last executing test programs: 41.237897979s ago: executing program 3 (id=4): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000cc0), 0x0, 0x60010020, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x48d4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x1, 0xff, 0x0, 0x8, 0x9}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) io_setup(0x2, 0x0) io_submit(0x0, 0x0, 0x0) r5 = fsmount(r3, 0x1, 0x0) fchdir(r5) r6 = open(0x0, 0x80242, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r7, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080)=0x2, 0x7f03) r8 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r8, 0x0, 0x0) connect$pptp(r8, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) 36.188558077s ago: executing program 1 (id=7): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 22.919326889s ago: executing program 32 (id=4): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000cc0), 0x0, 0x60010020, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x48d4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x1, 0xff, 0x0, 0x8, 0x9}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) io_setup(0x2, 0x0) io_submit(0x0, 0x0, 0x0) r5 = fsmount(r3, 0x1, 0x0) fchdir(r5) r6 = open(0x0, 0x80242, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r7, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080)=0x2, 0x7f03) r8 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r8, 0x0, 0x0) connect$pptp(r8, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) 22.867991893s ago: executing program 1 (id=9): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x111040, 0x105) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1b) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) io_uring_setup(0x5, 0x0) 19.03941902s ago: executing program 4 (id=5): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x5c, r6, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apt_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x94}, 0x20000000) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r7, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r8 = syz_open_dev$dri(&(0x7f0000000240), 0x2, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x9) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r10, r9], 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000740)={&(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000e00), &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640), 0x0, 0x1, 0x2, 0x0, r10}) 17.828119058s ago: executing program 1 (id=14): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000016c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000000)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @broadcast, @device_a, @initial, {0x6, 0x6}}, 0x1b, @val={0x8c, 0x10, {0xdb3, "6eef9b8f43eb", @short="be7e3a12c2db3d05"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) 15.253875702s ago: executing program 1 (id=15): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15.11782338s ago: executing program 4 (id=16): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000200)={@remote, @private, @empty}, &(0x7f00000002c0)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={r5}, &(0x7f0000000140)=0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0xff32, &(0x7f0000000380)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x189900, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000100800010001000000a4f02856b9fb77d0105e119653eaa41af30149e058206b09bbe0940f2cd8f6eb"], 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) 14.159527287s ago: executing program 1 (id=19): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x4b, 0x0, 0x4) r1 = getpgid(0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) memfd_create(&(0x7f00000003c0)='%\x00\xae\xdb\xb8\x18\xc1\xecWbNO\xde^\xff\x19\x17QE{*X\xe3\xe2\x06\x00\x00\x00\xcc\xf6\xc0H\xa2\x83?\xe7\x89*\xf1\xc5b\v\xec\xe4\xb0\xa2\xc5\xee\x04\x98\xa9\xb9\xe5\x8c\xc3\x97B\xaa+\xf2o\xf6k\xcc\xf7\x057\x8d\xb1\xa0\x86\xe8\xda\x90\xc2\x1e\x15\x11\x92\x9d\xc1M\xe5@\v\x001\xae\x19$\xf8\x96\x81\xcbR\xae`\xd3\xf8_R~7\xf5\x1c\xc8\xf9\xe2z\x00<\xdc\x11\x89\xc9&f\x00\x00\x00\xe2\x83\xf1\x0eg\a\xec\xac\xa5\x94~v\x80P5\xf9/$', 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r6 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r7, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/217, 0xd9}, {&(0x7f0000000880)=""/181, 0xb5}], 0x2) gettid() r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r8, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f00000001c0)={0xfffffff9, 0x2, {0xffffffffffffffff, 0x3, 0x5, 0x0, 0x8}, 0xd4d}) 12.535027823s ago: executing program 4 (id=22): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) socket$inet_sctp(0x2, 0x4, 0x84) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) r6 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a242) poll(0x0, 0x0, 0x101) ioctl$HIDIOCGFEATURE(r6, 0x4004480d, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$netlink(0x10, 0x3, 0x4) dup2(r0, r3) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 11.886944224s ago: executing program 2 (id=23): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x111040, 0x105) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1b) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) io_uring_setup(0x5, 0x0) 10.688757778s ago: executing program 4 (id=25): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xd73, 0x80, 0xfffffffd, 0x287}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) unshare(0x20000400) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2}) io_uring_enter(r5, 0x75fa, 0xe475, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendfile(r1, r0, 0x0, 0x578410ed) 10.061039918s ago: executing program 0 (id=26): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) 8.253016531s ago: executing program 0 (id=27): openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) fanotify_init(0x8, 0x800) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}, 0x6b}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/239, 0xef}, 0xcc4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/241, 0xf1}, 