usb 4-1: USB disconnect, device number 7 [ 1163.750252][ T10] Unregistered device Abilis Systems DVB-Titan [ 1163.750864][ T10] as10x_usb: device has been disconnected [ 1164.345624][ T1412] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.366128][ T1412] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.605081][ T1412] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.884543][ T1412] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.333483][ T1412] bridge_slave_1: left allmulticast mode [ 1166.333509][ T1412] bridge_slave_1: left promiscuous mode [ 1166.333661][ T1412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.484048][ T1412] bridge_slave_0: left allmulticast mode [ 1166.484069][ T1412] bridge_slave_0: left promiscuous mode [ 1166.484169][ T1412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.054084][ T1412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1167.133724][ T1412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1167.155289][ T1412] bond0 (unregistering): Released all slaves [ 1167.304813][ T1412] tipc: Left network mode [ 1168.413348][ T1412] hsr_slave_0: left promiscuous mode [ 1168.453418][ T1412] hsr_slave_1: left promiscuous mode [ 1168.453883][ T1412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1168.453896][ T1412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1168.503900][ T1412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1168.503923][ T1412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1168.573496][ T1412] veth1_macvtap: left promiscuous mode [ 1168.573535][ T1412] veth0_macvtap: left promiscuous mode [ 1168.573603][ T1412] veth1_vlan: left promiscuous mode [ 1168.573649][ T1412] veth0_vlan: left promiscuous mode [ 1169.053588][ T1412] team0 (unregistering): Port device team_slave_1 removed [ 1169.073843][ T1412] team0 (unregistering): Port device team_slave_0 removed [ 1169.154934][ T5251] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1169.411255][ T5251] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1169.748767][ T5251] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1170.082614][ T5251] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1171.744735][ T1412] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.024587][ T1412] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.314164][ T1412] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0