last executing test programs: 10m26.511999283s ago: executing program 5 (id=157): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f00000ab000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpid() bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) sched_setscheduler(r3, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 10m19.646749275s ago: executing program 5 (id=174): socket$packet(0x11, 0x3, 0x300) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x207a98, 0x0, 0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) semget$private(0x0, 0x4000, 0x0) unshare(0x8000000) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000005c0)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@dev={0xac, 0x14, 0x14, 0x41}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0xfffffffffffffffe}, {}, {}, 0x0, 0x3502, 0x2}, [@offload={0xc}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0) 10m17.686678494s ago: executing program 5 (id=178): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x2, @local, 0x3, 0x1}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x65}, 0x41) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r9, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000000000}) 10m14.879910976s ago: executing program 5 (id=185): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{@fixed}]}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000580)=@multiplanar_overlay={0x7, 0x1, 0x4, 0x4, 0x1, {0x77359400}, {0x4, 0x1, 0x65, 0x0, 0x3, 0x5, "9d874313"}, 0x9, 0x3, {0x0}, 0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) 10m13.34599729s ago: executing program 5 (id=189): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r3 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) epoll_create(0x101) socket$inet(0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@flushpolicy={0x40, 0x12, 0x105, 0x0, 0x25dfdbfe, "", [@proto={0x5, 0x19, 0xff}, @address_filter={0x28, 0x1a, {@in=@broadcast, @in=@private=0xa010102, 0xa, 0x6, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x40082) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') read$FUSE(r7, &(0x7f0000000240)={0x2020}, 0x2020) pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 10m7.196216211s ago: executing program 5 (id=202): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x48}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) semctl$GETPID(0x0, 0x3, 0xb, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 9m51.848099452s ago: executing program 32 (id=202): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x48}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) semctl$GETPID(0x0, 0x3, 0xb, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 34.780919031s ago: executing program 4 (id=1236): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/4, 0x4) socket(0x2a, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x800) socket(0x2, 0x80805, 0x0) 33.325642236s ago: executing program 4 (id=1239): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{@fixed}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, 0x0, 0x40050) 28.732611614s ago: executing program 1 (id=1250): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x100000000) userfaultfd(0x80001) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x21001000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="08002cbd7000ffdbdf25340000000a000600c3c99f08e6080000170034004cdbc304000000000000003bfbaa863c1099440008001f011c0000000600fd00070000000a00eaff0704349540d3000014005500d69474c0b76bcf6203e711a2901b24480600fd000300000014005500e5b0cfd6502aa70fa71f1c78b013b81f0a0006000802110000010000"], 0x90}}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, 0x0, 0x1) r4 = syz_pidfd_open(r3, 0x0) open_by_handle_at(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe"], 0x1) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) 28.602207078s ago: executing program 4 (id=1251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601040000000000000000070000001400078008001140000000000800124000040c8f050001000600"], 0x60}}, 0x20004000) 27.205718563s ago: executing program 1 (id=1255): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_io_uring_setup(0x8d2, 0x0, &(0x7f00000001c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) gettid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x60) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) read$FUSE(r5, &(0x7f0000003c40)={0x2020}, 0xfffffdd9) sched_setaffinity(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r6}, 0x38) 19.576130421s ago: executing program 4 (id=1271): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x387, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = io_uring_setup(0xd4b, &(0x7f0000000280)) io_uring_enter(r6, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) 18.910637681s ago: executing program 1 (id=1274): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x6, 0x181100) r6 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="11c47b3eef5af9d27600a26971c6f6ac69579d8615bf86179bd622ea4f21a938f9686506f2b04b21d8cc5470bbd9df7606e609445d527fcd01603c7c250d0b49493e83a0dcad4d6be3f29bc653b2315b38a00e3efc4a5c79e852be2342750e4a6501b277d64c3c2faacd2801fcfda9b2f4e40b4dedc907e3a8cad097c132be3d1419b728417bf774ae402d87287b48c240a0b07ef1f593c4f0098175d09663084256b21decf0fa85a69ffb316be8de416d945f3daaea45b6b8a5111e02dbb075ca2f5479360c7c4dd781c1f6d9b5a704bae7db01994b8c77136f557d438a0eb17a5a77d65ec12f4f713c989e39c1d1ec51b1", 0xf2}, {0x0}], 0x2, &(0x7f0000000400)}, 0x4000042) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f00000000c0)=0x2) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r8, 0x4112, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) unshare(0x2c020400) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 17.261166755s ago: executing program 0 (id=1276): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8926, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r1, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4(r0, &(0x7f00000002c0)=@xdp, &(0x7f0000000140)=0x80, 0x80800) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, 0xa) 15.905498221s ago: executing program 3 (id=1278): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') lseek(r2, 0xff, 0x0) getdents64(r2, 0xffffffffffffffff, 0x18) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0xccd4453e7e835cf8, &(0x7f0000000040)=""/41, &(0x7f0000000080)=0x29) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setrlimit(0xa, &(0x7f0000000000)={0x1000, 0x9}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x4e22, 0xfffffffe, @empty}, r4}}, 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x11a, 0x22, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) 14.446007075s ago: executing program 6 (id=1280): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0xa, 0x3, 0x87) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000180)={0x80, 0xc, 0xf8, 0x47, 0x5, 0x8, 0x1, 0x5, 0x7, 0x7, 0x4, 0x2, 0x4, 0x5b}, 0xe) preadv(0xffffffffffffffff, 0x0, 0x0, 0x300, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r8, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000001) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, 0x0) syz_emit_ethernet(0x34e, 0x0, 0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000340)={0x1}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="57bebdc10e4ff6ddb3a4d05c027db2e2", 0x10) mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x7) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000280)='gfs2\x00', 0x400080, &(0x7f00000001c0)='discard') 14.427479178s ago: executing program 3 (id=1281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x4, {{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x200000, 0x20000000, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x820000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x32}, 0x2, @in=@multicast1, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r3, 0x4b44, 0x10000000000004) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) open(&(0x7f0000000140)='./file1\x00', 0x749c2, 0x60) fsopen(&(0x7f0000000100)='jfs\x00', 0x1) 12.316048208s ago: executing program 6 (id=1282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r6, 0x0, 0x0, 0xc002a0, 0x0) 12.18239223s ago: executing program 2 (id=1283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x4, {{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x200000, 0x20000000, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x820000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x32}, 0x2, @in=@multicast1, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) open(&(0x7f0000000140)='./file1\x00', 0x749c2, 0x60) fsopen(&(0x7f0000000100)='jfs\x00', 0x1) 11.771961915s ago: executing program 4 (id=1284): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) read$FUSE(r0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008280)="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", 0x2000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x8, {0x2, 0x100000000000, 0x100000003, 0x0, 0x0, 0x3881fffc, {0x5, 0xff, 0x480000, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x8000, 0x80000000, 0x0, 0x0, 0x2, 0x8019}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000001080)={&(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000f80)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x50, 0x40000c4}, 0x24040800) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}}, 0x84) 10.118071145s ago: executing program 6 (id=1285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r1, 0x4b44, 0x10000000000004) 9.543492762s ago: executing program 2 (id=1286): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 9.513781779s ago: executing program 3 (id=1287): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20400, 0x9535257d72065881) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000040)=0x6e1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8003a, [0x8000, 0xc95a, 0xf, 0x401, 0x83, 0x2, 0x100, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff, 0x6, 0x1, 0x7, 0x5, 0x6, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x3, 0x7, 0x4, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x400006, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x4da5, 0x8100, 0x1, 0x40], [0x80, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x7, 0x2, 0xfffffff8, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0x2, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0xd, 0x1, 0xfe000000, 0x8, 0xfffff274, 0x4, 0x9, 0x3, 0x3, 0x80000000, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0x1, 0x100, 0x3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x10002, 0x8001ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0xb, 0xa2, 0x4, 0x1002, 0x8, 0xb1, 0xac8, 0xbf, 0x1, 0x3, 0x9, 0x12b, 0x4, 0xfffffffd, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807fb, 0x2006, 0x80a2ed, 0x5, 0x40000025], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0xd, 0x4183, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x10, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x4000100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x224, 0x2, 0x5, 0x4, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x1fe, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x4004) 8.785775658s ago: executing program 6 (id=1288): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) socket(0xa, 0x3, 0x1003a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f00000003c0)={0x19980330, r2}, &(0x7f0000000400)={0x4, 0x14, 0x9, 0x8, 0x2, 0xfffffff7}) 8.76832069s ago: executing program 3 (id=1289): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) 8.653034555s ago: executing program 2 (id=1290): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0xa, 0x3, 0x87) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000180)={0x80, 0xc, 0xf8, 0x47, 0x5, 0x8, 0x1, 0x5, 0x7, 0x7, 0x4, 0x2, 0x4, 0x5b}, 0xe) preadv(0xffffffffffffffff, 0x0, 0x0, 0x300, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r7, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r9, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000001) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) fcntl$setownex(r6, 0xf, &(0x7f0000000340)={0x1}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="57bebdc10e4ff6ddb3a4d05c027db2e2", 0x10) mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x7) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000280)='gfs2\x00', 0x400080, &(0x7f00000001c0)='discard') 8.205176805s ago: executing program 1 (id=1291): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073"], 0x64}}, 0x4800) 7.386461332s ago: executing program 2 (id=1292): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x64142b0381a2aa16, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x8001, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x80) fchdir(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x800000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 6.948845208s ago: executing program 3 (id=1293): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') lseek(r2, 0xff, 0x0) getdents64(r2, 0xffffffffffffffff, 0x18) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0xccd4453e7e835cf8, &(0x7f0000000040)=""/41, &(0x7f0000000080)=0x29) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setrlimit(0xa, &(0x7f0000000000)={0x1000, 0x9}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x4e22, 0xfffffffe, @empty}, r4}}, 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x11a, 0x22, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) 6.752374414s ago: executing program 0 (id=1294): r0 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) ptrace$ARCH_SET_CPUID(0x1e, r2, 0x1, 0x1012) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @empty}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) 5.724129204s ago: executing program 3 (id=1295): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0xc, 0x4, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) landlock_restrict_self(0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) r2 = fanotify_init(0x200, 0x0) close(r2) 4.952760715s ago: executing program 0 (id=1296): r0 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) ptrace$ARCH_SET_CPUID(0x1e, r2, 0x1, 0x1012) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @empty}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) bind$tipc(r5, 0x0, 0x0) 3.51914005s ago: executing program 0 (id=1297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) creat(&(0x7f00000001c0)='./file0\x00', 0xd931d3864d39dc41) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x1fd, &(0x7f0000000480)=0x0) io_submit(r7, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0xf0, r6, &(0x7f00000000c0)='!', 0xb7f40}]) dup3(r6, r4, 0x80000) 3.37782275s ago: executing program 6 (id=1298): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) splice(r6, 0x0, r3, 0x0, 0x3, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) timerfd_create(0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_QUERYCTRL(r7, 0xc0445624, 0x0) 2.166630993s ago: executing program 0 (id=1299): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000060c0)=""/4129, 0x1021}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f00000008c0)=""/234, 0xea}], 0x4}, 0x80000002}], 0x4, 0x0, 0x0) 1.514963351s ago: executing program 2 (id=1300): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000580)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000300), 0x2, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f00000002c0)=[r3], &(0x7f0000000040), &(0x7f0000000240)=[r6], &(0x7f0000000340)}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, 0x1, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x794}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffff6c}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x401}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 1.477388735s ago: executing program 0 (id=1301): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20400, 0x9535257d72065881) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000040)=0x6e1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8003a, [0x8000, 0xc95a, 0xf, 0x401, 0x83, 0x2, 0x100, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff, 0x6, 0x1, 0x7, 0x5, 0x6, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x3, 0x7, 0x4, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x400006, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x4da5, 0x8100, 0x1, 0x40], [0x80, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x7, 0x2, 0xfffffff8, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0x2, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0xd, 0x1, 0xfe000000, 0x8, 0xfffff274, 0x4, 0x9, 0x3, 0x3, 0x80000000, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0x1, 0x100, 0x3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x10002, 0x8001ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0xb, 0xa2, 0x4, 0x1002, 0x8, 0xb1, 0xac8, 0xbf, 0x1, 0x3, 0x9, 0x12b, 0x4, 0xfffffffd, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807fb, 0x2006, 0x80a2ed, 0x5, 0x40000025], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0xd, 0x4183, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x10, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x4000100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x224, 0x2, 0x5, 0x4, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x1fe, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x4004) 1.453379598s ago: executing program 1 (id=1302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601040000000000000000070000001400078008001140000000000800124000040c8f0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6970"], 0x60}}, 0x20004000) 233.425124ms ago: executing program 1 (id=1303): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x2, 0x7, 0x13) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 26.487246ms ago: executing program 6 (id=1304): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) socket(0x2, 