0x4}], 0x3, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) syz_open_dev$evdev(&(0x7f0000000180), 0xfffffffffffffffd, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsmount(r3, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x7) 6.391307981s ago: executing program 2 (id=28): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6.253210037s ago: executing program 0 (id=29): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 5.27925427s ago: executing program 2 (id=30): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x13, 0x4}) 4.426152143s ago: executing program 0 (id=31): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 4.048311427s ago: executing program 2 (id=32): sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x900, 0x4, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 2.456187535s ago: executing program 1 (id=33): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r2, 0x0, 0x38f9, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) 1.070570042s ago: executing program 0 (id=34): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002abd700003f3ffff4300000008000300", @ANYRES32=r2], 0x28}}, 0x40840) 871.20229ms ago: executing program 2 (id=35): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000080)=""/4092, &(0x7f0000001080)=0xffc) 344.752955ms ago: executing program 2 (id=36): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close(r0) 295.01512ms ago: executing program 4 (id=37): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x1, 0xfffffffd}]}, 0x8) 0s ago: executing program 0 (id=38): openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) fanotify_init(0x8, 0x800) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}, 0x6b}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/239, 0xef}, 0xcc4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/241, 0xf1}, 0x4}], 0x3, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) syz_open_dev$evdev(&(0x7f0000000180), 0xfffffffffffffffd, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsmount(r3, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040504", @ANYRES32=r4], 0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts. [ 190.104468][ T5751] cgroup: Unknown subsys name 'net' [ 190.231460][ T5751] cgroup: Unknown subsys name 'cpuset' [ 190.248979][ T5751] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 196.782807][ T5751] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 202.866964][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.876690][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.889238][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.911392][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.941200][ T5771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.996094][ T5072] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.011006][ T5072] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.023054][ T5072] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.053081][ T5072] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.066701][ T5072] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.087706][ T5771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.131923][ T5771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.147715][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.163420][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.175214][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.184626][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.193878][ T5771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.208060][ T5771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.233303][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.252383][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.265725][ T5778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.275958][ T5778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.285821][ T5778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.314550][ T5778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.325961][ T5778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.123083][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.129763][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.517599][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 204.980332][ T5778] Bluetooth: hci0: command tx timeout [ 205.140456][ T5778] Bluetooth: hci1: command tx timeout [ 205.300449][ T5778] Bluetooth: hci3: command tx timeout [ 205.306104][ T5778] Bluetooth: hci2: command tx timeout [ 205.320504][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 205.390434][ T5778] Bluetooth: hci4: command tx timeout [ 205.448113][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 205.606808][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.614833][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.624812][ T5769] bridge_slave_0: entered allmulticast mode [ 205.636254][ T5769] bridge_slave_0: entered promiscuous mode [ 205.697270][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 205.718701][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.726992][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.735266][ T5769] bridge_slave_1: entered allmulticast mode [ 205.744083][ T5769] bridge_slave_1: entered promiscuous mode [ 205.792271][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 206.006274][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.105336][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.399009][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.414117][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.424004][ T5773] bridge_slave_0: entered allmulticast mode [ 206.434938][ T5773] bridge_slave_0: entered promiscuous mode [ 206.463763][ T5769] team0: Port device team_slave_0 added [ 206.549904][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.565243][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.573348][ T5773] bridge_slave_1: entered allmulticast mode [ 206.583313][ T5773] bridge_slave_1: entered promiscuous mode [ 206.601536][ T5769] team0: Port device team_slave_1 added [ 