last executing test programs: 6.896816206s ago: executing program 0 (id=24): syz_io_uring_setup(0x219, &(0x7f0000000300)={0x0, 0xfffffffd, 0x800, 0x80000001}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x7, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) 6.636863648s ago: executing program 0 (id=26): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 6.494308934s ago: executing program 0 (id=28): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') socket$alg(0x26, 0x5, 0x0) r1 = getpid() pselect6(0x40, &(0x7f0000000100)={0x0, 0x8, 0x2, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000000140)={0x8, 0x70, 0x0, {r0}}, 0x20) 5.531343696s ago: executing program 0 (id=34): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_procfs$pagemap(0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x10, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x41}, @dstopts={0x4}]}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x805, 0x0) r2 = syz_io_uring_setup(0xa39, &(0x7f00000000c0)={0x0, 0xfdc8, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = mq_open(&(0x7f00000001c0)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r5, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r5, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) 5.472473549s ago: executing program 1 (id=35): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311c", 0x8) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000480)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000500)="b1d703c6bc0fdc49822856d08b6bff7c", 0x10}]) sendmmsg$alg(r1, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="972fd1ebe125a60ab6d6b3fdf725be36", 0x10}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}], 0x1, 0x200080d0) 5.414210251s ago: executing program 2 (id=36): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r0, 0x111, 0x1, 0x0, &(0x7f0000000000)=0xfffffdfc) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x9880) 5.238914739s ago: executing program 2 (id=37): socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = userfaultfd(0x801) socket$kcm(0x2b, 0x1, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') socket$inet6_mptcp(0xa, 0x1, 0x106) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4.789876769s ago: executing program 1 (id=40): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 4.449498134s ago: executing program 1 (id=41): socketpair$unix(0x1, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_clone3(&(0x7f0000000080)={0x1801480, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_create1(0x0) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000480)=ANY=[@ANYBLOB="ddf963efbeb08a", @ANYBLOB]) 4.221707304s ago: executing program 2 (id=43): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) writev(r0, &(0x7f0000001600)=[{&(0x7f0000000300)="7a779c43d62b775cd8df87981640b1dabd5b150276c71580e1706d91383a9fc9ba0720c9284143ed633020b8268558fd7157e9f1259ed914113ece72ab3846d253a45247ed7bf9d342b2bc7be1387ad6aaf72ee077f8df01ef5c49055a805f4b61a605c285fedcf468c71ea829a91f4aa7d2b202c1da5061a208e232fe2e2610ee76380a2b3fe3d37f6fba4a5e93adb519f83f2fd0349951cd31bd7c2d6e6e9d854e6632f2b85725245467cfea028c4d8db4a5cbf4aa002c2201d499f2a45067851dc2a95878aa48637f953b5002699d495074518cfcee3ccbfd06441e78bff7267e92b3526b", 0xe6}, {&(0x7f00000004c0)="aceee65bb0a55bdc5190c84f535b98fc5f1dec9f1d9e03937f56c64a7c348d6eb4cba5c958a94be76c2980e2a1e3ab59ce3406ddd3815cae438f2181932fc2ba7cc9b39eaa7f859fb179a33ec66d7e3a0cd92a596d8de6e0b20d2335a7a7ea64ec48a0c07ea27e03c0820bfc33b9837dc6ad3558dfc7e18526f04518b6afbd32", 0x80}, {&(0x7f0000000540)="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", 0x69b}], 0x3) 3.892702639s ago: executing program 0 (id=45): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1ff, 0xff}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x4008000) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) 3.892441809s ago: executing program 1 (id=46): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r1, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd5000f8dbdf2555000000080001004f00000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) 3.881317439s ago: executing program 2 (id=47): unshare(0x20000400) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047457, 0x0) 3.731542095s ago: executing program 2 (id=48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0xfffffffffffffcfd}}) 3.717853836s ago: executing program 1 (id=49): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x97, 0x4, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) madvise(&(0x7f0000267000/0x4000)=nil, 0x4000, 0x80000000e) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0x90000) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000280)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7ab, &(0x7f00000001c0)={&(0x7f0000000780)={{@my=0x0, 0x4}, {@local, 0x5}, 0x400, "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"}, 0x418, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r9 = io_uring_setup(0x3450, &(0x7f0000000080)) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240), 0x0}, 0x20) 3.486251406s ago: executing program 0 (id=51): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x88842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000001600)={0x54, r3, 0x1, 0xfffffffd, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x51}, {0xc, 0x8f, 0xfffffffffffffffe}, {0xc}}]}, 0x54}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xd40, 0x82) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000001c0)={@local, @broadcast, 0x0}, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000200)={0x0, 0xab, 0x8, &(0x7f0000000180)={0x2a, "247f23e017bb486c5c4b7165a6d6af0b920bf04121f0339400"}}) openat$btrfs_control(0xffffff9c, &(0x7f00000002c0), 0x20642, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000040000", @ANYBLOB="010100"/14, @ANYRES32=r5, @ANYRES32, @ANYBLOB="050000000300000003000000010000000000000000000000008a58da2201000000f2e106be3411e0b756fc67067fc9cfe2"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) 3.450656558s ago: executing program 4 (id=52): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 3.196331589s ago: executing program 2 (id=53): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) bind$qrtr(r0, &(0x7f00000002c0)={0x2a, 0x1, 0x7fff}, 0xc) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000040c0)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r4 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r6, r7], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r4, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) 3.195445379s ago: executing program 4 (id=54): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f000053f000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, 0xffffffffffffffff, 0x48aa8000) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x98, &(0x7f0000000940)=""/152}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a\x00'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) r7 = fcntl$dupfd(r4, 0x0, r5) write$FUSE_NOTIFY_STORE(r7, &(0x7f00000000c0)={0x28, 0x4, 0x0, {0x0, 0x6}}, 0xc388) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x7c, 0x1, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x1d, 0x9, 0x6, 0x5, 0x7, 0x4]}, @CTA_TIMEOUT={0x8}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xb68f}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4184}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x0) 2.171806604s ago: executing