last executing test programs: 1m42.22447053s ago: executing program 1 (id=167): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}}, 0x0) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000025c0)=[{0x0}, {0x0}], 0x2}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1m39.690210188s ago: executing program 1 (id=174): open(&(0x7f0000000000)='./file0\x00', 0x10507e, 0xa6) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) 1m39.551101506s ago: executing program 1 (id=176): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x368, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x186}, &(0x7f00000010c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x1, 0x0, 0x315}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 1m38.290543053s ago: executing program 1 (id=183): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='.\x00', 0x0, 0x81e88c, 0x0) 1m37.790714185s ago: executing program 1 (id=184): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x79, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 1m35.540341316s ago: executing program 1 (id=198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000300000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100f3ff00"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m34.78372567s ago: executing program 32 (id=198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000300000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100f3ff00"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7.244281747s ago: executing program 5 (id=563): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f00000029c0), 0x400006d, 0x20000004) 6.075311178s ago: executing program 5 (id=564): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da3) fchown(r0, 0x0, 0xffffffffffffffff) fchownat(r0, &(0x7f0000000240)='./file0\x00', 0x0, 0xee01, 0x100) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000040)) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) sendto$inet(r1, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 5.456002582s ago: executing program 4 (id=569): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="a5daaccea7fd20519bb3acbd4b6871331e54ad602cde48e436abfe9061f9f6cfcc7b35a20ee76153457916b0c4b661fe6fe1fac3580923dfaaefe920af531bc8ac446923fb0f98b716a435875f1b74f084eac66a1a5ffa9eb3aae03ac08e3a9ca0a62b9aec56565e58657593d7cf174cd491897e33ccd9200ddd75a03d69fbc9e1e90ac36d3ac5b483b8da9e0a3034726bb05939122410143b6c2c29aa233f43b0e13c93fe681a6653b3427ed5478a8741de382c2f34cb32df89be077123198e9249deabebcf05bbd175cd079d2a4cc17d0bc8d4e0f874c0dc8518afd5594c31d7dff6fa6af495f4fe2b8e99b5e593d6d190d39a7703e50c159f3e6ea44569d0b83d52b0097f8c30f1febeb83a36e5309bc2d7bc5e9430ef22d012e293299de2f9085386fcdd5692d212cba5069ed89453fac95e51ea4236a2ee78e096ff8c24dc9611a5d2b1fffd9bad1aafc544ddf174f6feb5032f73f391e0ad6a0eabcc20458bd9374515c6b9f7ddfd9f99d6eaf3606fbb55945bd8231f302965e5e55b8e6a65c74604b56394eda5db92d9c4265d0cfdfd786b9e17716e7aa8b0783e4ed518eb