last executing test programs: 6m0.765841371s ago: executing program 1 (id=106): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0x97, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x24, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$sndmidi(0x0, 0x4, 0x400100) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x41, 0x0, @fd=r2, 0xffffffffffff8000, 0x0, 0x3ff, 0x43610156c3d3fa2b}) io_uring_enter(r3, 0x7f33, 0x7c5b, 0x0, 0x0, 0xfffffe36) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x9, 0x5, 0x1, 0x9104, 0x1, 0x6, '\x00', r0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0xa}, 0x50) pipe2(&(0x7f0000001440), 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r7 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) fchdir(r8) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x4010, r8}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) 5m58.926796128s ago: executing program 1 (id=110): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x104) copy_file_range(r0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) chdir(0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r5}, 0x38) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 5m55.932495748s ago: executing program 1 (id=113): r0 = socket(0x2, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 5m55.384487909s ago: executing program 1 (id=117): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8881, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m54.637402834s ago: executing program 1 (id=119): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000001c0)=0x1, 0x4) 5m54.456425017s ago: executing program 1 (id=120): pipe2$9p(&(0x7f00000027c0)={0xffffffffffffffff}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) io_uring_setup(0x31fa, &(0x7f00000001c0)={0x0, 0x6a93, 0x40, 0x2, 0xd1}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) socket(0xa, 0x3, 0x3a) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44840) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mknod$loop(0x0, 0x2000, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x400000000000003, 0x0, 0x9, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x70000001}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0xb0}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) r7 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) readv(r7, &(0x7f0000000400)=[{&(0x7f0000000540)=""/226, 0xe2}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000300)=""/3, 0x3}, {&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000640)=""/77, 0x4d}], 0x5) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r8, 0x4b45, 0x0) lseek(r6, 0x40203, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 5m39.119587955s ago: executing program 32 (id=120): pipe2$9p(&(0x7f00000027c0)={0xffffffffffffffff}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) io_uring_setup(0x31fa, &(0x7f00000001c0)={0x0, 0x6a93, 0x40, 0x2, 0xd1}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) socket(0xa, 0x3, 0x3a) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44840) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mknod$loop(0x0, 0x2000, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x400000000000003, 0x0, 0x9, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x70000001}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0xb0}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) r7 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) readv(r7, &(0x7f0000000400)=[{&(0x7f0000000540)=""/226, 0xe2}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000300)=""/3, 0x3}, {&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000640)=""/77, 0x4d}], 0x5) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r8, 0x4b45, 0x0) lseek(r6, 0x40203, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1m35.250121305s ago: executing program 0 (id=728): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = epoll_create(0xf29) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x0, &(0x7f0000000180)={[0xcfd6]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000000000000000000000000008500000007", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m35.056150809s ago: executing program 0 (id=729): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ptrace$setregset(0x4205, 0x0, 0x202, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x1, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100, 0x20000000, 0x0, 0xe438}) 1m34.751206995s ago: executing program 0 (id=731): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$udambuf(0xffffff9c, &(0x7f0000000240), 0x2) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x4, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e6574"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) unlink(0x0) socket$netlink(0x10, 0x3, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) process_madvise(r9, &(0x7f00000015c0)=[{0x0, 0xb3c9de750fa141ee}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x1}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920d83c8d7b92db", 0x83}, {&(0x7f00000017c0)="5b297eb99162bf8668778501ce5385511d7d796a0aed27798b84852b8a9e85799af33e5de7cedbf88498be3b0b5df9f8ef11583a3bc3bdb6a1e5875f7494479905ca1f1feab109950b1be9946ac49c25c786113854b30003b573000a764104358c8b5899a86d2c25b7a2886023cee43b19c199a7c14017514656dcfeca386529d78597365934ca776ce9b8ee9d9e8b6d8c0789555790eaf1c1e6d2707c80f2a1558e720cc345a467af3f378dba06074d8ad43d61a8707a864bf5b7ba049c2b5836366fac540084a1986d713c58a932892237198aef95b616eefe20457d0b28ab35b7e8beefe6990b9bbd1cbb0cda68fd1e20c91a6ccd555cfe9c51d4f7bf082301fc61db5c7afcaa0992098895487418b1e78576e7d8f0989c9f4aff953c2f76c014b559ff40416df4b460e7da2e299bc58c8f83c070a9cfd8e662bdf8e5169baa393b1f2bd2b7bdc7886c3002e81501cc20abbcf665957e1c4a514dd15634a07b5618fbf03d23a93d2829deaeec967fb8f7b05ab4944553e8b96c5700e388e55dc9c60c6948f9382583622a37b7c81dfa5cea56b8e060aac882d0117585e0508c929591a7f0be8dfa96204f7daf90ce74e1891ba5c3ddc17d42cfafc8e12ef4109b5ec4e687389e1f325a6f4325c0eb034306588050973a24d7bf0d0044243cdfd672f4acbc115e81a83170b43a03c713e61c6ba573ea54d59b49b516800d934ae5c48d51551af9ee1f6143f9c4924b842d43208d52e4a34b4ccf167f347608d9c69e3af1a9f5507e35c198be14cff8170c82daa48cea49bbc2db68d8e8bf5752f13ebd80d510799c54d0dbee1792499c71e5db084babf44a431a4728a0f6702b4ad93d1fb5ebfef6a24b1fa057a8511df4c022e818b7af2ec354b47d34653172f75498298f8dc9eca6f478b5f9dc78f7b60401cf27fe9b1eade2d6bf7f50cee7197cd507c2766cc6b2163bd511aaa8d69dcaea44a7f37401faa0979182e51c59cd7b3189d2e8956405a2f27ead1d48b5aa421f04fdd87ef4fb3125a7a84e98719a79608d4bc70424ddc55dab8cb2b144682bca8497add2445319aef1a6db595685f3e0b049da99940d2803bc1ecd976887476cfecbdc66eea6da65e0251cc881f3da972011f37d11bd8828bfb2be9940f2508dcfa8c0e34e9e7a3ea3e7bf04afffca71c03d978507d87ee84241e5dd781c0caa8ad5320f16ed28c89af73a9445fe4c425605f6b58653cbb0909cb9a857b0c0c115104e879e41a2e05ccfcd6866d24ebf622a85ab638eab2ee2a7cf2bbd017a1509d25f65af4f63ed5dcc9586b133d52fd487e4c5238adee5bed4811def93d6723a9d4093b717ffe89209b126feee98bb276851319c2bd94f8327019d130a282fc6cf26d14ed15da2d607937a117bb6ab67fe36fe01562669dd70c649f45cf13240eef58f86f5ef3ae28cdc3e43d9f9d2ba4325a76965a2975e8174503bdfa199a38e0b58db63bcf1e5eb12de33c64b2ef33669fc9949151d8ba011200c884c5be7b84c1754d1ca896ce4ee9d6fb2e6fd4ae106418c800f2f78a7aed2eacb6b70e5aa926d21508e946850d52fc33ca95d00a5ce212e7731228c2d42bfc2881fda943aa8410156694be406a5936ef6ebb26a0a60cdbd5fd960f52bc8e574e9acf24c4d73416d3ef68417a2fe221cfcbffbeb194cfcb9802a5204f01532f8970ede7b7f7b2e093ed20686b545ac67c8d0f628269b373502379f3f3a5bcf1bbf1181d3de177ff5f1e05783e959739468a351bf539913774349129cb27f8a30167d86d2659954ace32de6e92e3fad637031f8f4b75bbb419d30c44c8d35b3db0ec43e7aaeb826a20afd3419439dce1db6112b6c8c236f5d7d563b9f0233c78875e5502cccb45ef8cb6fbcc6da3882ba86e8daa6afbc70f5192e76151e9633069a7d6b94f7b44b95a62f01d554000558deac1bbac044267a4a544ab336e83db60ba9a828dd0cbdc709dd1147a9f5c4b29d1f40eb87b7bafe8a7e29fea3a0e586bf84bb5a2aeeaf6c389e7d48b52f77e53f5b6d30e4d37a19ec2739c6fc80773e29a74ad01d2862e9e249c54a3f845a3045d964e371350282d5ee63a33f5d9d5d2889e60677ad3a78d7e3936f0da3c2a26a7f74ab598a7a0da120c2fe531416750f7dac241fb94962db31a6de323931bd0645510eb72bbddf8ac9ecba6a4b2e4039e36b96354a12d34186c2cefeb434a273c9eba6cbe055527c59815b1ae0b1d845e6d7fa935d7240bb202d42327d45433f214d4e62cbb5b51f354c2d8d232ddeacb829c99c3f4366e4541003f25dda0dff6c38afba9f1eb0383d8d824aa43be4f9784fa9c5181f8a373c3a35c5151b0402399dde92d9a607dc2768b258c9014dfff807f8389f0b8bc913eb0eec400f986dbdce9c616b7b2f7c671625f6881a4350b04117c251f4cba880908a9b2c44b4e886a8f09f3f57da1b04d6f28dfe47e34f1f6d9f8cb23658ec21d36a48d2cc9348dbf4f067446b995138d9bf37f218ab4f5ccbc21f9bf8b904253764fc753113350b69c6701b72c98d2d3697f46431c9cce4c1d089e535fbb1904fa2ff17b3f611300b91316c7f150ae0c6fd2acdcff3b4f49dcabd4ad54632d3dd6ab48e75197c97a52b93a6d5b68acebddfc2bdad5bc0c5f4b2e8b77799e2051e7a6c3a869e0fa5ade0245881e196a9a09d39a638e8d13ee6e667e04128ad6c56d01f18c1f2f624e4dbcd35769de072db3d688d9d91e952666992f0d2717799ee42ebda848735da9fb6b5a99425b940290aa42046a915d952c551ac00215e7d3c6b25fce0f9ef6b6a015be9cb3f1ff234c672d9e34f5d90af85fd5d0660b82d4b7fe851b1e4028f0bf55646b0c0d7161f760a2e598c1703361edf16b0a337cf808eefafd75807bc8caf9599b5e4e13eeb34e574b45bba80dc87eed30555135278751b4f9577a330c832058c680aea14338eff9d74dc7ff736823f6be457f89d50d3a1ec6f3a7228a0f75438587667f4d1307fcb04859728bbc5e4dc08b0e731acef19f37bb3a111d4abdea5960162cfbf89c69a7ac0827a3be22a362bc26759779f516d49acb2bde5b2c6bc32bd822ec771b0d0f106d8cd1e7739407632bd0db40ebaadd0ddb237a0c83448a5f1a6c4c67b6619b930405ea33bf5f80f7979ca431c677f2d46164e890c646f5c385eecff870f61e0da713f15301a7b73027b5927f9db8ddde589fa6f425fa365e38721e0a448ea9fb0dd0988439462d27ad4c3240cb719c6c649e5a0978a5a462c0a4ef4771609f3270848d44f018a655d6571c8876029289de163717cc646ae2159e94505736332e49610d054e43ce5542bbd7f7c61cc30bcb773e79ec6aa05368fd15d88c5b998bf963eebbf934df25d9c9f59cea6b1df3a9000ee2ce057a695de1dc8a1534abc489862e25d9113a14792b271bfa079908bf08d0c6c4eaa4b35a32d56a16c2161fda15087a3fc9c0364915f997c0026ea6d9e7ef9b21d0ef700007aed76cc680990a3a6ea8980ace288f6c53e33b5ecb7c8d5ed3fc79376daa5221a687cc29f67fe85fc34f0eca6970aa4b5bc1ea0d154d7fe551be3659118537557979086791ec737ef6401323114dc7d7664cb7fcc72d48a7cc03ded28888cbafecdc92cfec2dc9f9babf1438b7ba5a947ba1a73f703e293734a2f39cdc9844f99383a604378862d91e86ed9cca7664ea5682d5724473574a206279b95fdbc6a4a3489aabb5847c0ed92c6b4774e3d0510604c379c129f7b23ee80594831d39b88d33e425b0c9aba6c87ddffe6acb9e85693e4f0e8c260786094e7eaf91d8b5cc641715c1455108227104cd8330144d3f300f88edc5bd4264148dcdb55136b596290194804ab82965943dd8e26bfdf31ad6a066a471caaa17752c82e16ad4457b64e05cd30ac3a4310d069fdbf3941ff99b9b9ea0c4c1abb6aaefbad1f6419396c266def91d82ca41dcd5423dbc3d6612a65513e5756d1fed8b8994ad822bba044f1cae538fdb2332eb7b536fca10256fd1a34485944d82a28a71060a0c4da91a8cec97c54d17421a9a365abacd045de779313c83d2901819cd348113eb02f882f49b117f6d4243ffce69a896d0fd27f8f57eca27181a12d60851c21faa3588cfa8777562ac41ae84f73ef0bbea69645630f34686bf8eefd2be84e24ad0705a32d5c064723cd587149b47924cf4e4949dc42a33d8dd10d846ac5d7f6de6a9115307bc6b1269bf2121101db29ceb2af0ab33037ca283f3c828485233435bc9dfcf94ebe51278fb40c83d5e3dcd05e40f7c876ee7e5ebc9dc74f7d1e1449f4dc6f563b26db4b09ed6b430dab97b184f579d2e92693daff76aa9dcfeb631bdbc3514ea131b947e7fa78e86138452c611980df77a6b79d00d2a072f54b2c10a1c41dbe7addd4af58c9d55f1994b6f7aa688f4dc76e9bd02bd0ca3c8d08f6c300459c7508198de70460f1e59e067a261b2da5ecfbc97e89ca5fa1ff3ad3c312f9c9d04d5883ea654d213dd951c8a89d9f4da04614fa6f590d588d337facbdd443f62f7d9e6f78e0f1257fe69ac21bcb1456ab0c5ab32a8f5842fb77704f0e218cb9947e65ec5e96d591fb16317a4e441b6fa1767db363c3c6171601925a245ba14e37def27392d6c2f9a80a628509e0efa5f490dd3fa713870814a06bbfddfa5cbb06383ad303d46e3fc4d89b5552158dc8cf704ec903371f302eb320e801aa1cde570aeb322b3f5c95cfed7b5e1222fa0c71bb550b79d5f18971cab1904ef371b9cfcee444d764d744e270dcf30a6552a15dd67865ea21ca1334845ac7b31b11e3d5b6bab70073fcd0ed9891b1e4ba9a616f01c74671e4b80239a97fe8df9de1bb7196b7e0017b3cfe8d58b570cf641450c7eb82a0dd2f3e784ae4e9b1696c7731f56e10914f40ce2f0231982a588d19216dc29166aca1e272c2532eab01cbfb9c85f5bd72a9ffb4973ee111fabd1ef30b49eb6b085ddf3802f180335375f29da76a29edd3de27deaf6789f09d19caf1e6b146125adf8ac5bf259158863211e692d250962462746cf851c9198f8e2c43a69748db7760d4e2f3a98aaf9233bca7a3f94b36fff09e2a3241308f49b7b45a26918842b65a6a7bde1a5511af94cec0f706bf79a633088afe0c46ae8d61ac33688245bd63a293019e94608ff03cff41c1f798fd54b1f30e35564130f27838108bb6bfdd4e91ffe9a76dbc83f4ccbf7eebb01032808e58de30eb9be1c51440b6619be93d6e7d014ddc7183a4e1817128310e42c9575035f914d76378a0a914d5077ebdddab617a10996b8f398eee59d3b59775dc1e4db102d358615aa9d11cf9a08980be3bfc745f559779b5d40cb6e7c459a16f556eab0175dc4349dcf0143f3dee7f245d2ceb806ce2e636ae725cc0216450b68b3bd0b044a6bf5473524767929e2d03c1b4bab7676fc21928b11ae6d825fc35390d3566dd0adb04fdd74f2c491976fe99c3b6b64133d48ab3a45802920484fcd48c1c6424e97cda1a908373b487e3fe20baba119e9e78058c87bd6739a0bc18c03711d2c67630b5e106cac711324562008bd1243de9762a319c95166896a1f1098ded95b894e91b9516c6ccefa7061cab567fe150fb9c2c30b885fa85307f2d14d35446304d4d77af46d312860887a7b3781b492d98322b2cbbbbf7aabd3974de1e5e4afe31fd401e4989bb42b75ebc4d0306b43c7cd7493a46b2d86b374160bfb63972edae4ce984392007afafdb424d85ad234b59c5f4b248674634acfe10739dfb1a829d7a118f3b8b7e2ee4f5b6622d1d43", 0x1000}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e9c5e7bfc", 0xd4}], 0x6, 0x9, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x6, &(0x7f0000000140)=0x1000201, 0x4) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000001000000", @ANYRES32=r2, @ANYBLOB="000000000000000009939a7ad898b03e000000355eb1778bc0575c0ca4ee137f119ea7bc726a9f3e5562575f2ca19fd1c5af03bb8d182b3e2c0689aa78a7f9a7ad0e63ef9f57991dcbe7e56171f9c8b246b813447f037a78025c9f27b5a1ae2a55b647a29ed2961654a7a6cd989821dab5f0d30b507385cbe7ada85cfe37d9bfdcfe250ad157ccdcd3fb7d241ba3448fce368c9b431bd720708a8ddfd4a8ae834f008b2b689c8355e3df9227f4235add7e23df1ab21e022efcbd31e38f59ee3d"]) 1m31.499921959s ago: executing program 0 (id=745): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) ptrace(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20040768, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) sendto(r0, &(0x7f0000000780)='pW', 0x2, 0x24000011, 0x0, 0x0) 1m29.726557625s ago: executing program 0 (id=748): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = epoll_create(0xf29) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x0, &(0x7f0000000180)={[0xcfd6]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000000000000000000000000008500000007", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m28.469703459s ago: executing program 0 (id=751): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r4}, 0x38) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 1m12.77908202s ago: executing program 33 (id=751): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r4}, 0x38) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 19.639929432s ago: executing program 2 (id=875): r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000300)=0x6a1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x4008000) 17.852025607s ago: executing program 4 (id=881): socket(0xa, 0x3, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) 16.286789178s ago: executing program 2 (id=883): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1c8, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) sendmmsg(r2, &(0x7f0000000280), 0x17, 0x0) 14.866973336s ago: executing program 2 (id=884): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x92) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00', @mcast1, 0x5, 0x6, 0x0, 0x100, 0x4, 0x12}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000280), 0x2000001, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42000, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000088c0)="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", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x20000) 14.67641852s ago: executing program 4 (id=885): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 14.596980702s ago: executing program 5 (id=886): r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x8, @remote}, 0x9) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @timestamp, @sack_perm, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0xfff, 0x4}, @window={0x3, 0x5}], 0x9) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={&(0x7f0000000000)="b7dc9e5f10373364cb7a15d27c31e5d75ec803f8bc42a7b9b320bdb9a0acc1b6a6095ff8", &(0x7f0000000140)="92774f4f42745c6006bf4b4101b4118c0e782762ca1e412581a845bba0d4e3486a49d8852a25c8890b47647957a5c9057c46408889425d513e37f03e9b1ab88397fd5293f3b566ba230b15d81cb95bb883a83864a7ac81fec185d90d9e14a5149584b095ec3c1bcba9232bf19749907c27c262e090e32bdc94158526dbf413b4c5d3bce6611ac3a9ba99c9f4fa01796cd8bb6555217d5233f869bf78738d74822b"}}, &(0x7f0000000100)=0x0) timer_settime(r3, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 10.497137912s ago: executing program 2 (id=887): r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000080)) recvmmsg(r0, &(0x7f0000004640)=[{{&(0x7f00000000c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000500)=""/40, 0x28}, {&(0x7f0000000540)=""/239, 0xef}, {&(0x7f0000000640)=""/224, 0xe0}], 0x4, &(0x7f0000000780)=""/33, 0x21}}, {{0x0, 0x0, 0x0}, 0x4}, {{&(0x7f0000001ec0)=@hci, 0x80, &(0x7f0000002640)=[{&(0x7f0000001f40)=""/246, 0xf6}, {0x0}, {0x0}, {0x0}, {&(0x7f0000002300)=""/128, 0x80}, {&(0x7f0000002380)=""/230, 0xe6}, {0x0}, {&(0x7f0000002500)=""/56, 0x38}], 0x8}, 0x4b}, {{&(0x7f0000002780)=@sco, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002800)=""/198, 0xc6}, {&(0x7f0000002900)=""/216, 0xd8}], 0x2, &(0x7f0000002a40)=""/201, 0xc9}, 0x31c6fdc}, {{&(0x7f0000003000)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000004500)=[{0x0}, {0x0}], 0x2, &(0x7f0000004580)=""/174, 0xae}, 0xee6}], 0x5, 0x20, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) r7 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000140)={'dac02\x00', [0x4, 0x6, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x6, 0x1003, 0x6, 0xffff, 0x0, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0xe, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x1, 0x4, 0x8049]}) 10.457140203s ago: executing program 5 (id=888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="00000800018506000300"], 0x96) 10.431887234s ago: executing program 3 (id=889): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa1843, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000140)=0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000568000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30000000001400000011000100"], 0xf0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x6a, r2, {0x8000}}, './file0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x185200, 0x22) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000000), 0xffffffffffffffe1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0xc0189436, &(0x7f0000000140)) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)={'netdevsim0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2}) 10.163857759s ago: executing program 4 (id=890): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r3 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r6, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r3, 0xb516, 0xc2de, 0x8, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000002400)={0x1, 0x0, [{0x40000107}]}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r9 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r0, &(0x7f0000000180)={0x20000008}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000380)=""/176) 9.427777844s ago: executing program 2 (id=891): r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000300)=0x6a1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x4008000) 