0x5, 0x0) epoll_create(0x101) socket$inet(0x2, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@flushpolicy={0x40, 0x12, 0x105, 0x0, 0x25dfdbfe, "", [@proto={0x5, 0x19, 0xff}, @address_filter={0x28, 0x1a, {@in=@broadcast, @in=@private=0xa010102, 0xa, 0x6, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x40082) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') read$FUSE(r3, &(0x7f0000000240)={0x2020}, 0x2020) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 17.177069ms ago: executing program 2 (id=1305): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) 0s ago: executing program 4 (id=1306): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x2, 0x7, 0x13) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): [ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.212982][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.228860][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.236048][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.253785][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.276871][ T5877] Bluetooth: hci1: command tx timeout [ 96.282313][ T5866] Bluetooth: hci4: command tx timeout [ 96.287861][ T5176] Bluetooth: hci0: command tx timeout [ 96.298334][ T769] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.305484][ T769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.349709][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.356919][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.364778][ T5877] Bluetooth: hci3: command tx timeout [ 96.371128][ T5877] Bluetooth: hci5: command tx timeout [ 96.408239][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.555566][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.618742][ T5869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.639605][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.646816][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.674429][ T5870] veth0_vlan: entered promiscuous mode [ 96.713042][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.720273][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.808124][ T5870] veth1_vlan: entered promiscuous mode [ 97.094517][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.132057][ T5870] veth0_macvtap: entered promiscuous mode [ 97.179857][ T5870] veth1_macvtap: entered promiscuous mode [ 97.214972][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.244149][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.359590][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.390008][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.447601][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.457492][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.469177][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.486579][ T5972] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.495403][ T5972] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.548654][ T5860] veth0_vlan: entered promiscuous mode [ 97.624293][ T5860] veth1_vlan: entered promiscuous mode [ 97.702585][ T5857] veth0_vlan: entered promiscuous mode [ 97.751438][ T5869] veth0_vlan: entered promiscuous mode [ 97.769925][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.792723][ T5869] veth1_vlan: entered promiscuous mode [ 97.818717][ T5860] veth0_macvtap: entered promiscuous mode [ 97.851197][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.861009][ T5857] veth1_vlan: entered promiscuous mode [ 97.884063][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.885428][ T5860] veth1_macvtap: entered promiscuous mode [ 97.962391][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.982386][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.005585][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.070706][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.101499][ T5869] veth0_macvtap: entered promiscuous mode [ 98.124417][ T5870] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.157208][ T5972] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.166629][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.183652][ T5869] veth1_macvtap: entered promiscuous mode [ 98.194596][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.198058][ T5877] Bluetooth: hci2: command tx timeout [ 98.241940][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.356508][ T5877] Bluetooth: hci1: command tx timeout [ 98.361978][ T5877] Bluetooth: hci4: command tx timeout [ 98.368107][ T5866] Bluetooth: hci0: command tx timeout [ 98.368193][ T5857] veth0_macvtap: entered promiscuous mode [ 98.435018][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.440182][ T5176] Bluetooth: hci3: command tx timeout [ 98.448410][ T5877] Bluetooth: hci5: command tx timeout [ 98.456133][ T5857] veth1_macvtap: entered promiscuous mode [ 98.560870][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.624332][ T5874] veth0_vlan: entered promiscuous mode [ 98.680703][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.728420][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.737048][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.745047][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.773465][ T3482] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.784941][ T3482] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.332909][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.370277][ T5874] veth1_vlan: entered promiscuous mode [ 99.395041][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.414505][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.499197][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.509543][ T5859] veth0_vlan: entered promiscuous mode [ 99.614968][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.628392][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.642404][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.664515][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.679267][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.708535][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.721880][ T5859] veth1_vlan: entered promiscuous mode [ 99.750420][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.774463][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.916860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.925463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.934345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.005003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.236791][ T5876] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.296076][ T5874] veth0_macvtap: entered promiscuous mode [ 100.380524][ T5874] veth1_macvtap: entered promiscuous mode [ 100.435715][ T5859] veth0_macvtap: entered promiscuous mode [ 100.466600][ T5876] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 100.506233][ T5876] usb 2-1: config 0 interface 0 has no altsetting 0 [ 100.526246][ T5876] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 100.616360][ T5859] veth1_macvtap: entered promiscuous mode [ 100.626491][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.664731][ T5876] usb 2-1: config 0 descriptor?? [ 100.692929][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.710945][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.722442][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.757009][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.841519][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.960790][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.986525][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.008272][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.067349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.476890][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.491803][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.526295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 101.534646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 101.646983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 101.796973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 102.047765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 102.286307][ T6017] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.503667][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.537347][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.571661][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.652231][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.663426][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.693254][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.063902][ T6026] ntfs3(nullb0): Primary boot signature is not NTFS. [ 103.073026][ T6026] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 104.071619][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.079508][ T5876] usbhid 2-1:0.0: can't add hid device: -71 [ 104.079649][ T5876] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 104.140328][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.216707][ T5876] usb 2-1: USB disconnect, device number 2 [ 104.361144][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.391827][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.634182][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.664116][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.257570][ T5972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.276440][ T5972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.416535][ T10] libceph: connect (1)[c::]:6789 error -101 [ 106.556603][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 106.679441][ T6052] ceph: No mds server is up or the cluster is laggy [ 109.110575][ T6075] lo speed is unknown, defaulting to 1000 [ 109.116571][ T6075] lo speed is unknown, defaulting to 1000 [ 109.126766][ T6075] lo speed is unknown, defaulting to 1000 [ 109.136891][ T6075] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.152143][ T6075] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 109.179931][ T6075] lo speed is unknown, defaulting to 1000 [ 109.187668][ T6075] lo speed is unknown, defaulting to 1000 [ 109.194825][ T6075] lo speed is unknown, defaulting to 1000 [ 109.202102][ T6075] lo speed is unknown, defaulting to 1000 [ 109.209398][ T6075] lo speed is unknown, defaulting to 1000 [ 109.216657][ T6075] lo speed is unknown, defaulting to 1000 [ 111.179116][ T6092] 9pnet_virtio: no channels available for device syz [ 111.926081][ T30] audit: type=1800 audit(1756357951.199:2): pid=6094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.23" name="bus" dev="overlay" ino=47 res=0 errno=0 [ 112.676834][ T5176] Bluetooth: hci5: command 0x0405 tx timeout [ 114.109306][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26'. [ 116.042723][ T6121] Zero length message leads to an empty skb [ 120.562674][ T6157] netlink: 64 bytes leftover after parsing attributes in process `syz.3.41'. [ 120.571621][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 126.197635][ T6201] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 128.727827][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.5.56'. [ 129.736430][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 132.221355][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.250779][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.155173][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'. [ 140.085438][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'. [ 142.384719][ T6331] loop1: detected capacity change from 0 to 24 [ 142.500370][ T6331] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 143.123644][ T6331] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 143.459676][ T6331] fuse: Unknown parameter '0xffffffffffffffff' [ 143.767063][ T6336] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 145.139274][ T6346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.90'. [ 145.911151][ T6359] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.353605][ T6366] 9pnet_virtio: no channels available for device syz [ 148.799010][ T6381] siw: device registration error -23 [ 149.750069][ T6387] overlayfs: missing 'lowerdir' [ 150.471028][ T6392] loop0: detected capacity change from 0 to 24 [ 150.492530][ T6392] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 150.612031][ T6392] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 150.706640][ T6392] fuse: Unknown parameter '0xffffffffffffffff' [ 151.000557][ T6397] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 154.382977][ T6415] 9pnet_virtio: no channels available for device syz [ 157.956893][ T6461] overlayfs: missing 'lowerdir' [ 159.004449][ T6470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.735491][ T6477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.547839][ T6486] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 160.557854][ T6486] block device autoloading is deprecated and will be removed. [ 161.273035][ T6491] 9pnet_virtio: no channels available for device syz [ 162.061475][ T6497] capability: warning: `syz.2.125' uses 32-bit capabilities (legacy support in use) [ 165.143640][ T6526] overlayfs: missing 'lowerdir' [ 168.983135][ T6556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 170.745801][ T6569] siw: device registration error -23 [ 180.646841][ T6640] netlink: 64 bytes leftover after parsing attributes in process `syz.2.167'. [ 181.673499][ T6648] siw: device registration error -23 [ 184.059088][ T6665] overlayfs: missing 'workdir' [ 184.588368][ T30] audit: type=1800 audit(1756358023.849:3): pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.176" name="bus" dev="overlay" ino=231 res=0 errno=0 [ 186.677492][ T6692] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 187.909674][ T6707] ntfs3(nullb0): Primary boot signature is not NTFS. [ 187.926821][ T6707] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 188.337328][ T6709] ntfs3(nullb0): Primary boot signature is not NTFS. [ 188.344930][ T6709] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 190.347219][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.190'. [ 190.378585][ T6728] loop0: detected capacity change from 0 to 24 [ 190.385705][ T6728] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 190.509367][ T6728] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 191.015165][ T6728] fuse: Unknown parameter '0xffffffffffffffff' [ 191.325050][ T6738] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 192.820465][ T30] audit: type=1800 audit(1756358032.109:4): pid=6746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.194" name="bus" dev="overlay" ino=260 res=0 errno=0 [ 192.840762][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.581224][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.608577][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.346156][ T6792] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 200.043449][ T5877] Bluetooth: hci5: command 0x0405 tx timeout [ 214.346415][ T5847] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 214.723903][ T5847] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 214.841113][ T5847] usb 1-1: config 0 has no interface number 0 [ 215.045347][ T5847] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 215.172277][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.269274][ T5847] usb 1-1: config 0 descriptor?? [ 215.526480][ T5847] usb 1-1: selecting invalid altsetting 1 [ 215.981637][ T5847] dvb_ttusb_budget: ttusb_init_controller: error [ 216.135643][ T5879] Bluetooth: hci3: command 0x0406 tx timeout [ 216.141735][ T5879] Bluetooth: hci2: command 0x0406 tx timeout [ 216.146688][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 216.148382][ T5879] Bluetooth: hci0: command 0x0406 tx timeout [ 216.153758][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 216.188546][ T5847] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 216.296394][ T5873] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.326779][ T5873] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.337711][ T5847] DVB: Unable to find symbol cx22700_attach() [ 216.344790][ T5873] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.394353][ T5847] DVB: Unable to find symbol tda10046_attach() [ 216.405066][ T5847] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 216.413778][ T5873] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.425975][ T5873] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.484448][ T6904] lo speed is unknown, defaulting to 1000 [ 218.926286][ T5865] Bluetooth: hci6: command tx timeout [ 219.087081][ T6433] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.132638][ T43] usb 1-1: USB disconnect, device number 2 [ 221.026320][ T5865] Bluetooth: hci6: command tx timeout [ 221.783496][ T6433] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.204124][ T6433] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.484984][ T6433] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.593175][ T6904] chnl_net:caif_netlink_parms(): no params data found [ 223.079388][ T5865] Bluetooth: hci6: command tx timeout [ 224.312720][ T6904] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.344006][ T6904] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.411035][ T6904] bridge_slave_0: entered allmulticast mode [ 224.454498][ T6904] bridge_slave_0: entered promiscuous mode [ 224.569781][ T6904] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.602822][ T6904] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.646364][ T6904] bridge_slave_1: entered allmulticast mode [ 224.679472][ T6904] bridge_slave_1: entered promiscuous mode [ 225.191019][ T5865] Bluetooth: hci6: command tx timeout [ 225.228866][ T6433] bridge_slave_1: left allmulticast mode [ 225.234688][ T6433] bridge_slave_1: left promiscuous mode [ 225.284812][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.308495][ T6433] bridge_slave_0: left allmulticast mode [ 225.314217][ T6433] bridge_slave_0: left promiscuous mode [ 