program 4 (id=56): sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="840100009853f9dbfee02573af2f7a9de1114fff8d1fde870ea88f12ad35407dabf8b722e809e301f79e430191ae9c6bcb7c693f05dff5234503fef793f770b2b43cc42b091d347286a57440a82a03608c17b2bc080a574b359905d60500fc7e3fc14a3842cef109acd7deb35069cdcf96d5ebfb621fb6ca23331926377c0b7dc8db21c89fab7e31dc2c27a3571198df0933e74e84c6d2d6d0beda6a11db5fe3201591f183594ec19effd1dbd67a7f7864a341044662341ba5d0ad0ef090d8108fb7294229e4b978d2e876000000", @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x35}, 0x4000800) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x4, @win={{0x7fffffff, 0xff, 0x3, 0x2ff}, 0x8, 0xae, 0x0, 0x29a, &(0x7f0000000680), 0x1}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.953384394s ago: executing program 3 (id=58): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) io_uring_setup(0x5ba0, &(0x7f0000000300)={0x0, 0xd9bf, 0x40, 0x1, 0x160}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r0 = syz_io_uring_setup(0x1ed3, &(0x7f0000000680)={0x0, 0x10, 0x10100, 0x5, 0x279}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x9, 0x7, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.921343875s ago: executing program 4 (id=59): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e220800"], 0x5c}}, 0x0) 1.672824066s ago: executing program 3 (id=60): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r0, 0x111, 0x5, 0x0, &(0x7f0000000080)) 1.614077019s ago: executing program 4 (id=61): r0 = syz_usb_connect$hid(0x0, 0x90, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x200000000000000}) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000003c0)={0x20, 0x1, 0xc1, "8b8f72827f49fe3bba20efe4e47b081c23f53cc1ddde886b9e955b90d89ff3593b1ac7bcf3e8e233e3a117227fbdd77e8909472610283682b4c4d012b19b2572bffae41b17044b8494ee2914c067bf6de535098932841ec4d0e905047057ec51a4b08119f9a7a6d90ad2c82e8c8e111a330bee15d9a73093c76f1d1018c00b88f7b7dc359e08f1aca20353d6ea47499a6cec4e5d0dcabd06864087fc407ec463cc50190402f7a36c13a49e2c1ecdbbd6f9036aefa96d2a2880babf8a03b3b3c2ea"}, &(0x7f00000004c0)={0x20, 0x3, 0x1}}) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, 0x0) 1.449674996s ago: executing program 3 (id=62): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1ff, 0xff}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x4008000) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) 1.055064843s ago: executing program 3 (id=63): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000000)="972fd1ebe125a60ab6d6b3fdf725be36", 0x10}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}], 0x1, 0x200080d0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x40010000) 846.974192ms ago: executing program 3 (id=64): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311c", 0x8) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000480)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000500)="b1d703c6bc0fdc49822856d08b6bff7c", 0x10}]) sendmmsg$alg(r1, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="972fd1ebe125a60ab6d6b3fdf725be36", 0x10}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}], 0x1, 0x200080d0) 716.909928ms ago: executing program 4 (id=65): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') socket$alg(0x26, 0x5, 0x0) r1 = getpid() pselect6(0x40, &(0x7f0000000100)={0x0, 0x8, 0x2, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1d, 0x2, 0x0, 0x0, 0x1000000802, 0x0, 0xfffffffffffffffd, 0x6}, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000140)={0x8, 0x70, 0x0, {r0}}, 0x20) 650.181231ms ago: executing program 3 (id=66): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x54) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x80) r2 = openat$cgroup_pressure(r1, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) syz_open_dev$usbmon(0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=67): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f000053f000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, 0xffffffffffffffff, 0x48aa8000) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x98, &(0x7f0000000940)=""/152}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a\x00'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) r7 = fcntl$dupfd(r4, 0x0, r5) write$FUSE_NOTIFY_STORE(r7, &(0x7f00000000c0)={0x28, 0x4, 0x0, {0x0, 0x6}}, 0xc388) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x7c, 0x1, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x1d, 0x9, 0x6, 0x5, 0x7, 0x4]}, @CTA_TIMEOUT={0x8}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xb68f}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4184}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 48.534859][ T3932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.565136][ T3932] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. syzkaller login: [ 73.545274][ T4253] cgroup: Unknown subsys name 'net' [ 73.685706][ T4253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.138965][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 77.523702][ T4271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.541502][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.550121][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.557592][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.563268][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.565682][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.572540][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.581624][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.586554][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.593174][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.607544][ T4277] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.608797][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.615260][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.622812][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.629039][ T4277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.637173][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.651839][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.659734][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.667239][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.675401][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.682627][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.688931][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.690073][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.697193][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.703745][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.710994][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.724940][ T4273] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.725686][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.732290][ T4273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.746598][ T4273] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.150547][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 78.269310][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 78.293924][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 78.357645][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 78.434379][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 78.452196][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.459427][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.468130][ T4274] device bridge_slave_0 entered promiscuous mode [ 