11c2ac4e99b78f5cac6761b2efb7f2d7aff7852882d3ef17da602453d272177aa98a0a5d4571a87d1674f60e7f520b654b6fc45cb3e85b20e2f9f6720b46d030b45ff4e35c10d147b5df28ef0ac6e0f753d462b77b10ad85084b8e9e326d32331115bbfe574ec1c2c80da00df1ad56511c7193abfd9b042881c72dd7ab7ce7090c4b2cc97c2d6dda8baabf805477ee343e1f0b5b3e46bbdd11dd2129e24712a884808d13d6f061941c52fa57a772f27f473884dfdb6f338ac67021ef3082cb21c5a5b223810ea63d9ef8d380deea75f3eb05168dfafc64f66d5f9990a6b66e9611ca3df5af1d9d35e1ed1b46e3ca7064281f5028950e83d6c68ae5f48dd3a17620f98804562d15a30208cbed2fd2bfdf562c22a7ed4d6170976df59c4f905e1e729b4edb87db3865abb22f3ca0a603a1f8dc57e47d524e1d1e54ddf1d7603c1529b9a98a1137a035beec2a2ae576f6296ac78405f7987dfd705f036832baa71c8a513d7c1ecfc4f003de921826734b6a604149873137d780ca3930ba9c84f634fc08419966ce10d12f1ef179982988afddec43a08a59b3858a61040bb22c56e52ea914a04f3c714a77c7c3b400b4d8e543fc837320eb90a003c198642860af442f51b7110fcc6ef24300a60620cb45a2dd243ae313a3dfb81f31217062d7f2c97ae8e26d20cc0f2f9c74fd7125f9b038f562b57f2c510c151678eca86abf61810afbd14f2530bc9e868ccec2e602ca9f2c2429fbf7e70ec30d10b3980d755e98179b42e861e52a5f0f3143e08fafff1a7407f627ffa60b61ca90978acb0b0bcae7fc92bb786af829b0f719044ee45e398e9557c1fb80b149e6372b79fffe6208ec17151dbc87f52964d212f220259256140f7abf4f0de79e502832658b3dedf5f56a9e8ff9dab4eef4c047b00ca7ea42a3c164f482c2eff2cb2591fdc0695a3c0fd2cfa0b15ca06865b3500ed29323aab9906190b1fcc27a950566f52132e7e9fbfefadbc1e1ae59ada4ce8a117eb1cbb5c3fcb5ac14f4f0b970d8528308d551ee09eeb711817d6a63dfb276e7510c31e8854321b3dcaa210dbd9de0b837a235b882768b708de6296810cf931a5d3fa9ba8fdbacbf59bb820ea77bff45b1238f45de48aa0a9e25acbbe09092838368499e2d293ce5c5db97bea8c2ea96fe4510e5b1fda5459cdcec4ee5d77b553b7034ea382527cafc41beb496eba6d8f05a7f321699aeef1123b351b2245b4cbeddb8340fbf026a1ef78d975a6f61837f4405f263eb019b877292508064d30c8fdee6d14c4f1be247f7d242d2b21f1148bd13fb4d4b762b22f8aedff64f7674b792c50393d8c7392e5911c8681b82c979b0aefbf60d7f5f75edc658281e8c686d9d482a44852b1299617892de5e6a0e08b2add3f75c6384bde6240eaaea717b0bb7b33e31aa7810c40707cb67eb65a23e363adbfd26935e252622e9d0729d94911de5313cf59677002eeaea0174f7f3c9a16efa72a0eb792e4bfe83b4ad9ccb8a5400b480c25b4de95645dedd51f369764ce232809b4909f4f5770bbc19e7e347363a739a3029f751b2f2643b8e423bb7bd7b30bc884a58869ac74a8359d2a8a39087a35b119196fdd431c4054a32d0aa57f45376f720e7947d07bfdb3aff118299b80ce88aeaa8a6e93d23e80b30de185ac6e36407c786da71a8ca5bd7000370824ba9520f46f7dd6cdee50b704e75d6c07fdc18b1954e2e58bee4db5b3ca85cd0c5bd75b65c8c47143dee8b8daaca566392b2c9d47f06c7885638da8e6b12f94a566f38ebde2673b0b24aa0a8abdad648c7860dd25bd4b12d6cbb1b75bdf9c6e8f0cb3c8dd890209fbb274fc594d07c7a18e42c17b6772559dc8eb88b8675a4945732f7284d006d1e046e5b0731a4a0db420aa238d3ddca54ba249053384575a7346876a24f25b3150235a99dd21f857cefbdea25a0b7dd7a1a0334cea89f7a60780a0b6947a41309a86ec6839e83cb33d566eb061b2fbba98f125497cdb538f4f5227cb3dce6c32c3baf81c5d1fd57937e6a098ecf8685933822fa64606b4f4c45fe088bd2c3c799263fb502aff15eefb5624201fe571a91be910a66bc0d528ff48f9c1b1cb346bcef19533cdebbec61c228a97751e4ffda65be535e9939a83d34de02e5b6c7fe9acb28eaf9a0b4cf0d45a4baaf17011e2290a999171c626d9b4b5b5ed50b892ec3f6d5d69e3e37a974e3e7d9bbed4d7de6f8e446dc2e026dc4a55d6a582a50d99decbaed239a8e2852684e8e5aac0ae7912caf58cc833d5c541974b41a4898e4d2202110f6f6777bb082328e0900744bd5fed3a84732633c6bae2bb2809da1e5c7651b782bc27140e95beaaaf7e275ef118c5d1c634e28d8cce756284753058600886d63480043011b2776bdc6bcd1db3b37f8c969a818349207199b3385213978f873b03d9f1828ca7d018653e3585e8ee4aa9887ab5381e5931173d397fc2b4c55c3db3c36676447e36b86bc02b1314d7bca54524e6154a56eabb3931ff8ce3cfd4ec9833db1936f2098e6c96b9138a66426ffebfd10361bb698b300a6f46dfd079b1ae88cf322ed77640df42439e1eda7d13013479a086e32599e35483462bbd48372f0a68565ff776e31e95ef2d82fd6c748583593d87ec1a0396d8020ba9adbcc5804a6598524da27460feffac5518d3c97cdefbc5f6c7bbfbf6699201307fd4e983d17aede544fda4369f8c2fbc1561ea7fea16706971b5212f7f74f94f480e7654d07ef041ad6898efc241e5a402518c09c8d76eb36839d180deb6fe6de71e0959c882e95234ff13e3bea639c537b2c4259dc1979a0d4886acef7f66206fdaa2d370b7786574b7f178f0252a6bb5eaa5aa9f16e5c5969601e63a2c6de6dfcfd8f2550a5f4d30f7839831aa58b075ff8b229ee8dfed86d2824b88d332b5fe51a29afdc5c00eb7df899b158c1852b8e1201d7f6de82177c137f29a86af6d006fb0e0fce33fcca97dbd0ef1a470fc87927e20b2a4fc29ade7954e8b05c8ca358c0c0e80c05a01d227c4f506e9f424a4375e4746614f4d17f39fc51981dbdbb2764dbd50598304353557aadb416070ceb442ac73f847384b2b9326ebad160e87c4341418cc9ba6ee6a9adbf01dee1c0a4d9b4e88b64431d8f8aa4d79409f07a61350fb71409266e6811a619813745e5b11928c7ffc49a434f0271dcddd02a016ff45805ca1c03d48b7f804c44e708ee64190d7b60e3436dad74c66a9488532e28c2f35becf38a83d02726db357e011565c667383e8437fcecaaabbfa4531d837b1035514217577cd9f47b0711ebc20f097ea2d4025e4193fcf1cc30ad830ddbef6a4e383e5a26668303d082dbd9b7719b5a4e5c7023d96b764b6eefe8e9840c1642ab1fbdbdbee233c543bf7ae902f1ca58acbef9432057b5d67cf645dc9d4ae55e5e706889016c368c2d208b790b658d587722700d07629cf18ac3e216d2dc905d34d04ca584ebf3e3a29060920136afc49c77d565487c0f1f172edfbc78bd8dfcdd5b4111881d45d59993d15a5a7eb7f803fe737375a22d2877403a953f42334a563f76de19e91e926b699ed992801f16f2f96dd0b41e279e76779cd8db89d6ca66156a64fe1af63b71eb88eec87847e95f80d2d8290d21e934124b1b5c72f6fb62ef66d4a886ed2be6962240a799b0be69126bbbb82c0544c373fe73f2bfb937b5ae4b88b58d131480ce83533f6c864a133fa79bb48fc6a2677249b947b46f2a809e0265f6e8e3afce899573f0e305c86c99acbc952c0b577ed0f3a648e80cf407891af92f9e4f4f87d4b7cb082b5ce735544eeba17d80b6b6d58a814a11619c6746566dd89f3d6ce1a50af1df4b0472695e200f3f636547cc53eced3659f76fada97c76826bf85e7085ce2206bc337271446f36e30856422732b18f1681e392ce0897a4b7c9f7a8d62c5741a12b865d1196c4ea62cba35000253bffc10ec461587fc3273f9bc7d45d78557d997f628ab2f279ae828ea49a1205f579692aae56a0738af846921fc802b64a90010d8c1fc262b40118f7895f07c4664d41168d08c3332f6e8f44ab8590075a076256d8c7b215928ff66202da7e1557d682682f79a5ff32311f84b7ed7d9cf04acfac7ad662bf233961e3928f6f72dcb2f76bf33b1aaeb104386f21875f90bbb5b55267