8.547913151s ago: executing program 5 (id=892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x5752c1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$loop(&(0x7f00000001c0), 0x9, 0x20a5c3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x87}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_emit_vhci(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x200000, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32], 0x17) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="0100"], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1}, @CTA_MARK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20004800) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r5, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c00014000000000000001010c0004400000000000000006080002"], 0x188}}, 0x0) 8.367646345s ago: executing program 4 (id=893): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) sendmmsg(r3, &(0x7f0000000280), 0x17, 0x0) 8.339954425s ago: executing program 3 (id=894): socket(0xa, 0x3, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) 7.117397229s ago: executing program 4 (id=895): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x92) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00', @mcast1, 0x5, 0x6, 0x0, 0x100, 0x4, 0x12}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000280), 0x2000001, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42000, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000088c0)="4580093898a1d16b31cb53b0531f71a24a5b16ae40538efd584367d8522393a724be4985a9234289e0a62e5d9f4b77e235d059981bb4467fdef6b1fe779ab734263d9b3bd46378b1c6399295e7c1e8e04c5b356add1915b7e45b9e381867914e2cc80cd84e62cba8a9388be6679add1c7f801288db0f703ba884b3e0b4e64b227dedf9e86cea33761b16d7bed53bb6c2ca9485022fbbe2854f0ab1cf379bf4e8b53631525338c05e8d8201150169057d7f91506fe413fd930062efbbc2f2e299f1ee56a0e2eb000aa18b21448bb4c74bedc875f3c1060b02dfaa6b09bfedc5f6a21e6af2c270d0874bf56695e4fa97f2a01a4454652ec26710ca2c0e085610c1ec535d2d2520e34f8e995655fc3813751bb05093bce378eb6e7c52daa5943013677e2de843a01cd6b8da3ede72cd58a6e3551e0a63c2d3c2a2a2e19476169d9fd5206973bb01a309b083b2a6e6599678c63f4c79ea43b05873ac8110c0c36600b1c542ec5dacd40f7afbb744556ff81b63e192bdccdcf29f87c250ebc4cc1c7ad9063e646c3b8cb8e2671f9cb03e559232339f29ee8faedc557de70d1f28ff4250c44bf0d5d848d22c0ecc6c2dddde581f59179a1f110712585313f0d79cd9e8d0af6c0995a1688d85bd9919347b0bd4ded8b35606780e070dd1921affe83f1bbe5288692ef99d5266e74e1a321ae4549693720348ac5ed7bed7f65a0a86c2537b19b62120f541c76e607bca0c27c9eeacf8e36190ce2d7ab194d8893306edd40a0893e1612c0a1b2ed8a3f02587967d031e58ada05b1663bd3f23c81effb5f36c661c2c2a8968a64a488d6a93472031519d1086b7256586009a0ecc7ca765dcf9cf77e51abcafe124c65cd5303265b15bc7748340eca92d53e2d40a67e9171cd9ac663ce10f66d345b620f0373caf524a329e5919b3bb6aae9366963668737ccfcd6e738d66407416e813cfcf07094c9e852f280aeb8f2d2dca47e5d3be2c0a212b3165fdeab9b04ae43a7b8bb4b85868e237481906dd1011399e4eff809e88c2d7c01f413aee2a1de58f6856b6ab09b04455b724107fed5d18b786b626039a8ac8e6c53b080bec59bfecf7c4100441e4cb899a351d89422a5e1b3dbcefc0badd0398c54d91d9cf06d3d8643efb51da9c7ffb55e76d2eeac599e162ddea7d399b6d101a1e70e2615824d508c2b5f1550eb1bb825bedf17870765796c0a4090c85aeca36a79a74f42056ef0a05901d808c496234c893a71d5e76a002696045cd2f88afb7235cc2620891c046d8c08ffb71f7b7cafeb4d10976264a9606d5db8472b4a55a5abcbc6bee60394defcde03abc1c4659b63dbfb32198f9d3923607ba11e1728cd5dffa0a29e50f9d55ccd98fecb3e9fe42f08a41739bd0fe48a72e925fa747a483a5bfbf7830d54e8c5513d1bc6201afafef1743a705f2af9055f8fbcefc352b8f6ce3abfc2984e464947e22f3a26305d6421a633f6db0c3949df8d4f051d51e3c9daa0e00c47750b9c8c49e93905a9f3d5b98e6a098eed84d7d16102d24e82a4e85bf95d114b4137dc23f14cc0d7159c67d47a0394e7edf8f84086d6ec5d3db779cb560d9eb4163bd8992b50468105b05d5152688f8df2310f2652889202bc460d3aed5f50167c689ffde48eb8836501239bf80a12c5ade458db4fc618e23e254675a1c510491ddde26062c22833a5d80bf43bc05fc2db6f554a9da0a33026115661fe37a7e6d2905f8e763828564b2787e0d4eecfdf077866de9b33c53efca0da9c4cff7948b083bf7fa79c4fe0060583e0f6e53dec70cb700d1e29f2ad58f16ef642e2bbad4c1b79aa19781fd243f161f9a1176430e58a3909e9f4e250860ef8ff3654879e83b784cf660b72899ee251aadbc479e1276d05850867653b09bd92b85b6cb3001448ef886c75482dc0c3bcd721cad899b6a3a805dcaddb2d3ac61d269a160264642ef93c6ed39f75f08f900dfdfbef529fd537e4470b99d2d5deddea41bf9615d1d1e62cc01a7847513318fbd746fd76445b1073979b6fca255c0f49b18a477341d9336e2c2ae1d107ecf46e0cb92a99a5282e7338cdbedbae2f8f5b36313f507324712d535236c68cbf4bc837d5a1b80d68a4ac517ec313c870f3be015e0ad43c83716685baaf31eee7edfb23af6422a91dd167c6c2e6a585a1d14aafecf8d2bb7d9973a8dffe5838cccd5a385c6258e66f8bf54b378f38afa1e112ac3f785e163257d1f8b5337234b5079d16700187831e3a7df5508fecc1d93e4d926ed1ded9ecce4290de878035f8af16f2dbcbedf929987f355c389ae6c791e796e46326efffeb8a2506d40b8a9ef7c35a90e10eadae0e767b63e0f169ca5a30fdfa43546e2c5171dd801133c6ab986c545b4e73aaa9b3572f92690afc498f1248f8923ebe207f11c0587275569d20895d4662256c3a29ba4518781f8871b84a6b9b6d40d58dc149c38f4eb48bfb70d1b3c5cf2191825ac3b5e554f31c99ea292787fc2e10ad66893b19f22814fc0cfbb82413a8b8856eb13c9e9ced57255d9fb043f882008b7e4439ef068c8d81a60d1affafc43210b827144c1014799f2ebb91d04344e945fdf22d638dca602782c5f17c0e8fc68d00e305bde420231f51449c9fb8b20b329dd21a353085e255ca3522d05b429a49f9ec6c837be07194fef1f9be89080972c3b1f7452e8c9c48c1430efb2558b128f9d58f17576a0a839e3e17e23f74c6227d6481edfd8fd3cb65360577db6ac173a169e932bb1af16963f3c9175b62bc9a221fdc77c029dea920a0ed119248d256264bbf9b85ad4b73b3caaf5faad6546566889dd49e789f188fb6464afdfd160d6208556d52149369d5c29159eb910377af1ade2e3cb6263585c170150e40793120fe24aae427742445ce75ffa76571ebf39aec1e7f94da5b936a58eadd9daa2efeb701e8caa4bc0cecec3e4a5012f8b33e1b895b12acd3b5575691438840bd8df25f60e087563b63d59413fc404b0337e3969db4ffc318110a74f400b261dfecaa54a4f0eac627b3906a121ba316c023bd92bc6aebb4bd4eff374e6c076f7785680ee9768dde2e8d5b7d7287493b9b090af28ab2899c2f0220a4be2979c282f0a062c501dacf69121907a4d746a5578fb6323870b2e113908056df94f5548c5509577c0512b6f16090b79540487238cde05b529397104c43471e6b806e487452dbe1fc7ec60842f9597da099af5c29777f3f9866a118c02bc62a1defdd863ab6dedebd3739290fb547ceca0253bc60f842f15697203ab4a4bd9314e825039f9ba648a3642df81692a5fef5b62ba32b6b78c23650ad56a02cee90a20d7be1a54376e3f0ee4e2f36bdde8eee8d61a8fe24172d695318ac42485f9dc837a4f8d071f910253aa256f875a0bab8ec82b2fd5e20e443bb8d6857ddb0bb69c1efe527785ad1eedc8f5543dbfa811781a0e0a5657795726730fdf5b1434ce981071fb8abfc10b07ee2acab7056bd3476eb850510c2caa80587bd1533574bd7f029d0ef416c22b5b451348612827a15589d0ec74006f0acaa91aeffb2b39fa2ba98f9ab32937f62b9fda193da816f009b05247af1c76ddfea0ea9c3a83f5ee58bf470cfcad1687243819282242f9f3169429a105cd6ab468d6107d2206624e05c4b26128744029cec346bbe787f5cf2bfbe79690624341d41dcbd10a648fc49f3b331b08d73ce2f887530b075ff8ffa8dae8f69446e45123d947454bc8f5e93fccddada1f223bd84d7a9cc08816d58d6fad16e4d40cd52ea4cf8ca28bdff995968a2ce1fc0532dd0e50397534b9fef5b9e4d8986593d43cf179530aab329bc4afd26e7ea7c4e875f9bd7c51db55674939cc1a57ac3299d5a0320acda5e54acdf6d8bb61af7577bb92dbbf70b59d69678b06ea04ace4288da1690e737549d0e61cc814843f4ee0773a78b02c4b203616fbf63402a6352e31fc561cb3b48f3f887a5d98252b649c7faaa967cbecafd4363c214c00760d19d925349523028aff2436cddeef29b452a05934527862e7fb6528de83e3f2d2969633fc70bef596daed510832dc44e810b2e34a2fb67a13f985f94fecb93fcd0c24c0a1356c76a00d6fc813e94638231b8c5b66a429ac7b4950e7a93ed32d0078c2f8883f318e2b2bbdb2733cb29b1ca0395cace62f488ad5bfb149a5985abe3b837a65006653d55c0c71ab8a1c0f4994b28b20a010e93a21193648c08285c52e3b8ea60fc4b1692daeee22ac8c40cc67c477f73a706e60ae3750a9c6099283c923490b238d3161073b47603e625f8ec3050cf6bcea7e066162970d7d7a0bc4c157a8386e716f9819b72e0baed00ec6e59d14a8f18d0a71c3a663ff52b8f7e61c920757ce9b132887d4500d109d6c98c2ce2a69baa7b58c9047c135851ef62a60fd420834152c028ab60e2279c68772455083d5805b3064a765e285833493b2c7fac19d1dc7e5c909757a6a1fb78a983f5fa66323698c05e166b25234362cd379a8fd5338c48fc15ba59c1dcbb6172f9d65076446b7a0db1deb7c3bec42d6cf39e21619bd8c7834c4c972f2fa330c18edb3f8ab157655d3cfe9aaf104de7a546bc256ff856c9037de1de70122efa4c1ad7bb62b7697db86f69d4c0517708925fb0c9404a9b64067f644b17d8bb20ec560d783827058473066c110200893f623bbc48e6001682d09cb0144f58c153ee43abb15249a49d6d6d1438338535b02989c95df2f66a772553fba8f1f61023e6f91af7db6d874388c8002eb4a11bd719526643738dd2ff19662bd1fd5c9c46dd691ab65f2247f45522976ac32352ffbb5a431a6a08934ea7fed11c37aaaae99202262a42958fa77ca0f35a6c67a85b4a46164843b8625e47b2a282481415dfa7f83c2ed4fcbabbc8b3684742001ce98bdb5c15188233c4e7bb87ee3af08313af7822d3c45c027a061bace195fac29f0083dbe553e078c266343880d84373cf195e0c728fb2921d7e988c5c715d44ff02d849603e55cf4b2f744a90088c7a28d396f47a98a23e2312627b78e6715e6703a58db3c83f8c42da33ce86c9a3c17ed9ae636e53e70ea924e22f15a157811ea6d2fc96114e94ba2f475cf762fb494176a6d149d099fd508208c80644518f395f792eaba914409e54fb7c77319bc713c449a335ae4234b365308f9ba8d5fc5892f3e49e3d47394175f0947725b1233e6d142c8daa82d93a6ae26511116339284b5c229ca72c47c130fae5f42b753e72e77629bce4ee34ba274c2eb5db9a037786b6cc5cb1164f7be373144a6fde69930ee0e39a6e1d353a0e5e19b0476e39be3f2e243ba4a0db5f0a9e73538291736c22f57d4117897939217da05ea31ca54106b4ede1a61cfa8f3338f24d382dbfb6f9d828c0a4aad0dcfd0d2b0d4eccbae71c72b855167069c2705efaaaa789a11ff5dee5186420a5ea7fd8ce7d96168b66c595d3d367a9b0122606c1a027cf52cd387e8e5e4d7acb4d29981b1c48da04dca0276f11936cfe03d0e654e0df00727c8f6df166d2af99b3a5c00d7e78bbda294e80928935c5c4054f1544def46929eb9c3ea436e7e1e4a6af8a29c7fc5a614dc737721e8315fafe8e668a5707228620226553fe092e70cf8a31299a95464d57c44eb99d49b7ee4e21531d2b1277e0e1e1a16c2c7ff90aa49d7bddd86dc2dd24ed51fb4ea3026cdd38e07a515af157ccc1655967d1344858fffef8dfba2becbdb2383ec1fa7ae7c0ebc3ffe973b8fc4c3a43e2c2de61d7c2429b80354e54174a9256ed4142d86eb89784fc65fdd2e0695f3e457cb118eb70de1c3f90a56a28a2a2d1c438f9dde30b1eb759a7c109e6a5c5d1086285fac72eabb26233fe6cce54a581dfcdb41cc5fac1732823a9c303d77294a108b4d29010664b5e3a513d6875221c20baa55ff273e77346d6223939b3d8b2efe570446fe9e77f2be5367587cfbe98d4b6847c9b13ed0b818cc3469bd8f3988043b880667c07566ccfa8975be5995011fd1349cdc5cb06a95a355c5a11a1688468df7e6a537eb0efc5010ecf72d4c53faa74b93a809532f3038991014b391adfa6d17c3cd6bf9df18cb4941aa228e402009418f67952e5f22455f89ed434dcf522b02f350f0d1a79db837630830306a094d82ddcba3657e6ef13b7e7252b76f05c5f78127d16b13443d337911f988479ea1d8d78f60f516fc22118d64b982013dcc272160488bf16fcc4674bed5ab2b3af7f8089fa679d009a60bd23c82cce41837784f8c208ec8177ef63aa1f492ae9b7791e94006f60f606c3f35c5e53073485da4a4a714cb6f0dcedaea0fe49ab85568e215695efa82053b58842bf4e4df721304fc9c5ac0828ca66c7223cff63aa13afb68436635b374ccf1b14ea528ab7e4acacfd7285d88521161086a99133f1ba2ea483ba69c38fe32e2afa6cb079fb268b585fe90bbefaef5eebdec882ab3863bccb7bcb3c49f4f9ae3bb43c087ce30b2f05e780aa7b80886ba2506322ee793fd99e7d56632a468b53635811247033208de3d17a36142f53b2f1dbd57727c4935ecb554b5e91038f342b035285f1eb4a1e65e577f407312aed0dd68983d6e20d56aa3302c888a889b5c1b485303c7591105642cc96e7d34eef7808b51e1a0f845ce63d904704527f4acfcc0a5d8fa69bd0648e721daff09b70ec95ff2f173f2d62bd566829a55eb2e6d45465cf520e0b505550014851db1fbf84dde8412d1aac3df64a8b39d42cd18d699e94d0a16b5ee63fc7ea82c19688893790360773445c439e1fe5e5ccafa85a4fc45e5b811861fe9d8d6a3994a8c658b6fab904852f80a3276c4df48d4bbd36fac4d16103eef0e422488221a9189d910a204d8d1a79f755fccab38754d6b5e5c5b4f1cba75658bd43f2fb0752ef479a23d62dd7631aa7d9c76467ac2917b9e4b33d14ef56cd950f9ba114e94f1db8234ece2b3787f2806314df385de62b86228ce20a6579f9933c8bb9401c41642b00e644b78cd1d04ebfec1178237cd7e706d79d332b0e766ffc6f6353417c4726b6dbef648ed779c329485a9dc48c7111b447372e2042f402a079c2de283fa2221932c1ae1882018d8bda50b79f49ec3cdce34c09b783b1923036b95378ba4c1c343889e8bfba59e47c7b40364a78c8597ce696e43d3cf81fa78e106c9bd6a99c56fa4e0e0ae1d7a78355337c135ae75e4f9b754807fca65fd06dec18561d57b2855836c4340c179ea76959abde59f5e8b8a5f573d844fe26a3536e4f8b0c75ecc66b6e4625bc6185fc41fd5bbe96351e71958f87a6d28aa50039b16f26a71975a4c37cc0c028ba8a608b66de5ede49ccf3d78bd7a81a9322854a9589b4dd6f962972ef05f8deb8d331b9e21c6a63cdb78f58f86927bff15e319166478c53d08ad8e2ad155aefa2d43a51bac1e4450b7c52b92d75567a2297290ec04ea5f5b65f1f8ad0bb0502504aacd37b8a67d0c957e3cdb7f2eb8d1412e3cea7e69f7398dbb4e4986a24c7070e786ec60157ca3996ec0142e677665629480bee5de63b13384512e6c5fc7d6a5bddfdf63911fa888f71ab601e6018ed28fcd3577cceef79a7e22c84b77621a8e3561af825ed82eee51c24ed0665a06afdde6e53db6c75e27f2049dbfce61da141c5c338541b3bb4d03c8acacac73e1e60228aac37f0675d8ed56b4e940cd5522dcd6c86a6fc71654f6f6994dec3af199eaca80e8888777cdbd6142518f12111e81e4ffe1cdd8b93545cdd64baac4f37751723b5e96f5aaa67da6685cfcc4267ca2696f81371a40cb43d16f69c6b2884b270dc66a41102fd2ecb20e565fc48fb85ac08471d35d17cd9eb01953534fe958cd6661397cccbfcc93e288543c3bcdbd3fef547cb62765a9eb25218c4799a36037ddcc1087d9ff1f071db65d1bef02a7f71a3a9b2ea574cc7807d400608f07f0ad49fdc1f78b31ca2c1325978a062a678034c8bf7c5ba2b568a2e363b3a28b4d919106d70e0399e231ea50cadc1be84e7781fa49e5334ce5e66b62d1939df3c48cfd52fd42ac5d80bca8a98d5ac9fe5a1b55606bf92d7c5ac294ab45691b235229ab984ddc35424eaa8a52dc9eada4ec0070553ede17e603580cc87fd5def48b53b8d9f8a28537859c0cb248a760dd434b6147f7380a4791cfd6aed2ca157e86703d7051ebb8a1ab077bad6b7c526b2e53dd6bbc5825bcff00657f78d808f6b80d04192fbfba468a54bdb068e14ecd1c746b9827efa99828b223691ad03b51a0d65653cd31e320032805f6773b31c6f7055389ea64d881b43a99f50bb4ce088548d32f14ea8a1b76b5251384609583a2bde4f2a43ef410b007079254405b5748a46aa322a6a5d95e03b23995a0242362d47e011c53b1ad08b24608c841317e8cdf3667c8ad9666d14704c7c2997a43b1a46c60e41ceb35449b72aa8f9ed99c7e1740dd2d4af0b7fa8d9ae022b7739968c3d93de715fb239400f96ac936a55d82c2e5be0c062c3fd807e5cc96e1afe310d7973e2bbc5dd23b4e48a96ebc8956df7be624c6fdbde324e884cfef902f485b5d38a7d019020da89190c989966dec55f8e4c5e433cfe36a6042b6fe9af91788ad0ce5d70878ef8c483b095b2dd4b62e8ebfba2f2d8a5005df1a7055eef6a7f40a35d79ad782ae73e4977fcd39b38cfdf4cbbdcb0a94ab6e7648f054d044766355dd54f2720247aa36ce7876d449ee41191f1e7f60feb0b4928f6bce900e089727f8d7595a1c4fc483353e713f53846b40a09e88e642d0a42678a324a743d965a709c1967e2262eee92b153841917ae0fb923e687f5eb56167c10a3495b9412cb2e0004978fdb6109d70fe93d532c13b09cab04bfabfed657e61b436d52ee3d504cd3fa34f530226437ab76024e574601e3a9480d809de9ee3f7c5f438aad36234dc522de47a18a5c993da28fac3717206e57674156b40b822f47d68374b49ecc64e13940c19c33b7728c28cdd8f747b3176f5886c4ffe7b890a73a0cc0b28019fd6a6f239652c2fec8dfd4a7b6d7d18318a87c343892db5ff81f2ec2f94e1e0cb607815e0c783abd3e5c1c85dd6fc83677efd14bcc88c9c67e73769b5916662aca1470e28f91772d80baa3bf9e1bedeed8bc6194c8a2f77ca89ac69b3065a89beda8b035168070b4e2b8467e2bfd91248c62ebc1089a91803fcaf75cdc54428d5ee466d5c901ebc690a155a8ffd01e5976612a6ff524bb9c2c706aec7f89595b91ad7040d97b89fbb8729f57853abc30b7c85ed39b624593b1b3d40da689718dc8f2ea16c0d5e6a019e7764ddd528fab311f9ad1eac649640b9b681ac943c454b34dc9c7f490f51a19dcda40d84ce1cd2845a29b03bf1db1143bfb43cb0a05c027fa2b1e63e7b4cb43269203a12eaa3e7c4ada4a01c9a04a4ac7d9d69b3b8da50d96aa0d55121cf56c91b894a1beaeac59144abd5d421f3fe8ae45cc1755f99805d46058d9c44d4d77142553e7bcff51266d06498790ef69d58518932a1d5b914c516adabeafe140f4a56d62d4ff45f557c959597fcd67d443e7054bc69132eef9dc8a0be5833dfe68c6373cfbc165d47e46da75c1d44b14bd4c8b568988439de7ebf6cc34f16deef013846024c53e6364793bd56de3bdf086ebbd14941b942dccd13041fac950d8440438ee2455982bb0ae79e00217ec62b1bc31d2e2ef1dbeab36b729ac4ccf2074f4d8bb46dcf36000b80c74c5cae8db365d492d2f169d2da0227a97cc2523545d8a3e499a120be96a6f07abbb4dd5f348a3691db1d851f7039e2921eb8c263a87ec56850eb35bfcfd75d700c161954b3c42142d493f8b138e92540c5a90fa91cb117b1ec45e0911085d5b2458c17dddf4b220e50667d5fdbc95919d9b498eb748a92cce6bfca17339c886a26c9a0ed960226767b1f20cfbfdd82865d2ba8aa6305f6ce3bb8ec8a9decb275693af4abc71de61915361ec30e9ee2869073801cbce600c297177761b5a487fbe6e2c6e1689b7afb4c5cd612b0c14ae5255dd979fa8cc69e91126402190b79238db8b4a90a23c60144267e2f70f178343e1edde7c04066430a20048941fd6a5ac4e68e8fc91dee05845a037840e70f8e6ef4fc6a04ed6b4cf67ec4655f5fff615fa12b8d4083197e5d30b9fd4db5586c880a2edeedbbef14670418383179e7013e735f131d5f00620c8d2080f4ac63ccc90b77cae271782ed792a0db358302d58cb77420ecdc7544628ca1f300c337cbf0c0c8dc10387b5c214b0a6514896e092663c94d87e217fc80af8a2af0ae4d5dbb4888f7a6b19b709265f9e6510489685a8f2fa7354752c8338b526cd7e3f23011be1fcc1d09732494d53b3129df037b0f9f7a1d650e7f33747cd08c36dc4233e6e506d62bbf71a83b40bc3b9f5656e2e1fbdb2da87ae18307b44153afd1ac378bc198ab256da795cd6a73c613ee98c44172c029bc98f5dedb8e59e2f7f16a3da9ebb57d910163f051e83039cfe4a4665c9ad404c8b0cea48eafc1913262640f0de4beafdd8401fbc3a6c365082553588df6c049fab0c91d3368eff2fb9cec71d5fb7556525aeab4cfdbc3308c7573b02967893b20c7144b2041757aed6d2c8f97eeecb9f980b10ee5834b389a013de370ce100d5656da4669a65a8aaf071b8cc1f8d761cc4d5a68d7b66f59f24e1e5973d4ad4ccbd80460048b1722df76554f016a283c585cf94f0e142c62f2bd9647cc298bef173f07d39b0235170a82e8ed3f988afe97f7db65f33e841418bf3668fd87d2acd84235ecb75c006c0921dcb41e9aa63e23af391d3be43eef4052570572706d5fc91b86ccdbdc2d725506653947d19f8d1fcd6b8ce652f00f878ffd512060cd1e090bfcb04d37faf10b1ad9c9b42604de918f5f5fc6f2b1ea9cab85e1c7c28db8c3a395462231d64466706981776bee909a60f3c33d47f221f065f7a158548b4e6440606f1ed35414179bf3d2b525c19e288c040ac9e4a6c4dadcce8c20b37c3d3d030f0e4faf8088fde26dc5fd9fad0db9457b414a71ee9bf4860859f0110be4c0ccbf66f5f84753f6661ad754fb9f9fce4406ec02a5665cb5d24bd206758b0518dd916bdba0172d362a79970884f5ac27828b291e95675990688c1f50f8e602e0aff46c157d5974b2661cf1b1868f895e63b2c842b1425160928a37333e31eb8586677ca88e5106c3329268b3824c7a593c301ba2071d5751688164d8b1eef49b9f00d009b6df26ebd9c3e4462736e8dd7aa427f0f9738a4761fdcbc59f53bd4983025704084651cc48e311a3507db3267b4952b095f7ea22ff44bb0447859b29903fdf51873afa136a93918d1dc21c4fc830c2474f1d1408bbf2506d892a9a5ee73092ba9b85d9373eebdc60ef5349b13f0ec2b5031488be413afbbccde997ce8252aeaa2a74da28d0f7ee4575675e4fbb818f32c928c3d96a16344eee26b056d29f272d781043b9e261e3b0e33f7495d9ec86ff16e8a13e640dea5528925bf301d8f4df79200650bbe54e08286aa2504b18cc1274c75bc2c0bf90d65ed34b5162d3c75369d411c7b5d19b916b7a9a388ec57590d4f143b4697a5e924f7163a9611fcb1dd72e17da4a45b10d53b086fc66f4f41e8dcaf7e", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x20000) 6.981456192s ago: executing program 5 (id=896): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000021000000000800000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x3, 0x5) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x94) socket$rds(0x15, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 6.017604121s ago: executing program 4 (id=897): socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x64040, 0xd0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r2, &(0x7f0000000100)='syz0\x00', 0x1ff) 5.847761295s ago: executing program 5 (id=898): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 5.698063938s ago: executing program 3 (id=899): r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000080)) recvmmsg(r0, &(0x7f0000004640)=[{{&(0x7f00000000c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000500)=""/40, 0x28}, {&(0x7f0000000540)=""/239, 0xef}, {&(0x7f0000000640)=""/224, 0xe0}], 0x4, &(0x7f0000000780)=""/33, 0x21}}, {{0x0, 0x0, 0x0}, 0x4}, {{&(0x7f0000001ec0)=@hci, 0x80, &(0x7f0000002640)=[{&(0x7f0000001f40)=""/246, 0xf6}, {0x0}, {0x0}, {0x0}, {&(0x7f0000002300)=""/128, 0x80}, {&(0x7f0000002380)=""/230, 0xe6}, {0x0}, {&(0x7f0000002500)=""/56, 0x38}], 0x8}, 0x4b}, {{&(0x7f0000002780)=@sco, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002800)=""/198, 0xc6}, {&(0x7f0000002900)=""/216, 0xd8}], 0x2, &(0x7f0000002a40)=""/201, 0xc9}, 0x31c6fdc}, {{&(0x7f0000003000)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000004500)=[{0x0}, {0x0}], 0x2, &(0x7f0000004580)=""/174, 0xae}, 0xee6}], 0x5, 0x20, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) r7 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000140)={'dac02\x00', [0x4, 0x6, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x6, 0x1003, 0x6, 0xffff, 0x0, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0xe, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x1, 