225.322723][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.649368][ T6980] fuse: Bad value for 'fd' [ 226.746370][ T5847] Process accounting resumed [ 227.401598][ T6433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.483639][ T6433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.510800][ T6433] bond0 (unregistering): Released all slaves [ 229.076686][ T6904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.834312][ T30] audit: type=1800 audit(1756358069.119:5): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.258" name="/newroot/48/bus/#285//deleted" dev="tmpfs" ino=285 res=0 errno=0 [ 231.562281][ T6904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.749272][ T6904] team0: Port device team_slave_0 added [ 231.797881][ T6904] team0: Port device team_slave_1 added [ 231.904624][ T6978] Process accounting resumed [ 233.522746][ T7033] overlayfs: failed to resolve './file1': -2 [ 234.077418][ T6904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.162273][ T6904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.296019][ T6904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.324299][ T6904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.332239][ T6904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.406143][ T6904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.654635][ T6433] hsr_slave_0: left promiscuous mode [ 234.698091][ T6433] hsr_slave_1: left promiscuous mode [ 234.716811][ T6433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.740711][ T6433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.817624][ T7042] overlayfs: missing 'lowerdir' [ 235.482702][ T6433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.596772][ T6433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.906650][ T6433] veth1_macvtap: left promiscuous mode [ 235.945762][ T6433] veth0_macvtap: left promiscuous mode [ 236.013807][ T6433] veth1_vlan: left promiscuous mode [ 236.053396][ T6433] veth0_vlan: left promiscuous mode [ 240.999943][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 241.383575][ T7090] ceph: No mds server is up or the cluster is laggy [ 241.390565][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 241.902491][ T7101] loop1: detected capacity change from 0 to 24 [ 242.115096][ T7101] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 242.366813][ T7101] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 242.385229][ T7101] fuse: Unknown parameter '0xffffffffffffffff' [ 242.619374][ T7101] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 244.008937][ T6433] team0 (unregistering): Port device team_slave_1 removed [ 244.127255][ T6433] team0 (unregistering): Port device team_slave_0 removed [ 246.612216][ T6904] hsr_slave_0: entered promiscuous mode [ 246.652924][ T6904] hsr_slave_1: entered promiscuous mode [ 246.684020][ T6904] debugfs: 'hsr0' already exists in 'hsr' [ 246.703143][ T6904] Cannot create hsr debugfs directory [ 248.869812][ T7150] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 249.205754][ T7154] loop1: detected capacity change from 0 to 24 [ 249.354027][ T7154] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 249.670043][ T7154] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 249.721420][ T7154] fuse: Unknown parameter '0xffffffffffffffff' [ 250.030572][ T7165] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 253.053219][ T6904] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 253.103271][ T6904] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 253.299271][ T6904] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 253.492405][ T6904] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 254.370232][ T7196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 254.698033][ T6904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.943323][ T6904] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.000730][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.007196][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.333276][ T6429] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.340514][ T6429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.669072][ T7220] qnx6: unable to read the first superblock [ 256.479053][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.486239][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.405865][ T6904] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 259.426669][ T6904] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.500893][ T6904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.722231][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 264.789510][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 264.988849][ T7300] ceph: No mds server is up or the cluster is laggy [ 265.341816][ T6904] veth0_vlan: entered promiscuous mode [ 265.589250][ T6904] veth1_vlan: entered promiscuous mode [ 265.844605][ T6904] veth0_macvtap: entered promiscuous mode [ 265.938129][ T6904] veth1_macvtap: entered promiscuous mode [ 266.170984][ T6904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.241864][ T6904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.067805][ T5980] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 267.261520][ T5980] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 267.270778][ T5980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.323339][ T5980] usb 3-1: Product: syz [ 267.339352][ T5980] usb 3-1: Manufacturer: syz [ 267.344544][ T5980] usb 3-1: SerialNumber: syz [ 267.374951][ T5980] usb 3-1: config 0 descriptor?? [ 267.398948][ T5980] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 002 [ 267.436513][ T769] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.630612][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.703611][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.712562][ T30] audit: type=1800 audit(1756358106.989:6): pid=7320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.321" name="/newroot/68/bus/#393//deleted" dev="tmpfs" ino=393 res=0 errno=0 [ 267.769602][ T6399] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.007440][ T7331] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 268.015547][ T7331] overlayfs: failed to set xattr on upper [ 268.065647][ T7331] overlayfs: ...falling back to redirect_dir=nofollow. [ 268.073007][ T5980] i2c i2c-1: failure reading functionality [ 268.077605][ T5980] i2c i2c-1: connected i2c-tiny-usb device [ 268.102706][ T7331] overlayfs: ...falling back to index=off. [ 268.108931][ T7331] overlayfs: ...falling back to uuid=null. [ 268.133444][ T7331] overlayfs: maximum fs stacking depth exceeded [ 268.134376][ T5980] usb 3-1: USB disconnect, device number 2 [ 268.183317][ T769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.430146][ T769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.048863][ T6438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.250464][ T6438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.246851][ T7363] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 275.026995][ T5873] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.045951][ T5873] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.056709][ T5873] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.064835][ T5873] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.073254][ T5873] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.321433][ T7383] overlayfs: missing 'workdir' [ 275.329422][ T6438] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.849958][ T6438] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.706330][ T5980] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 276.804960][ T30] audit: type=1800 audit(1756358116.089:7): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.339" name="/newroot/54/bus/#326//deleted" dev="tmpfs" ino=326 res=0 errno=0 [ 276.866738][ T7379] lo speed is unknown, defaulting to 1000 [ 276.896616][ T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 277.026042][ T5980] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 277.035155][ T5980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.113907][ T43] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 277.137824][ T5980] usb 4-1: Product: syz [ 277.142129][ T5980] usb 4-1: Manufacturer: syz [ 277.327436][ T5873] Bluetooth: hci5: command tx timeout [ 277.928671][ T7415] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 278.201637][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.218055][ T6438] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.231478][ T5980] usb 4-1: SerialNumber: syz [ 278.243172][ T30] audit: type=1800 audit(1756358117.529:8): pid=7392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.336" name="/newroot/58/bus/#343//deleted" dev="tmpfs" ino=343 res=0 errno=0 [ 278.277068][ T43] usb 1-1: Product: syz [ 278.281262][ T43] usb 1-1: Manufacturer: syz [ 278.293555][ T43] usb 1-1: SerialNumber: syz [ 278.301843][ T5980] usb 4-1: config 0 descriptor?? [ 278.315018][ T5980] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 002 [ 278.323968][ T43] usb 1-1: config 0 descriptor?? [ 278.340802][ T43] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 003 [ 278.527208][ T5980] (null): failure setting delay to 10us [ 278.626256][ T5980] i2c-tiny-usb 4-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 278.682166][ T5980] usb 4-1: USB disconnect, device number 2 [ 279.363445][ T43] i2c i2c-1: failure reading functionality [ 279.406319][ T5873] Bluetooth: hci5: command tx timeout [ 279.833713][ T6438] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.899401][ T43] i2c i2c-1: connected i2c-tiny-usb device [ 279.985968][ T43] usb 1-1: USB disconnect, device number 3 [ 280.103716][ T7433] loop1: detected capacity change from 0 to 24 [ 280.131935][ T7433] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 280.268174][ T7433] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 280.400394][ T7433] fuse: Unknown parameter '0xffffffffffffffff' [ 280.714267][ T7443] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 281.412025][ T7451] qnx6: unable to read the first superblock [ 281.476387][ T5873] Bluetooth: hci5: command tx timeout [ 282.421418][ T7459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.355'. [ 283.091686][ T43] libceph: connect (1)[c::]:6789 error -101 [ 283.158263][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 283.760980][ T7463] ceph: No mds server is up or the cluster is laggy [ 283.768046][ T5873] Bluetooth: hci5: command tx timeout [ 284.177165][ T5980] libceph: connect (1)[c::]:6789 error -101 [ 284.183256][ T5980] libceph: mon0 (1)[c::]:6789 connect error [ 284.585489][ T7488] netlink: 64 bytes leftover after parsing attributes in process `syz.2.360'. [ 284.717953][ T43] libceph: connect (1)[c::]:6789 error -101 [ 284.804151][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 284.809740][ T7379] chnl_net:caif_netlink_parms(): no params data found [ 285.930684][ T6438] bridge_slave_1: left allmulticast mode [ 285.981793][ T6438] bridge_slave_1: left promiscuous mode [ 286.041658][ T6438] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.089426][ T6438] bridge_slave_0: left allmulticast mode [ 286.107684][ T6438] bridge_slave_0: left promiscuous mode [ 286.134446][ T6438] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.545049][ T6438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.562020][ T6438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.574412][ T6438] bond0 (unregistering): Released all slaves [ 291.611627][ T7567] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.591053][ T7379] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.601111][ T7379] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.638007][ T7379] bridge_slave_0: entered allmulticast mode [ 292.703913][ T7379] bridge_slave_0: entered promiscuous mode [ 292.767284][ T7379] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.793361][ T7580] overlayfs: missing 'lowerdir' [ 292.795037][ T7379] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.837599][ T7379] bridge_slave_1: entered allmulticast mode [ 292.859087][ T7379] bridge_slave_1: entered promiscuous mode [ 293.367964][ T7379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.445168][ T7379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.871819][ T6438] hsr_slave_0: left promiscuous mode [ 295.889272][ T6438] hsr_slave_1: left promiscuous mode [ 295.895717][ T6438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.904565][ T6438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.913248][ T6438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.318877][ T6438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.530830][ T7610] ceph: No mds server is up or the cluster is laggy [ 296.639890][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 296.740155][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 296.791003][ T6438] veth1_macvtap: left promiscuous mode [ 296.843609][ T6438] veth0_macvtap: left promiscuous mode [ 296.938456][ T6438] veth1_vlan: left promiscuous mode [ 296.958194][ T6438] veth0_vlan: left promiscuous mode [ 297.942792][ T7630] qnx6: unable to read the first superblock [ 298.147986][ T7631] futex_wake_op: syz.4.393 tries to shift op by 144; fix this program [ 298.759206][ T7635] overlayfs: missing 'lowerdir' [ 301.158852][ T6438] team0 (unregistering): Port device team_slave_1 removed [ 301.240018][ T6438] team0 (unregistering): Port device team_slave_0 removed [ 301.990574][ T7379] team0: Port device team_slave_0 added [ 302.109952][ T7379] team0: Port device team_slave_1 added [ 302.767232][ T7658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.122840][ T7379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.146539][ T7379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.376334][ T7379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.397519][ T7379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.405242][ T7379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.432997][ T7379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.605920][ T7379] hsr_slave_0: entered promiscuous mode [ 305.802616][ T7379] hsr_slave_1: entered promiscuous mode [ 305.817010][ T7379] debugfs: 'hsr0' already exists in 'hsr' [ 305.823027][ T7379] Cannot create hsr debugfs directory [ 306.536219][ T5861] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 307.518741][ T30] audit: type=1800 audit(1756358146.809:9): pid=7694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.406" name="/newroot/69/bus/#411//deleted" dev="tmpfs" ino=411 res=0 errno=0 [ 307.956521][ T5861] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 308.003551][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.120514][ T5861] usb 4-1: Product: syz [ 308.124717][ T5861] usb 4-1: Manufacturer: syz [ 308.191070][ T5861] usb 4-1: SerialNumber: syz [ 308.237176][ T5861] usb 4-1: config 0 descriptor?? [ 308.289050][ T5861] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 003 [ 308.882690][ T7723] netlink: 48 bytes leftover after parsing attributes in process `syz.1.412'. [ 309.527066][ T5861] i2c i2c-1: failure reading functionality [ 309.595228][ T5861] i2c i2c-1: connected i2c-tiny-usb device [ 309.620087][ T5861] usb 4-1: USB disconnect, device number 3 [ 311.328625][ T7379] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 312.319344][ T7379] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 315.145895][ T7749] qnx6: unable to read the first superblock [ 315.243483][ T7749] futex_wake_op: syz.1.418 tries to shift op by 144; fix this program [ 316.503235][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.523403][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.629157][ T7379] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 317.358825][ T7379] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 320.112145][ T7379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.217988][ T7379] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.300254][ T6399] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.307516][ T6399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.433374][ T6450] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.440558][ T6450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.579052][ T7793] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 321.872508][ T7791] kexec: Could not allocate control_code_buffer [ 322.366168][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'. [ 324.795680][ T7379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.710135][ T7860] netlink: 20 bytes leftover after parsing attributes in process `syz.1.438'. [ 329.817760][ T7379] veth0_vlan: entered promiscuous mode [ 330.139157][ T7379] veth1_vlan: entered promiscuous mode [ 330.359312][ T7379] veth0_macvtap: entered promiscuous mode [ 330.387739][ T7379] veth1_macvtap: entered promiscuous mode [ 330.563299][ T7379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.638416][ T7379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.693229][ T769] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.793119][ T769] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.972862][ T769] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.175768][ T769] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.548821][ T5865] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 333.561584][ T5865] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 333.572966][ T5865] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 333.583763][ T5865] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 333.591558][ T5865] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 333.972309][ T7896] qnx6: unable to read the first superblock [ 334.053014][ T7896] futex_wake_op: syz.4.446 tries to shift op by 144; fix this program [ 334.735897][ T7891] lo speed is unknown, defaulting to 1000 [ 335.876843][ T5865] Bluetooth: hci6: command tx timeout [ 337.966168][ T5865] Bluetooth: hci6: command tx timeout [ 338.418773][ T59] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.320171][ T59] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.041512][ T5865] Bluetooth: hci6: command tx timeout [ 341.385559][ T59] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.799328][ T59] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.134577][ T5865] Bluetooth: hci6: command tx timeout [ 342.401936][ T7891] chnl_net:caif_netlink_parms(): no params data found [ 343.517378][ T7965] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 343.611599][ T7965] overlayfs: failed to set xattr on upper [ 343.624066][ T7965] overlayfs: ...falling back to redirect_dir=nofollow. [ 343.632196][ T7965] overlayfs: ...falling back to index=off. [ 343.640886][ T7965] overlayfs: ...falling back to uuid=null. [ 343.646784][ T7965] overlayfs: maximum fs stacking depth exceeded [ 343.983193][ T7970] qnx6: unable to read the first superblock [ 344.042735][ T7970] futex_wake_op: syz.2.463 tries to shift op by 144; fix this program [ 347.522144][ T7891] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.564190][ T7891] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.612486][ T7891] bridge_slave_0: entered allmulticast mode [ 347.645778][ T7891] bridge_slave_0: entered promiscuous mode [ 347.735586][ T7891] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.941149][ T7891] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.736535][ T7891] bridge_slave_1: entered allmulticast mode [ 348.745783][ T7891] bridge_slave_1: entered promiscuous mode [ 348.777576][ T7993] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 350.490500][ T7891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.637144][ T7891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.616386][ T59] bridge_slave_1: left allmulticast mode [ 351.622099][ T59] bridge_slave_1: left promiscuous mode [ 351.920987][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.133544][ T59] bridge_slave_0: left allmulticast mode [ 352.229698][ T59] bridge_slave_0: left promiscuous mode [ 352.235658][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.066654][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.084133][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.094750][ T59] bond0 (unregistering): Released all slaves [ 356.375048][ T8052] kexec: Could not allocate control_code_buffer [ 356.480321][ T7891] team0: Port device team_slave_0 added [ 357.100926][ T7891] team0: Port device team_slave_1 added [ 358.106510][ T59] hsr_slave_0: left promiscuous mode [ 358.739139][ T59] hsr_slave_1: left promiscuous mode [ 358.941839][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.056392][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.155698][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.467561][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.935141][ T8092] siw: device registration error -23 [ 361.392429][ T59] veth1_macvtap: left promiscuous mode [ 361.493224][ T59] veth0_macvtap: left promiscuous mode [ 361.504239][ T8091] binder: 8080:8091 ioctl c0306201 200000000540 returned -22 [ 361.607768][ T59] veth1_vlan: left promiscuous mode [ 361.700755][ T59] veth0_vlan: left promiscuous mode [ 367.061993][ T59] team0 (unregistering): Port device team_slave_1 removed [ 367.108622][ T59] team0 (unregistering): Port device team_slave_0 removed [ 367.951544][ T8120] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 369.687710][ T8142] siw: device registration error -23 [ 370.404734][ T7891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.510129][ T7891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.722119][ T7891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.758108][ T7891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.896154][ T7891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.288696][ T7891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.081492][ T7891] hsr_slave_0: entered promiscuous mode [ 373.208929][ T7891] hsr_slave_1: entered promiscuous mode [ 373.269638][ T7891] debugfs: 'hsr0' already exists in 'hsr' [ 373.275434][ T7891] Cannot create hsr debugfs directory [ 377.881179][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.888895][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.204056][ T7891] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 380.363193][ T7891] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 382.063013][ T7891] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 382.286796][ T7891] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 383.258211][ T8249] futex_wake_op: syz.3.518 tries to shift op by 144; fix this program [ 386.040115][ T7891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.153078][ T7891] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.795635][ T6452] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.802829][ T6452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.876915][ T6452] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.884109][ T6452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.866766][ T8296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.281562][ T8301] netlink: 32 bytes leftover after parsing attributes in process `syz.2.528'. [ 390.248759][ T7891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.991598][ T8319] netlink: 44 bytes leftover after parsing attributes in process `syz.1.530'. [ 392.338395][ T8331] netlink: 56 bytes leftover after parsing attributes in process `syz.0.532'. [ 395.651554][ T8349] futex_wake_op: syz.0.535 tries to shift op by 144; fix this program [ 396.395567][ T8362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 399.858036][ T5873] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 399.866723][ T5873] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 399.876761][ T5873] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 399.885649][ T5873] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 399.893541][ T5873] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 401.107913][ T8390] netlink: 32 bytes leftover after parsing attributes in process `syz.3.544'. [ 402.036363][ T5865] Bluetooth: hci5: command tx timeout [ 402.310494][ T8379] lo speed is unknown, defaulting to 1000 [ 404.318303][ T5865] Bluetooth: hci5: command tx timeout [ 406.356549][ T5873] Bluetooth: hci5: command tx timeout [ 406.985968][ T8429] netlink: 56 bytes leftover after parsing attributes in process `syz.4.554'. [ 407.412246][ T8435] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 407.680583][ T6517] bridge_slave_1: left allmulticast mode [ 408.111737][ T6517] bridge_slave_1: left promiscuous mode [ 408.136479][ T6517] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.436221][ T5873] Bluetooth: hci5: command tx timeout [ 408.608269][ T6517] bridge_slave_0: left allmulticast mode [ 408.613946][ T6517] bridge_slave_0: left promiscuous mode [ 408.837840][ T6517] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.718982][ T8453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 411.343179][ T6517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.373370][ T6517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.419598][ T6517] bond0 (unregistering): Released all slaves [ 411.502440][ T8379] chnl_net:caif_netlink_parms(): no params data found [ 413.021743][ T6517] hsr_slave_0: left promiscuous mode [ 413.106342][ T6517] hsr_slave_1: left promiscuous mode [ 413.234106][ T6517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.366518][ T8491] netlink: 48 bytes leftover after parsing attributes in process `syz.4.568'. [ 413.850573][ T6517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.195346][ T8497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 415.103599][ T6517] team0 (unregistering): Port device team_slave_1 removed [ 415.164861][ T6517] team0 (unregistering): Port device team_slave_0 removed [ 415.903166][ T8509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.573'. [ 415.972187][ T8492] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 416.544271][ T8379] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.654815][ T8379] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.678369][ T8379] bridge_slave_0: entered allmulticast mode [ 416.691801][ T8379] bridge_slave_0: entered promiscuous mode [ 416.879732][ T8519] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 416.908140][ T8524] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 417.358452][ T8379] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.371380][ T8522] netlink: 32 bytes leftover after parsing attributes in process `syz.1.576'. [ 417.451096][ T8379] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.500336][ T8379] bridge_slave_1: entered allmulticast mode [ 417.799356][ T8379] bridge_slave_1: entered promiscuous mode [ 419.473027][ T8379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.541432][ T8379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.125589][ T8379] team0: Port device team_slave_0 added [ 420.990049][ T8379] team0: Port device team_slave_1 added [ 422.078353][ T8379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.085329][ T8379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.890793][ T8379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.924824][ T8379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.941367][ T8379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.967344][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.984115][ T8379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.312948][ T8379] hsr_slave_0: entered promiscuous mode [ 423.337912][ T8379] hsr_slave_1: entered promiscuous mode [ 423.353704][ T8379] debugfs: 'hsr0' already exists in 'hsr' [ 423.369384][ T8379] Cannot create hsr debugfs directory [ 425.764890][ T8598] binder: 8595:8598 ioctl c0306201 200000000540 returned -22 [ 427.834510][ T10] Process accounting resumed [ 429.220127][ T8628] siw: device registration error -23 [ 429.948127][ T8635] netlink: 32 bytes leftover after parsing attributes in process `syz.1.599'. [ 432.479382][ T8379] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 432.591060][ T8379] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 432.635162][ T8661] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 432.989009][ T8379] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 433.015109][ T8379] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 434.501529][ T8679] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 434.774028][ T8606] Process accounting resumed [ 435.374654][ T8379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.490552][ T8379] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.504976][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.512174][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.199405][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.206604][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.299534][ T8705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.611'. [ 437.481345][ T8705] netlink: 'syz.1.611': attribute type 7 has an invalid length. [ 437.543341][ T8705] netlink: 'syz.1.611': attribute type 8 has an invalid length. [ 437.556581][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'. [ 438.735745][ T8379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 439.501395][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.508145][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.566453][ T8729] loop1: detected capacity change from 0 to 24 [ 439.593970][ T8729] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 439.689151][ T8729] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 439.771461][ T8729] fuse: Unknown parameter '0xffffffffffffffff' [ 440.074786][ T8737] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 442.584247][ T5980] libceph: connect (1)[c::]:6789 error -101 [ 442.594307][ T8379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.644005][ T5980] libceph: mon0 (1)[c::]:6789 connect error [ 442.671036][ T8749] ceph: No mds server is up or the cluster is laggy [ 445.637461][ T8779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 448.909487][ T8804] loop0: detected capacity change from 0 to 24 [ 448.956981][ T8804] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 449.037168][ T8804] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 449.141857][ T8379] veth0_vlan: entered promiscuous mode [ 449.165891][ T8804] fuse: Unknown parameter '0xffffffffffffffff' [ 449.362025][ T8379] veth1_vlan: entered promiscuous mode [ 449.469225][ T8812] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 450.118415][ T8379] veth0_macvtap: entered promiscuous mode [ 450.368464][ T8379] veth1_macvtap: entered promiscuous mode [ 450.798516][ T8379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.019441][ T8379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.145657][ T6517] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.186086][ T6517] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.419260][ T7989] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.392917][ T7989] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.164382][ T8075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.226204][ T8075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.673376][ T6431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.760075][ T6431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.296775][ T8860] binder: BINDER_SET_CONTEXT_MGR already set [ 456.303128][ T8860] binder: 8858:8860 ioctl 4018620d 200000000040 returned -16 [ 463.101716][ T8895] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 464.575183][ T8908] siw: device registration error -23 [ 464.586314][ T5865] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 464.599991][ T5865] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 464.613936][ T5865] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 464.626816][ T5865] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 464.663727][ T5865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 466.200451][ T7989] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.557449][ T8905] lo speed is unknown, defaulting to 1000 [ 466.926220][ T5865] Bluetooth: hci5: command tx timeout [ 468.049727][ T7989] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.016142][ T5865] Bluetooth: hci5: command tx timeout [ 470.816832][ T7989] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.076504][ T5865] Bluetooth: hci5: command tx timeout [ 472.981612][ T8987] ntfs3(nullb0): Primary boot signature is not NTFS. [ 472.989244][ T8987] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 473.156699][ T5865] Bluetooth: hci5: command tx timeout [ 473.509669][ T7989] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.585783][ T8976] syz.2.666: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 475.631751][ T8976] CPU: 0 UID: 0 PID: 8976 Comm: syz.2.666 Not tainted syzkaller #0 PREEMPT(full) [ 475.631784][ T8976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 475.631795][ T8976] Call Trace: [ 475.631802][ T8976] [ 475.631810][ T8976] dump_stack_lvl+0x189/0x250 [ 475.631839][ T8976] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 475.631867][ T8976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.631889][ T8976] ? __pfx__printk+0x10/0x10 [ 475.631915][ T8976] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 475.631936][ T8976] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 475.631959][ T8976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 475.631984][ T8976] warn_alloc+0x214/0x310 [ 475.632027][ T8976] ? __pfx_warn_alloc+0x10/0x10 [ 475.632061][ T8976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 475.632082][ T8976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 475.632102][ T8976] ? __get_vm_area_node+0x28f/0x300 [ 475.632128][ T8976] ? fq_pie_init+0x430/0x840 [ 475.632155][ T8976] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 475.632205][ T8976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 475.632229][ T8976] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 475.632260][ T8976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 475.632280][ T8976] ? rcu_is_watching+0x15/0xb0 [ 475.632299][ T8976] ? fq_pie_init+0x430/0x840 [ 475.632321][ T8976] ? fq_pie_init+0x430/0x840 [ 475.632342][ T8976] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 475.632368][ T8976] ? fq_pie_init+0x430/0x840 [ 475.632391][ T8976] ? tcf_block_get+0x67/0xa0 [ 475.632415][ T8976] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 475.632447][ T8976] fq_pie_init+0x430/0x840 [ 475.632473][ T8976] ? __pfx_fq_pie_init+0x10/0x10 [ 475.632496][ T8976] qdisc_create+0x7ac/0xea0 [ 475.632519][ T8976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 475.632547][ T8976] tc_modify_qdisc+0x1538/0x20e0 [ 475.632570][ T8976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 475.632604][ T8976] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 475.632646][ T8976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 475.632674][ T8976] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 475.632696][ T8976] rtnetlink_rcv_msg+0x77c/0xb70 [ 475.632727][ T8976] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 475.632754][ T8976] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 475.632791][ T8976] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 475.632825][ T8976] netlink_rcv_skb+0x208/0x470 [ 475.632851][ T8976] ? rcu_is_watching+0x15/0xb0 [ 475.632869][ T8976] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 475.632898][ T8976] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 475.632936][ T8976] ? netlink_deliver_tap+0x2e/0x1b0 [ 475.632966][ T8976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 475.632991][ T8976] netlink_unicast+0x82f/0x9e0 [ 475.633027][ T8976] ? __pfx_netlink_unicast+0x10/0x10 [ 475.633054][ T8976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 475.633074][ T8976] ? skb_put+0x11b/0x210 [ 475.633090][ T8976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 475.633115][ T8976] netlink_sendmsg+0x805/0xb30 [ 475.633152][ T8976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.633187][ T8976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 475.633207][ T8976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 475.633228][ T8976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.633257][ T8976] __sock_sendmsg+0x21c/0x270 [ 475.633284][ T8976] ____sys_sendmsg+0x505/0x830 [ 475.633309][ T8976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.633337][ T8976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 475.633356][ T8976] ? import_iovec+0x74/0xa0 [ 475.633382][ T8976] ___sys_sendmsg+0x21f/0x2a0 [ 475.633403][ T8976] ? __pfx____sys_sendmsg+0x10/0x10 [ 475.633430][ T8976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 475.633476][ T8976] ? __fget_files+0x2a/0x420 [ 475.633502][ T8976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 475.633522][ T8976] ? __fget_files+0x3a0/0x420 [ 475.633559][ T8976] __x64_sys_sendmsg+0x19b/0x260 [ 475.633582][ T8976] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 475.633611][ T8976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 475.633631][ T8976] ? rcu_is_watching+0x15/0xb0 [ 475.633653][ T8976] ? do_syscall_64+0xbe/0x3b0 [ 475.633685][ T8976] do_syscall_64+0xfa/0x3b0 [ 475.633714][ T8976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.633730][ T8976] ? asm_sysvec_call_function_single+0x1a/0x20 [ 475.633753][ T8976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.633771][ T8976] RIP: 0033:0x7f9d1658ebe9 [ 475.633787][ T8976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.633801][ T8976] RSP: 002b:00007f9d173d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.633820][ T8976] RAX: ffffffffffffffda RBX: 00007f9d167b6090 RCX: 00007f9d1658ebe9 [ 475.633833][ T8976] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000009 [ 475.633844][ T8976] RBP: 00007f9d16611e19 R08: 0000000000000000 R09: 0000000000000000 [ 475.633855][ T8976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.633866][ T8976] R13: 00007f9d167b6128 R14: 00007f9d167b6090 R15: 00007ffc1c73ff78 [ 475.633894][ T8976] [ 475.633982][ T8976] Mem-Info: [ 476.686894][ T8976] active_anon:7475 inactive_anon:0 isolated_anon:0 [ 476.686894][ T8976] active_file:3792 inactive_file:39985 isolated_file:0 [ 476.686894][ T8976] unevictable:768 dirty:180 writeback:0 [ 476.686894][ T8976] slab_reclaimable:11119 slab_unreclaimable:103735 [ 476.686894][ T8976] mapped:40044 shmem:1362 pagetables:1369 [ 476.686894][ T8976] sec_pagetables:0 bounce:0 [ 476.686894][ T8976] kernel_misc_reclaimable:0 [ 476.686894][ T8976] free:1299095 free_pcp:14937 free_cma:0 [ 476.831209][ T8976] Node 0 active_anon:30100kB inactive_anon:0kB active_file:15168kB inactive_file:159740kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:160176kB dirty:720kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13732kB pagetables:5436kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 477.259695][ T8976] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 477.375506][ T8976] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 477.577080][ T8976] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 477.613984][ T8976] Node 0 DMA32 free:1295084kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26592kB inactive_anon:0kB active_file:15168kB inactive_file:158176kB unevictable:1536kB writepending:672kB present:3129332kB managed:2557452kB mlocked:0kB bounce:0kB free_pcp:39868kB local_pcp:24276kB free_cma:0kB [ 478.153637][ T8976] lowmem_reserve[]: 0 0 1 1 1 [ 478.159015][ T8976] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 478.366952][ T8976] lowmem_reserve[]: 0 0 0 0 0 [ 478.372445][ T8976] Node 1 Normal free:3886904kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23288kB local_pcp:9336kB free_cma:0kB [ 478.404141][ T8976] lowmem_reserve[]: 0 0 0 0 0 [ 478.413462][ T8976] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 479.777705][ T8976] Node 0 DMA32: 983*4kB (UM) 608*8kB (UM) 239*16kB (UME) 2530*32kB (UME) 1191*64kB (UME) 271*128kB (UM) 31*256kB (UM) 6*512kB (ME) 3*1024kB (ME) 4*2048kB (UME) 263*4096kB (M) = 1304012kB [ 479.846545][ T9027] loop1: detected capacity change from 0 to 24 [ 479.854779][ T9027] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 479.864918][ T9027] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 479.888309][ T9027] fuse: Unknown parameter '0xffffffffffffffff' [ 480.073348][ T8976] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 480.087280][ T8976] Node 1 Normal: 190*4kB (UE) 43*8kB (UME) 46*16kB (UME) 75*32kB (UME) 25*64kB (UME) 9*128kB (UME) 3*256kB (UM) 3*512kB (ME) 1*1024kB (M) 1*2048kB (E) 946*4096kB (M) = 3887184kB [ 480.337766][ T9032] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 481.086423][ T8976] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 481.129062][ T8976] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 481.523929][ T8976] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 481.535103][ T8976] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 481.560511][ T8976] 48035 total pagecache pages [ 481.576185][ T8976] 0 pages in swap cache [ 481.580346][ T8976] Free swap = 124996kB [ 481.584476][ T8976] Total swap = 124996kB [ 481.819624][ T8976] 2097051 pages RAM [ 481.830603][ T8976] 0 pages HighMem/MovableOnly [ 481.842925][ T8976] 425662 pages reserved [ 481.847454][ T8976] 0 pages cma reserved [ 481.910471][ T5980] libceph: connect (1)[c::]:6789 error -101 [ 481.929768][ T5980] libceph: mon0 (1)[c::]:6789 connect error [ 482.254494][ T43] libceph: connect (1)[c::]:6789 error -101 [ 482.281679][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 482.355866][ T9047] mkiss: ax0: crc mode is auto. [ 482.404183][ T9052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.683'. [ 482.437022][ T9043] ceph: No mds server is up or the cluster is laggy [ 484.437404][ T5873] Bluetooth: hci5: command 0x0405 tx timeout [ 485.811617][ T7989] bridge_slave_1: left allmulticast mode [ 485.825629][ T7989] bridge_slave_1: left promiscuous mode [ 485.865277][ T7989] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.095515][ T7989] bridge_slave_0: left allmulticast mode [ 487.163394][ T7989] bridge_slave_0: left promiscuous mode [ 487.176929][ T7989] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.059447][ T9078] Falling back ldisc for ttyprintk. [ 489.514841][ T9095] loop3: detected capacity change from 0 to 24 [ 489.563921][ T9095] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 489.598290][ T9095] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 489.633075][ T9095] fuse: Unknown parameter '0xffffffffffffffff' [ 489.831361][ T9084] Falling back ldisc for ttyprintk. [ 489.935810][ T9097] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 490.667790][ T7989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.756283][ T7989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.828441][ T7989] bond0 (unregistering): Released all slaves [ 491.081533][ T9086] warn_alloc: 1 callbacks suppressed [ 491.081547][ T9086] syz.2.691: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 491.104359][ T9086] CPU: 1 UID: 0 PID: 9086 Comm: syz.2.691 Not tainted syzkaller #0 PREEMPT(full) [ 491.104380][ T9086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 491.104391][ T9086] Call Trace: [ 491.104398][ T9086] [ 491.104405][ T9086] dump_stack_lvl+0x189/0x250 [ 491.104434][ T9086] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.104457][ T9086] ? __pfx__printk+0x10/0x10 [ 491.104483][ T9086] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 491.104504][ T9086] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 491.104526][ T9086] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.104546][ T9086] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 491.104570][ T9086] warn_alloc+0x214/0x310 [ 491.104603][ T9086] ? __pfx_warn_alloc+0x10/0x10 [ 491.104638][ T9086] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.104659][ T9086] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.104679][ T9086] ? __get_vm_area_node+0x28f/0x300 [ 491.104704][ T9086] ? fq_pie_init+0x430/0x840 [ 491.104731][ T9086] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 491.104779][ T9086] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.104803][ T9086] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 491.104834][ T9086] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.104853][ T9086] ? rcu_is_watching+0x15/0xb0 [ 491.104872][ T9086] ? fq_pie_init+0x430/0x840 [ 491.104894][ T9086] ? fq_pie_init+0x430/0x840 [ 491.104914][ T9086] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 491.104941][ T9086] ? fq_pie_init+0x430/0x840 [ 491.104963][ T9086] ? tcf_block_get+0x67/0xa0 [ 491.104988][ T9086] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 491.105023][ T9086] fq_pie_init+0x430/0x840 [ 491.105048][ T9086] ? __pfx_fq_pie_init+0x10/0x10 [ 491.105071][ T9086] qdisc_create+0x7ac/0xea0 [ 491.105094][ T9086] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.105121][ T9086] tc_modify_qdisc+0x1538/0x20e0 [ 491.105144][ T9086] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.105177][ T9086] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 491.105218][ T9086] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.105245][ T9086] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 491.105267][ T9086] rtnetlink_rcv_msg+0x77c/0xb70 [ 491.105298][ T9086] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 491.105324][ T9086] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 491.105350][ T9086] ? ref_tracker_free+0x63a/0x7d0 [ 491.105376][ T9086] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.105395][ T9086] ? __asan_memcpy+0x40/0x70 [ 491.105416][ T9086] ? __pfx_ref_tracker_free+0x10/0x10 [ 491.105439][ T9086] ? __skb_clone+0x63/0x7a0 [ 491.105468][ T9086] netlink_rcv_skb+0x208/0x470 [ 491.105496][ T9086] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 491.105525][ T9086] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 491.105562][ T9086] ? netlink_deliver_tap+0x2e/0x1b0 [ 491.105597][ T9086] netlink_unicast+0x82f/0x9e0 [ 491.105629][ T9086] ? __pfx_netlink_unicast+0x10/0x10 [ 491.105656][ T9086] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.105676][ T9086] ? skb_put+0x11b/0x210 [ 491.105691][ T9086] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.105715][ T9086] netlink_sendmsg+0x805/0xb30 [ 491.105751][ T9086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.105782][ T9086] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.105801][ T9086] ? aa_sock_msg_perm+0xf1/0x1d0 [ 491.105819][ T9086] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.105839][ T9086] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.105860][ T9086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.105889][ T9086] __sock_sendmsg+0x21c/0x270 [ 491.105916][ T9086] ____sys_sendmsg+0x505/0x830 [ 491.105940][ T9086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 491.105971][ T9086] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.105999][ T9086] ? import_iovec+0x74/0xa0 [ 491.106035][ T9086] ___sys_sendmsg+0x21f/0x2a0 [ 491.106057][ T9086] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.106083][ T9086] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.106128][ T9086] ? __fget_files+0x2a/0x420 [ 491.106154][ T9086] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.106173][ T9086] ? __fget_files+0x3a0/0x420 [ 491.106210][ T9086] __x64_sys_sendmsg+0x19b/0x260 [ 491.106232][ T9086] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 491.106260][ T9086] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.106280][ T9086] ? rcu_is_watching+0x15/0xb0 [ 491.106303][ T9086] ? do_syscall_64+0xbe/0x3b0 [ 491.106335][ T9086] do_syscall_64+0xfa/0x3b0 [ 491.106360][ T9086] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.106385][ T9086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.106402][ T9086] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.106422][ T9086] ? exc_page_fault+0x9f/0xf0 [ 491.106449][ T9086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.106466][ T9086] RIP: 0033:0x7f9d1658ebe9 [ 491.106482][ T9086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.106496][ T9086] RSP: 002b:00007f9d173f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.106513][ T9086] RAX: ffffffffffffffda RBX: 00007f9d167b5fa0 RCX: 00007f9d1658ebe9 [ 491.106526][ T9086] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000009 [ 491.106538][ T9086] RBP: 00007f9d16611e19 R08: 0000000000000000 R09: 0000000000000000 [ 491.106549][ T9086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.106559][ T9086] R13: 00007f9d167b6038 R14: 00007f9d167b5fa0 R15: 00007ffc1c73ff78 [ 491.106587][ T9086] [ 491.616205][ T9086] Mem-Info: [ 491.619326][ T9086] active_anon:8778 inactive_anon:0 isolated_anon:0 [ 491.619326][ T9086] active_file:3792 inactive_file:39991 isolated_file:0 [ 491.619326][ T9086] unevictable:1794 dirty:180 writeback:0 [ 491.619326][ T9086] slab_reclaimable:11219 slab_unreclaimable:104185 [ 491.619326][ T9086] mapped:39037 shmem:1366 pagetables:1324 [ 491.619326][ T9086] sec_pagetables:0 bounce:0 [ 491.619326][ T9086] kernel_misc_reclaimable:0 [ 491.619326][ T9086] free:1296913 free_pcp:14167 free_cma:0 [ 491.665198][ T9086] Node 0 active_anon:35112kB inactive_anon:0kB active_file:15168kB inactive_file:159764kB unevictable:5640kB isolated(anon):0kB isolated(file):0kB mapped:156148kB dirty:720kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:13588kB pagetables:5156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 491.697718][ T9086] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 491.727581][ T9086] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 491.756376][ T9086] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 491.762136][ T9086] Node 0 DMA32 free:1285032kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35064kB inactive_anon:0kB active_file:15168kB inactive_file:158200kB unevictable:5640kB writepending:720kB present:3129332kB managed:2557452kB mlocked:4104kB bounce:0kB free_pcp:33704kB local_pcp:16544kB free_cma:0kB [ 491.795210][ T9086] lowmem_reserve[]: 0 0 1 1 1 [ 491.799954][ T9086] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 491.828911][ T9086] lowmem_reserve[]: 0 0 0 0 0 [ 491.833616][ T9086] Node 1 Normal free:3887236kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22956kB local_pcp:9196kB free_cma:0kB [ 491.864786][ T9086] lowmem_reserve[]: 0 0 0 0 0 [ 491.869520][ T9086] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 491.882234][ T9086] Node 0 DMA32: 148*4kB (U) 342*8kB (UM) 211*16kB (UM) 2376*32kB (UM) 1175*64kB (UM) 269*128kB (UME) 32*256kB (UME) 6*512kB (UM) 4*1024kB (UME) 2*2048kB (ME) 262*4096kB (M) = 1284976kB [ 491.901174][ T9086] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 491.913482][ T9086] Node 1 Normal: 127*4kB (UE) 43*8kB (UME) 31*16kB (UME) 84*32kB (UME) 29*64kB (UME) 9*128kB (UME) 3*256kB (UM) 3*512kB (ME) 1*1024kB (M) 1*2048kB (E) 946*4096kB (M) = 3887236kB [ 491.931283][ T9086] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 491.940839][ T9086] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 491.950137][ T9086] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 491.959692][ T9086] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 491.968978][ T9086] 45145 total pagecache pages [ 491.973629][ T9086] 0 pages in swap cache [ 491.977787][ T9086] Free swap = 124996kB [ 491.981917][ T9086] Total swap = 124996kB [ 491.986077][ T9086] 2097051 pages RAM [ 491.989861][ T9086] 0 pages HighMem/MovableOnly [ 491.995051][ T9086] 425662 pages reserved [ 491.999208][ T9086] 0 pages cma reserved [ 492.099329][ T8905] chnl_net:caif_netlink_parms(): no params data found [ 492.575562][ T119] libceph: connect (1)[c::]:6789 error -101 [ 492.587744][ T119] libceph: mon0 (1)[c::]:6789 connect error [ 492.929156][ T119] libceph: connect (1)[c::]:6789 error -101 [ 493.063115][ T119] libceph: mon0 (1)[c::]:6789 connect error [ 493.106456][ T9105] ceph: No mds server is up or the cluster is laggy [ 493.643978][ T9118] netlink: 20 bytes leftover after parsing attributes in process `syz.2.697'. [ 496.586130][ T8905] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.593306][ T8905] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.782704][ T8905] bridge_slave_0: entered allmulticast mode [ 497.054250][ T8905] bridge_slave_0: entered promiscuous mode [ 497.132314][ T9153] ntfs3(nullb0): Primary boot signature is not NTFS. [ 497.140136][ T9153] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 497.835674][ T9149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.843818][ T9149] batadv_slave_0: entered promiscuous mode [ 499.119658][ T8905] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.193366][ T8905] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.264544][ T8905] bridge_slave_1: entered allmulticast mode [ 499.336198][ T8905] bridge_slave_1: entered promiscuous mode [ 499.811622][ T8905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.375115][ T8905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.799062][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.805392][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.148873][ T7989] hsr_slave_0: left promiscuous mode [ 501.176247][ T7989] hsr_slave_1: left promiscuous mode [ 501.376890][ T7989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.384654][ T7989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.400323][ T7989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.510019][ T7989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.715782][ T7989] veth1_macvtap: left promiscuous mode [ 501.754267][ T7989] veth0_macvtap: left promiscuous mode [ 501.770229][ T7989] veth1_vlan: left promiscuous mode [ 501.777566][ T7989] veth0_vlan: left promiscuous mode [ 501.876964][ T9175] Falling back ldisc for ttyprintk. [ 505.600169][ T7989] team0 (unregistering): Port device team_slave_1 removed [ 505.678722][ T7989] team0 (unregistering): Port device team_slave_0 removed [ 506.287801][ T8905] team0: Port device team_slave_0 added [ 506.461589][ T8905] team0: Port device team_slave_1 added [ 506.663537][ T9208] loop4: detected capacity change from 0 to 24 [ 506.708190][ T9208] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 506.753269][ T9208] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 507.288616][ T9208] fuse: Unknown parameter '0xffffffffffffffff' [ 507.481944][ T8905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.489038][ T8905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.594892][ T9217] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 508.021750][ T8905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.035032][ T8905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.042099][ T8905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.072976][ T8905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.397296][ T9224] mkiss: ax0: crc mode is auto. [ 509.421646][ T8905] hsr_slave_0: entered promiscuous mode [ 509.472667][ T8905] hsr_slave_1: entered promiscuous mode [ 509.737306][ T8905] debugfs: 'hsr0' already exists in 'hsr' [ 509.851638][ T8905] Cannot create hsr debugfs directory [ 516.366809][ T9286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 516.518410][ T9292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.526754][ T9292] batadv_slave_0: entered promiscuous mode [ 518.873230][ T5865] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 518.891611][ T5865] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 518.902277][ T5865] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 518.914159][ T5865] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 518.925872][ T5865] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 520.060474][ T49] bridge_slave_1: left allmulticast mode [ 520.309505][ T49] bridge_slave_1: left promiscuous mode [ 520.315278][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.549657][ T49] bridge_slave_0: left allmulticast mode [ 520.576129][ T49] bridge_slave_0: left promiscuous mode [ 520.597734][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.996116][ T5865] Bluetooth: hci6: command tx timeout [ 521.268487][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.454269][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.549991][ T49] bond0 (unregistering): Released all slaves [ 521.863374][ T9310] lo speed is unknown, defaulting to 1000 [ 522.185434][ T49] hsr_slave_0: left promiscuous mode [ 522.439224][ T49] hsr_slave_1: left promiscuous mode [ 522.577337][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.641963][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.114189][ T5865] Bluetooth: hci6: command tx timeout [ 525.156114][ T5865] Bluetooth: hci6: command tx timeout [ 527.253019][ T5865] Bluetooth: hci6: command tx timeout [ 528.071444][ T9393] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 528.505512][ T49] team0 (unregistering): Port device team_slave_1 removed [ 528.642018][ T49] team0 (unregistering): Port device team_slave_0 removed [ 529.197881][ T9384] warn_alloc: 1 callbacks suppressed [ 529.197896][ T9384] syz.2.755: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 529.264232][ T9384] CPU: 1 UID: 0 PID: 9384 Comm: syz.2.755 Not tainted syzkaller #0 PREEMPT(full) [ 529.264262][ T9384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 529.264277][ T9384] Call Trace: [ 529.264286][ T9384] [ 529.264295][ T9384] dump_stack_lvl+0x189/0x250 [ 529.264335][ T9384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.264365][ T9384] ? __pfx__printk+0x10/0x10 [ 529.264401][ T9384] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 529.264430][ T9384] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 529.264460][ T9384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.264489][ T9384] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 529.264521][ T9384] warn_alloc+0x214/0x310 [ 529.264567][ T9384] ? __pfx_warn_alloc+0x10/0x10 [ 529.264613][ T9384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.264641][ T9384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.264668][ T9384] ? __get_vm_area_node+0x28f/0x300 [ 529.264704][ T9384] ? fq_pie_init+0x430/0x840 [ 529.264741][ T9384] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 529.264807][ T9384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.264840][ T9384] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 529.264882][ T9384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.264909][ T9384] ? rcu_is_watching+0x15/0xb0 [ 529.264936][ T9384] ? fq_pie_init+0x430/0x840 [ 529.264965][ T9384] ? fq_pie_init+0x430/0x840 [ 529.264994][ T9384] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 529.265031][ T9384] ? fq_pie_init+0x430/0x840 [ 529.265067][ T9384] ? tcf_block_get+0x67/0xa0 [ 529.265101][ T9384] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 529.265144][ T9384] fq_pie_init+0x430/0x840 [ 529.265180][ T9384] ? __pfx_fq_pie_init+0x10/0x10 [ 529.265212][ T9384] qdisc_create+0x7ac/0xea0 [ 529.265244][ T9384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.265281][ T9384] tc_modify_qdisc+0x1538/0x20e0 [ 529.265313][ T9384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.265358][ T9384] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 529.265414][ T9384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.265453][ T9384] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 529.265483][ T9384] rtnetlink_rcv_msg+0x77c/0xb70 [ 529.265520][ T9384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.265552][ T9384] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 529.265589][ T9384] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 529.265680][ T9384] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 529.265727][ T9384] netlink_rcv_skb+0x208/0x470 [ 529.265761][ T9384] ? rcu_is_watching+0x15/0xb0 [ 529.265786][ T9384] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 529.265825][ T9384] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 529.265875][ T9384] ? netlink_deliver_tap+0x2e/0x1b0 [ 529.265914][ T9384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.265947][ T9384] netlink_unicast+0x82f/0x9e0 [ 529.265982][ T9384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.266022][ T9384] ? __pfx_netlink_unicast+0x10/0x10 [ 529.266062][ T9384] ? __sanitizer_cov_trace_pc+0x5d/0x70 [ 529.266112][ T9384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.266144][ T9384] netlink_sendmsg+0x805/0xb30 [ 529.266179][ T9384] ? lockdep_hardirqs_on+0x9c/0x150 [ 529.266225][ T9384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.266268][ T9384] ? bpf_lsm_socket_sendmsg+0xb/0x20 [ 529.266297][ T9384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.266327][ T9384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.266364][ T9384] __sock_sendmsg+0x21c/0x270 [ 529.266398][ T9384] ____sys_sendmsg+0x505/0x830 [ 529.266423][ T9384] ? __pfx_____sys_sendmsg+0x10/0x10 [ 529.266450][ T9384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.266470][ T9384] ? import_iovec+0x74/0xa0 [ 529.266495][ T9384] ___sys_sendmsg+0x21f/0x2a0 [ 529.266517][ T9384] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.266534][ T9384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.266559][ T9384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.266582][ T9384] ? rcu_is_watching+0x15/0xb0 [ 529.266643][ T9384] ? __fget_files+0x2a/0x420 [ 529.266679][ T9384] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.266706][ T9384] ? __fget_files+0x3a0/0x420 [ 529.266756][ T9384] __x64_sys_sendmsg+0x19b/0x260 [ 529.266787][ T9384] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 529.266836][ T9384] do_syscall_64+0xfa/0x3b0 [ 529.266865][ T9384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.266881][ T9384] ? asm_sysvec_call_function_single+0x1a/0x20 [ 529.266904][ T9384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.266921][ T9384] RIP: 0033:0x7f9d1658ebe9 [ 529.266938][ T9384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.266952][ T9384] RSP: 002b:00007f9d173d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.266969][ T9384] RAX: ffffffffffffffda RBX: 00007f9d167b6090 RCX: 00007f9d1658ebe9 [ 529.266982][ T9384] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000009 [ 529.266994][ T9384] RBP: 00007f9d16611e19 R08: 0000000000000000 R09: 0000000000000000 [ 529.267005][ T9384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.267015][ T9384] R13: 00007f9d167b6128 R14: 00007f9d167b6090 R15: 00007ffc1c73ff78 [ 529.267047][ T9384] [ 529.779395][ T9384] Mem-Info: [ 529.782546][ T9384] active_anon:6846 inactive_anon:0 isolated_anon:0 [ 529.782546][ T9384] active_file:3792 inactive_file:40006 isolated_file:0 [ 529.782546][ T9384] unevictable:768 dirty:112 writeback:0 [ 529.782546][ T9384] slab_reclaimable:11231 slab_unreclaimable:102188 [ 529.782546][ T9384] mapped:37039 shmem:1362 pagetables:1373 [ 529.782546][ T9384] sec_pagetables:0 bounce:0 [ 529.782546][ T9384] kernel_misc_reclaimable:0 [ 529.782546][ T9384] free:1302865 free_pcp:13768 free_cma:0 [ 529.827942][ T9384] Node 0 active_anon:27384kB inactive_anon:0kB active_file:15168kB inactive_file:159824kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:148156kB dirty:448kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13152kB pagetables:5352kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 529.859691][ T9384] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 529.894866][ T9384] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 529.923726][ T9384] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 529.929592][ T9384] Node 0 DMA32 free:1308004kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27336kB inactive_anon:0kB active_file:15168kB inactive_file:158260kB unevictable:1536kB writepending:444kB present:3129332kB managed:2557452kB mlocked:0kB bounce:0kB free_pcp:32252kB local_pcp:20948kB free_cma:0kB [ 529.961854][ T9384] lowmem_reserve[]: 0 0 1 1 1 [ 529.966592][ T9384] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 529.995729][ T9384] lowmem_reserve[]: 0 0 0 0 0 [ 530.005113][ T9384] Node 1 Normal free:3888072kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22172kB local_pcp:8668kB free_cma:0kB [ 530.036269][ T9384] lowmem_reserve[]: 0 0 0 0 0 [ 530.040978][ T9384] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 530.053645][ T9384] Node 0 DMA32: 950*4kB (UM) 619*8kB (UM) 464*16kB (UM) 2498*32kB (UM) 1207*64kB (UM) 318*128kB (UM) 37*256kB (UME) 6*512kB (UM) 4*1024kB (UME) 4*2048kB (UE) 261*4096kB (M) = 1307952kB [ 530.072040][ T9384] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 530.084582][ T9384] Node 1 Normal: 127*4kB (UE) 43*8kB (UME) 46*16kB (UME) 99*32kB (UME) 30*64kB (UME) 9*128kB (UME) 3*256kB (UM) 3*512kB (ME) 1*1024kB (M) 1*2048kB (E) 946*4096kB (M) = 3888020kB [ 530.102617][ T9384] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 530.112171][ T9384] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 530.121694][ T9384] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 530.131245][ T9384] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 530.140532][ T9384] 45156 total pagecache pages [ 530.145182][ T9384] 0 pages in swap cache [ 530.149348][ T9384] Free swap = 124996kB [ 530.153475][ T9384] Total swap = 124996kB [ 530.157635][ T9384] 2097051 pages RAM [ 530.161426][ T9384] 0 pages HighMem/MovableOnly [ 530.166099][ T9384] 425662 pages reserved [ 530.170224][ T9384] 0 pages cma reserved [ 532.285832][ T30] audit: type=1326 audit(1756358370.799:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9420 comm="syz.4.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10edd8ebe9 code=0x7ffc0000 [ 532.711646][ T30] audit: type=1326 audit(1756358370.799:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9420 comm="syz.4.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10edd8ebe9 code=0x7ffc0000 [ 532.806528][ T30] audit: type=1326 audit(1756358370.809:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9420 comm="syz.4.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f10edd8ebe9 code=0x7ffc0000 [ 532.828627][ C1] vkms_vblank_simulate: vblank timer overrun [ 532.835073][ T9435] netlink: 32 bytes leftover after parsing attributes in process `syz.4.763'. [ 532.855362][ T30] audit: type=1326 audit(1756358370.809:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9420 comm="syz.4.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10edd8ebe9 code=0x7ffc0000 [ 532.877989][ C1] vkms_vblank_simulate: vblank timer overrun [ 533.220710][ T30] audit: type=1326 audit(1756358370.809:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9420 comm="syz.4.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10edd8ebe9 code=0x7ffc0000 [ 533.242820][ C1] vkms_vblank_simulate: vblank timer overrun [ 533.496255][ T30] audit: type=1326 audit(1756358370.809:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9420 comm="syz.4.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f10edd8ebe9 code=0x7ffc0000 [ 533.518798][ T30] audit: type=1326 audit(1756358370.809:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9420 comm="syz.4.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10edd8ebe9 code=0x7ffc0000 [ 533.541879][ T30] audit: type=1326 audit(1756358370.819:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9420 comm="syz.4.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10edd8ebe9 code=0x7ffc0000 [ 533.591096][ T9310] chnl_net:caif_netlink_parms(): no params data found [ 533.717670][ T30] audit: type=1326 audit(1756358370.819:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9420 comm="syz.4.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10edd8ebe9 code=0x7ffc0000 [ 533.867575][ T30] audit: type=1326 audit(1756358370.819:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9420 comm="syz.4.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10edd8ebe9 code=0x7ffc0000 [ 534.555265][ T9310] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.581528][ T9310] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.651842][ T9310] bridge_slave_0: entered allmulticast mode [ 535.171438][ T9310] bridge_slave_0: entered promiscuous mode [ 535.273356][ T9310] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.359962][ T9310] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.440694][ T9310] bridge_slave_1: entered allmulticast mode [ 535.543293][ T9310] bridge_slave_1: entered promiscuous mode [ 535.789170][ T9310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.838650][ T9310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.063828][ T9310] team0: Port device team_slave_0 added [ 536.080578][ T9310] team0: Port device team_slave_1 added [ 536.973889][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.996045][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.121612][ T9310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.141031][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.151956][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.196289][ T9310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.177466][ T9492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 538.342940][ T9310] hsr_slave_0: entered promiscuous mode [ 538.372099][ T9310] hsr_slave_1: entered promiscuous mode [ 538.430425][ T9310] debugfs: 'hsr0' already exists in 'hsr' [ 538.597454][ T9310] Cannot create hsr debugfs directory [ 540.877703][ T9310] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 542.163648][ T9310] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 542.181669][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 542.181690][ T30] audit: type=1326 audit(1756358380.839:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bcf58ebe9 code=0x7ffc0000 [ 542.882585][ T30] audit: type=1326 audit(1756358380.839:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bcf58ebe9 code=0x7ffc0000 [ 542.961596][ T30] audit: type=1326 audit(1756358380.839:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f5bcf58ebe9 code=0x7ffc0000 [ 543.040285][ T9310] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 543.133145][ T30] audit: type=1326 audit(1756358380.839:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bcf58ebe9 code=0x7ffc0000 [ 543.172646][ T9310] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 543.195811][ T30] audit: type=1326 audit(1756358380.839:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bcf58ebe9 code=0x7ffc0000 [ 544.003294][ T30] audit: type=1326 audit(1756358380.849:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f5bcf58ebe9 code=0x7ffc0000 [ 544.516100][ T30] audit: type=1326 audit(1756358380.859:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bcf58ebe9 code=0x7ffc0000 [ 544.624289][ T30] audit: type=1326 audit(1756358380.879:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bcf58ebe9 code=0x7ffc0000 [ 544.881971][ T30] audit: type=1326 audit(1756358380.899:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bcf58ebe9 code=0x7ffc0000 [ 545.585037][ T30] audit: type=1326 audit(1756358380.899:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bcf58ebe9 code=0x7ffc0000 [ 546.105133][ T9310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.134206][ T9310] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.191598][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.198802][ T6517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.384574][ T8075] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.391794][ T8075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.790465][ T9547] kexec: Could not allocate control_code_buffer [ 548.640514][ T9310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.934773][ T9310] veth0_vlan: entered promiscuous mode [ 552.902814][ T9310] veth1_vlan: entered promiscuous mode [ 553.189145][ T9310] veth0_macvtap: entered promiscuous mode [ 553.302262][ T9310] veth1_macvtap: entered promiscuous mode [ 553.432635][ T9310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.541857][ T9310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.637559][ T6189] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.698077][ T6189] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.865542][ T6189] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.899592][ T6189] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.635314][ T9617] fuse: Bad value for 'fd' [ 554.795066][ T10] Process accounting resumed [ 554.836210][ T6430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.193195][ T6430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.880998][ T6189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.906328][ T6189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.782411][ T9616] Process accounting resumed [ 560.824083][ T9665] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.227275][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.233666][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.651156][ T9682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.843887][ T9684] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 566.551971][ T9714] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 566.739664][ T9722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.756480][ T9722] batadv_slave_0: entered promiscuous mode [ 570.405892][ T9751] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 573.375571][ T9777] fuse: Unknown parameter 'group_i00000000000000000000' [ 575.769216][ T9805] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 576.074172][ T9794] kexec: Could not allocate control_code_buffer [ 576.708020][ T9809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 578.590916][ T9820] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 580.628550][ T5984] libceph: connect (1)[c::]:6789 error -101 [ 580.710712][ T5984] libceph: mon0 (1)[c::]:6789 connect error [ 581.040438][ T9830] ceph: No mds server is up or the cluster is laggy [ 581.565593][ T5984] libceph: connect (1)[c::]:6789 error -101 [ 581.576834][ T5984] libceph: mon0 (1)[c::]:6789 connect error [ 583.520661][ T9850] mkiss: ax0: crc mode is auto. [ 585.806447][ T9863] Bluetooth: hci6: command 0x0405 tx timeout [ 589.808040][ T9912] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 591.643350][ T9935] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 596.076099][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 596.076120][ T30] audit: type=1326 audit(1756358434.599:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9956 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2cd8ebe9 code=0x7ffc0000 [ 596.603905][ T30] audit: type=1326 audit(1756358434.599:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9956 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2cd8ebe9 code=0x7ffc0000 [ 596.681571][ T30] audit: type=1326 audit(1756358434.609:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9956 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fbd2cd8ebe9 code=0x7ffc0000 [ 596.703723][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.716719][ T30] audit: type=1326 audit(1756358434.609:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9956 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2cd8ebe9 code=0x7ffc0000 [ 597.738829][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.745270][ T30] audit: type=1326 audit(1756358434.609:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9956 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2cd8ebe9 code=0x7ffc0000 [ 597.767368][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.900244][ T30] audit: type=1326 audit(1756358434.609:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9956 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd2cd8ebe9 code=0x7ffc0000 [ 597.922368][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.271069][ T30] audit: type=1326 audit(1756358434.619:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9956 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2cd8ebe9 code=0x7ffc0000 [ 598.357204][ T30] audit: type=1326 audit(1756358434.619:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9956 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2cd8ebe9 code=0x7ffc0000 [ 598.638559][ T30] audit: type=1326 audit(1756358434.629:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9956 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd2cd8d550 code=0x7ffc0000 [ 598.689162][ T30] audit: type=1326 audit(1756358434.639:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9956 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2cd8ebe9 code=0x7ffc0000 [ 598.819699][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 598.825862][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 599.114418][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 599.116609][ T9974] ceph: No mds server is up or the cluster is laggy [ 599.856167][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 600.374300][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 600.392317][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 601.298977][T10006] mkiss: ax0: crc mode is auto. [ 603.527650][T10020] loop0: detected capacity change from 0 to 24 [ 603.590000][T10020] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 603.617748][T10020] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 603.638766][T10020] fuse: Unknown parameter '0xffffffffffffffff' [ 604.075233][T10024] overlayfs: missing 'lowerdir' [ 607.564944][T10044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 610.000255][T10065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.008479][T10065] batadv_slave_0: entered promiscuous mode [ 611.405895][T10071] loop0: detected capacity change from 0 to 24 [ 611.419222][T10071] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 611.450841][T10071] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 612.158496][T10071] fuse: Unknown parameter '0xffffffffffffffff' [ 612.494905][T10079] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 612.504090][T10079] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 613.294688][T10083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 619.311696][T10130] loop3: detected capacity change from 0 to 24 [ 619.407554][T10130] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 619.587444][T10130] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 619.803015][T10130] fuse: Unknown parameter '0xffffffffffffffff' [ 620.094698][T10135] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 620.103939][T10135] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 622.460548][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 622.460569][ T30] audit: type=1326 audit(1756358461.749:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10143 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8938ebe9 code=0x7ffc0000 [ 622.726080][ T30] audit: type=1326 audit(1756358461.749:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10143 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8938ebe9 code=0x7ffc0000 [ 622.748329][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.828095][ T30] audit: type=1326 audit(1756358461.779:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10143 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f9d8938ebe9 code=0x7ffc0000 [ 623.092074][ T30] audit: type=1326 audit(1756358461.779:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10143 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8938ebe9 code=0x7ffc0000 [ 623.652955][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.659416][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.682340][ T30] audit: type=1326 audit(1756358461.779:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10143 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8938ebe9 code=0x7ffc0000 [ 623.897597][ T30] audit: type=1326 audit(1756358461.779:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10143 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f9d8938ebe9 code=0x7ffc0000 [ 624.205543][ T30] audit: type=1326 audit(1756358461.779:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10143 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8938ebe9 code=0x7ffc0000 [ 624.363127][ T30] audit: type=1326 audit(1756358461.779:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10143 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8938ebe9 code=0x7ffc0000 [ 625.406640][ T30] audit: type=1326 audit(1756358461.779:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10143 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d8938ebe9 code=0x7ffc0000 [ 625.428823][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.586360][ T30] audit: type=1326 audit(1756358461.779:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10143 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8938ebe9 code=0x7ffc0000 [ 626.369215][T10183] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 626.672498][T10187] loop0: detected capacity change from 0 to 24 [ 626.717210][T10187] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 626.775533][T10187] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 626.826613][T10187] fuse: Unknown parameter '0xffffffffffffffff' [ 627.130949][T10191] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 627.140098][T10191] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 627.766061][T10196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 629.032906][T10204] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 629.076156][T10204] overlayfs: failed to set xattr on upper [ 629.083384][T10204] overlayfs: ...falling back to redirect_dir=nofollow. [ 629.090944][T10204] overlayfs: ...falling back to index=off. [ 629.098245][T10204] overlayfs: ...falling back to uuid=null. [ 629.107305][T10204] overlayfs: maximum fs stacking depth exceeded [ 629.962622][T10213] mkiss: ax0: crc mode is auto. [ 632.036091][ T9863] Bluetooth: hci6: command 0x0405 tx timeout [ 635.863064][T10256] mkiss: ax0: crc mode is auto. [ 644.435410][T10299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 650.239092][T10322] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 650.412613][T10322] overlayfs: failed to set xattr on upper [ 650.636221][T10322] overlayfs: ...falling back to redirect_dir=nofollow. [ 650.666702][T10322] overlayfs: ...falling back to index=off. [ 650.672609][T10322] overlayfs: ...falling back to uuid=null. [ 650.856021][T10322] overlayfs: maximum fs stacking depth exceeded [ 651.604292][T10332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 652.431130][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 652.431174][ T30] audit: type=1326 audit(1756358491.639:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10edd8ebe9 code=0x7ffc0000 [ 652.431595][ T30] audit: type=1326 audit(1756358491.639:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10edd8ebe9 code=0x7ffc0000 [ 652.439938][ T30] audit: type=1326 audit(1756358491.639:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f10edd8ebe9 code=0x7ffc0000 [ 652.440292][ T30] audit: type=1326 audit(1756358491.639:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10edd8ebe9 code=0x7ffc0000 [ 652.440680][ T30] audit: type=1326 audit(1756358491.639:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10edd8ebe9 code=0x7ffc0000 [ 652.440990][ T30] audit: type=1326 audit(1756358491.639:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f10edd8ebe9 code=0x7ffc0000 [ 652.441277][ T30] audit: type=1326 audit(1756358491.639:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10edd8ebe9 code=0x7ffc0000 [ 652.565475][ C1] vkms_vblank_simulate: vblank timer overrun [ 652.632936][ C1] vkms_vblank_simulate: vblank timer overrun [ 652.850663][ T30] audit: type=1326 audit(1756358491.639:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10edd8ebe9 code=0x7ffc0000 [ 653.017573][ T30] audit: type=1326 audit(1756358491.639:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10edd8ebe9 code=0x7ffc0000 [ 653.040398][ T30] audit: type=1326 audit(1756358491.639:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10edd8ebe9 code=0x7ffc0000 [ 658.756442][T10374] mmap: syz.6.1005 (10374) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 668.044132][T10458] mkiss: ax0: crc mode is auto. [ 668.680729][T10472] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 673.926508][T10512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.934579][T10512] batadv_slave_0: entered promiscuous mode [ 674.542950][T10518] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1036'. [ 675.212839][T10508] kexec: Could not allocate control_code_buffer [ 676.927695][T10524] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 681.194330][T10551] kexec: Could not allocate control_code_buffer [ 682.090011][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 682.090028][ T30] audit: type=1326 audit(1756358521.109:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.1.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8938ebe9 code=0x7ffc0000 [ 682.126074][ T30] audit: type=1326 audit(1756358521.109:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.1.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8938ebe9 code=0x7ffc0000 [ 682.148422][ C0] vkms_vblank_simulate: vblank timer overrun [ 682.159362][ T30] audit: type=1326 audit(1756358521.109:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.1.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f9d8938ebe9 code=0x7ffc0000 [ 682.181695][ C0] vkms_vblank_simulate: vblank timer overrun [ 682.188973][ T30] audit: type=1326 audit(1756358521.109:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.1.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8938ebe9 code=0x7ffc0000 [ 682.211304][ C0] vkms_vblank_simulate: vblank timer overrun [ 682.219553][ T30] audit: type=1326 audit(1756358521.109:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.1.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8938ebe9 code=0x7ffc0000 [ 682.243480][ T30] audit: type=1326 audit(1756358521.109:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.1.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f9d8938ebe9 code=0x7ffc0000 [ 682.271827][ T30] audit: type=1326 audit(1756358521.109:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.1.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8938ebe9 code=0x7ffc0000 [ 682.294292][ C0] vkms_vblank_simulate: vblank timer overrun [ 682.534281][ T30] audit: type=1326 audit(1756358521.109:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.1.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8938ebe9 code=0x7ffc0000 [ 682.565301][ T30] audit: type=1326 audit(1756358521.109:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.1.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d8938ebe9 code=0x7ffc0000 [ 682.700646][ T30] audit: type=1326 audit(1756358521.109:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.1.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8938ebe9 code=0x7ffc0000 [ 682.887522][T10570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 685.210174][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.217675][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.576151][ T9863] Bluetooth: hci6: command 0x0405 tx timeout [ 686.569640][T10588] nvme_fabrics: missing parameter 'transport=%s' [ 686.603592][T10588] nvme_fabrics: missing parameter 'nqn=%s' [ 686.931410][T10604] fuse: Unknown parameter '0x0000000000000006' [ 689.530838][T10623] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 689.693648][T10627] binder: 10626:10627 ioctl 80047437 200000000200 returned -22 [ 690.843210][T10629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 691.346456][T10635] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1067'. [ 692.446723][ T9863] Bluetooth: hci6: command 0x0405 tx timeout [ 694.005198][T10655] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1073'. [ 694.478300][T10662] fuse: Bad value for 'fd' [ 696.758588][T10681] mkiss: ax0: crc mode is auto. [ 697.715083][T10691] nvme_fabrics: missing parameter 'transport=%s' [ 697.783428][T10691] nvme_fabrics: missing parameter 'nqn=%s' [ 701.960196][T10717] binder: 10716:10717 ioctl 80047437 200000000200 returned -22 [ 702.155803][T10718] binder_alloc: 10716: binder_alloc_buf, no vma [ 703.187546][T10727] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 703.479767][T10727] overlayfs: failed to set xattr on upper [ 703.509501][T10727] overlayfs: ...falling back to redirect_dir=nofollow. [ 703.561426][T10727] overlayfs: ...falling back to index=off. [ 703.575969][T10727] overlayfs: ...falling back to uuid=null. [ 703.588005][T10727] overlayfs: maximum fs stacking depth exceeded [ 704.372295][T10740] mkiss: ax0: crc mode is auto. [ 706.069472][T10748] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1099'. [ 709.059977][T10767] binder: 10764:10767 ioctl 80047437 200000000200 returned -22 [ 712.318998][T10798] mkiss: ax0: crc mode is auto. [ 722.646246][T10873] mkiss: ax0: crc mode is auto. [ 726.198757][T10906] netlink: 'syz.4.1143': attribute type 1 has an invalid length. [ 736.931098][T10996] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 737.196156][T10996] overlayfs: failed to set xattr on upper [ 737.215580][T10996] overlayfs: ...falling back to redirect_dir=nofollow. [ 737.222882][T10996] overlayfs: ...falling back to index=off. [ 737.229284][T10996] overlayfs: ...falling back to uuid=null. [ 737.249381][T10996] overlayfs: maximum fs stacking depth exceeded [ 743.071010][T11035] gfs2: not a GFS2 filesystem [ 