78.504160][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.511450][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.519317][ T4274] device bridge_slave_1 entered promiscuous mode [ 78.578616][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.585924][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.594196][ T4264] device bridge_slave_0 entered promiscuous mode [ 78.601892][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.609018][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.617442][ T4265] device bridge_slave_0 entered promiscuous mode [ 78.645698][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.653052][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.661147][ T4264] device bridge_slave_1 entered promiscuous mode [ 78.668435][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.675658][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.683803][ T4265] device bridge_slave_1 entered promiscuous mode [ 78.694174][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.708657][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.718030][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.725198][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.733446][ T4272] device bridge_slave_0 entered promiscuous mode [ 78.777702][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.785592][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.793868][ T4272] device bridge_slave_1 entered promiscuous mode [ 78.842515][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.853763][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.863233][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.870666][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.878495][ T4275] device bridge_slave_0 entered promiscuous mode [ 78.888845][ T4274] team0: Port device team_slave_0 added [ 78.905038][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.924338][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.933724][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.941259][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.949098][ T4275] device bridge_slave_1 entered promiscuous mode [ 78.957470][ T4274] team0: Port device team_slave_1 added [ 78.965546][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.017365][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.029079][ T4265] team0: Port device team_slave_0 added [ 79.046320][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.073544][ T4265] team0: Port device team_slave_1 added [ 79.090812][ T4264] team0: Port device team_slave_0 added [ 79.098634][ T4272] team0: Port device team_slave_0 added [ 79.107785][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.117838][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.125155][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.151599][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.182030][ T4272] team0: Port device team_slave_1 added [ 79.188935][ T4264] team0: Port device team_slave_1 added [ 79.203703][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.210731][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.236959][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.292407][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.299758][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.326166][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.356010][ T4275] team0: Port device team_slave_0 added [ 79.369349][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.376743][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.402878][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.414659][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.421811][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.447834][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.459419][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.466570][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.492687][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.505252][ T4275] team0: Port device team_slave_1 added [ 79.514538][ T4274] device hsr_slave_0 entered promiscuous mode [ 79.521978][ T4274] device hsr_slave_1 entered promiscuous mode [ 79.532954][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.540220][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.566457][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.578038][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.585111][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.611612][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.674560][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.681596][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.707913][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.720548][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.727701][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.753780][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.772216][ T4265] device hsr_slave_0 entered promiscuous mode [ 79.778972][ T4265] device hsr_slave_1 entered promiscuous mode [ 79.786007][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.793954][ T4265] Cannot create hsr debugfs directory [ 79.801529][ T4284] Bluetooth: hci4: command 0x0409 tx timeout [ 79.808005][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 79.809640][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 79.873566][ T4272] device hsr_slave_0 entered promiscuous mode [ 79.879886][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 79.880061][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 79.893365][ T4272] device hsr_slave_1 entered promiscuous mode [ 79.900533][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.908121][ T4272] Cannot create hsr debugfs directory [ 79.918725][ T4264] device hsr_slave_0 entered promiscuous mode [ 79.925619][ T4264] device hsr_slave_1 entered promiscuous mode [ 79.932905][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.940687][ T4264] Cannot create hsr debugfs directory [ 80.010410][ T4275] device hsr_slave_0 entered promiscuous mode [ 80.017218][ T4275] device hsr_slave_1 entered promiscuous mode [ 80.024040][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.032640][ T4275] Cannot create hsr debugfs directory [ 80.338572][ T4272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.350315][ T4272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.372244][ T4272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.387998][ T4272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.431433][ T4274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.442282][ T4274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.465353][ T4274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.494286][ T4274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.567385][ T4265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.588716][ T4265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.604270][ T4265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.615329][ T4265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.626405][ T4275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.638386][ T4275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.662688][ T4275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.676823][ T4275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.747495][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.812634][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.821391][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.831121][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.841934][ T4264] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.868439][ T4264] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.883618][ T4264] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.895821][ T4264] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.912221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.921977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.931615][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.938944][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.948271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.986616][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.996038][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.005928][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.013137][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.024511][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.049134][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.058614][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.078592][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.122822][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.131697][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.140469][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.148661][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.156977][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.166760][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.175914][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.189054][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.210319][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.218906][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.231554][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.270648][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.279267][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.288816][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.298165][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.308047][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.315225][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.323558][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.332808][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.341584][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.348686][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.356646][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.365910][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.375620][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.382855][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.391067][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.402383][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.427447][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.441528][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.449602][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.457878][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.471282][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.480301][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.487485][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.495909][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.530944][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.537972][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.552495][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.562443][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.571652][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.583269][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.597022][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.627511][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.640606][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.651277][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.661082][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.669924][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.678004][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.686952][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.697678][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.708377][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.728422][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.743561][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.761085][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.779733][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.787927][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.803617][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.813752][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.822761][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.832157][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.840628][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.857163][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.879781][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 81.885877][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 81.897346][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 81.920863][ T4265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.944981][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.960237][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 81.966322][ T4286] Bluetooth: hci2: command 0x041b tx timeout [ 81.981742][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.990923][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.001046][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.036160][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.053945][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.061189][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.121431][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.139232][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.148373][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.155568][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.165051][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.174503][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.184312][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.193803][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.255419][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.263232][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.273876][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.282406][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.292131][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.301281][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.308394][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.317218][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.326818][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.335649][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.342820][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.351609][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.361008][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.369893][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.378829][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.387871][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.395539][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.425891][ T4275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.460451][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.486487][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.500264][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.520751][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.541319][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.560620][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.570428][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.580690][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.589222][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.610301][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.663110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.691162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.710847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.730828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.750247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.767545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.807105][ T4264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.820734][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.839381][ T4272] device veth0_vlan entered promiscuous mode [ 82.850781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.860115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.868904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.878988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.894604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.904419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.915365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.925623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.934052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.942783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.959077][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.977651][ T4272] device veth1_vlan entered promiscuous mode [ 83.013819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.023519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.050314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.113235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.130899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.161247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.193152][ T4272] device veth0_macvtap entered promiscuous mode [ 83.231022][ T4272] device veth1_macvtap entered promiscuous mode [ 83.291222][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.310343][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.348534][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.390432][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.399223][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.438934][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.470196][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.488954][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.521807][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.529384][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.557960][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.576358][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.588625][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.603887][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.621545][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.629040][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.650153][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.664469][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.697265][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.715896][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.723839][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.778875][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.795612][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.851143][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.867149][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.877121][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.887495][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.915318][ T4265] device veth0_vlan entered promiscuous mode [ 83.948753][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.958332][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.960064][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 83.972595][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 83.972847][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 83.991115][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.004923][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.014281][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.023596][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.031683][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.040011][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 84.042024][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.046045][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 84.062813][ T4275] device veth0_vlan entered promiscuous mode [ 84.073318][ T4264] device veth0_vlan entered promiscuous mode [ 84.100812][ T4367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.108850][ T4367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.108861][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.110181][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.134786][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.143358][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.151321][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.162468][ T4265] device veth1_vlan entered promiscuous mode [ 84.177984][ T4264] device veth1_vlan entered promiscuous mode [ 84.198959][ T4275] device veth1_vlan entered promiscuous mode [ 84.238276][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.238319][ T4367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.248285][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.262309][ T4367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.264222][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.278522][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.288427][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.296941][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.305678][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.314441][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.324820][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.401550][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.416795][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.433288][ T4265] device veth0_macvtap entered promiscuous mode [ 84.457862][ T4275] device veth0_macvtap entered promiscuous mode [ 84.470164][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.479010][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.488395][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.497388][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.506491][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.515438][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.529293][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.539023][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.547679][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.558226][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.570365][ T4265] device veth1_macvtap entered promiscuous mode [ 84.580205][ T4274] device veth0_vlan entered promiscuous mode [ 84.597715][ T4264] device veth0_macvtap entered promiscuous mode [ 84.609428][ T4275] device veth1_macvtap entered promiscuous mode [ 84.627586][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.640140][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.652932][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.670358][ T4274] device veth1_vlan entered promiscuous mode [ 84.692419][ T4264] device veth1_macvtap entered promiscuous mode [ 84.708680][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.717658][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.728575][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.737244][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.746350][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.755416][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.765655][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.781955][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.795536][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.809256][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.856166][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.865728][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.875198][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.889413][ T4265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.899909][ T4265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.908663][ T4265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.917673][ T4265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.936797][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.949185][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.959441][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.971414][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.983385][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.992355][ T4388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 85.005372][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.016764][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.027049][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.038225][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.051615][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.070126][ T4389] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6'. [ 85.079226][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.089438][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.101461][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.110974][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.127487][ T4274] device veth0_macvtap entered promiscuous mode [ 85.167284][ T4274] device veth1_macvtap entered promiscuous mode [ 85.183036][ T4264] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.198149][ T4264] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.207656][ T4264] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.217691][ T4264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.241594][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.256581][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.273002][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.285784][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.295866][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.306362][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.321438][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.330154][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.341595][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.370510][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.378733][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.392055][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.403258][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.449974][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.462768][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.473964][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.486163][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.496424][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.508497][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.525571][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.545857][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.569020][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.579241][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.590119][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.602034][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.612995][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.624238][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.637352][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.640936][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.649698][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.650381][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.650930][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.651496][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.658285][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.658342][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.658373][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.658403][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.707364][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.707386][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.707397][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.707408][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.707417][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.707428][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.707437][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.707448][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.708764][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.730265][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.920536][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.940794][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.959565][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.972943][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.981867][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.013676][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.039858][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 86.045939][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 86.053970][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 86.119830][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 86.119932][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 86.133284][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.161803][ T4356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.184690][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.226796][ T4356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.244430][ T4377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.285351][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.295982][ T4377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.320841][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.412503][ T4367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.417702][ T4377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.440303][ T4367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.448620][ T4377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.509439][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.534906][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.572217][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.597546][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.623913][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.641907][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.675675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.714645][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.769625][ T4377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.793459][ T4377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.842517][ T952] cfg80211: failed to load regulatory.db [ 86.860156][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.659733][ T4279] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.737913][ T4429] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.892895][ T4279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.907801][ T4279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.919229][ T4279] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.945405][ T4279] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.959923][ T4279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.979181][ T4279] usb 3-1: config 0 descriptor?? [ 88.042900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 88.051923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 88.403555][ T4279] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 88.539065][ T4279] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 88.758873][ T26] audit: type=1326 audit(1764804447.530:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4439 comm="syz.0.19" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd644d8f749 code=0x0 [ 88.819663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.079967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.088370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.096659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 89.105101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 89.289739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.429593][ T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.643878][ T22] usb 5-1: config 0 has an invalid interface number: 175 but max is 0 [ 89.666313][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.706038][ T22] usb 5-1: config 0 has no interface number 0 [ 89.727044][ T22] usb 5-1: config 0 interface 175 altsetting 0 has an invalid endpoint with address 0xBC, skipping [ 89.749808][ T4450] program syz.3.23 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.759130][ T22] usb 5-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 89.817650][ T22] usb 5-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 89.838308][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.859578][ T22] usb 5-1: Product: syz [ 89.870081][ T22] usb 5-1: Manufacturer: syz [ 89.883795][ T22] usb 5-1: SerialNumber: syz [ 89.906705][ T22] usb 5-1: config 0 descriptor?? [ 89.924749][ T4444] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 89.947161][ T22] symbolserial 5-1:0.175: required endpoints missing [ 89.974432][ T4454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25'. [ 90.162688][ T22] usb 5-1: USB disconnect, device number 2 [ 90.169851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.365964][ T26] audit: type=1326 audit(1764804449.140:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.3.27" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f416358f749 code=0x0 [ 90.573239][ T4398] usb 3-1: USB disconnect, device number 2 [ 91.193545][ T22] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.389835][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 91.396825][ T22] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 91.438351][ T22] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 91.475083][ T22] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 91.533954][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 91.564074][ T22] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 91.606076][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.628868][ T22] usb 5-1: Product: syz [ 91.639424][ T22] usb 5-1: Manufacturer: syz [ 91.656125][ T22] usb 5-1: SerialNumber: syz [ 91.677048][ T22] usb 5-1: config 0 descriptor?? [ 91.901365][ T22] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 91.937013][ T3622] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 91.965574][ T3622] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 92.018343][ T3622] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 92.063257][ T4266] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 92.104673][ T4318] usb 5-1: USB disconnect, device number 3 [ 92.255805][ T4468] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 92.559884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.639684][ T4398] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.709754][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.882745][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.59'. [ 94.941542][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.962854][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.996844][ T7] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 95.033710][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.056204][ T4550] binder: 4532:4550 ioctl 4018620d 0 returned -22 [ 95.116729][ T4550] binder: 4532:4550 ioctl c018620c 200000000380 returned -1 [ 95.117276][ T7] usb 1-1: config 0 descriptor?? [ 95.661847][ T7] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 95.795239][ T7] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 96.051300][ T7] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 96.679435][ T4530] ================================================================== [ 96.687576][ T4530] BUG: KASAN: stack-out-of-bounds in cp2112_xfer+0x60b/0xdd0 [ 96.694984][ T4530] Read of size 42 at addr ffffc90004d8fd41 by task syz.0.51/4530 [ 96.702712][ T4530] [ 96.705148][ T4530] CPU: 1 PID: 4530 Comm: syz.0.51 Not tainted syzkaller #0 [ 96.712352][ T4530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.722421][ T4530] Call Trace: [ 96.725719][ T4530] [ 96.728656][ T4530] dump_stack_lvl+0x168/0x22e [ 96.733351][ T4530] ? cp2112_xfer+0x60b/0xdd0 [ 96.737969][ T4530] ? show_regs_print_info+0x12/0x12 [ 96.743177][ T4530] ? load_image+0x3b0/0x3b0 [ 96.747695][ T4530] ? __virt_addr_valid+0xbf/0x540 [ 96.752743][ T4530] ? cp2112_xfer+0x60b/0xdd0 [ 96.757346][ T4530] print_report+0xa8/0x210 [ 96.761770][ T4530] kasan_report+0x10b/0x140 [ 96.766304][ T4530] ? cp2112_xfer+0x60b/0xdd0 [ 96.770908][ T4530] ? cp2112_xfer+0x60b/0xdd0 [ 96.775515][ T4530] kasan_check_range+0x27b/0x290 [ 96.780466][ T4530] memcpy+0x25/0x60 [ 96.784291][ T4530] cp2112_xfer+0x60b/0xdd0 [ 96.788742][ T4530] ? cp2112_i2c_xfer+0xed0/0xed0 [ 96.793694][ T4530] ? __i2c_smbus_xfer+0x2e9/0x1fc0 [ 96.798829][ T4530] __i2c_smbus_xfer+0x771/0x1fc0 [ 96.803779][ T4530] ? _raw_spin_unlock+0x40/0x40 [ 96.808643][ T4530] ? cp2112_i2c_xfer+0xed0/0xed0 [ 96.813597][ T4530] ? i2c_smbus_write_i2c_block_data+0x1a0/0x1a0 [ 96.819852][ T4530] ? rt_mutex_adjust_prio_chain+0x22c0/0x22c0 [ 96.825942][ T4530] ? lock_chain_count+0x20/0x20 [ 96.830825][ T4530] ? i2c_smbus_xfer+0x11d/0x3a0 [ 96.835689][ T4530] i2c_smbus_xfer+0x263/0x3a0 [ 96.840395][ T4530] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 96.846039][ T4530] ? i2c_smbus_read_byte+0x1b0/0x1b0 [ 96.851338][ T4530] i2cdev_ioctl_smbus+0x3e3/0x650 [ 96.856399][ T4530] ? i2cdev_ioctl_rdwr+0x6c0/0x6c0 [ 96.861529][ T4530] ? __might_fault+0xa6/0x120 [ 96.866228][ T4530] ? __might_fault+0xc2/0x120 [ 96.870942][ T4530] ? __might_fault+0xa6/0x120 [ 96.875672][ T4530] i2cdev_ioctl+0x545/0x750 [ 96.880202][ T4530] ? i2cdev_write+0x120/0x120 [ 96.884898][ T4530] ? bpf_lsm_file_ioctl+0x5/0x10 [ 96.889853][ T4530] ? security_file_ioctl+0x7c/0xa0 [ 96.894995][ T4530] ? i2cdev_write+0x120/0x120 [ 96.899705][ T4530] __se_sys_ioctl+0xfa/0x170 [ 96.904314][ T4530] do_syscall_64+0x4c/0xa0 [ 96.908742][ T4530] ? clear_bhb_loop+0x60/0xb0 [ 96.913434][ T4530] ? clear_bhb_loop+0x60/0xb0 [ 96.918120][ T4530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.924022][ T4530] RIP: 0033:0x7fd644d8f749 [ 96.928458][ T4530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.948076][ T4530] RSP: 002b:00007fd645b67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.956514][ T4530] RAX: ffffffffffffffda RBX: 00007fd644fe6180 RCX: 00007fd644d8f749 [ 96.964506][ T4530] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000007 [ 96.972490][ T4530] RBP: 00007fd644e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 96.980477][ T4530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.988454][ T4530] R13: 00007fd644fe6218 R14: 00007fd644fe6180 R15: 00007fff0350eb38 [ 96.996439][ T4530] [ 96.999465][ T4530] [ 97.001794][ T4530] The buggy address belongs to stack of task syz.0.51/4530 [ 97.008991][ T4530] and is located at offset 33 in frame: [ 97.014705][ T4530] i2cdev_ioctl_smbus+0x0/0x650 [ 97.019574][ T4530] [ 97.021900][ T4530] This frame has 1 object: [ 97.026316][ T4530] [32, 66) 'temp' [ 97.026327][ T4530] [ 97.032367][ T4530] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc90004d88000 allocated at copy_process+0x5bd/0x4020 [ 97.045323][ T4530] The buggy address belongs to the physical page: [ 97.051748][ T4530] page:ffffea0001594b00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5652c [ 97.061913][ T4530] memcg:ffff888027147282 [ 97.066159][ T4530] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 97.073293][ T4530] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 97.081886][ T4530] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff888027147282 [ 97.090471][ T4530] page dumped because: kasan: bad access detected [ 97.096928][ T4530] page_owner tracks the page as allocated [ 97.102654][ T4530] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 2, tgid 2 (kthreadd), ts 91666774827, free_ts 91665163176 [ 97.120141][ T4530] post_alloc_hook+0x173/0x1a0 [ 97.124933][ T4530] get_page_from_freelist+0x1a26/0x1ac0 [ 97.130496][ T4530] __alloc_pages+0x1df/0x4e0 [ 97.135110][ T4530] __vmalloc_node_range+0x959/0x1390 [ 97.140406][ T4530] dup_task_struct+0x3d3/0x6b0 [ 97.145180][ T4530] copy_process+0x5bd/0x4020 [ 97.149776][ T4530] kernel_clone+0x225/0x8b0 [ 97.154283][ T4530] kernel_thread+0xe5/0x140 [ 97.158792][ T4530] kthreadd+0x536/0x6e0 [ 97.162960][ T4530] ret_from_fork+0x1f/0x30 [ 97.167389][ T4530] page last free stack trace: [ 97.172063][ T4530] free_unref_page_prepare+0x8b4/0x9a0 [ 97.177541][ T4530] free_unref_page_list+0xbb/0x8e0 [ 97.182666][ T4530] release_pages+0x1f92/0x2200 [ 97.187438][ T4530] tlb_flush_mmu+0xff/0x210 [ 97.191957][ T4530] tlb_finish_mmu+0xbd/0x1c0 [ 97.196559][ T4530] exit_mmap+0x343/0x8e0 [ 97.200814][ T4530] __mmput+0x118/0x3c0 [ 97.204886][ T4530] exit_mm+0x1e6/0x2c0 [ 97.208969][ T4530] do_exit+0x8c1/0x2400 [ 97.213138][ T4530] do_group_exit+0x217/0x2d0 [ 97.217741][ T4530] __x64_sys_exit_group+0x3b/0x40 [ 97.222778][ T4530] do_syscall_64+0x4c/0xa0 [ 97.227208][ T4530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.233107][ T4530] [ 97.235430][ T4530] Memory state around the buggy address: [ 97.241065][ T4530] ffffc90004d8fc00: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f3 f3 f3 [ 97.249128][ T4530] ffffc90004d8fc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 97.257188][ T4530] >ffffc90004d8fd00: 00 00 00 00 f1 f1 f1 f1 00 00 00 00 02 f3 f3 f3 [ 97.265248][ T4530] ^ [ 97.272442][ T4530] ffffc90004d8fd80: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 97.280509][ T4530] ffffc90004d8fe00: f1 f1 f1 f1 04 f2 00 00 f2 f2 00 00 f3 f3 f3 f3 [ 97.288586][ T4530] ================================================================== [ 97.537969][ T4530] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 97.545231][ T4530] CPU: 1 PID: 4530 Comm: syz.0.51 Not tainted syzkaller #0 [ 97.552463][ T4530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.562615][ T4530] Call Trace: [ 97.565921][ T4530] [ 97.568875][ T4530] dump_stack_lvl+0x168/0x22e [ 97.573575][ T4530] ? memcpy+0x3c/0x60 [ 97.577591][ T4530] ? show_regs_print_info+0x12/0x12 [ 97.582832][ T4530] ? load_image+0x3b0/0x3b0 [ 97.587373][ T4530] panic+0x2c9/0x710 [ 97.591282][ T4530] ? bpf_jit_dump+0xd0/0xd0 [ 97.595838][ T4530] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 97.601831][ T4530] ? _raw_spin_unlock+0x40/0x40 [ 97.606770][ T4530] ? print_memory_metadata+0x314/0x400 [ 97.612266][ T4530] check_panic_on_warn+0x80/0xa0 [ 97.617237][ T4530] ? cp2112_xfer+0x60b/0xdd0 [ 97.621853][ T4530] end_report+0x66/0x110 [ 97.626137][ T4530] kasan_report+0x118/0x140 [ 97.630680][ T4530] ? cp2112_xfer+0x60b/0xdd0 [ 97.635297][ T4530] ? cp2112_xfer+0x60b/0xdd0 [ 97.639922][ T4530] kasan_check_range+0x27b/0x290 [ 97.644891][ T4530] memcpy+0x25/0x60 [ 97.648746][ T4530] cp2112_xfer+0x60b/0xdd0 [ 97.653201][ T4530] ? cp2112_i2c_xfer+0xed0/0xed0 [ 97.658170][ T4530] ? __i2c_smbus_xfer+0x2e9/0x1fc0 [ 97.663323][ T4530] __i2c_smbus_xfer+0x771/0x1fc0 [ 97.668301][ T4530] ? _raw_spin_unlock+0x40/0x40 [ 97.673181][ T4530] ? cp2112_i2c_xfer+0xed0/0xed0 [ 97.678149][ T4530] ? i2c_smbus_write_i2c_block_data+0x1a0/0x1a0 [ 97.684446][ T4530] ? rt_mutex_adjust_prio_chain+0x22c0/0x22c0 [ 97.690560][ T4530] ? lock_chain_count+0x20/0x20 [ 97.695443][ T4530] ? i2c_smbus_xfer+0x11d/0x3a0 [ 97.700319][ T4530] i2c_smbus_xfer+0x263/0x3a0 [ 97.705014][ T4530] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 97.710676][ T4530] ? i2c_smbus_read_byte+0x1b0/0x1b0 [ 97.716012][ T4530] i2cdev_ioctl_smbus+0x3e3/0x650 [ 97.721086][ T4530] ? i2cdev_ioctl_rdwr+0x6c0/0x6c0 [ 97.726242][ T4530] ? __might_fault+0xa6/0x120 [ 97.730938][ T4530] ? __might_fault+0xc2/0x120 [ 97.735644][ T4530] ? __might_fault+0xa6/0x120 [ 97.740341][ T4530] i2cdev_ioctl+0x545/0x750 [ 97.744880][ T4530] ? i2cdev_write+0x120/0x120 [ 97.749593][ T4530] ? bpf_lsm_file_ioctl+0x5/0x10 [ 97.754567][ T4530] ? security_file_ioctl+0x7c/0xa0 [ 97.759728][ T4530] ? i2cdev_write+0x120/0x120 [ 97.764437][ T4530] __se_sys_ioctl+0xfa/0x170 [ 97.769056][ T4530] do_syscall_64+0x4c/0xa0 [ 97.773528][ T4530] ? clear_bhb_loop+0x60/0xb0 [ 97.778227][ T4530] ? clear_bhb_loop+0x60/0xb0 [ 97.782942][ T4530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.788858][ T4530] RIP: 0033:0x7fd644d8f749 [ 97.793300][ T4530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.812931][ T4530] RSP: 002b:00007fd645b67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.821368][ T4530] RAX: ffffffffffffffda RBX: 00007fd644fe6180 RCX: 00007fd644d8f749 [ 97.829350][ T4530] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000007 [ 97.837339][ T4530] RBP: 00007fd644e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 97.845338][ T4530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.853345][ T4530] R13: 00007fd644fe6218 R14: 00007fd644fe6180 R15: 00007fff0350eb38 [ 97.861355][ T4530] [ 97.864799][ T4530] Kernel Offset: disabled [ 97.869144][ T4530] Rebooting in 86400 seconds..