0x4, 0x8049]}) 4.627655189s ago: executing program 3 (id=900): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x202000, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8000, 0x0, 0x8, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@deltfilter={0x2c, 0x2d, 0x300, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffff}, {0xa, 0xfff3}, {0x3}}, [@TCA_CHAIN={0x8, 0xb, 0xc000}]}, 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0xf9, 0x6d, 0x40, @private2, @local, 0x8, 0x8, 0xfffffffd, 0x2}}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 3.464801532s ago: executing program 3 (id=901): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r3 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x1885, 0x80, 0x2}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r5, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r3, 0xb516, 0xc2de, 0x8, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000002400)={0x1, 0x0, [{0x40000107}]}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r8 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000180)={0x20000008}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000380)=""/176) 3.291276005s ago: executing program 2 (id=902): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa1843, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000140)=0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000568000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30000000001400000011000100"], 0xf0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x6a, r2, {0x8000}}, './file0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x185200, 0x22) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000000), 0xffffffffffffffe1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0xc0189436, &(0x7f0000000140)) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)={'netdevsim0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2}) 856.773513ms ago: executing program 5 (id=903): r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x8, @remote}, 0x9) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @timestamp, @sack_perm, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0xfff, 0x4}, @window={0x3, 0x5}], 0x9) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={&(0x7f0000000000)="b7dc9e5f10373364cb7a15d27c31e5d75ec803f8bc42a7b9b320bdb9a0acc1b6a6095ff8", &(0x7f0000000140)="92774f4f42745c6006bf4b4101b4118c0e782762ca1e412581a845bba0d4e3486a49d8852a25c8890b47647957a5c9057c46408889425d513e37f03e9b1ab88397fd5293f3b566ba230b15d81cb95bb883a83864a7ac81fec185d90d9e14a5149584b095ec3c1bcba9232bf19749907c27c262e090e32bdc94158526dbf413b4c5d3bce6611ac3a9ba99c9f4fa01796cd8bb6555217d5233f869bf78738d74822b"}}, &(0x7f0000000100)=0x0) timer_settime(r3, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 0s ago: executing program 3 (id=904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x5752c1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$loop(&(0x7f00000001c0), 0x9, 0x20a5c3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x87}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_emit_vhci(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x200000, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32], 0x17) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="0100"], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1}, @CTA_MARK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20004800) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r5, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c00014000000000000001010c0004400000000000000006080002"], 0x188}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.6' (ED25519) to the list of known hosts. [ 76.034354][ T5775] cgroup: Unknown subsys name 'net' [ 76.196845][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.868498][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.653994][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.663558][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.671279][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.679634][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.688172][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.695715][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.714013][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.739159][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.742123][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.752019][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.759780][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.760854][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.768497][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.775446][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.791839][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.799908][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.807960][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.815408][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.823353][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.831669][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.833350][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.846872][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.847768][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.867062][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.300196][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 80.407058][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 80.505631][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 80.578646][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.586513][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.594537][ T5788] bridge_slave_0: entered allmulticast mode [ 80.601765][ T5788] bridge_slave_0: entered promiscuous mode [ 80.611339][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 80.622248][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.629579][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.636755][ T5788] bridge_slave_1: entered allmulticast mode [ 80.644006][ T5788] bridge_slave_1: entered promiscuous mode [ 80.740287][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.752665][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.781269][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.789144][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.796303][ T5785] bridge_slave_0: entered allmulticast mode [ 80.803595][ T5785] bridge_slave_0: entered promiscuous mode [ 80.813312][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.820596][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.828032][ T5785] bridge_slave_1: entered allmulticast mode [ 80.835051][ T5785] bridge_slave_1: entered promiscuous mode [ 80.933730][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.943619][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.951427][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.959097][ T5786] bridge_slave_0: entered allmulticast mode [ 80.966037][ T5786] bridge_slave_0: entered promiscuous mode [ 80.975547][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.983198][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.990803][ T5786] bridge_slave_1: entered allmulticast mode [ 80.997944][ T5786] bridge_slave_1: entered promiscuous mode [ 81.008634][ T5788] team0: Port device team_slave_0 added [ 81.027234][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.048588][ T5788] team0: Port device team_slave_1 added [ 81.081025][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.088742][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.096057][ T5787] bridge_slave_0: entered allmulticast mode [ 81.103914][ T5787] bridge_slave_0: entered promiscuous mode [ 81.137225][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.147038][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.154265][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.161749][ T5787] bridge_slave_1: entered allmulticast mode [ 81.169049][ T5787] bridge_slave_1: entered promiscuous mode [ 81.205039][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.248490][ T5785] team0: Port device team_slave_0 added [ 81.255399][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.262707][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.288945][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.326697][ T5785] team0: Port device team_slave_1 added [ 81.345878][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.353071][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.379891][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.395420][ T5786] team0: Port device team_slave_0 added [ 81.405605][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.433215][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.440296][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.466366][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.481652][ T5786] team0: Port device team_slave_1 added [ 81.489783][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.532514][ T5787] team0: Port device team_slave_0 added [ 81.541036][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.548661][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.575336][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.614368][ T5787] team0: Port device team_slave_1 added [ 81.652117][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.659479][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.685569][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.729601][ T5788] hsr_slave_0: entered promiscuous mode [ 81.736148][ T5788] hsr_slave_1: entered promiscuous mode [ 81.743923][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.750940][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.782469][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.800913][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.813205][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.838320][ T5796] Bluetooth: hci3: command tx timeout [ 81.844997][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.917496][ T5796] Bluetooth: hci0: command tx timeout [ 81.918275][ T5789] Bluetooth: hci1: command tx timeout [ 81.923528][ T50] Bluetooth: hci2: command tx timeout [ 81.961752][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.973968][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.006205][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.023821][ T5785] hsr_slave_0: entered promiscuous mode [ 82.036400][ T5785] hsr_slave_1: entered promiscuous mode [ 82.043186][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.056523][ T5785] Cannot create hsr debugfs directory [ 82.143965][ T5786] hsr_slave_0: entered promiscuous mode [ 82.155660][ T5786] hsr_slave_1: entered promiscuous mode [ 82.162504][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.175768][ T5786] Cannot create hsr debugfs directory [ 82.322213][ T5787] hsr_slave_0: entered promiscuous mode [ 82.329170][ T5787] hsr_slave_1: entered promiscuous mode [ 82.335499][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.343246][ T5787] Cannot create hsr debugfs directory [ 82.689152][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.702006][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.712768][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.740872][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.823052][ T5786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.835110][ T5786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.846208][ T5786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.867829][ T5786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.958192][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.975832][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.987087][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.020538][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.087694][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.100102][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.111941][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.122889][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.183002][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.232948][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.271599][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.279112][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.334749][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.341966][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.368592][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.395859][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.454427][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.483120][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.499811][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.506944][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.518273][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.525414][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.543273][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.561241][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.568460][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.610446][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.631977][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.639477][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.693283][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.700502][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.745623][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.752864][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.921410][ T50] Bluetooth: hci3: command tx timeout [ 83.964195][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.998642][ T50] Bluetooth: hci2: command tx timeout [ 84.004113][ T50] Bluetooth: hci0: command tx timeout [ 84.010199][ T5796] Bluetooth: hci1: command tx timeout [ 84.052049][ T5788] veth0_vlan: entered promiscuous mode [ 84.090828][ T5788] veth1_vlan: entered promiscuous mode [ 84.150435][ T5788] veth0_macvtap: entered promiscuous mode [ 84.176125][ T5788] veth1_macvtap: entered promiscuous mode [ 84.211666][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.247022][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.272498][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.289220][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.309607][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.330750][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.476185][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.513357][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.531790][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.566022][ T3442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.585680][ T3442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.673844][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.685162][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.689863][ T5786] veth0_vlan: entered promiscuous mode [ 84.730454][ T5785] veth0_vlan: entered promiscuous mode [ 84.745145][ T5787] veth0_vlan: entered promiscuous mode [ 84.754985][ T5786] veth1_vlan: entered promiscuous mode [ 84.776389][ T5787] veth1_vlan: entered promiscuous mode [ 84.790703][ T5785] veth1_vlan: entered promiscuous mode [ 84.876561][ T5786] veth0_macvtap: entered promiscuous mode [ 84.901022][ T5787] veth0_macvtap: entered promiscuous mode [ 84.948125][ T5786] veth1_macvtap: entered promiscuous mode [ 84.978863][ T5787] veth1_macvtap: entered promiscuous mode [ 84.991289][ T5785] veth0_macvtap: entered promiscuous mode [ 85.016354][ T5785] veth1_macvtap: entered promiscuous mode [ 85.058265][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.069727][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.086871][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.124132][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.149407][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.170346][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.183201][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.214277][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.222908][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.235870][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.247418][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.258464][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.268968][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.280712][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.302182][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.322656][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.340610][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.370688][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.406732][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.422981][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.447002][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.458408][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.478931][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.488491][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.504697][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.515170][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.529982][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.544099][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.555664][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.574563][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.590237][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.603121][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.634432][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.649677][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.669325][ T5786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.698207][ T5786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.711721][ T5786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.721204][ T5786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.766250][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.783012][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.797134][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.809216][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.997939][ T5789] Bluetooth: hci3: command tx timeout [ 86.077469][ T5789] Bluetooth: hci0: command tx timeout [ 86.077632][ T50] Bluetooth: hci1: command tx timeout [ 86.083405][ T5789] Bluetooth: hci2: command tx timeout [ 86.218554][ T3442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.234302][ T3442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.258067][ T3442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.266300][ T3442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.416316][ T3432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.449900][ T3432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.556369][ T3432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.565111][ T3432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.605411][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.613672][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.695825][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.738542][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.767580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.347599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.415000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.516638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.619085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.087350][ T5789] Bluetooth: hci3: command tx timeout [ 88.157625][ T5789] Bluetooth: hci1: command tx timeout [ 