746.519702][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.529375][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.959165][T11078] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1194'. [ 750.713978][T11099] netlink: 'syz.6.1198': attribute type 1 has an invalid length. [ 752.841556][T11112] ======================================================= [ 752.841556][T11112] WARNING: The mand mount option has been deprecated and [ 752.841556][T11112] and is ignored by this kernel. Remove the mand [ 752.841556][T11112] option from the mount to silence this warning. [ 752.841556][T11112] ======================================================= [ 756.336867][T11139] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1211'. [ 759.631158][T11172] gfs2: not a GFS2 filesystem [ 766.355254][T11210] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1233'. [ 766.735605][T11215] gfs2: not a GFS2 filesystem [ 772.538180][T11271] binder: 11269:11271 ioctl 80047437 200000000200 returned -22 [ 772.687211][T11272] binder_alloc: 11269: binder_alloc_buf, no vma [ 774.557739][T11281] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1251'. [ 778.356917][ T10] libceph: connect (1)[c::]:6789 error -101 [ 778.364950][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 778.569060][T11304] ceph: No mds server is up or the cluster is laggy [ 779.190080][ T10] libceph: connect (1)[c::]:6789 error -101 [ 779.212376][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 779.721794][T11315] bpq0: entered promiscuous mode [ 783.657304][T11353] binder_alloc: 11349: binder_alloc_buf, no vma [ 784.135713][T11356] gfs2: not a GFS2 filesystem [ 786.277668][T11371] mkiss: ax0: crc mode is auto. [ 787.308205][T11377] overlayfs: overlapping lowerdir path [ 788.542457][ T9863] Bluetooth: hci6: command 0x0405 tx timeout [ 789.253070][T11388] gfs2: not a GFS2 filesystem [ 794.297195][T11426] gfs2: not a GFS2 filesystem [ 799.433813][T11457] fuse: Unknown parameter 'grou00000000000000000000' [ 802.836844][ C0] ================================================================== [ 802.844940][ C0] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 802.852822][ C0] Read of size 2 at addr ffff88806dfa202a by task swapper/0/0 [ 802.860520][ C0] [ 802.862824][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 802.862844][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 802.862856][ C0] Call Trace: [ 802.862865][ C0] [ 802.862873][ C0] dump_stack_lvl+0x189/0x250 [ 802.862897][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.862918][ C0] ? __kasan_check_byte+0x12/0x40 [ 802.862945][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 802.862965][ C0] ? rcu_is_watching+0x15/0xb0 [ 802.862983][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.863004][ C0] ? lock_release+0x4b/0x3e0 [ 802.863032][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 802.863055][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.863076][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 802.863099][ C0] print_report+0xca/0x240 [ 802.863117][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 802.863141][ C0] kasan_report+0x118/0x150 [ 802.863167][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 802.863200][ C0] rose_timer_expiry+0x471/0x4b0 [ 802.863225][ C0] call_timer_fn+0x17e/0x5f0 [ 802.863252][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 802.863275][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.863296][ C0] ? call_timer_fn+0xbe/0x5f0 [ 802.863321][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 802.863349][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.863371][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 802.863395][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.863416][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 802.863440][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 802.863466][ C0] __run_timer_base+0x61a/0x860 [ 802.863489][ C0] ? ktime_get+0x3e/0x1f0 [ 802.863515][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 802.863537][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 802.863562][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.863587][ C0] run_timer_softirq+0xb7/0x180 [ 802.863612][ C0] handle_softirqs+0x286/0x870 [ 802.863632][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 802.863652][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 802.863671][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.863692][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 802.863716][ C0] __irq_exit_rcu+0xca/0x1f0 [ 802.863733][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 802.863754][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.863776][ C0] irq_exit_rcu+0x9/0x30 [ 802.863792][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 802.863816][ C0] [ 802.863823][ C0] [ 802.863830][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 802.863849][ C0] RIP: 0010:sched_core_balance+0x15f/0xf40 [ 802.863875][ C0] Code: 0b 00 4c 89 b4 24 80 00 00 00 4c 89 7c 24 60 e9 73 0d 00 00 4c 89 f7 e8 3f 04 ea 09 e8 8a 1c 35 00 fb 48 8b 9c 24 88 00 00 00 <83> fb 08 0f 83 3b 0d 00 00 4c 8d 24 dd 10 fd bd 8d 4c 89 e0 48 c1 [ 802.863890][ C0] RSP: 0018:ffffffff8de07980 EFLAGS: 00000282 [ 802.863906][ C0] RAX: 445e219a598cd600 RBX: 0000000000000000 RCX: 445e219a598cd600 [ 802.863920][ C0] RDX: 0000000000000000 RSI: ffffffff8d9b7d7a RDI: ffffffff8be33780 [ 802.863933][ C0] RBP: ffffffff8de07b20 R08: ffffffff8fa38c37 R09: 1ffffffff1f47186 [ 802.863946][ C0] R10: dffffc0000000000 R11: fffffbfff1f47187 R12: dffffc0000000000 [ 802.863960][ C0] R13: dffffc0000000000 R14: ffff8880b8639f80 R15: 0000000000000000 [ 802.863985][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.864006][ C0] ? __lock_acquire+0xab9/0xd20 [ 802.864034][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.864054][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.864075][ C0] ? sched_clock+0x3f/0x60 [ 802.864099][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.864119][ C0] ? sched_core_balance+0xcc/0xf40 [ 802.864143][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.864163][ C0] ? do_raw_spin_lock+0x121/0x290 [ 802.864187][ C0] ? __pfx_sched_core_balance+0x10/0x10 [ 802.864212][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 802.864242][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.864264][ C0] ? __pfx_sched_core_balance+0x10/0x10 [ 802.864288][ C0] __balance_callbacks+0x110/0x190 [ 802.864316][ C0] __schedule+0x19d8/0x4cc0 [ 802.864348][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.864372][ C0] ? __pfx___schedule+0x10/0x10 [ 802.864399][ C0] ? flush_smp_call_function_queue+0x116/0x250 [ 802.864420][ C0] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 802.864445][ C0] schedule_idle+0x52/0x90 [ 802.864468][ C0] do_idle+0x4ad/0x510 [ 802.864484][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 802.864502][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.864525][ C0] ? __pfx_do_idle+0x10/0x10 [ 802.864546][ C0] ? do_idle+0x4ed/0x510 [ 802.864564][ C0] cpu_startup_entry+0x44/0x60 [ 802.864581][ C0] rest_init+0x2de/0x300 [ 802.864601][ C0] start_kernel+0x3a9/0x410 [ 802.864625][ C0] x86_64_start_reservations+0x24/0x30 [ 802.864652][ C0] x86_64_start_kernel+0x143/0x1c0 [ 802.864680][ C0] common_startup_64+0x13e/0x147 [ 802.864712][ C0] [ 802.864718][ C0] [ 803.344409][ C0] Allocated by task 9491: [ 803.348714][ C0] kasan_save_track+0x3e/0x80 [ 803.353377][ C0] __kasan_kmalloc+0x93/0xb0 [ 803.357958][ C0] __kmalloc_cache_noprof+0x230/0x3d0 [ 803.363318][ C0] rose_add_node+0x23a/0xde0 [ 803.367890][ C0] rose_rt_ioctl+0xa48/0xfb0 [ 803.372464][ C0] rose_ioctl+0x3ce/0x8b0 [ 803.376768][ C0] sock_do_ioctl+0xdc/0x300 [ 803.381272][ C0] sock_ioctl+0x576/0x790 [ 803.385580][ C0] __se_sys_ioctl+0xfc/0x170 [ 803.390152][ C0] do_syscall_64+0xfa/0x3b0 [ 803.394644][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.400517][ C0] [ 803.402817][ C0] Freed by task 11315: [ 803.406874][ C0] kasan_save_track+0x3e/0x80 [ 803.411535][ C0] kasan_save_free_info+0x46/0x50 [ 803.416538][ C0] __kasan_slab_free+0x5b/0x80 [ 803.421286][ C0] kfree+0x18e/0x440 [ 803.425163][ C0] rose_rt_device_down+0x473/0x4c0 [ 803.430253][ C0] rose_device_event+0x603/0x6a0 [ 803.435169][ C0] notifier_call_chain+0x1b6/0x3e0 [ 803.440275][ C0] __dev_notify_flags+0x18d/0x2e0 [ 803.445276][ C0] netif_change_flags+0xe8/0x1a0 [ 803.450194][ C0] dev_change_flags+0x130/0x260 [ 803.455025][ C0] dev_ioctl+0x7b4/0x1150 [ 803.459341][ C0] sock_do_ioctl+0x22c/0x300 [ 803.463914][ C0] sock_ioctl+0x576/0x790 [ 803.468227][ C0] __se_sys_ioctl+0xfc/0x170 [ 803.472813][ C0] do_syscall_64+0xfa/0x3b0 [ 803.477303][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.483176][ C0] [ 803.485479][ C0] The buggy address belongs to the object at ffff88806dfa2000 [ 803.485479][ C0] which belongs to the cache kmalloc-512 of size 512 [ 803.499511][ C0] The buggy address is located 42 bytes inside of [ 803.499511][ C0] freed 512-byte region [ffff88806dfa2000, ffff88806dfa2200) [ 803.513229][ C0] [ 803.515531][ C0] The buggy address belongs to the physical page: [ 803.521914][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806dfa3c00 pfn:0x6dfa0 [ 803.531983][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 803.540457][ C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 803.548932][ C0] page_type: f5(slab) [ 803.552895][ C0] raw: 00fff00000000240 ffff88801a441c80 ffffea00014de010 ffffea0001b70f10 [ 803.561455][ C0] raw: ffff88806dfa3c00 000000000010000f 00000000f5000000 0000000000000000 [ 803.570017][ C0] head: 00fff00000000240 ffff88801a441c80 ffffea00014de010 ffffea0001b70f10 [ 803.578666][ C0] head: ffff88806dfa3c00 000000000010000f 00000000f5000000 0000000000000000 [ 803.587314][ C0] head: 00fff00000000002 ffffea0001b7e801 00000000ffffffff 00000000ffffffff [ 803.595963][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 803.604779][ C0] page dumped because: kasan: bad access detected [ 803.611165][ C0] page_owner tracks the page as allocated [ 803.616851][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5860, tgid 5860 (syz-executor), ts 96435670990, free_ts 87277422964 [ 803.636124][ C0] post_alloc_hook+0x240/0x2a0 [ 803.640879][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 803.646405][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 803.652191][ C0] alloc_pages_mpol+0x232/0x4a0 [ 803.657027][ C0] allocate_slab+0x8a/0x370 [ 803.661508][ C0] ___slab_alloc+0xbeb/0x1410 [ 803.666172][ C0] __kmalloc_noprof+0x305/0x4f0 [ 803.671028][ C0] fib6_info_alloc+0x30/0xf0 [ 803.675609][ C0] ip6_route_info_create+0x142/0x860 [ 803.680874][ C0] addrconf_f6i_alloc+0x1d2/0x450 [ 803.685884][ C0] addrconf_permanent_addr+0x274/0x9d0 [ 803.691345][ C0] addrconf_notify+0x887/0x1010 [ 803.696192][ C0] notifier_call_chain+0x1b6/0x3e0 [ 803.701302][ C0] __dev_notify_flags+0x18d/0x2e0 [ 803.706306][ C0] netif_change_flags+0xe8/0x1a0 [ 803.711223][ C0] do_setlink+0xc55/0x41c0 [ 803.715615][ C0] page last free pid 5842 tgid 5842 stack trace: [ 803.721911][ C0] free_unref_folios+0xdbd/0x1520 [ 803.726931][ C0] folios_put_refs+0x559/0x640 [ 803.731682][ C0] free_pages_and_swap_cache+0x277/0x520 [ 803.737292][ C0] tlb_flush_mmu+0x3a0/0x680 [ 803.741858][ C0] tlb_finish_mmu+0xc3/0x1d0 [ 803.746423][ C0] vms_clear_ptes+0x42c/0x540 [ 803.751083][ C0] vms_complete_munmap_vmas+0x206/0x8a0 [ 803.756606][ C0] do_vmi_align_munmap+0x358/0x420 [ 803.761694][ C0] do_vmi_munmap+0x253/0x2e0 [ 803.766260][ C0] __vm_munmap+0x23b/0x3d0 [ 803.770657][ C0] __x64_sys_munmap+0x60/0x70 [ 803.775314][ C0] do_syscall_64+0xfa/0x3b0 [ 803.779802][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.785672][ C0] [ 803.787983][ C0] Memory state around the buggy address: [ 803.793583][ C0] ffff88806dfa1f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 803.801620][ C0] ffff88806dfa1f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 803.809748][ C0] >ffff88806dfa2000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 803.817785][ C0] ^ [ 803.823127][ C0] ffff88806dfa2080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 803.831165][ C0] ffff88806dfa2100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 803.839199][ C0] ================================================================== [ 803.847309][ C0] vkms_vblank_simulate: vblank timer overrun [ 803.853338][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 803.860525][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 803.869440][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 803.879475][ C0] Call Trace: [ 803.882732][ C0] [ 803.885552][ C0] dump_stack_lvl+0x99/0x250 [ 803.890132][ C0] ? __asan_memcpy+0x40/0x70 [ 803.894710][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 803.899892][ C0] ? __pfx__printk+0x10/0x10 [ 803.904480][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 803.910102][ C0] vpanic+0x281/0x750 [ 803.914073][ C0] ? __pfx_vpanic+0x10/0x10 [ 803.918562][ C0] ? asm_common_interrupt+0x26/0x40 [ 803.923744][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 803.928941][ C0] panic+0xb9/0xc0 [ 803.932649][ C0] ? __pfx_panic+0x10/0x10 [ 803.937049][ C0] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 803.942929][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 803.948550][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 803.954434][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 803.959533][ C0] check_panic_on_warn+0x89/0xb0 [ 803.964459][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 803.969561][ C0] end_report+0x78/0x160 [ 803.973794][ C0] kasan_report+0x129/0x150 [ 803.978287][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 803.983390][ C0] rose_timer_expiry+0x471/0x4b0 [ 803.988338][ C0] call_timer_fn+0x17e/0x5f0 [ 803.992917][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 803.998367][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 804.003988][ C0] ? call_timer_fn+0xbe/0x5f0 [ 804.008658][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 804.013783][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 804.019402][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 804.024586][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 804.030201][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 804.035390][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 804.040855][ C0] __run_timer_base+0x61a/0x860 [ 804.045708][ C0] ? ktime_get+0x3e/0x1f0 [ 804.050026][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 804.055386][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 804.061616][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 804.067237][ C0] run_timer_softirq+0xb7/0x180 [ 804.072077][ C0] handle_softirqs+0x286/0x870 [ 804.076823][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 804.081572][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 804.086844][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 804.092459][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 804.097662][ C0] __irq_exit_rcu+0xca/0x1f0 [ 804.102234][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 804.107419][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 804.113042][ C0] irq_exit_rcu+0x9/0x30 [ 804.117266][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 804.122886][ C0] [ 804.125792][ C0] [ 804.128717][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 804.134677][ C0] RIP: 0010:sched_core_balance+0x15f/0xf40 [ 804.140469][ C0] Code: 0b 00 4c 89 b4 24 80 00 00 00 4c 89 7c 24 60 e9 73 0d 00 00 4c 89 f7 e8 3f 04 ea 09 e8 8a 1c 35 00 fb 48 8b 9c 24 88 00 00 00 <83> fb 08 0f 83 3b 0d 00 00 4c 8d 24 dd 10 fd bd 8d 4c 89 e0 48 c1 [ 804.160057][ C0] RSP: 0018:ffffffff8de07980 EFLAGS: 00000282 [ 804.166114][ C0] RAX: 445e219a598cd600 RBX: 0000000000000000 RCX: 445e219a598cd600 [ 804.174069][ C0] RDX: 0000000000000000 RSI: ffffffff8d9b7d7a RDI: ffffffff8be33780 [ 804.182020][ C0] RBP: ffffffff8de07b20 R08: ffffffff8fa38c37 R09: 1ffffffff1f47186 [ 804.189985][ C0] R10: dffffc0000000000 R11: fffffbfff1f47187 R12: dffffc0000000000 [ 804.197964][ C0] R13: dffffc0000000000 R14: ffff8880b8639f80 R15: 0000000000000000 [ 804.205939][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 804.211584][ C0] ? __lock_acquire+0xab9/0xd20 [ 804.216438][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 804.222066][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 804.227682][ C0] ? sched_clock+0x3f/0x60 [ 804.232109][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 804.237726][ C0] ? sched_core_balance+0xcc/0xf40 [ 804.242825][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 804.248440][ C0] ? do_raw_spin_lock+0x121/0x290 [ 804.253467][ C0] ? __pfx_sched_core_balance+0x10/0x10 [ 804.259002][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 804.264279][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 804.269897][ C0] ? __pfx_sched_core_balance+0x10/0x10 [ 804.275429][ C0] __balance_callbacks+0x110/0x190 [ 804.280529][ C0] __schedule+0x19d8/0x4cc0 [ 804.285029][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 804.290646][ C0] ? __pfx___schedule+0x10/0x10 [ 804.295486][ C0] ? flush_smp_call_function_queue+0x116/0x250 [ 804.301619][ C0] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 804.307241][ C0] schedule_idle+0x52/0x90 [ 804.311647][ C0] do_idle+0x4ad/0x510 [ 804.315697][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 804.321307][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 804.326927][ C0] ? __pfx_do_idle+0x10/0x10 [ 804.331501][ C0] ? do_idle+0x4ed/0x510 [ 804.335724][ C0] cpu_startup_entry+0x44/0x60 [ 804.340468][ C0] rest_init+0x2de/0x300 [ 804.344697][ C0] start_kernel+0x3a9/0x410 [ 804.349192][ C0] x86_64_start_reservations+0x24/0x30 [ 804.354643][ C0] x86_64_start_kernel+0x143/0x1c0 [ 804.359745][ C0] common_startup_64+0x13e/0x147 [ 804.364677][ C0] [ 804.367881][ C0] Kernel Offset: disabled [ 804.372191][ C0] Rebooting in 86400 seconds..