206.830914][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.839511][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.853334][ T5776] bridge_slave_0: entered allmulticast mode [ 206.866590][ T5776] bridge_slave_0: entered promiscuous mode [ 206.977022][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.985418][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.993726][ T5776] bridge_slave_1: entered allmulticast mode [ 207.002777][ T5776] bridge_slave_1: entered promiscuous mode [ 207.051826][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.061381][ T5778] Bluetooth: hci0: command tx timeout [ 207.075987][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.088238][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.095723][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.122251][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.220319][ T5778] Bluetooth: hci1: command tx timeout [ 207.253188][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.260772][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.288107][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.319363][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.327297][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.335033][ T5782] bridge_slave_0: entered allmulticast mode [ 207.343820][ T5782] bridge_slave_0: entered promiscuous mode [ 207.380582][ T5072] Bluetooth: hci3: command tx timeout [ 207.386614][ T5778] Bluetooth: hci2: command tx timeout [ 207.387060][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.400626][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.408284][ T5775] bridge_slave_0: entered allmulticast mode [ 207.418606][ T5775] bridge_slave_0: entered promiscuous mode [ 207.432842][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.440659][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.448359][ T5775] bridge_slave_1: entered allmulticast mode [ 207.458392][ T5775] bridge_slave_1: entered promiscuous mode [ 207.465501][ T5778] Bluetooth: hci4: command tx timeout [ 207.515295][ T5773] team0: Port device team_slave_0 added [ 207.522044][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.529780][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.537662][ T5782] bridge_slave_1: entered allmulticast mode [ 207.547885][ T5782] bridge_slave_1: entered promiscuous mode [ 207.566555][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.613110][ T5773] team0: Port device team_slave_1 added [ 207.661101][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.819294][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.893578][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.938862][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.004340][ T5769] hsr_slave_0: entered promiscuous mode [ 208.013690][ T5769] hsr_slave_1: entered promiscuous mode [ 208.026078][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.034808][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.061772][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.082576][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.100697][ T5776] team0: Port device team_slave_0 added [ 208.138018][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.145515][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.171874][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.220723][ T5776] team0: Port device team_slave_1 added [ 208.234474][ T5775] team0: Port device team_slave_0 added [ 208.360789][ T5775] team0: Port device team_slave_1 added [ 208.409130][ T5782] team0: Port device team_slave_0 added [ 208.528271][ T5782] team0: Port device team_slave_1 added [ 208.537347][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.544703][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.571352][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.655397][ T5773] hsr_slave_0: entered promiscuous mode [ 208.666427][ T5773] hsr_slave_1: entered promiscuous mode [ 208.675192][ T5773] debugfs: 'hsr0' already exists in 'hsr' [ 208.681327][ T5773] Cannot create hsr debugfs directory [ 208.716573][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.723932][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.751550][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.785686][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.792917][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.819600][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.924721][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.932054][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.958727][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.040345][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.047476][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.075951][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.094779][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.102515][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.129547][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.150402][ T5778] Bluetooth: hci0: command tx timeout [ 209.300426][ T5778] Bluetooth: hci1: command tx timeout [ 209.461391][ T5072] Bluetooth: hci3: command tx timeout [ 209.467771][ T5778] Bluetooth: hci2: command tx timeout [ 209.540423][ T5778] Bluetooth: hci4: command tx timeout [ 209.588832][ T5776] hsr_slave_0: entered promiscuous mode [ 209.597881][ T5776] hsr_slave_1: entered promiscuous mode [ 209.606559][ T5776] debugfs: 'hsr0' already exists in 'hsr' [ 209.612731][ T5776] Cannot create hsr debugfs directory [ 209.654819][ T5775] hsr_slave_0: entered promiscuous mode [ 209.664324][ T5775] hsr_slave_1: entered promiscuous mode [ 209.673198][ T5775] debugfs: 'hsr0' already exists in 'hsr' [ 209.679064][ T5775] Cannot create hsr debugfs directory [ 209.786619][ T5782] hsr_slave_0: entered promiscuous mode [ 209.795903][ T5782] hsr_slave_1: entered promiscuous mode [ 209.804868][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 209.810983][ T5782] Cannot create hsr debugfs directory [ 210.781736][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 210.863185][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 