88.163403][ T5789] Bluetooth: hci0: command tx timeout [ 88.169340][ T5789] Bluetooth: hci2: command tx timeout [ 88.417745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.426391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.847855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.155004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.177834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.434254][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8'. [ 90.535409][ T5908] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 90.535409][ T5908] program syz.0.7 not setting count and/or reply_len properly [ 91.229297][ T5903] ======================================================= [ 91.229297][ T5903] WARNING: The mand mount option has been deprecated and [ 91.229297][ T5903] and is ignored by this kernel. Remove the mand [ 91.229297][ T5903] option from the mount to silence this warning. [ 91.229297][ T5903] ======================================================= [ 91.273771][ T5914] fuse: Unknown parameter '0x0000000000000006' [ 91.301713][ T5914] (null): rxe_set_mtu: Set mtu to 4096 [ 91.323885][ T5914] lo speed is unknown, defaulting to 1000 [ 91.503273][ T5914] lo speed is unknown, defaulting to 1000 [ 91.520046][ T5914] lo speed is unknown, defaulting to 1000 [ 91.559837][ T5903] mmap: syz.3.8 (5903) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.536888][ T9] cfg80211: failed to load regulatory.db [ 92.777675][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.753953][ T5854] lo speed is unknown, defaulting to 1000 [ 93.762177][ T5914] infiniband sz1: set active [ 93.778879][ T5914] infiniband sz1: added lo [ 93.816303][ T5938] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.901554][ T5914] sz1: rxe_create_cq: returned err = -12 [ 93.909238][ T5914] infiniband sz1: Couldn't create ib_mad CQ [ 93.916717][ T5914] infiniband sz1: Couldn't open port 1 [ 94.111354][ T5942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15'. [ 94.138840][ T5914] RDS/IB: sz1: added [ 94.143728][ T5914] smc: adding ib device sz1 with port count 1 [ 94.150393][ T5914] smc: ib device sz1 port 1 has pnetid [ 94.166218][ T50] Bluetooth: hci0: hcon ffff88803013a000 sent 1 < count 7 [ 94.180594][ T50] Bluetooth: hci0: hcon ffff88803013a000 sent 0 < count 64 [ 94.193728][ T5854] lo speed is unknown, defaulting to 1000 [ 94.201451][ T5914] lo speed is unknown, defaulting to 1000 [ 94.780904][ T5946] tipc: Started in network mode [ 94.785951][ T5946] tipc: Node identity 4, cluster identity 4711 [ 94.794524][ T5946] tipc: Node number set to 4 [ 95.715070][ T5914] lo speed is unknown, defaulting to 1000 [ 95.812195][ T5960] trusted_key: syz.2.21 sent an empty control message without MSG_MORE. [ 96.766421][ T5914] lo speed is unknown, defaulting to 1000 [ 97.140697][ T5980] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.728917][ T5987] netlink: 24 bytes leftover after parsing attributes in process `syz.3.29'. [ 98.857428][ T23] usb 2-1: device descriptor read/64, error -110 [ 98.924518][ T5990] syz.3.30[5990]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 99.056825][ T5914] lo speed is unknown, defaulting to 1000 [ 99.137985][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.312944][ T23] usb 2-1: device descriptor read/64, error -32 [ 99.474904][ T23] usb usb2-port1: attempt power cycle [ 99.938543][ T6004] block nbd0: server does not support multiple connections per device. [ 99.965718][ T6004] block nbd0: shutting down sockets [ 100.416181][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 100.474538][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 100.637655][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 100.658074][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 100.716503][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 100.741759][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 100.749528][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 100.757023][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 100.764826][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 100.772486][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 100.780250][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 100.788011][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 100.797527][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 100.805060][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 100.813072][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 100.821087][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 100.830347][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 100.885792][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 101.002914][ T9] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 102.117251][ C1] sched: RT throttling activated [ 102.742582][ T6024] fido_id[6024]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 105.447694][ T6051] block nbd0: server does not support multiple connections per device. [ 105.478801][ T6051] block nbd0: shutting down sockets [ 105.597909][ T6042] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 105.597909][ T6042] program syz.2.47 not setting count and/or reply_len properly [ 105.842672][ T6055] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 106.618378][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.689836][ T6063] netlink: 2412 bytes leftover after parsing attributes in process `syz.1.55'. [ 106.807377][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 106.816798][ T9] usb 1-1: config 0 has no interfaces? [ 106.832779][ T9] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 106.857318][ T9] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 106.891853][ T9] usb 1-1: Product: syz [ 106.904840][ T9] usb 1-1: Manufacturer: syz [ 106.921688][ T9] usb 1-1: SerialNumber: syz [ 106.950001][ T9] usb 1-1: config 0 descriptor?? [ 107.178617][ T9] usb 1-1: USB disconnect, device number 2 [ 107.327703][ T6075] block nbd0: server does not support multiple connections per device. [ 107.357729][ T6075] block nbd0: shutting down sockets [ 109.195136][ T6100] netlink: 2412 bytes leftover after parsing attributes in process `syz.0.67'. [ 110.588237][ T6108] 9pnet_fd: Insufficient options for proto=fd [ 110.658001][ T6107] block nbd0: server does not support multiple connections per device. [ 110.673931][ T6107] block nbd0: shutting down sockets [ 111.795871][ T6130] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.058615][ T6129] process 'syz.0.77' launched '/dev/fd/4' with NULL argv: empty string added [ 114.271259][ T6137] warning: `syz.3.79' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 114.290054][ T6134] netlink: 32 bytes leftover after parsing attributes in process `syz.0.77'. [ 116.817623][ T6144] block nbd0: server does not support multiple connections per device. [ 116.827214][ T6144] block nbd0: shutting down sockets [ 116.963865][ T6147] 9pnet_fd: Insufficient options for proto=fd [ 117.037575][ T5871] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.404626][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 117.469861][ T5871] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.480646][ T5871] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.417399][ T6158] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 118.417399][ T6158] program syz.3.85 not setting count and/or reply_len properly [ 118.643363][ T5871] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.653836][ T5871] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.666979][ T5871] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.676160][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.236211][ T5871] usb 2-1: GET_CAPABILITIES returned 0 [ 119.242395][ T5871] usbtmc 2-1:16.0: can't read capabilities [ 119.492800][ T785] usb 2-1: USB disconnect, device number 5 [ 120.014441][ T6170] lo speed is unknown, defaulting to 1000 [ 123.845654][ T6193] block nbd0: server does not support multiple connections per device. [ 124.061771][ T6193] block nbd0: shutting down sockets [ 126.857507][ T6230] block nbd0: server does not support multiple connections per device. [ 126.897725][ T6230] block nbd0: shutting down sockets [ 131.905937][ T6255] 9pnet_fd: Insufficient options for proto=fd [ 133.645752][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.674955][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.247741][ T6271] block nbd0: server does not support multiple connections per device. [ 135.267925][ T6271] block nbd0: shutting down sockets [ 135.347627][ T6275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.115'. [ 135.491363][ T6276] bridge1: port 1(bond1) entered blocking state [ 135.500400][ T6276] bridge1: port 1(bond1) entered disabled state [ 135.512060][ T6276] bond1: entered allmulticast mode [ 135.519687][ T6276] bond1: entered promiscuous mode [ 135.568436][ T6282] bridge1: port 2(geneve2) entered blocking state [ 135.575217][ T6282] bridge1: port 2(geneve2) entered disabled state [ 135.581991][ T6282] geneve2: entered allmulticast mode [ 135.589220][ T6282] geneve2: entered promiscuous mode [ 136.125568][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.118'. [ 136.402923][ T6297] (null): rxe_set_mtu: Set mtu to 1024 [ 137.019025][ T6297] infiniband syz1: set active [ 137.047551][ T6297] infiniband syz1: added syz_tun [ 137.505262][ T5872] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 137.610067][ T6297] RDS/IB: syz1: added [ 137.614226][ T6297] smc: adding ib device syz1 with port count 1 [ 137.652514][ T6297] smc: ib device syz1 port 1 has pnetid [ 137.719886][ T5872] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 137.730018][ T5872] usb 4-1: config 0 interface 0 has no altsetting 0 [ 137.761817][ T5872] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 137.781307][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 137.807331][ T5872] usb 4-1: Product: syz [ 137.811566][ T5872] usb 4-1: Manufacturer: syz [ 137.827327][ T5872] usb 4-1: SerialNumber: syz [ 137.854351][ T5872] usb 4-1: config 0 descriptor?? [ 137.890947][ T5872] usb 4-1: selecting invalid altsetting 0 [ 138.838252][ T9] usb 4-1: USB disconnect, device number 2 [ 138.906398][ T6316] binder: 6315:6316 ioctl c0306201 2000000002c0 returned -14 [ 142.048557][ T6326] netlink: 2412 bytes leftover after parsing attributes in process `syz.3.129'. [ 142.984416][ T6346] Zero length message leads to an empty skb [ 143.231636][ T6351] netlink: 2412 bytes leftover after parsing attributes in process `syz.3.139'. [ 145.010944][ T6372] binder: 6371:6372 ioctl c0306201 2000000002c0 returned -14 [ 145.152913][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 145.179058][ T6374] netlink: 28 bytes leftover after parsing attributes in process `syz.0.147'. [ 146.115321][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 146.126289][ T50] CPU: 0 PID: 50 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 146.133722][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 146.143828][ T50] Workqueue: hci2 hci_rx_work [ 146.148614][ T50] Call Trace: [ 146.151952][ T50] [ 146.154935][ T50] dump_stack_lvl+0x16c/0x230 [ 146.159690][ T50] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 146.165370][ T50] ? show_regs_print_info+0x20/0x20 [ 146.170619][ T50] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 146.176314][ T50] sysfs_create_dir_ns+0x256/0x280 [ 146.181477][ T50] ? hci_rx_work+0x43a/0xd80 [ 146.186093][ T50] ? sysfs_warn_dup+0xa0/0xa0 [ 146.190802][ T50] ? do_raw_spin_unlock+0x121/0x230 [ 146.196036][ T50] kobject_add_internal+0x6b8/0xc70 [ 146.201287][ T50] kobject_add+0x156/0x220 [ 146.205736][ T50] ? __rwlock_init+0x150/0x150 [ 146.210523][ T50] ? kobject_init+0x1e0/0x1e0 [ 146.215247][ T50] ? _raw_spin_unlock+0x28/0x40 [ 146.220208][ T50] ? get_device_parent+0x366/0x390 [ 146.225350][ T50] device_add+0x408/0xc20 [ 146.229718][ T50] hci_conn_add_sysfs+0xd5/0x1e0 [ 146.234695][ T50] le_conn_complete_evt+0xc37/0x1220 [ 146.240001][ T50] ? hci_event_packet+0x4a7/0x1210 [ 146.245143][ T50] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 146.251404][ T50] ? __copy_skb_header+0xa7/0x550 [ 146.256461][ T50] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 146.262121][ T50] ? skb_pull_data+0xfb/0x200 [ 146.266856][ T50] hci_le_conn_complete_evt+0x187/0x440 [ 146.272427][ T50] ? hci_remote_host_features_evt+0x160/0x160 [ 146.278508][ T50] hci_event_packet+0x795/0x1210 [ 146.283514][ T50] ? bis_list+0x290/0x290 [ 146.287891][ T50] ? lockdep_hardirqs_on+0x98/0x150 [ 146.293145][ T50] ? hci_send_to_monitor+0xd7/0x4f0 [ 146.298377][ T50] hci_rx_work+0x43a/0xd80 [ 146.302834][ T50] ? process_scheduled_works+0x957/0x15b0 [ 146.308575][ T50] process_scheduled_works+0xa45/0x15b0 [ 146.314178][ T50] ? assign_work+0x400/0x400 [ 146.318796][ T50] ? assign_work+0x39e/0x400 [ 146.323407][ T50] worker_thread+0xa55/0xfc0 [ 146.328046][ T50] kthread+0x2fa/0x390 [ 146.332131][ T50] ? pr_cont_work+0x560/0x560 [ 146.336830][ T50] ? kthread_blkcg+0xd0/0xd0 [ 146.341430][ T50] ret_from_fork+0x48/0x80 [ 146.345865][ T50] ? kthread_blkcg+0xd0/0xd0 [ 146.350472][ T50] ret_from_fork_asm+0x11/0x20 [ 146.355273][ T50] [ 146.367362][ T50] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 146.381674][ T50] Bluetooth: hci2: failed to register connection device [ 146.460547][ T6382] netlink: 2412 bytes leftover after parsing attributes in process `syz.3.149'. [ 148.217519][ T5872] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 148.322249][ T6399] binder: 6398:6399 ioctl c0306201 2000000002c0 returned -14 [ 148.425349][ T5872] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 148.446569][ T5872] usb 1-1: config 0 interface 0 has no altsetting 0 [ 148.458043][ T5872] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 148.472165][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 148.501358][ T5872] usb 1-1: Product: syz [ 148.505582][ T5872] usb 1-1: Manufacturer: syz [ 148.533179][ T5872] usb 1-1: SerialNumber: syz [ 148.558877][ T5872] usb 1-1: config 0 descriptor?? [ 148.582602][ T5872] usb 1-1: selecting invalid altsetting 0 [ 149.946719][ T9] usb 1-1: USB disconnect, device number 3 [ 150.389361][ T6412] block nbd0: server does not support multiple connections per device. [ 150.427729][ T6412] block nbd0: shutting down sockets [ 151.780062][ T6423] binder: 6422:6423 ioctl c0306201 2000000002c0 returned -14 [ 151.808263][ T6298] Set syz1 is full, maxelem 65536 reached [ 152.349872][ T5786] infiniband syz1: set down [ 152.838766][ T5872] infiniband syz1: ib_query_port failed (-19) [ 153.811381][ T42] smc: removing ib device syz1 [ 155.219274][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.241051][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.260130][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.269138][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.277884][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.285483][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.492463][ T6442] block nbd0: server does not support multiple connections per device. [ 155.613615][ T6442] block nbd0: shutting down sockets [ 155.702460][ T6443] syz.0.170 (6443): drop_caches: 2 [ 156.395329][ T6437] lo speed is unknown, defaulting to 1000 [ 156.522247][ T6443] syz.0.170 (6443): drop_caches: 2 [ 156.661938][ T6455] binder: 6454:6455 ioctl c0306201 2000000002c0 returned -14 [ 157.597453][ T5789] Bluetooth: hci1: command tx timeout [ 159.677373][ T5789] Bluetooth: hci1: command tx timeout [ 160.240977][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.387457][ T6462] tipc: Started in network mode [ 160.398384][ T6462] tipc: Node identity fa0b7a3e470c, cluster identity 4711 [ 160.408107][ T6462] tipc: Enabled bearer , priority 0 [ 160.511898][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.548663][ T6461] tipc: Resetting bearer [ 160.643736][ T6483] netlink: 2412 bytes leftover after parsing attributes in process `syz.3.184'. [ 161.536476][ T785] tipc: Node number set to 3171383870 [ 161.767880][ T5789] Bluetooth: hci1: command tx timeout [ 162.310788][ T6461] tipc: Disabling bearer [ 162.362017][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.560921][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.743310][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 162.810936][ T6490] 9pnet_virtio: no channels available for device syz [ 163.162500][ T6501] 9pnet_fd: Insufficient options for proto=fd [ 163.768720][ T6437] chnl_net:caif_netlink_parms(): no params data found [ 163.837443][ T5789] Bluetooth: hci1: command tx timeout [ 164.658275][ T6437] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.682125][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.710003][ T6437] bridge_slave_0: entered allmulticast mode [ 164.738104][ T6437] bridge_slave_0: entered promiscuous mode [ 164.968907][ T6532] nvme_fabrics: unknown parameter or missing value '0' in ctrl creation request [ 164.980001][ T6437] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.987181][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.088873][ T6437] bridge_slave_1: entered allmulticast mode [ 165.153977][ T6437] bridge_slave_1: entered promiscuous mode [ 166.221883][ T6437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.263452][ T6437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.954862][ T6437] team0: Port device team_slave_0 added [ 167.031437][ T6437] team0: Port device team_slave_1 added [ 167.361910][ T6437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.437053][ T6437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.476151][ T6437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.599253][ T6437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.611039][ T6437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.646035][ T6573] block nbd0: server does not support multiple connections per device. [ 167.661594][ T6573] block nbd0: shutting down sockets [ 167.666942][ T6437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.892227][ T6437] hsr_slave_0: entered promiscuous mode [ 167.905110][ T6437] hsr_slave_1: entered promiscuous mode [ 167.947935][ T6437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.982636][ T6437] Cannot create hsr debugfs directory [ 168.321083][ T6593] binder_alloc: 6591: binder_alloc_buf, no vma [ 168.348141][ T6593] binder: 6591:6593 ioctl c0306201 2000000002c0 returned -14 [ 170.195385][ T6603] 9pnet_fd: Insufficient options for proto=fd [ 170.209672][ T6600] block nbd0: server does not support multiple connections per device. [ 170.228204][ T6600] block nbd0: shutting down sockets [ 170.928927][ T58] hsr_slave_0: left promiscuous mode [ 170.945205][ T58] hsr_slave_1: left promiscuous mode [ 171.064235][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.106726][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.159296][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.166764][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.249133][ T58] bridge_slave_1: left allmulticast mode [ 171.294474][ T58] bridge_slave_1: left promiscuous mode [ 171.319288][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.359698][ T58] bridge_slave_0: left allmulticast mode [ 171.372019][ T58] bridge_slave_0: left promiscuous mode [ 171.390630][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.459290][ T58] veth1_macvtap: left promiscuous mode [ 171.470596][ T58] veth0_macvtap: left promiscuous mode [ 171.476782][ T58] veth1_vlan: left promiscuous mode [ 171.499630][ T58] veth0_vlan: left promiscuous mode [ 171.712866][ T6635] binder: 6634:6635 ioctl c0306201 2000000002c0 returned -14 [ 171.771983][ T58] infiniband sz1: set down [ 172.546388][ T6644] block nbd0: server does not support multiple connections per device. [ 172.728751][ T6644] block nbd0: shutting down sockets [ 172.857696][ T6649] 9pnet_fd: Insufficient options for proto=fd [ 173.579206][ T58] team0 (unregistering): Port device team_slave_1 removed [ 173.636380][ T58] team0 (unregistering): Port device team_slave_0 removed [ 173.690512][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.776041][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.316144][ T58] bond0 (unregistering): Released all slaves [ 174.384446][ T1132] smc: removing ib device sz1 [ 174.414561][ T5871] lo speed is unknown, defaulting to 1000 [ 174.849558][ T6659] binder: 6658:6659 ioctl c0306201 2000000002c0 returned -14 [ 175.093514][ T6437] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 175.175488][ T6437] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 175.271252][ T6437] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 175.405360][ T6672] 9pnet_fd: Insufficient options for proto=fd [ 175.416094][ T6437] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 176.595131][ T6437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.615945][ T6690] netlink: 2412 bytes leftover after parsing attributes in process `syz.0.233'. [ 176.640861][ T6437] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.659575][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.666760][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.770137][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.777371][ T6435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.920695][ T6697] No buffer was provided with the request [ 177.128357][ T6703] binder: 6702:6703 ioctl c0306201 2000000002c0 returned -14 [ 177.700856][ T6721] 9pnet_fd: Insufficient options for proto=fd [ 178.342864][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.243'. [ 178.366717][ T6729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.243'. [ 178.376728][ T6729] netlink: 'syz.2.243': attribute type 14 has an invalid length. [ 178.513407][ T6437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.713829][ T6734] netlink: 2412 bytes leftover after parsing attributes in process `syz.0.244'. [ 179.257716][ T6752] block nbd0: server does not support multiple connections per device. [ 179.277975][ T6752] block nbd0: shutting down sockets [ 179.481148][ T6437] veth0_vlan: entered promiscuous mode [ 179.539012][ T6437] veth1_vlan: entered promiscuous mode [ 179.633411][ T6437] veth0_macvtap: entered promiscuous mode [ 179.672788][ T6437] veth1_macvtap: entered promiscuous mode [ 179.761887][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.814154][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.851062][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.883105][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.902879][ T6772] 9pnet_fd: Insufficient options for proto=fd [ 179.930997][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.980387][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.448738][ T6437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.510928][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.577470][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.595615][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.619326][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.643641][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.671274][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.751890][ T6437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.780472][ T6782] netlink: 2412 bytes leftover after parsing attributes in process `syz.3.255'. [ 180.816605][ T6437] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.856086][ T6437] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.892893][ T6437] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.926194][ T6437] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.260767][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.297629][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.406758][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.445694][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.108320][ T6860] capability: warning: `syz.2.268' uses deprecated v2 capabilities in a way that may be insecure [ 185.266089][ T6856] (null): rxe_set_mtu: Set mtu to 1024 [ 186.132625][ T6877] 9pnet_fd: Insufficient options for proto=fd [ 186.509918][ T6882] block nbd0: server does not support multiple connections per device. [ 186.539210][ T6882] block nbd0: shutting down sockets [ 188.333968][ T6912] ALSA: mixer_oss: invalid OSS volume 'u' [ 189.667885][ T6856] infiniband syz1: set active [ 189.727482][ T6856] infiniband syz1: added syz_tun [ 189.765408][ T6856] syz1: rxe_create_cq: returned err = -12 [ 189.791541][ T6856] infiniband syz1: Couldn't create ib_mad CQ [ 189.817963][ T6856] infiniband syz1: Couldn't open port 1 [ 191.947184][ T6856] RDS/IB: syz1: added [ 192.039345][ T6856] smc: adding ib device syz1 with port count 1 [ 192.237972][ T6856] smc: ib device syz1 port 1 has pnetid [ 192.920144][ T6941] 9pnet_fd: Insufficient options for proto=fd [ 193.377571][ T6947] block nbd0: server does not support multiple connections per device. [ 193.395284][ T6947] block nbd0: shutting down sockets [ 193.741264][ T6953] netlink: 2412 bytes leftover after parsing attributes in process `syz.2.286'. [ 194.507936][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.514328][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.347701][ T6980] 9pnet_fd: Insufficient options for proto=fd [ 196.551996][ T6985] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 196.868145][ T6993] block nbd0: server does not support multiple connections per device. [ 196.871012][ T6993] block nbd0: shutting down sockets [ 196.937285][ T6995] mkiss: ax0: crc mode is auto. [ 199.811203][ T7005] netlink: 2412 bytes leftover after parsing attributes in process `syz.4.297'. [ 203.461779][ T7027] netlink: 'syz.3.302': attribute type 1 has an invalid length. [ 203.485803][ T7027] netlink: 'syz.3.302': attribute type 1 has an invalid length. [ 203.502269][ T7027] netlink: 'syz.3.302': attribute type 1 has an invalid length. [ 203.512403][ T7027] nbd: error processing sock list [ 203.547177][ T7027] block nbd0: shutting down sockets [ 205.509526][ T7063] binder: 7062:7063 unknown command 0 [ 205.561029][ T7063] binder: 7062:7063 ioctl c0306201 200000000080 returned -22 [ 206.692303][ T7070] netlink: 2412 bytes leftover after parsing attributes in process `syz.2.310'. [ 206.735894][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 206.737341][ T5799] Bluetooth: hci0: command 0x0406 tx timeout [ 206.742916][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 207.477877][ T7084] block nbd0: server does not support multiple connections per device. [ 207.513307][ T7084] block nbd0: shutting down sockets [ 211.316199][ T7131] netlink: 2412 bytes leftover after parsing attributes in process `syz.2.323'. [ 211.759699][ T785] kernel read not supported for file /dsp1 (pid: 785 comm: kworker/0:2) [ 213.006266][ T7146] binder: BINDER_SET_CONTEXT_MGR already set [ 213.012834][ T7146] binder: 7145:7146 ioctl 4018620d 200000004a80 returned -16 [ 215.745480][ T7159] (null): rxe_set_mtu: Set mtu to 1024 [ 215.765070][ T7159] rdma_rxe: rxe_newlink: failed to add syz_tun [ 216.031223][ T7158] mkiss: ax0: crc mode is auto. [ 216.134880][ T7167] binder: 7164:7167 unknown command 0 [ 216.164594][ T7167] binder: 7164:7167 ioctl c0306201 200000000080 returned -22 [ 217.353994][ T7201] binder: BINDER_SET_CONTEXT_MGR already set [ 217.368650][ T7201] binder: 7200:7201 ioctl 4018620d 200000004a80 returned -16 [ 218.105329][ T7215] overlayfs: failed to resolve './file1': -2 [ 219.143587][ T7218] netlink: 'syz.4.345': attribute type 1 has an invalid length. [ 219.151581][ T7218] netlink: 'syz.4.345': attribute type 1 has an invalid length. [ 219.159741][ T7218] netlink: 'syz.4.345': attribute type 1 has an invalid length. [ 219.167527][ T7218] nbd: error processing sock list [ 221.343510][ T7218] block nbd0: shutting down sockets [ 222.251913][ T7237] binder: 7236:7237 ioctl c0306201 2000000002c0 returned -14 [ 225.031505][ T23] libceph: connect (1)[c::]:6789 error -101 [ 225.038309][ T7282] binder: 7277:7282 ioctl c0306201 2000000002c0 returned -14 [ 225.062278][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 225.125475][ T7276] ceph: No mds server is up or the cluster is laggy [ 225.255304][ T7288] (null): rxe_set_mtu: Set mtu to 1024 [ 225.270071][ T7288] rdma_rxe: rxe_newlink: failed to add syz_tun [ 225.378906][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 225.390065][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 225.417672][ T7291] block nbd0: server does not support multiple connections per device. [ 225.463131][ T7291] block nbd0: shutting down sockets [ 225.636119][ T7300] 9pnet_virtio: no channels available for device syz [ 227.062666][ T5828] kernel write not supported for file /adsp1 (pid: 5828 comm: kworker/1:3) [ 227.634875][ T7327] binder: 7326:7327 ioctl c0306201 2000000002c0 returned -14 [ 227.868785][ T7337] overlayfs: failed to resolve './file1': -2 [ 229.479374][ T7349] netlink: 2412 bytes leftover after parsing attributes in process `syz.4.380'. [ 234.628559][ T7359] 9pnet_virtio: no channels available for device syz [ 235.404114][ T7380] overlayfs: failed to resolve './file0': -2 [ 235.685755][ T7387] netlink: 2412 bytes leftover after parsing attributes in process `syz.2.390'. [ 240.430115][ T7393] block device autoloading is deprecated and will be removed. [ 242.813547][ T7413] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 244.043647][ T7435] netlink: 2412 bytes leftover after parsing attributes in process `syz.4.400'. [ 244.297987][ T7445] overlayfs: failed to resolve './file0': -2 [ 247.428229][ T7462] ksmbd: Unknown IPC event: 6, ignore. [ 247.467958][ T7462] ptrace attach of "./syz-executor exec"[5788] was attempted by "./syz-executor exec"[7462] [ 247.627432][ T7466] block nbd0: server does not support multiple connections per device. [ 247.652550][ T7468] 9pnet_fd: Insufficient options for proto=fd [ 247.663560][ T7466] block nbd0: shutting down sockets [ 249.770270][ T7491] netlink: 2412 bytes leftover after parsing attributes in process `syz.0.411'. [ 250.071175][ T7497] overlayfs: failed to resolve './file0': -2 [ 251.332342][ T7463] syz.3.404: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 251.352126][ T7463] CPU: 0 PID: 7463 Comm: syz.3.404 Not tainted syzkaller #0 [ 251.359541][ T7463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 251.369623][ T7463] Call Trace: [ 251.372946][ T7463] [ 251.375905][ T7463] dump_stack_lvl+0x16c/0x230 [ 251.380640][ T7463] ? show_regs_print_info+0x20/0x20 [ 251.385877][ T7463] ? load_image+0x3b0/0x3b0 [ 251.390444][ T7463] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 251.396903][ T7463] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 251.403437][ T7463] warn_alloc+0x210/0x300 [ 251.407794][ T7463] ? zone_watermark_ok_safe+0x230/0x230 [ 251.413368][ T7463] ? _raw_spin_unlock+0x28/0x40 [ 251.418247][ T7463] __vmalloc_node_range+0x662/0x1320 [ 251.423567][ T7463] ? __asan_memset+0x22/0x40 [ 251.428289][ T7463] ? free_vm_area+0x50/0x50 [ 251.432827][ T7463] ? kvmalloc_node+0x70/0x180 [ 251.437522][ T7463] ? rcu_is_watching+0x15/0xb0 [ 251.442302][ T7463] ? kvmalloc_node+0x70/0x180 [ 251.447006][ T7463] ? trace_kmalloc+0x1f/0xa0 [ 251.451620][ T7463] kvmalloc_node+0x13f/0x180 [ 251.456266][ T7463] ? hash_ipport4_resize+0x1ed/0x1a30 [ 251.461658][ T7463] hash_ipport4_resize+0x1ed/0x1a30 [ 251.466973][ T7463] ? __local_bh_enable_ip+0x12e/0x1c0 [ 251.472377][ T7463] call_ad+0x43f/0xae0 [ 251.476723][ T7463] ? trace_irq_disable+0x37/0xe0 [ 251.481709][ T7463] ? ip_set_ad+0x930/0x930 [ 251.486145][ T7463] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 251.491786][ T7463] ? lockdep_hardirqs_on+0x98/0x150 [ 251.497007][ T7463] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 251.502658][ T7463] ? __nla_parse+0x40/0x50 [ 251.507096][ T7463] ip_set_ad+0x787/0x930 [ 251.511371][ T7463] ? trace_raw_output_contention_end+0x30/0xd0 [ 251.517555][ T7463] ? ip_set_dump_done+0x1e0/0x1e0 [ 251.522607][ T7463] ? rcu_is_watching+0x15/0xb0 [ 251.527437][ T7463] nfnetlink_rcv_msg+0xb49/0x1130 [ 251.532656][ T7463] ? nfnetlink_rcv_msg+0x20e/0x1130 [ 251.537892][ T7463] ? nfnetlink_unbind+0x160/0x160 [ 251.542924][ T7463] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 251.548955][ T7463] ? __schedule+0x14da/0x44d0 [ 251.553658][ T7463] ? mark_lock+0x94/0x320 [ 251.558005][ T7463] netlink_rcv_skb+0x216/0x480 [ 251.562798][ T7463] ? nfnetlink_unbind+0x160/0x160 [ 251.567850][ T7463] ? netlink_ack+0x1110/0x1110 [ 251.572679][ T7463] ? apparmor_capable+0x137/0x1a0 [ 251.577729][ T7463] ? bpf_lsm_capable+0x9/0x10 [ 251.582431][ T7463] ? security_capable+0x89/0xb0 [ 251.587314][ T7463] nfnetlink_rcv+0x274/0x2180 [ 251.592030][ T7463] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 251.598036][ T7463] ? lock_chain_count+0x20/0x20 [ 251.602909][ T7463] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 251.608818][ T7463] ? lockdep_hardirqs_on+0x98/0x150 [ 251.614044][ T7463] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 251.619670][ T7463] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 251.625580][ T7463] ? _raw_spin_unlock+0x40/0x40 [ 251.630462][ T7463] ? rcu_preempt_deferred_qs_irqrestore+0x86a/0xcc0 [ 251.637102][ T7463] ? rcu_read_unlock_special+0x460/0x460 [ 251.642781][ T7463] ? __netlink_deliver_tap+0x7e8/0x830 [ 251.648258][ T7463] ? netlink_deliver_tap+0x2e/0x1b0 [ 251.653486][ T7463] ? __lock_acquire+0x7c80/0x7c80 [ 251.658536][ T7463] ? __rcu_read_unlock+0x7c/0xd0 [ 251.663502][ T7463] ? netlink_deliver_tap+0x2e/0x1b0 [ 251.668734][ T7463] netlink_unicast+0x751/0x8d0 [ 251.673619][ T7463] netlink_sendmsg+0x8c1/0xbe0 [ 251.678417][ T7463] ? netlink_getsockopt+0x580/0x580 [ 251.683637][ T7463] ? aa_sock_msg_perm+0x94/0x150 [ 251.688614][ T7463] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 251.693947][ T7463] ? security_socket_sendmsg+0x80/0xa0 [ 251.699435][ T7463] ? netlink_getsockopt+0x580/0x580 [ 251.704660][ T7463] ____sys_sendmsg+0x5bf/0x950 [ 251.709455][ T7463] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 251.715144][ T7463] ? __asan_memset+0x22/0x40 [ 251.719782][ T7463] ? __sys_sendmsg_sock+0x30/0x30 [ 251.724838][ T7463] ? __import_iovec+0x5f2/0x860 [ 251.729721][ T7463] ? import_iovec+0x73/0xa0 [ 251.734249][ T7463] ___sys_sendmsg+0x220/0x290 [ 251.738953][ T7463] ? __sys_sendmsg+0x270/0x270 [ 251.743780][ T7463] __se_sys_sendmsg+0x1a5/0x270 [ 251.748660][ T7463] ? __x64_sys_sendmsg+0x80/0x80 [ 251.753642][ T7463] ? syscall_enter_from_user_mode+0x2e/0x80 [ 251.759563][ T7463] do_syscall_64+0x55/0xb0 [ 251.764005][ T7463] ? clear_bhb_loop+0x40/0x90 [ 251.768698][ T7463] ? clear_bhb_loop+0x40/0x90 [ 251.773400][ T7463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.779318][ T7463] RIP: 0033:0x7fd2bff8ec29 [ 251.783763][ T7463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.803383][ T7463] RSP: 002b:00007fd2c0eb9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.811813][ T7463] RAX: ffffffffffffffda RBX: 00007fd2c01d6180 RCX: 00007fd2bff8ec29 [ 251.819812][ T7463] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000008 [ 251.827977][ T7463] RBP: 00007fd2c0011e41 R08: 0000000000000000 R09: 0000000000000000 [ 251.835956][ T7463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.843941][ T7463] R13: 00007fd2c01d6218 R14: 00007fd2c01d6180 R15: 00007ffef74bd428 [ 251.852029][ T7463] [ 251.939959][ T7463] Mem-Info: [ 251.943152][ T7463] active_anon:9167 inactive_anon:0 isolated_anon:0 [ 251.943152][ T7463] active_file:10824 inactive_file:39948 isolated_file:0 [ 251.943152][ T7463] unevictable:768 dirty:113 writeback:0 [ 251.943152][ T7463] slab_reclaimable:10016 slab_unreclaimable:95783 [ 251.943152][ T7463] mapped:28121 shmem:4243 pagetables:687 [ 251.943152][ T7463] sec_pagetables:0 bounce:0 [ 251.943152][ T7463] kernel_misc_reclaimable:0 [ 251.943152][ T7463] free:1348019 free_pcp:8530 free_cma:0 [ 252.007324][ T7463] Node 0 active_anon:36528kB inactive_anon:0kB active_file:43296kB inactive_file:159592kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112460kB dirty:464kB writeback:0kB shmem:15436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11828kB pagetables:2648kB sec_pagetables:0kB all_unreclaimable? no [ 252.042644][ T7463] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 252.073822][ T7463] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 252.116179][ T7463] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 252.140123][ T7463] Node 0 DMA32 free:1474620kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:36480kB inactive_anon:0kB active_file:43296kB inactive_file:158260kB unevictable:1536kB writepending:464kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:19440kB local_pcp:9936kB free_cma:0kB [ 252.284256][ T7463] lowmem_reserve[]: 0 0 1 1 1 [ 252.301662][ T7463] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1332kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 252.374174][ T7463] lowmem_reserve[]: 0 0 0 0 0 [ 252.403630][ T7463] Node 1 Normal free:3902092kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14976kB local_pcp:7744kB free_cma:0kB [ 252.522693][ T7463] lowmem_reserve[]: 0 0 0 0 0 [ 252.539156][ T7463] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 252.555028][ T7463] Node 0 DMA32: 475*4kB (UME) 634*8kB (UME) 591*16kB (UME) 291*32kB (UME) 386*64kB (UME) 167*128kB (UME) 27*256kB (UM) 5*512kB (M) 6*1024kB (ME) 3*2048kB (UME) 335*4096kB (UM) = 1465740kB [ 252.603931][ T7511] (null): rxe_set_mtu: Set mtu to 1024 [ 252.609809][ T7463] Node 0 [ 252.610345][ T7511] rdma_rxe: rxe_newlink: failed to add syz_tun [ 252.611418][ T7463] Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 252.698059][ T7513] virtio-fs: tag not found [ 252.732045][ T7463] Node 1 Normal: 217*4kB (UME) 61*8kB (UME) 54*16kB (UME) 111*32kB (UME) 32*64kB (UME) 6*128kB (UE) 1*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3902092kB [ 252.830083][ T7463] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 252.876152][ T7463] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 252.954788][ T7463] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 253.047412][ T7463] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 253.061895][ T7463] 55015 total pagecache pages [ 253.197539][ T7463] 0 pages in swap cache [ 253.207488][ T7463] Free swap = 124984kB [ 253.211694][ T7463] Total swap = 124996kB [ 253.215853][ T7463] 2097051 pages RAM [ 253.274259][ T5796] Bluetooth: hci2: ACL packet for unknown connection handle 1737 [ 253.295350][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 253.317632][ T7463] 0 pages HighMem/MovableOnly [ 253.322342][ T7463] 416137 pages reserved [ 253.355459][ T7463] 0 pages cma reserved [ 254.784382][ T7532] ksmbd: Unknown IPC event: 6, ignore. [ 254.840800][ T7532] ptrace attach of "./syz-executor exec"[5787] was attempted by "./syz-executor exec"[7532] [ 255.283727][ T7535] netlink: 2412 bytes leftover after parsing attributes in process `syz.4.422'. [ 255.462462][ T7525] infiniband syz1: set down [ 255.578356][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.587839][ T7525] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.842406][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.848994][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.239426][ T7525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.262585][ T7525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.831964][ T7525] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.920612][ T7525] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.987100][ T7525] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.051102][ T7525] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.237532][ T7525] syz.3.420 (7525) used greatest stack depth: 20424 bytes left [ 261.146107][ T7588] (null): rxe_set_mtu: Set mtu to 1024 [ 261.282878][ T7588] rdma_rxe: rxe_newlink: failed to add syz_tun [ 261.714373][ T7597] netlink: 2412 bytes leftover after parsing attributes in process `syz.3.437'. [ 266.441386][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.442'. [ 272.211247][ T7671] 9pnet_fd: Insufficient options for proto=fd [ 272.472247][ T7674] syz1: rxe_newlink: already configured on syz_tun [ 277.407094][ T7669] warn_alloc: 1 callbacks suppressed [ 277.407107][ T7669] syz.4.453: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 277.531300][ T7669] CPU: 1 PID: 7669 Comm: syz.4.453 Not tainted syzkaller #0 [ 277.538712][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 277.548783][ T7669] Call Trace: [ 277.552093][ T7669] [ 277.555053][ T7669] dump_stack_lvl+0x16c/0x230 [ 277.559776][ T7669] ? show_regs_print_info+0x20/0x20 [ 277.565004][ T7669] ? load_image+0x3b0/0x3b0 [ 277.569542][ T7669] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 277.576035][ T7669] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 277.582592][ T7669] warn_alloc+0x210/0x300 [ 277.586977][ T7669] ? zone_watermark_ok_safe+0x230/0x230 [ 277.592582][ T7669] ? _raw_spin_unlock+0x28/0x40 [ 277.597484][ T7669] __vmalloc_node_range+0x662/0x1320 [ 277.602814][ T7669] ? __asan_memset+0x22/0x40 [ 277.607472][ T7669] ? free_vm_area+0x50/0x50 [ 277.612014][ T7669] ? kvmalloc_node+0x70/0x180 [ 277.616730][ T7669] ? rcu_is_watching+0x15/0xb0 [ 277.621539][ T7669] ? kvmalloc_node+0x70/0x180 [ 277.626256][ T7669] ? trace_kmalloc+0x1f/0xa0 [ 277.630986][ T7669] kvmalloc_node+0x13f/0x180 [ 277.635624][ T7669] ? hash_ipport4_resize+0x1ed/0x1a30 [ 277.641048][ T7669] hash_ipport4_resize+0x1ed/0x1a30 [ 277.646328][ T7669] ? __local_bh_enable_ip+0x12e/0x1c0 [ 277.651760][ T7669] call_ad+0x43f/0xae0 [ 277.655892][ T7669] ? ip_set_ad+0x930/0x930 [ 277.660373][ T7669] ? __nla_parse+0x40/0x50 [ 277.664848][ T7669] ip_set_ad+0x787/0x930 [ 277.669149][ T7669] ? trace_raw_output_contention_end+0x30/0xd0 [ 277.675359][ T7669] ? ip_set_dump_done+0x1e0/0x1e0 [ 277.680429][ T7669] ? rcu_is_watching+0x15/0xb0 [ 277.685281][ T7669] nfnetlink_rcv_msg+0xb49/0x1130 [ 277.690449][ T7669] ? nfnetlink_rcv_msg+0x20e/0x1130 [ 277.695699][ T7669] ? nfnetlink_unbind+0x160/0x160 [ 277.700758][ T7669] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 277.706815][ T7669] ? __schedule+0x14da/0x44d0 [ 277.711575][ T7669] ? mark_lock+0x94/0x320 [ 277.715947][ T7669] netlink_rcv_skb+0x216/0x480 [ 277.720752][ T7669] ? nfnetlink_unbind+0x160/0x160 [ 277.725821][ T7669] ? netlink_ack+0x1110/0x1110 [ 277.730642][ T7669] ? apparmor_capable+0x137/0x1a0 [ 277.735718][ T7669] ? bpf_lsm_capable+0x9/0x10 [ 277.740447][ T7669] ? security_capable+0x89/0xb0 [ 277.742642][ T7711] 9pnet_virtio: no channels available for device syz [ 277.745331][ T7669] nfnetlink_rcv+0x274/0x2180 [ 277.756836][ T7669] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 277.762863][ T7669] ? lock_chain_count+0x20/0x20 [ 277.767761][ T7669] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 277.773690][ T7669] ? lockdep_hardirqs_on+0x98/0x150 [ 277.778987][ T7669] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 277.784574][ T7669] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 277.790507][ T7669] ? _raw_spin_unlock+0x40/0x40 [ 277.795407][ T7669] ? rcu_preempt_deferred_qs_irqrestore+0x86a/0xcc0 [ 277.802073][ T7669] ? rcu_read_unlock_special+0x460/0x460 [ 277.807869][ T7669] ? __netlink_deliver_tap+0x7e8/0x830 [ 277.813379][ T7669] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.818631][ T7669] ? __lock_acquire+0x7c80/0x7c80 [ 277.823711][ T7669] ? __rcu_read_unlock+0x7c/0xd0 [ 277.828792][ T7669] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.834050][ T7669] netlink_unicast+0x751/0x8d0 [ 277.838970][ T7669] netlink_sendmsg+0x8c1/0xbe0 [ 277.843800][ T7669] ? netlink_getsockopt+0x580/0x580 [ 277.849140][ T7669] ? aa_sock_msg_perm+0x94/0x150 [ 277.854139][ T7669] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 277.859474][ T7669] ? security_socket_sendmsg+0x80/0xa0 [ 277.864982][ T7669] ? netlink_getsockopt+0x580/0x580 [ 277.870234][ T7669] ____sys_sendmsg+0x5bf/0x950 [ 277.875064][ T7669] ? __asan_memset+0x22/0x40 [ 277.879710][ T7669] ? __sys_sendmsg_sock+0x30/0x30 [ 277.884788][ T7669] ? __import_iovec+0x5f2/0x860 [ 277.889792][ T7669] ? import_iovec+0x73/0xa0 [ 277.894360][ T7669] ___sys_sendmsg+0x220/0x290 [ 277.899112][ T7669] ? __sys_sendmsg+0x270/0x270 [ 277.903985][ T7669] __se_sys_sendmsg+0x1a5/0x270 [ 277.908893][ T7669] ? __x64_sys_sendmsg+0x80/0x80 [ 277.913897][ T7669] ? lockdep_hardirqs_on+0x98/0x150 [ 277.919154][ T7669] do_syscall_64+0x55/0xb0 [ 277.923614][ T7669] ? clear_bhb_loop+0x40/0x90 [ 277.928419][ T7669] ? clear_bhb_loop+0x40/0x90 [ 277.933143][ T7669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.939120][ T7669] RIP: 0033:0x7f9e3b98ec29 [ 277.943584][ T7669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.963625][ T7669] RSP: 002b:00007f9e3c88f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.972111][ T7669] RAX: ffffffffffffffda RBX: 00007f9e3bbd6180 RCX: 00007f9e3b98ec29 [ 277.980233][ T7669] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000008 [ 277.988273][ T7669] RBP: 00007f9e3ba11e41 R08: 0000000000000000 R09: 0000000000000000 [ 277.996324][ T7669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.004358][ T7669] R13: 00007f9e3bbd6218 R14: 00007f9e3bbd6180 R15: 00007ffe9a3b98b8 [ 278.012415][ T7669] [ 278.035394][ T7669] Mem-Info: [ 278.038687][ T7669] active_anon:14018 inactive_anon:0 isolated_anon:0 [ 278.038687][ T7669] active_file:10824 inactive_file:39958 isolated_file:0 [ 278.038687][ T7669] unevictable:768 dirty:85 writeback:0 [ 278.038687][ T7669] slab_reclaimable:10028 slab_unreclaimable:95917 [ 278.038687][ T7669] mapped:29177 shmem:9560 pagetables:622 [ 278.038687][ T7669] sec_pagetables:0 bounce:0 [ 278.038687][ T7669] kernel_misc_reclaimable:0 [ 278.038687][ T7669] free:1340374 free_pcp:10617 free_cma:0 [ 278.087256][ T7669] Node 0 active_anon:56072kB inactive_anon:0kB active_file:43296kB inactive_file:159632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117408kB dirty:340kB writeback:0kB shmem:36704kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12272kB pagetables:2488kB sec_pagetables:0kB all_unreclaimable? no [ 278.202362][ T7669] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 278.407659][ T7669] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 278.438769][ T7669] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 278.450043][ T7669] Node 0 DMA32 free:1440476kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:56116kB inactive_anon:0kB active_file:43296kB inactive_file:158300kB unevictable:1536kB writepending:340kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:27112kB local_pcp:19744kB free_cma:0kB [ 278.484692][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 278.495084][ T7669] lowmem_reserve[]: 0 0 1 1 1 [ 278.513124][ T7669] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1332kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 278.548062][ T7669] lowmem_reserve[]: 0 0 0 0 0 [ 278.576292][ T7669] Node 1 Normal free:3902604kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14528kB local_pcp:7040kB free_cma:0kB [ 278.607983][ T7669] lowmem_reserve[]: 0 0 0 0 0 [ 278.619110][ T7669] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 278.652593][ T7669] Node 0 DMA32: 984*4kB (UME) 1062*8kB (UME) 613*16kB (UME) 472*32kB (UM) 306*64kB (UME) 139*128kB (UME) 4*256kB (UM) 1*512kB (M) 2*1024kB (ME) 5*2048kB (UME) 330*4096kB (M) = 1440224kB [ 278.674214][ T7669] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 278.725414][ T7669] Node 1 Normal: 217*4kB (UME) 61*8kB (UME) 54*16kB (UME) 121*32kB (UME) 35*64kB (UME) 6*128kB (UE) 1*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3902604kB [ 278.844979][ T7669] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.909483][ T7669] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 278.952125][ T7669] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.992328][ T7669] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 279.049834][ T7669] 59345 total pagecache pages [ 279.054550][ T7669] 0 pages in swap cache [ 279.118924][ T7669] Free swap = 124984kB [ 279.167713][ T7669] Total swap = 124996kB [ 279.171934][ T7669] 2097051 pages RAM [ 279.247573][ T7669] 0 pages HighMem/MovableOnly [ 279.267455][ T7669] 416137 pages reserved [ 279.277015][ T7669] 0 pages cma reserved [ 279.325338][ T7729] (null): rxe_set_mtu: Set mtu to 1024 [ 279.346768][ T7729] rdma_rxe: rxe_newlink: failed to add syz_tun [ 282.941464][ T7746] netlink: 2412 bytes leftover after parsing attributes in process `syz.4.476'. [ 284.588426][ T7555] libceph: connect (1)[c::]:6789 error -101 [ 284.603419][ T7555] libceph: mon0 (1)[c::]:6789 connect error [ 284.699079][ T7766] binder: 7765:7766 ioctl c0306201 2000000002c0 returned -14 [ 287.007832][ T7555] libceph: connect (1)[c::]:6789 error -101 [ 287.036035][ T7758] ceph: No mds server is up or the cluster is laggy [ 287.048320][ T7555] libceph: mon0 (1)[c::]:6789 connect error [ 287.446257][ T7777] netlink: 2412 bytes leftover after parsing attributes in process `syz.3.486'. [ 289.101057][ T7796] input: syz0 as /devices/virtual/input/input5 [ 289.423776][ T9] libceph: connect (1)[c::]:6789 error -101 [ 289.493539][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 289.768591][ T9] libceph: connect (1)[c::]:6789 error -101 [ 289.790479][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 290.068398][ T7813] overlayfs: unescaped trailing colons in lowerdir mount option. [ 290.192367][ T7800] ceph: No mds server is up or the cluster is laggy [ 291.565354][ T7825] binder: 7824:7825 ioctl c0306201 0 returned -14 [ 291.606175][ T7825] binder: 7824:7825 ioctl c0306201 2000000002c0 returned -14 [ 291.949853][ T28] libceph: connect (1)[c::]:6789 error -101 [ 291.955946][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 295.959614][ T28] libceph: connect (1)[c::]:6789 error -101 [ 295.965727][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 296.010253][ T28] libceph: connect (1)[c::]:6789 error -101 [ 296.016421][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 296.028225][ T7837] ceph: No mds server is up or the cluster is laggy [ 296.148533][ T7854] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 296.344683][ T7856] tipc: Started in network mode [ 296.356873][ T7856] tipc: Node identity 0a400fada867, cluster identity 4711 [ 296.399491][ T7856] tipc: Enabled bearer , priority 0 [ 296.439457][ T7843] tipc: Resetting bearer [ 296.449110][ T27] audit: type=1800 audit(1758427192.027:2): pid=7854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.505" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 297.346675][ T7866] binder: 7865:7866 ioctl c0306201 2000000002c0 returned -14 [ 297.487353][ T9] tipc: Node number set to 2720468909 [ 298.609787][ T7883] netlink: 20 bytes leftover after parsing attributes in process `syz.2.519'. [ 299.950712][ T7891] binder: 7890:7891 ioctl c0306201 2000000002c0 returned -14 [ 300.448415][ T7897] nbd: must specify at least one socket [ 302.311816][ T7921] fuse: Bad value for 'fd' [ 304.020227][ T7933] nbd: must specify at least one socket [ 305.536466][ T27] audit: type=1326 audit(1758427201.127:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7934 comm="syz.0.538" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec5a18ec29 code=0x0 [ 305.675151][ T7953] fuse: Bad value for 'fd' [ 305.682980][ T7843] tipc: Disabling bearer [ 305.702427][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.538'. [ 306.962736][ T7965] nbd: must specify at least one socket [ 307.558092][ T7942] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.566546][ T7942] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.871775][ T7984] fuse: Bad value for 'fd' [ 308.555371][ T7942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.282790][ T7942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.512801][ T5796] block nbd0: Receive control failed (result -107) [ 309.527961][ T7997] nbd0: detected capacity change from 0 to 32 [ 309.575681][ T1169] block nbd0: Dead connection, failed to find a fallback [ 309.584391][ T1169] block nbd0: shutting down sockets [ 309.590184][ T1169] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.600628][ T1169] Buffer I/O error on dev nbd0, logical block 0, async page read [ 309.622337][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.632723][ T24] Buffer I/O error on dev nbd0, logical block 0, async page read [ 309.647577][ T1169] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.656760][ T1169] Buffer I/O error on dev nbd0, logical block 0, async page read [ 309.665379][ T1169] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.676243][ T1169] Buffer I/O error on dev nbd0, logical block 0, async page read [ 309.685744][ T1169] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.695129][ T1169] Buffer I/O error on dev nbd0, logical block 0, async page read [ 309.703585][ T1169] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.712962][ T1169] Buffer I/O error on dev nbd0, logical block 0, async page read [ 309.721093][ T1169] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.737244][ T1169] Buffer I/O error on dev nbd0, logical block 0, async page read [ 309.745660][ T1169] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.754914][ T1169] Buffer I/O error on dev nbd0, logical block 0, async page read [ 309.763208][ T7855] ldm_validate_partition_table(): Disk read failed. [ 309.771441][ T1169] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.780778][ T1169] Buffer I/O error on dev nbd0, logical block 0, async page read [ 309.828383][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.844109][ T24] Buffer I/O error on dev nbd0, logical block 0, async page read [ 309.853434][ T7855] Dev nbd0: unable to read RDB block 0 [ 309.894899][ T7855] nbd0: unable to read partition table [ 309.944224][ T7855] ldm_validate_partition_table(): Disk read failed. [ 309.972180][ T7855] Dev nbd0: unable to read RDB block 0 [ 309.998806][ T7855] nbd0: unable to read partition table [ 310.746480][ T7942] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.765231][ T7942] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.774653][ T7942] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.803847][ T7942] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.815523][ T8038] loop2: detected capacity change from 0 to 7 [ 313.851797][ T7855] Dev loop2: unable to read RDB block 7 [ 313.858041][ T7855] loop2: unable to read partition table [ 313.864090][ T7855] loop2: partition table beyond EOD, truncated [ 313.906551][ T8038] Dev loop2: unable to read RDB block 7 [ 313.913596][ T8038] loop2: unable to read partition table [ 313.920044][ T8038] loop2: partition table beyond EOD, truncated [ 313.929783][ T8038] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 313.995209][ T5157] Dev loop2: unable to read RDB block 7 [ 314.023772][ T5157] loop2: unable to read partition table [ 314.045761][ T5157] loop2: partition table beyond EOD, truncated [ 314.094104][ T8038] syz.3.567: attempt to access beyond end of device [ 314.094104][ T8038] nbd3: rw=0, sector=0, nr_sectors = 8 limit=0 [ 314.110948][ T8038] F2FS-fs (nbd3): Unable to read 1th superblock [ 314.118798][ T8041] nbd1: detected capacity change from 0 to 32 [ 314.125533][ T5796] block nbd1: Receive control failed (result -107) [ 314.161299][ T8038] syz.3.567: attempt to access beyond end of device [ 314.161299][ T8038] nbd3: rw=0, sector=8, nr_sectors = 8 limit=0 [ 314.188540][ T8038] F2FS-fs (nbd3): Unable to read 2th superblock [ 314.218378][ T24] block nbd1: Dead connection, failed to find a fallback [ 314.219153][ T5157] Dev loop2: unable to read RDB block 7 [ 314.225605][ T24] block nbd1: shutting down sockets [ 314.244764][ T8006] ldm_validate_partition_table(): Disk read failed. [ 314.273395][ T8006] Dev nbd1: unable to read RDB block 0 [ 314.289504][ T5157] loop2: unable to read partition table [ 314.297076][ T5157] loop2: partition table beyond EOD, truncated [ 314.334713][ T8006] nbd1: unable to read partition table [ 314.426129][ T8006] ldm_validate_partition_table(): Disk read failed. [ 314.439701][ T5157] Dev loop2: unable to read RDB block 7 [ 314.449891][ T8006] Dev nbd1: unable to read RDB block 0 [ 314.471047][ T5157] loop2: unable to read partition table [ 314.475259][ T8006] nbd1: unable to read partition table [ 314.517655][ T5157] loop2: partition table beyond EOD, truncated [ 317.292728][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.301716][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.035258][ T28] libceph: connect (1)[c::]:6789 error -22 [ 321.054528][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 321.079838][ T28] libceph: connect (1)[c::]:6789 error -22 [ 321.085829][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 321.417650][ T23] libceph: connect (1)[c::]:6789 error -22 [ 321.433923][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 321.516760][ T8092] netlink: 'syz.4.581': attribute type 5 has an invalid length. [ 321.762583][ T8073] ceph: No mds server is up or the cluster is laggy [ 322.251913][ T8098] binder: 8097:8098 ioctl c0306201 2000000002c0 returned -14 [ 329.550655][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 329.558357][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 329.817993][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 329.835580][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 330.982330][ T9] libceph: connect (1)[c::]:6789 error -101 [ 330.988543][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 331.009231][ T8127] ceph: No mds server is up or the cluster is laggy [ 331.366896][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'. [ 335.367015][ T8161] nbd: must specify a size in bytes for the device [ 340.775621][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.607'. [ 349.024098][ T8240] 9pnet_fd: Insufficient options for proto=fd [ 350.308743][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 350.357771][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 350.371077][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 350.436647][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 351.633494][ T8260] binder: 8259:8260 ioctl c0306201 2000000002c0 returned -14 [ 353.102049][ T8239] warn_alloc: 1 callbacks suppressed [ 353.102063][ T8239] syz.2.621: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 353.258505][ T8239] CPU: 0 PID: 8239 Comm: syz.2.621 Not tainted syzkaller #0 [ 353.265857][ T8239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 353.275923][ T8239] Call Trace: [ 353.279227][ T8239] [ 353.282187][ T8239] dump_stack_lvl+0x16c/0x230 [ 353.286927][ T8239] ? show_regs_print_info+0x20/0x20 [ 353.292165][ T8239] ? load_image+0x3b0/0x3b0 [ 353.296682][ T8239] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 353.303110][ T8239] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 353.309621][ T8239] warn_alloc+0x210/0x300 [ 353.313966][ T8239] ? zone_watermark_ok_safe+0x230/0x230 [ 353.319542][ T8239] ? _raw_spin_unlock+0x28/0x40 [ 353.324432][ T8239] __vmalloc_node_range+0x662/0x1320 [ 353.329842][ T8239] ? __asan_memset+0x22/0x40 [ 353.334459][ T8239] ? free_vm_area+0x50/0x50 [ 353.338996][ T8239] ? kvmalloc_node+0x70/0x180 [ 353.343786][ T8239] ? rcu_is_watching+0x15/0xb0 [ 353.348563][ T8239] ? kvmalloc_node+0x70/0x180 [ 353.353247][ T8239] ? trace_kmalloc+0x1f/0xa0 [ 353.357863][ T8239] kvmalloc_node+0x13f/0x180 [ 353.362653][ T8239] ? hash_ipport4_resize+0x1ed/0x1a30 [ 353.368037][ T8239] hash_ipport4_resize+0x1ed/0x1a30 [ 353.373425][ T8239] ? __local_bh_enable_ip+0x12e/0x1c0 [ 353.378813][ T8239] call_ad+0x43f/0xae0 [ 353.382892][ T8239] ? trace_irq_disable+0x37/0xe0 [ 353.387841][ T8239] ? ip_set_ad+0x930/0x930 [ 353.392260][ T8239] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 353.397913][ T8239] ? lockdep_hardirqs_on+0x98/0x150 [ 353.403134][ T8239] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 353.408771][ T8239] ? __nla_parse+0x40/0x50 [ 353.413242][ T8239] ip_set_ad+0x787/0x930 [ 353.417504][ T8239] ? trace_raw_output_contention_end+0x30/0xd0 [ 353.423674][ T8239] ? ip_set_dump_done+0x1e0/0x1e0 [ 353.428980][ T8239] ? rcu_is_watching+0x15/0xb0 [ 353.433795][ T8239] nfnetlink_rcv_msg+0xb49/0x1130 [ 353.438845][ T8239] ? nfnetlink_rcv_msg+0x20e/0x1130 [ 353.444061][ T8239] ? nfnetlink_unbind+0x160/0x160 [ 353.449109][ T8239] ? raw_spin_rq_unlock_irq+0x11/0x90 [ 353.454510][ T8239] ? __schedule+0x171e/0x44d0 [ 353.459330][ T8239] ? mark_lock+0x94/0x320 [ 353.463683][ T8239] netlink_rcv_skb+0x216/0x480 [ 353.468461][ T8239] ? nfnetlink_unbind+0x160/0x160 [ 353.473491][ T8239] ? netlink_ack+0x1110/0x1110 [ 353.478272][ T8239] ? apparmor_capable+0x137/0x1a0 [ 353.483310][ T8239] ? bpf_lsm_capable+0x9/0x10 [ 353.488174][ T8239] ? security_capable+0x89/0xb0 [ 353.493036][ T8239] nfnetlink_rcv+0x274/0x2180 [ 353.497843][ T8239] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 353.503928][ T8239] ? lock_chain_count+0x20/0x20 [ 353.508797][ T8239] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 353.514700][ T8239] ? lockdep_hardirqs_on+0x98/0x150 [ 353.519919][ T8239] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 353.525491][ T8239] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 353.531407][ T8239] ? _raw_spin_unlock+0x40/0x40 [ 353.536366][ T8239] ? rcu_preempt_deferred_qs_irqrestore+0x86a/0xcc0 [ 353.542989][ T8239] ? rcu_read_unlock_special+0x460/0x460 [ 353.548656][ T8239] ? __netlink_deliver_tap+0x7e8/0x830 [ 353.554127][ T8239] ? netlink_deliver_tap+0x2e/0x1b0 [ 353.559356][ T8239] ? __lock_acquire+0x7c80/0x7c80 [ 353.564396][ T8239] ? __rcu_read_unlock+0x7c/0xd0 [ 353.569361][ T8239] ? netlink_deliver_tap+0x2e/0x1b0 [ 353.574677][ T8239] netlink_unicast+0x751/0x8d0 [ 353.579478][ T8239] netlink_sendmsg+0x8c1/0xbe0 [ 353.584265][ T8239] ? netlink_getsockopt+0x580/0x580 [ 353.589488][ T8239] ? aa_sock_msg_perm+0x94/0x150 [ 353.594449][ T8239] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 353.599742][ T8239] ? security_socket_sendmsg+0x80/0xa0 [ 353.605294][ T8239] ? netlink_getsockopt+0x580/0x580 [ 353.610531][ T8239] ____sys_sendmsg+0x5bf/0x950 [ 353.615413][ T8239] ? __asan_memset+0x22/0x40 [ 353.620018][ T8239] ? __sys_sendmsg_sock+0x30/0x30 [ 353.625062][ T8239] ? __import_iovec+0x5f2/0x860 [ 353.629935][ T8239] ? import_iovec+0x73/0xa0 [ 353.634455][ T8239] ___sys_sendmsg+0x220/0x290 [ 353.639183][ T8239] ? __sys_sendmsg+0x270/0x270 [ 353.644158][ T8239] ? debug_mutex_init+0x38/0x70 [ 353.649119][ T8239] __se_sys_sendmsg+0x1a5/0x270 [ 353.654003][ T8239] ? __x64_sys_sendmsg+0x80/0x80 [ 353.658983][ T8239] ? lockdep_hardirqs_on+0x98/0x150 [ 353.664199][ T8239] do_syscall_64+0x55/0xb0 [ 353.668630][ T8239] ? clear_bhb_loop+0x40/0x90 [ 353.673311][ T8239] ? clear_bhb_loop+0x40/0x90 [ 353.677994][ T8239] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.683897][ T8239] RIP: 0033:0x7fe104b8ec29 [ 353.688317][ T8239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.708029][ T8239] RSP: 002b:00007fe105987038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.716464][ T8239] RAX: ffffffffffffffda RBX: 00007fe104dd6180 RCX: 00007fe104b8ec29 [ 353.724478][ T8239] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000008 [ 353.732463][ T8239] RBP: 00007fe104c11e41 R08: 0000000000000000 R09: 0000000000000000 [ 353.740455][ T8239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.748458][ T8239] R13: 00007fe104dd6218 R14: 00007fe104dd6180 R15: 00007fff4daa06f8 [ 353.756472][ T8239] [ 353.955860][ T8239] Mem-Info: [ 353.959669][ T8239] active_anon:12113 inactive_anon:0 isolated_anon:0 [ 353.959669][ T8239] active_file:10824 inactive_file:39984 isolated_file:0 [ 353.959669][ T8239] unevictable:768 dirty:111 writeback:0 [ 353.959669][ T8239] slab_reclaimable:10079 slab_unreclaimable:97219 [ 353.959669][ T8239] mapped:32044 shmem:7113 pagetables:707 [ 353.959669][ T8239] sec_pagetables:0 bounce:0 [ 353.959669][ T8239] kernel_misc_reclaimable:0 [ 353.959669][ T8239] free:1344579 free_pcp:7089 free_cma:0 [ 354.126701][ T8239] Node 0 active_anon:48432kB inactive_anon:0kB active_file:43296kB inactive_file:159736kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128176kB dirty:444kB writeback:0kB shmem:26916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12412kB pagetables:2820kB sec_pagetables:0kB all_unreclaimable? no [ 355.059585][ T8239] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 355.430073][ T8239] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 355.483724][ T8239] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 355.536017][ T8239] Node 0 DMA32 free:1459836kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:48168kB inactive_anon:0kB active_file:43296kB inactive_file:158412kB unevictable:1536kB writepending:268kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:14420kB local_pcp:5616kB free_cma:0kB [ 355.605466][ T8239] lowmem_reserve[]: 0 0 1 1 1 [ 355.632657][ T8239] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1332kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 355.823153][ T8239] lowmem_reserve[]: 0 0 0 0 0 [ 355.897835][ T8239] Node 1 Normal free:3903116kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14048kB local_pcp:7040kB free_cma:0kB [ 356.396251][ T8239] lowmem_reserve[]: 0 0 0 0 0 [ 356.449968][ T8239] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 356.487100][ T8239] Node 0 DMA32: 2*4kB (UM) 441*8kB (UM) 657*16kB (UM) 696*32kB (UME) 309*64kB (UME) 139*128kB (UME) 34*256kB (UM) 7*512kB (M) 9*1024kB (ME) 6*2048kB (UME) 330*4096kB (M) = 1459360kB [ 356.590144][ T8239] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 356.715637][ T8239] Node 1 Normal: 217*4kB (UME) 61*8kB (UME) 54*16kB (UME) 133*32kB (UME) 37*64kB (UME) 6*128kB (UE) 1*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3903116kB [ 356.755753][ T8239] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.778505][ T8239] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 357.008742][ T8239] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 357.028418][ T8239] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 357.039886][ T8239] 57918 total pagecache pages [ 357.044596][ T8239] 0 pages in swap cache [ 357.049642][ T8239] Free swap = 124984kB [ 357.053938][ T8239] Total swap = 124996kB [ 357.058229][ T8239] 2097051 pages RAM [ 357.062174][ T8239] 0 pages HighMem/MovableOnly [ 357.066861][ T8239] 416137 pages reserved [ 357.071261][ T8239] 0 pages cma reserved [ 359.577698][ T8311] netlink: 'syz.0.644': attribute type 1 has an invalid length. [ 359.705083][ T8313] bond1: (slave gretap1): making interface the new active one [ 359.759607][ T8313] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 359.980546][ T8311] vlan2: entered allmulticast mode [ 360.032897][ T8311] bond1: entered allmulticast mode [ 360.084483][ T8311] gretap1: entered allmulticast mode [ 360.223388][ T8311] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 360.745001][ T8315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.645'. [ 368.282232][ T8372] netlink: 'syz.4.661': attribute type 7 has an invalid length. [ 368.307757][ T8372] netlink: 'syz.4.661': attribute type 8 has an invalid length. [ 377.076882][ T8432] binder: 8431:8432 ioctl c0306201 0 returned -14 [ 377.247370][ T8432] binder: 8431:8432 ioctl c0306201 2000000002c0 returned -14 [ 378.733201][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.747942][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.930951][ T8459] overlayfs: missing 'lowerdir' [ 379.913199][ T8477] binder: 8475:8477 ioctl c0306201 2000000002c0 returned -14 [ 381.039824][ T5796] Bluetooth: hci2: command 0x0406 tx timeout [ 381.050138][ T8488] netlink: 32 bytes leftover after parsing attributes in process `syz.2.696'. [ 382.308960][ T8512] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 382.472958][ T27] audit: type=1800 audit(1758427278.057:4): pid=8512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.698" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 386.020952][ T8532] mkiss: ax0: crc mode is auto. [ 387.437279][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 390.902185][ T8560] netlink: 3380 bytes leftover after parsing attributes in process `syz.2.714'. [ 395.169054][ T8590] tipc: Enabled bearer , priority 0 [ 395.187028][ T8590] syzkaller0: entered promiscuous mode [ 395.193461][ T8590] syzkaller0: entered allmulticast mode [ 395.251195][ T8590] tipc: Resetting bearer [ 395.260187][ T8589] tipc: Resetting bearer [ 395.301120][ T8589] tipc: Disabling bearer [ 396.867353][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'. [ 398.019330][ T8624] binder: BINDER_SET_CONTEXT_MGR already set [ 398.025475][ T8624] binder: 8621:8624 ioctl 4018620d 200000004a80 returned -16 [ 398.068932][ T8624] binder: 8621:8624 ioctl c0306201 2000000002c0 returned -14 [ 399.295298][ T8647] lo: entered allmulticast mode [ 399.304820][ T8647] tunl0: entered allmulticast mode [ 399.314337][ T8647] gre0: entered allmulticast mode [ 399.448625][ T8647] gretap0: entered allmulticast mode [ 399.454208][ T8647] erspan0: entered allmulticast mode [ 399.464486][ T8647] ip_vti0: entered allmulticast mode [ 399.470952][ T8647] ip6_vti0: entered allmulticast mode [ 399.476458][ T8647] sit0: entered allmulticast mode [ 399.483862][ T8647] ip6tnl0: entered allmulticast mode [ 399.490130][ T8647] ip6gre0: entered allmulticast mode [ 399.495559][ T8647] syz_tun: entered allmulticast mode [ 399.503085][ T8647] ip6gretap0: entered allmulticast mode [ 399.509645][ T8647] bridge0: entered allmulticast mode [ 399.515331][ T8647] vcan0: entered allmulticast mode [ 399.532441][ T8647] bond0: entered allmulticast mode [ 399.538596][ T8647] bond_slave_0: entered allmulticast mode [ 399.544502][ T8647] bond_slave_1: entered allmulticast mode [ 399.550818][ T8647] team0: entered allmulticast mode [ 399.559823][ T8647] team_slave_0: entered allmulticast mode [ 399.565772][ T8647] team_slave_1: entered allmulticast mode [ 399.573593][ T8647] dummy0: entered allmulticast mode [ 399.580554][ T8647] nlmon0: entered allmulticast mode [ 399.586125][ T8647] caif0: entered allmulticast mode [ 399.593435][ T8647] batadv0: entered allmulticast mode [ 399.599118][ T8647] vxcan0: entered allmulticast mode [ 399.604590][ T8647] vxcan1: entered allmulticast mode [ 399.610320][ T8647] veth0: entered allmulticast mode [ 399.615806][ T8647] veth1: entered allmulticast mode [ 399.621310][ T8647] wg0: entered allmulticast mode [ 399.626629][ T8647] wg1: entered allmulticast mode [ 399.632891][ T8647] wg2: entered allmulticast mode [ 399.639664][ T8647] veth0_to_bridge: entered allmulticast mode [ 399.646191][ T8647] veth1_to_bridge: entered allmulticast mode [ 399.654823][ T8647] veth0_to_bond: entered allmulticast mode [ 399.661391][ T8647] veth1_to_bond: entered allmulticast mode [ 399.670100][ T8647] veth0_to_team: entered allmulticast mode [ 399.676478][ T8647] veth1_to_team: entered allmulticast mode [ 399.685550][ T8647] veth0_to_batadv: entered allmulticast mode [ 399.692032][ T8647] batadv_slave_0: entered allmulticast mode [ 399.698460][ T8647] veth1_to_batadv: entered allmulticast mode [ 399.704812][ T8647] batadv_slave_1: entered allmulticast mode [ 399.711020][ T8647] xfrm0: entered allmulticast mode [ 399.716436][ T8647] veth0_to_hsr: entered allmulticast mode [ 399.722441][ T8647] hsr_slave_0: entered allmulticast mode [ 399.728418][ T8647] veth1_to_hsr: entered allmulticast mode [ 399.735110][ T8647] hsr_slave_1: entered allmulticast mode [ 399.741022][ T8647] hsr0: entered allmulticast mode [ 399.746378][ T8647] veth1_virt_wifi: entered allmulticast mode [ 399.752631][ T8647] veth0_virt_wifi: entered allmulticast mode [ 399.759026][ T8647] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 399.766756][ T8647] veth1_vlan: entered allmulticast mode [ 399.772652][ T8647] veth0_vlan: entered allmulticast mode [ 399.778631][ T8647] vlan0: entered allmulticast mode [ 399.784129][ T8647] vlan1: entered allmulticast mode [ 399.789649][ T8647] macvlan0: entered allmulticast mode [ 399.795315][ T8647] macvlan1: entered allmulticast mode [ 399.801056][ T8647] ipvlan0: entered allmulticast mode [ 399.806630][ T8647] ipvlan1: entered allmulticast mode [ 399.812210][ T8647] veth1_macvtap: entered allmulticast mode [ 399.818238][ T8647] veth0_macvtap: entered allmulticast mode [ 399.824379][ T8647] macvtap0: entered allmulticast mode [ 399.830054][ T8647] macsec0: entered allmulticast mode [ 399.841294][ T8647] geneve0: entered allmulticast mode [ 399.847001][ T8647] geneve1: entered allmulticast mode [ 399.852645][ T8647] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 399.860618][ T8647] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 399.868282][ T8647] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 399.875917][ T8647] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 399.883737][ T8647] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 399.891093][ T8647] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 399.898475][ T8647] bridge1: entered allmulticast mode [ 399.904091][ T8647] vti0: entered allmulticast mode [ 399.909365][ T8647] erspan0.1: entered allmulticast mode [ 400.201878][ T8656] netlink: 3380 bytes leftover after parsing attributes in process `syz.4.746'. [ 400.913655][ T8654] kvm: pic: non byte write [ 400.919817][ T8654] kvm: pic: non byte write [ 400.924687][ T8654] kvm: pic: non byte write [ 400.929807][ T8654] kvm: pic: non byte write [ 400.951466][ T8654] kvm: pic: non byte write [ 400.956382][ T8654] kvm: pic: single mode not supported [ 400.956566][ T8654] kvm: pic: level sensitive irq not supported [ 400.963572][ T8654] kvm: pic: single mode not supported [ 400.969864][ T8654] kvm: pic: level sensitive irq not supported [ 400.978516][ T8654] kvm: pic: non byte write [ 401.013158][ T8654] kvm: pic: non byte write [ 401.018216][ T8654] kvm: pic: level sensitive irq not supported [ 401.018384][ T8654] kvm: pic: non byte write [ 401.029754][ T8654] kvm: pic: non byte write [ 401.034789][ T8654] kvm: pic: non byte write [ 401.040260][ T8654] kvm: pic: level sensitive irq not supported [ 403.812266][ T8687] netlink: 3380 bytes leftover after parsing attributes in process `syz.2.758'. [ 413.425060][ T8723] 9pnet_virtio: no channels available for device syz [ 413.560561][ T8724] netlink: 'syz.2.765': attribute type 39 has an invalid length. [ 413.616479][ T8724] veth0_macvtap: left promiscuous mode [ 415.594953][ T8733] netlink: 2456 bytes leftover after parsing attributes in process `syz.3.768'. [ 416.052541][ T8739] (null): rxe_set_mtu: Set mtu to 1024 [ 416.062237][ T8739] ip6gretap0 speed is unknown, defaulting to 1000 [ 416.080312][ T8739] ip6gretap0 speed is unknown, defaulting to 1000 [ 416.092989][ T8739] ip6gretap0 speed is unknown, defaulting to 1000 [ 416.841200][ T8739] infiniband syz2: set active [ 416.846834][ T8739] infiniband syz2: added ip6gretap0 [ 416.856287][ T5854] ip6gretap0 speed is unknown, defaulting to 1000 [ 416.901605][ T8739] RDS/IB: syz2: added [ 416.905704][ T8739] smc: adding ib device syz2 with port count 1 [ 416.912426][ T8739] smc: ib device syz2 port 1 has pnetid [ 416.919396][ T8739] ip6gretap0 speed is unknown, defaulting to 1000 [ 417.052991][ T7543] ip6gretap0 speed is unknown, defaulting to 1000 [ 417.408266][ T8739] ip6gretap0 speed is unknown, defaulting to 1000 [ 417.531097][ T8739] ip6gretap0 speed is unknown, defaulting to 1000 [ 417.653474][ T8739] ip6gretap0 speed is unknown, defaulting to 1000 [ 417.778291][ T8739] ip6gretap0 speed is unknown, defaulting to 1000 [ 419.771543][ T8750] 9pnet_fd: Insufficient options for proto=fd [ 420.069254][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 420.082751][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 420.091389][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 420.102271][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 420.110123][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 420.123053][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 420.556637][ T8751] ip6gretap0 speed is unknown, defaulting to 1000 [ 421.751148][ T8764] netlink: 2456 bytes leftover after parsing attributes in process `syz.2.780'. [ 422.157599][ T5793] Bluetooth: hci2: command tx timeout [ 422.391623][ T8751] chnl_net:caif_netlink_parms(): no params data found [ 422.575054][ T8781] 9pnet_virtio: no channels available for device syz [ 422.623965][ T8774] netlink: 14 bytes leftover after parsing attributes in process `syz.2.783'. [ 423.559705][ T8774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.592379][ T8774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.622497][ T8774] bond0 (unregistering): Released all slaves [ 423.643601][ T8751] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.651004][ T8751] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.658865][ T8751] bridge_slave_0: entered allmulticast mode [ 423.666430][ T8751] bridge_slave_0: entered promiscuous mode [ 423.675722][ T8782] netlink: 'syz.4.785': attribute type 39 has an invalid length. [ 423.698684][ T8782] veth0_macvtap: left promiscuous mode [ 423.760430][ T8751] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.777290][ T8751] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.784558][ T8751] bridge_slave_1: entered allmulticast mode [ 423.835256][ T8751] bridge_slave_1: entered promiscuous mode [ 423.911190][ T5854] libceph: connect (1)[c::]:6789 error -101 [ 423.932656][ T5854] libceph: mon0 (1)[c::]:6789 connect error [ 423.957342][ T8785] ceph: No mds server is up or the cluster is laggy [ 423.973790][ T8751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.991754][ T8751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.227024][ T8751] team0: Port device team_slave_0 added [ 424.252338][ T5793] Bluetooth: hci2: command tx timeout [ 424.255507][ T8751] team0: Port device team_slave_1 added [ 424.393458][ T8751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.405023][ T8751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.432117][ T8751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.446336][ T8751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.453733][ T8751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.494855][ T8751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.648131][ T8797] netlink: 2456 bytes leftover after parsing attributes in process `syz.3.789'. [ 424.698722][ T8751] hsr_slave_0: entered promiscuous mode [ 424.721922][ T8751] hsr_slave_1: entered promiscuous mode [ 424.738608][ T8751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 424.767576][ T8751] Cannot create hsr debugfs directory [ 426.213764][ T8810] comedi comedi0: dac02: I/O port conflict (0x4,8) [ 426.318406][ T5793] Bluetooth: hci2: command tx timeout [ 428.189895][ T8751] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 428.231802][ T8751] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 