210.953863][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 211.010545][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 211.210389][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.223446][ T5778] Bluetooth: hci0: command tx timeout [ 211.242266][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.262576][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.285326][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.380848][ T5778] Bluetooth: hci1: command tx timeout [ 211.540402][ T5778] Bluetooth: hci2: command tx timeout [ 211.546163][ T5072] Bluetooth: hci3: command tx timeout [ 211.620541][ T5072] Bluetooth: hci4: command tx timeout [ 211.626290][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.651557][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.677058][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.730664][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.983391][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.025758][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.077215][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 212.158957][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 212.435326][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.464772][ T5782] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.534011][ T5782] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.561982][ T5782] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 212.603739][ T5782] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 212.692392][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.759358][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.825426][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.833151][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.944482][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.951951][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.992749][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.103633][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.111381][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.208960][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.216443][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.464091][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.567909][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.654967][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.742087][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.749577][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.926329][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.948044][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.955682][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.095946][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.103718][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.285347][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.293162][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.622048][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.780779][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.897359][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.904945][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.972516][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.979949][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.284519][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.329071][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.205241][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.217964][ T5769] veth0_vlan: entered promiscuous mode [ 216.290547][ T5773] veth0_vlan: entered promiscuous mode [ 216.367922][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.448540][ T5769] veth1_vlan: entered promiscuous mode [ 216.521226][ T5773] veth1_vlan: entered promiscuous mode [ 216.953758][ T5775] veth0_vlan: entered promiscuous mode [ 216.975057][ T5773] veth0_macvtap: entered promiscuous mode [ 217.055257][ T5776] veth0_vlan: entered promiscuous mode [ 217.075378][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.111900][ T5773] veth1_macvtap: entered promiscuous mode [ 217.129215][ T5769] veth0_macvtap: entered promiscuous mode [ 217.163992][ T5769] veth1_macvtap: entered promiscuous mode [ 217.201817][ T5775] veth1_vlan: entered promiscuous mode [ 217.270188][ T5776] veth1_vlan: entered promiscuous mode [ 217.434163][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.528088][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.587374][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.717840][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.743713][ T165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.762918][ T165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.802464][ T165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.823756][ T165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.960406][ T165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.987471][ T165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.028043][ T5775] veth0_macvtap: entered promiscuous mode [ 218.065262][ T165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.092580][ T165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.115111][ T5776] veth0_macvtap: entered promiscuous mode [ 218.212023][ T5775] veth1_macvtap: entered promiscuous mode [ 218.261999][ T5776] veth1_macvtap: entered promiscuous mode [ 218.518501][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.633042][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.673197][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.758406][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.862106][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.873138][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.943050][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.975104][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.106718][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.120486][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.170319][ T5782] veth0_vlan: entered promiscuous mode [ 219.177572][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.212475][ T1134] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.350894][ T5782] veth1_vlan: entered promiscuous mode [ 219.857969][ T5782] veth0_macvtap: entered promiscuous mode [ 219.984447][ T5782] veth1_macvtap: entered promiscuous mode [ 220.368525][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.479233][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.597822][ T165] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.653729][ T1099] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.708320][ T1099] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.777351][ T1099] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.115946][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.132259][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.490611][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.498670][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.743560][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.780294][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.029875][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.072590][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.365048][ T5773] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 225.660944][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.684388][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.204801][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.244875][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.584422][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.611057][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.833227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 227.063575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 228.591043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 228.721818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 229.131415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 229.541848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 229.552245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 229.871068][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.879298][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.323246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 236.300809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 236.401770][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 237.875098][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.850426][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.334434][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.376691][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.663801][ T5980] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 244.845553][ T5980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10'. [ 244.891628][ T5980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10'. [ 245.021324][ T5978] Bluetooth: MGMT ver 1.23 [ 245.931705][ T5978] No control pipe specified [ 246.244280][ T5986] process 'syz.0.11' launched '/dev/fd/8' with NULL argv: empty string added [ 248.632318][ T5778] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 248.642431][ T5778] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 248.664271][ T5778] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.720816][ T5778] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 248.739206][ T5778] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 250.928576][ T5778] Bluetooth: hci5: command tx timeout [ 252.762443][ T5778] block nbd0: Receive control failed (result -32) [ 252.772061][ T6016] block nbd0: shutting down sockets [ 252.980328][ T5778] Bluetooth: hci5: command tx timeout [ 254.888728][ T5990] chnl_net:caif_netlink_parms(): no params data found [ 255.060931][ T5778] Bluetooth: hci5: command tx timeout [ 256.098070][ T6047] No control pipe specified [ 257.140389][ T5778] Bluetooth: hci5: command tx timeout [ 258.225942][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.255647][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.311183][ T5990] bridge_slave_0: entered allmulticast mode [ 258.380789][ T5990] bridge_slave_0: entered promiscuous mode [ 258.476302][ T5990] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.531395][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.550885][ T5990] bridge_slave_1: entered allmulticast mode [ 258.605926][ T5990] bridge_slave_1: entered promiscuous mode [ 259.167293][ T5990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.448590][ T5990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.395424][ T5988] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.756278][ T5988] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.898143][ T5990] team0: Port device team_slave_0 added [ 261.032994][ T5990] team0: Port device team_slave_1 added [ 261.143532][ T5988] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.934052][ T5988] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.027817][ T5990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.053966][ T5778] block nbd0: Receive control failed (result -32) [ 262.055897][ T6069] block nbd0: shutting down sockets [ 262.067276][ T5990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.094152][ T5990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.165112][ T5990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.180426][ T5990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.290341][ T5990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.510701][ T6077] syz.2.32 uses obsolete (PF_INET,SOCK_PACKET) [ 263.776240][ T5990] hsr_slave_0: entered promiscuous mode [ 263.835078][ T5990] hsr_slave_1: entered promiscuous mode [ 263.896803][ T5990] debugfs: 'hsr0' already exists in 'hsr' [ 263.920356][ T5990] Cannot create hsr debugfs directory [ 263.955991][ T5988] bridge_slave_1: left allmulticast mode [ 263.999977][ T5988] bridge_slave_1: left promiscuous mode [ 264.014123][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.078557][ T5988] bridge_slave_0: left allmulticast mode [ 264.116941][ T5988] bridge_slave_0: left promiscuous mode [ 264.159115][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.527790][ T5988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.567238][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.578938][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.629876][ T5988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.659409][ T5988] bond0 (unregistering): Released all slaves [ 266.339676][ T6086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34'. [ 266.967244][ T1134] ===================================================== [ 266.974928][ T1134] BUG: KMSAN: uninit-value in __inet_bind+0x8a4/0xf20 [ 266.982204][ T1134] __inet_bind+0x8a4/0xf20 [ 266.986878][ T1134] inet_bind+0x12c/0x1a0 [ 266.992137][ T1134] kernel_bind+0xd6/0x130 [ 266.996760][ T1134] rds_tcp_conn_path_connect+0x952/0xff0 [ 267.002822][ T1134] rds_connect_worker+0x353/0x4d0 [ 267.008097][ T1134] process_scheduled_works+0xb21/0x1e30 [ 267.014081][ T1134] worker_thread+0xede/0x1580 [ 267.022581][ T1134] kthread+0x53f/0x600 [ 267.026940][ T1134] ret_from_fork+0x20f/0x910 [ 267.033164][ T1134] ret_from_fork_asm+0x1a/0x30 [ 267.038185][ T1134] [ 267.041183][ T1134] Uninit was stored to memory at: [ 267.046517][ T1134] kernel_bind+0x92/0x130 [ 267.051266][ T1134] rds_tcp_conn_path_connect+0x952/0xff0 [ 267.057120][ T1134] rds_connect_worker+0x353/0x4d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 267.063070][ T1134] process_scheduled_works+0xb21/0x1e30 [ 267.068880][ T1134] worker_thread+0xede/0x1580 [ 267.073930][ T1134] kthread+0x53f/0x600 [ 267.078247][ T1134] ret_from_fork+0x20f/0x910 [ 267.084994][ T1134] ret_from_fork_asm+0x1a/0x30 [ 267.090432][ T1134] [ 267.092868][ T1134] Uninit was stored to memory at: [ 267.098148][ T1134] rds_tcp_conn_path_connect+0xaf8/0xff0 [ 267.104261][ T1134] rds_connect_worker+0x353/0x4d0 [ 267.109656][ T1134] process_scheduled_works+0xb21/0x1e30 [ 267.116220][ T1134] worker_thread+0xede/0x1580 [ 267.124109][ T1134] kthread+0x53f/0x600 [ 267.128436][ T1134] ret_from_fork+0x20f/0x910 [ 267.134260][ T1134] ret_from_fork_asm+0x1a/0x30 [ 267.139269][ T1134] [ 267.141894][ T1134] Uninit was created at: [ 267.146420][ T1134] kmem_cache_alloc_noprof+0x37b/0x1270 [ 267.152933][ T1134] rds_tcp_conn_alloc+0x7b/0xbb0 [ 267.158256][ T1134] __rds_conn_create+0x267f/0x34e0 [ 267.163952][ T1134] rds_conn_create_outgoing+0x5d/0x80 [ 267.169547][ T1134] rds_sendmsg+0x2684/0x4d70 [ 267.174665][ T1134] ____sys_sendmsg+0xfe7/0x1080 [ 267.179735][ T1134] ___sys_sendmsg+0x271/0x3b0 [ 267.184853][ T1134] __sys_sendmsg+0x1aa/0x300 [ 267.189676][ T1134] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 267.195665][ T1134] ia32_sys_call+0x1e4a/0x4360 [ 267.200925][ T1134] __do_fast_syscall_32+0x17f/0x3f0 [ 267.206340][ T1134] do_fast_syscall_32+0x37/0x80 [ 267.211508][ T1134] do_SYSENTER_32+0x1f/0x30 [ 267.216229][ T1134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.226166][ T1134] [ 267.228675][ T1134] CPU: 1 UID: 0 PID: 1134 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 267.239399][ T1134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 267.249949][ T1134] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 267.256646][ T1134] ===================================================== [ 267.263836][ T1134] Disabling lock debugging due to kernel taint [ 267.271168][ T1134] Kernel panic - not syncing: kmsan.panic set ... [ 267.278032][ T1134] CPU: 1 UID: 0 PID: 1134 Comm: kworker/u8:12 Tainted: G B syzkaller #0 PREEMPT(full) [ 267.289558][ T1134] Tainted: [B]=BAD_PAGE [ 267.293830][ T1134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 267.304131][ T1134] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 267.310632][ T1134] Call Trace: [ 267.314042][ T1134] [ 267.317074][ T1134] __dump_stack+0x26/0x30 [ 267.321611][ T1134] dump_stack_lvl+0x50/0x1c0 [ 267.326396][ T1134] ? dump_stack+0x12/0x25 [ 267.330951][ T1134] dump_stack+0x1e/0x25 [ 267.335329][ T1134] vpanic+0x7b4/0x1430 [ 267.339635][ T1134] panic+0x15d/0x160 [ 267.343804][ T1134] kmsan_report+0x31a/0x320 [ 267.348621][ T1134] ? __msan_warning+0x1b/0x30 [ 267.353492][ T1134] ? __inet_bind+0x8a4/0xf20 [ 267.358429][ T1134] ? inet_bind+0x12c/0x1a0 [ 267.363178][ T1134] ? kernel_bind+0xd6/0x130 [ 267.367862][ T1134] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 267.373879][ T1134] ? rds_connect_worker+0x353/0x4d0 [ 267.379373][ T1134] ? process_scheduled_works+0xb21/0x1e30 [ 267.385321][ T1134] ? worker_thread+0xede/0x1580 [ 267.390541][ T1134] ? kthread+0x53f/0x600 [ 267.395092][ T1134] ? ret_from_fork+0x20f/0x910 [ 267.400403][ T1134] ? ret_from_fork_asm+0x1a/0x30 [ 267.405575][ T1134] ? kmsan_get_metadata+0xf1/0x160 [ 267.410990][ T1134] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 267.417629][ T1134] ? __rcu_read_unlock+0x6c/0xd0 [ 267.422889][ T1134] ? inet_addr_type_table+0x33b/0x560 [ 267.428446][ T1134] ? kmsan_get_metadata+0xf1/0x160 [ 267.433806][ T1134] __msan_warning+0x1b/0x30 [ 267.438538][ T1134] __inet_bind+0x8a4/0xf20 [ 267.443176][ T1134] inet_bind+0x12c/0x1a0 [ 267.447887][ T1134] ? __pfx_inet_bind+0x10/0x10 [ 267.452919][ T1134] kernel_bind+0xd6/0x130 [ 267.457448][ T1134] ? rds_tcp_tune+0x834/0xe60 [ 267.462294][ T1134] ? kmsan_get_metadata+0xf1/0x160 [ 267.467614][ T1134] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 267.473739][ T1134] rds_tcp_conn_path_connect+0x952/0xff0 [ 267.479597][ T1134] ? kmsan_get_metadata+0xf1/0x160 [ 267.485044][ T1134] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 267.491567][ T1134] rds_connect_worker+0x353/0x4d0 [ 267.496944][ T1134] ? __pfx_rds_connect_worker+0x10/0x10 [ 267.502731][ T1134] process_scheduled_works+0xb21/0x1e30 [ 267.508627][ T1134] worker_thread+0xede/0x1580 [ 267.513717][ T1134] kthread+0x53f/0x600 [ 267.518083][ T1134] ? __pfx_worker_thread+0x10/0x10 [ 267.523581][ T1134] ? __pfx_kthread+0x10/0x10 [ 267.528409][ T1134] ret_from_fork+0x20f/0x910 [ 267.533324][ T1134] ? __switch_to+0x51c/0x750 [ 267.538268][ T1134] ? __pfx_kthread+0x10/0x10 [ 267.543096][ T1134] ret_from_fork_asm+0x1a/0x30 [ 267.548210][ T1134] [ 267.551531][ T1134] Kernel Offset: disabled [ 267.555931][ T1134] Rebooting in 86400 seconds..