428.252584][ T8751] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 428.272488][ T8818] netlink: 14 bytes leftover after parsing attributes in process `syz.4.795'. [ 428.439510][ T5793] Bluetooth: hci2: command tx timeout [ 428.619248][ T8818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.637053][ T8818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.657711][ T8818] bond0 (unregistering): Released all slaves [ 428.683538][ T8751] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 428.789681][ T8829] netlink: 2456 bytes leftover after parsing attributes in process `syz.3.797'. [ 428.947020][ T8751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.992415][ T8751] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.016845][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.024047][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.034610][ T7543] libceph: connect (1)[c::]:6789 error -101 [ 429.045060][ T7543] libceph: mon0 (1)[c::]:6789 connect error [ 429.096874][ T8832] ceph: No mds server is up or the cluster is laggy [ 429.112431][ T3442] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.119679][ T3442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.255814][ T8751] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 429.289458][ T8751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 429.847982][ T8848] syz2: rxe_newlink: already configured on ip6gretap0 [ 430.863815][ T8751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.237384][ T8751] veth0_vlan: entered promiscuous mode [ 432.253425][ T8751] veth1_vlan: entered promiscuous mode [ 432.302048][ T8867] netlink: 14 bytes leftover after parsing attributes in process `syz.3.806'. [ 432.493243][ T8867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.606268][ T8867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.634215][ T8867] bond0 (unregistering): Released all slaves [ 432.744998][ T8751] veth0_macvtap: entered promiscuous mode [ 432.763038][ T8751] veth1_macvtap: entered promiscuous mode [ 432.890787][ T8751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.952438][ T8751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.081067][ T8751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.092701][ T8751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.651446][ T8751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.662053][ T8751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.672883][ T8751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.683375][ T8751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.693946][ T8751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.706444][ T8751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.770367][ T8751] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.848663][ T8751] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.895512][ T8751] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.934489][ T8751] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.246539][ T7560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.287503][ T7560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.360903][ T3442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.380834][ T3442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.274175][ T8892] netlink: 'syz.5.774': attribute type 10 has an invalid length. [ 435.283139][ T8892] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.291121][ T8892] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.323069][ T8892] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.330260][ T8892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.338993][ T8892] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.346200][ T8892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.368679][ T8892] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 435.684182][ T8895] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 435.700184][ T8895] qnx6: wrong signature (magic) in superblock #1. [ 435.707163][ T8895] qnx6: unable to read the first superblock [ 436.171121][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.5.774'. [ 437.663447][ T8912] (null): rxe_set_mtu: Set mtu to 1024 [ 437.672434][ T8912] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 438.550827][ T8911] ip6gretap0 speed is unknown, defaulting to 1000 [ 439.169179][ T8923] (null): rxe_set_mtu: Set mtu to 1024 [ 439.175145][ T8923] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 440.172095][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.178708][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.315097][ T8961] netlink: 2456 bytes leftover after parsing attributes in process `syz.4.828'. [ 444.994945][ T8970] (null): rxe_set_mtu: Set mtu to 1024 [ 445.006031][ T8970] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 457.186742][ T9047] syz1: rxe_set_mtu: Set mtu to 256 [ 457.797014][ T9051] netlink: 14 bytes leftover after parsing attributes in process `syz.4.853'. [ 463.331725][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.866'. [ 464.579661][ T9095] overlayfs: failed to resolve './file0': -2 [ 471.582924][ T9135] comedi comedi0: dac02: I/O port conflict (0x4,8) [ 472.238398][ T9132] overlayfs: failed to resolve './file0': -2 [ 480.572989][ T9175] comedi comedi0: dac02: I/O port conflict (0x4,8) [ 481.438056][ T9187] overlayfs: failed to resolve './file0': -2 [ 482.295936][ T9194] netlink: 'syz.5.892': attribute type 10 has an invalid length. [ 482.307503][ T9194] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.314980][ T9194] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.482862][ T9195] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 482.502993][ T9195] qnx6: wrong signature (magic) in superblock #1. [ 482.510372][ T9195] qnx6: unable to read the first superblock [ 482.829624][ T9195] netlink: 12 bytes leftover after parsing attributes in process `syz.5.892'. [ 483.594939][ T9204] syz2: rxe_newlink: already configured on ip6gretap0 [ 483.915576][ T9210] netlink: 14 bytes leftover after parsing attributes in process `syz.5.896'. [ 484.372653][ T9210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.432254][ T9210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.488627][ T9210] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 484.519780][ T9210] bond0 (unregistering): Released all slaves [ 485.411378][ T9221] comedi comedi0: dac02: I/O port conflict (0x4,8) [ 597.667063][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 597.674074][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11/1:b..l P9218/1:b..l P5785/1:b..l [ 597.684516][ C1] rcu: (detected by 1, t=10502 jiffies, g=41345, q=121 ncpus=2) [ 597.692243][ C1] task:syz-executor state:R running task stack:21736 pid:5785 ppid:5784 flags:0x00004002 [ 597.703910][ C1] Call Trace: [ 597.707202][ C1] [ 597.710159][ C1] __schedule+0x14d2/0x44d0 [ 597.714693][ C1] ? verify_lock_unused+0x140/0x140 [ 597.719909][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x820/0xcc0 [ 597.726517][ C1] ? mark_lock+0x94/0x320 [ 597.730864][ C1] ? asan.module_dtor+0x20/0x20 [ 597.735748][ C1] ? preempt_schedule+0xab/0xc0 [ 597.740613][ C1] preempt_schedule_common+0x82/0xc0 [ 597.745935][ C1] preempt_schedule+0xab/0xc0 [ 597.750633][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 597.756295][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 597.761361][ C1] preempt_schedule_thunk+0x1a/0x30 [ 597.766582][ C1] _raw_spin_unlock+0x3a/0x40 [ 597.771269][ C1] ? copy_page_range+0x2b4b/0x3600 [ 597.776486][ C1] copy_page_range+0x2b7c/0x3600 [ 597.781467][ C1] ? pfn_valid+0x450/0x450 [ 597.785892][ C1] ? mas_wr_store_entry+0x151/0x340 [ 597.791100][ C1] ? mas_store+0x34d/0x500 [ 597.795521][ C1] ? mas_empty_area_rev+0x1880/0x1880 [ 597.800921][ C1] ? up_write+0x1c3/0x410 [ 597.805253][ C1] ? anon_vma_interval_tree_verify+0x150/0x150 [ 597.811418][ C1] copy_mm+0x112a/0x1c20 [ 597.815678][ C1] ? copy_signal+0x680/0x680 [ 597.820282][ C1] ? lockdep_init_map_type+0xa1/0x880 [ 597.825678][ C1] ? __init_rwsem+0x122/0x160 [ 597.830531][ C1] ? copy_signal+0x556/0x680 [ 597.835214][ C1] copy_process+0x16d3/0x3d70 [ 597.839912][ C1] ? copy_process+0x945/0x3d70 [ 597.844700][ C1] ? __pidfd_prepare+0x140/0x140 [ 597.849641][ C1] ? vma_end_read+0x18/0x170 [ 597.854238][ C1] kernel_clone+0x21b/0x840 [ 597.858749][ C1] ? create_io_thread+0x140/0x140 [ 597.863792][ C1] __x64_sys_clone+0x18c/0x1e0 [ 597.868571][ C1] ? __ia32_sys_vfork+0x100/0x100 [ 597.873783][ C1] ? lock_chain_count+0x20/0x20 [ 597.878642][ C1] ? lock_chain_count+0x20/0x20 [ 597.883503][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 597.888732][ C1] do_syscall_64+0x55/0xb0 [ 597.893329][ C1] ? clear_bhb_loop+0x40/0x90 [ 597.898015][ C1] ? clear_bhb_loop+0x40/0x90 [ 597.902696][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.908605][ C1] RIP: 0033:0x7fd2bff85493 [ 597.913019][ C1] RSP: 002b:00007ffef74bd6a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 597.921448][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd2bff85493 [ 597.929720][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 597.937720][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 597.945709][ C1] R10: 000055558f14b7d0 R11: 0000000000000246 R12: 0000000000000000 [ 597.953684][ C1] R13: 00000000000927c0 R14: 00000000000778da R15: 00007ffef74bd840 [ 597.961676][ C1] [ 597.964718][ C1] task:syz.4.897 state:R running task stack:25480 pid:9218 ppid:6437 flags:0x00004006 [ 597.975500][ C1] Call Trace: [ 597.978784][ C1] [ 597.981753][ C1] __schedule+0x14d2/0x44d0 [ 597.986279][ C1] ? mark_lock+0x51/0x320 [ 597.990626][ C1] ? asan.module_dtor+0x20/0x20 [ 597.995491][ C1] ? mark_lock+0x94/0x320 [ 597.999842][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 598.005839][ C1] ? preempt_schedule_irq+0xaa/0x140 [ 598.011137][ C1] preempt_schedule_irq+0xb5/0x140 [ 598.016284][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 598.022020][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 598.027841][ C1] irqentry_exit+0x67/0x70 [ 598.032290][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 598.038273][ C1] RIP: 0010:lock_acquire+0x1f2/0x410 [ 598.043585][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00 [ 598.063285][ C1] RSP: 0018:ffffc9000b5a7260 EFLAGS: 00000206 [ 598.069358][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: b6c2e78aaf399700 [ 598.077330][ C1] RDX: 0000000000000000 RSI: ffffffff8aaace20 RDI: ffffffff8afc71c0 [ 598.085488][ C1] RBP: ffffc9000b5a7370 R08: dffffc0000000000 R09: 1ffffffff21b4ea0 [ 598.093555][ C1] R10: dffffc0000000000 R11: fffffbfff21b4ea1 R12: 1ffff920016b4e58 [ 598.101540][ C1] R13: ffffffff8cd2fe20 R14: 0000000000000246 R15: dffffc0000000000 [ 598.109526][ C1] ? lock_chain_count+0x20/0x20 [ 598.114384][ C1] ? charge_memcg+0x245/0x380 [ 598.119069][ C1] ? read_lock_is_recursive+0x20/0x20 [ 598.124448][ C1] ? charge_memcg+0x245/0x380 [ 598.129131][ C1] ? __mem_cgroup_charge+0x80/0x80 [ 598.134244][ C1] ? percpu_ref_put+0x19/0x180 [ 598.139033][ C1] percpu_ref_put+0x35/0x180 [ 598.143626][ C1] ? percpu_ref_put+0x19/0x180 [ 598.148397][ C1] __mem_cgroup_charge+0x56/0x80 [ 598.153337][ C1] do_wp_page+0x14fe/0x3630 [ 598.157863][ C1] ? folio_put+0xd0/0xd0 [ 598.162112][ C1] ? do_raw_spin_lock+0x121/0x2c0 [ 598.167183][ C1] ? __rwlock_init+0x150/0x150 [ 598.171973][ C1] ? handle_mm_fault+0xd1/0x4920 [ 598.176919][ C1] handle_mm_fault+0x12d4/0x4920 [ 598.181887][ C1] ? handle_mm_fault+0xd1/0x4920 [ 598.186850][ C1] ? numa_migrate_prep+0x350/0x350 [ 598.191981][ C1] ? refcount_dec_and_test+0x4f/0x70 [ 598.197278][ C1] ? lock_mm_and_find_vma+0x9c/0x300 [ 598.202578][ C1] do_user_addr_fault+0x738/0x12e0 [ 598.207710][ C1] exc_page_fault+0x67/0x110 [ 598.212312][ C1] asm_exc_page_fault+0x26/0x30 [ 598.217179][ C1] RIP: 0010:__put_user_nocheck_4+0x7/0x10 [ 598.222997][ C1] Code: 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 [ 598.242788][ C1] RSP: 0018:ffffc9000b5a78d8 EFLAGS: 00050202 [ 598.248879][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000020000037a030 [ 598.256872][ C1] RDX: ffff888025190000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 598.264859][ C1] RBP: ffffc9000b5a7a70 R08: ffffc9000b5a7687 R09: 1ffff920016b4ed0 [ 598.272841][ C1] R10: dffffc0000000000 R11: fffff520016b4ed1 R12: 0000000000000000 [ 598.280881][ C1] R13: 0000000000000000 R14: 0000000000000002 R15: 000020000037a000 [ 598.288881][ C1] ____sys_recvmsg+0x388/0x5b0 [ 598.293684][ C1] ? __sys_recvmsg_sock+0x50/0x50 [ 598.298788][ C1] ? import_iovec+0x73/0xa0 [ 598.303308][ C1] ___sys_recvmsg+0x1b6/0x510 [ 598.308007][ C1] ? __sys_recvmsg+0x270/0x270 [ 598.312803][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 598.317846][ C1] ? __might_fault+0xc6/0x120 [ 598.322548][ C1] ? __might_fault+0xaa/0x120 [ 598.327229][ C1] do_recvmmsg+0x360/0x7d0 [ 598.331664][ C1] ? __sys_recvmmsg+0x280/0x280 [ 598.336538][ C1] ? vma_end_read+0x18/0x170 [ 598.341141][ C1] ? _raw_spin_unlock+0x40/0x40 [ 598.346000][ C1] __x64_sys_recvmmsg+0x191/0x240 [ 598.351050][ C1] ? do_recvmmsg+0x7d0/0x7d0 [ 598.355654][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 598.361060][ C1] do_syscall_64+0x55/0xb0 [ 598.365483][ C1] ? clear_bhb_loop+0x40/0x90 [ 598.370168][ C1] ? clear_bhb_loop+0x40/0x90 [ 598.374869][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 598.380782][ C1] RIP: 0033:0x7f9e3b98ec29 [ 598.385236][ C1] RSP: 002b:00007f9e3c8b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 598.393741][ C1] RAX: ffffffffffffffda RBX: 00007f9e3bbd6090 RCX: 00007f9e3b98ec29 [ 598.401901][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 598.409888][ C1] RBP: 00007f9e3ba11e41 R08: 0000000000000000 R09: 0000000000000000 [ 598.417872][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 598.425860][ C1] R13: 00007f9e3bbd6128 R14: 00007f9e3bbd6090 R15: 00007ffe9a3b98b8 [ 598.433858][ C1] [ 598.436888][ C1] task:kworker/u4:0 state:R running task stack:24392 pid:11 ppid:2 flags:0x00004000 [ 598.447676][ C1] Workqueue: bat_events batadv_nc_worker [ 598.453329][ C1] Call Trace: [ 598.456614][ C1] [ 598.459559][ C1] __schedule+0x14d2/0x44d0 [ 598.464089][ C1] ? asan.module_dtor+0x20/0x20 [ 598.468947][ C1] ? mark_lock+0x94/0x320 [ 598.473302][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 598.479338][ C1] ? preempt_schedule_irq+0xaa/0x140 [ 598.484652][ C1] preempt_schedule_irq+0xb5/0x140 [ 598.489790][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 598.495542][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 598.501477][ C1] irqentry_exit+0x67/0x70 [ 598.505919][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 598.511914][ C1] RIP: 0010:__rcu_read_unlock+0x6/0xd0 [ 598.517392][ C1] Code: eb fa 89 d9 80 e1 07 80 c1 03 38 c1 7c e3 48 89 df e8 fe 75 6c 00 eb d9 66 2e 0f 1f 84 00 00 00 00 00 66 90 f3 0f 1e fa 41 57 <41> 56 41 55 41 54 53 49 bf 00 00 00 00 00 fc ff df 65 48 8b 3d f1 [ 598.537187][ C1] RSP: 0018:ffffc90000107b50 EFLAGS: 00000293 [ 598.543375][ C1] RAX: ffffffff8a369951 RBX: ffff88802dc426c0 RCX: ffff888019e7bc00 [ 598.551379][ C1] RDX: 0000000000000000 RSI: ffffffff8afc71a0 RDI: ffffffff8afc7160 [ 598.559470][ C1] RBP: fffffffffffffe38 R08: dffffc0000000000 R09: 1ffffffff21b4ea0 [ 598.567458][ C1] R10: dffffc0000000000 R11: fffffbfff21b4ea1 R12: dffffc0000000000 [ 598.575457][ C1] R13: ffffffff8a369812 R14: ffff888030848c80 R15: 00000000000001eb [ 598.583440][ C1] ? batadv_nc_worker+0xd2/0x610 [ 598.588398][ C1] ? batadv_nc_worker+0x211/0x610 [ 598.593435][ C1] batadv_nc_worker+0x282/0x610 [ 598.598303][ C1] ? process_scheduled_works+0x957/0x15b0 [ 598.604034][ C1] process_scheduled_works+0xa45/0x15b0 [ 598.609606][ C1] ? assign_work+0x400/0x400 [ 598.614235][ C1] ? assign_work+0x39e/0x400 [ 598.618836][ C1] worker_thread+0xa55/0xfc0 [ 598.623452][ C1] kthread+0x2fa/0x390 [ 598.627521][ C1] ? pr_cont_work+0x560/0x560 [ 598.632203][ C1] ? kthread_blkcg+0xd0/0xd0 [ 598.636793][ C1] ret_from_fork+0x48/0x80 [ 598.641215][ C1] ? kthread_blkcg+0xd0/0xd0 [ 598.645804][ C1] ret_from_fork_asm+0x11/0x20 [ 598.650583][ C1] [ 598.653608][ C1] rcu: rcu_preempt kthread starved for 10356 jiffies! g41345 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 598.664888][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 598.674863][ C1] rcu: RCU grace-period kthread stack dump: [ 598.680752][ C1] task:rcu_preempt state:R running task stack:27496 pid:17 ppid:2 flags:0x00004000 [ 598.691532][ C1] Call Trace: [ 598.694814][ C1] [ 598.697788][ C1] __schedule+0x14d2/0x44d0 [ 598.702356][ C1] ? asan.module_dtor+0x20/0x20 [ 598.707228][ C1] ? enqueue_timer+0x225/0x530 [ 598.712007][ C1] ? __mod_timer+0x984/0xdb0 [ 598.716620][ C1] schedule+0xbd/0x170 [ 598.720707][ C1] schedule_timeout+0x160/0x280 [ 598.725578][ C1] ? console_conditional_schedule+0x40/0x40 [ 598.731488][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 598.737385][ C1] ? update_process_times+0x1b0/0x1b0 [ 598.742785][ C1] ? prepare_to_swait_event+0x339/0x360 [ 598.748433][ C1] rcu_gp_fqs_loop+0x302/0x1560 [ 598.753308][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 598.759504][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 598.764717][ C1] ? rcu_gp_init+0x1510/0x1510 [ 598.769511][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 598.775410][ C1] ? finish_swait+0xc7/0x1d0 [ 598.780019][ C1] rcu_gp_kthread+0x99/0x380 [ 598.784648][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 598.789770][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 598.794723][ C1] ? __kthread_parkme+0x162/0x1c0 [ 598.799867][ C1] kthread+0x2fa/0x390 [ 598.803960][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 598.809098][ C1] ? kthread_blkcg+0xd0/0xd0 [ 598.813696][ C1] ret_from_fork+0x48/0x80 [ 598.818161][ C1] ? kthread_blkcg+0xd0/0xd0 [ 598.822754][ C1] ret_from_fork_asm+0x11/0x20 [ 598.827543][ C1] [ 598.830562][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 598.836894][ C1] Sending NMI from CPU 1 to CPUs 0: [ 598.842118][ C0] NMI backtrace for cpu 0 [ 598.842128][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 598.842144][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 598.842154][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 598.842183][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d a3 e8 39 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 598.842198][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c2 [ 598.842212][ C0] RAX: dc0164cc2ae7a700 RBX: ffffffff8161925b RCX: dc0164cc2ae7a700 [ 598.842225][ C0] RDX: 0000000000000001 RSI: ffffffff8aaabca0 RDI: ffffffff8afc71c0 [ 598.842237][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 598.842250][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: ffffffff8e4a91a8 [ 598.842262][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952670 [ 598.842272][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 598.842286][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 598.842298][ C0] CR2: 000020000037a030 CR3: 000000002ce35000 CR4: 00000000003506f0 [ 598.842313][ C0] Call Trace: [ 598.842320][ C0] [ 598.842324][ C0] default_idle+0x13/0x20 [ 598.842340][ C0] default_idle_call+0x6c/0xa0 [ 598.842356][ C0] do_idle+0x1eb/0x510 [ 598.842379][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 598.842398][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 598.842423][ C0] cpu_startup_entry+0x43/0x60 [ 598.842442][ C0] rest_init+0x2e2/0x300 [ 598.842458][ C0] ? time_init+0x40/0x40 [ 598.842474][ C0] arch_call_rest_init+0xe/0x10 [ 598.842493][ C0] start_kernel+0x459/0x4e0 [ 598.842512][ C0] x86_64_start_reservations+0x2a/0x30 [ 598.842539][ C0] x86_64_start_kernel+0x60/0x60 [ 598.842565][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 598.842596][ C0]