aec80ae75c8d2b8f1b7f3558c4a6f896ab1f74af74512480503992af42f3e56caff9d7692fd84eeaac5cc98f8ffef58daf92271cdef27328a906473cefde01b2a32ea7ed9dcd38417555b6626b6cec1a92e2dace70a219948362b3acbcf4a3d95bb53f169f0654ba826bb843291d3189bb2e5e3c49d555af46e161b83c3570d361d82de40ca34ebade033d34ce3b277c3fe5f40302cbc7633e2ee35f50f82022b15414e7ff9b73ba97083c4b89d33458e35e3841ceea368af4c9a69df9cd612d7f023004e48db7e221fc2ce0369038203fdc1d7a91a9ec9d73c50703204fc9518ef977d75c3e416decffc8b84dbdc6a7dcc6c994ccc04f0f792591b2834ca7295d4d86696a303db3e4fa5d04ad746f891c5c14939de9a03f0fea028998312c42a9eac70f630418c7e7c3824bf6f66310ec4efb3d6018bbfeb835f13d7f7204bdf9493fe3b20bfdcaa779faed85d8ebf5ba2d48a01c3b1c88c9490c816b97c9d44fe631c56fed22cf4b59ed35f6ce553f41a10bacee3f44c09c2876aa227421a3f31a4f6e7cac3b9c7c99ce4eef962de0810a55a367789cad2b64d15f3b8b6e99ed83552ae70a22098b71df7375d2dbb2f1baecb89fc9931b91c3607dedb55a9269792323a39a8e878b1a04a55e0892c285ffc658447f548c409a52aa79b6f2c3d33156cbfc1f4e87b079bb806d4afd1ff20284701eee5e0970a34a59b95a49e56a3f7bcaacc44aae173d8cdff499d9b0ed917cf5f9aedcc244ec556566044d363c32efa389ffec7abe2442d90b0060a5e7a91df82fe8bc054483b4cd1ba3703973ac72359e43aa4b6d2b11a434eb663fd8a7fa431c222c84293735afa2d73f99bec414a42d47ca3807ffa2d127632d74f4c395a617946d7309dd082f28dc3a0539190b3b843c29f11d65b705a81701d1361a362e60efd4e4a3c4d6be2df049d00e28f7f270a0b91102e2c73dcc28a5007bc752c5cc009fa66c3e1d9c6819ab376730d08cbff38315874906899b1e3e16c1c8b56cf8f949d569ecd341dbcfdbf39bb2e3d2fc923a338f7dce20e5a13232a9c7355897c4828db594d80b798d6daf7407e9840b91a9f512aceed32dedb32d44a38049b5e34f3e78bdda86ad55c759b31d956082b090fdbe71cc8bf59f258c135aac804d769d5f40c5286228d552ee9f5f817a377056a9040d3b018be14b4dff3c403ef6ee522470ffdd95f0dc14c38d5e11657459d6107f873be22412615cf6d257b28ece87da230a893a0254a5d65fbbd3f9ab2f5b55368b29ff268bec275334566b53403be2270fa23777acd5fb1a75fee9395db97c5e9db15b9618e603fe56c9132e8d28835b0f6333d496fcf5e7ac8dc1b2efd0eaff5a73146abe59edd973dcbfcb04b41f3efdf328febdc23231103632183495c66e373bc2d808af5dfef0564a4a983f669861dd0aab543a1fb6fef11c63b9ce0efe95074edd54405f6960c0884d9ead3ab8722adb8987801ca667c624e3446bda597d63398e3f184c587976d9e0d73dd198111b4641e863f8be6925a99f9bfd4dd8fb4696ad25f444f023d09f699579c64c4e67f55cd4c7b58d7b07ec03409d6a61fdded22fca8d01540a530a13501c1afdd4eca2e771489d8ee576e1b17a4846ff65e3953a62f98d7f7db403e16835a0d8eb5945a296c55fd3c56af5aefe8ba90d39b3d722deecada215b81a0b65e1e3b3934c5432d5b2a4c713fbf75bf8c63083fee08b96020bf1b97d53a4562062d9c8088a9cf0a4c39206e4af61fcf4f5d185f5029c40008ef84c683e9721ed19398a44f569b321d9bd85f6e3c7ea04aa4248609eaa325155b6e708c3be1d025f3a4d1c316f68898ca88f3aec7f7bd1b43484befbc5fac89e42e55cd3bf1d2d19d4c72dbe3f086933b4ff3b4c726c1a0acc4f663201e7741a0cc0f4c1bd6e2128b3e2b106bf241bd4694cdaa7db31128a8b723b2294e30f010b580dc4bdd0527f15273b838c28f623401fea6bd5bba44edb8bc960e2410dfd5bf73b65c3574fd9880c28c80c6a8c5199ed00f7ec73371139ae14ece427ede4c59c140460e30122fba8ebcea4b437a1790cb47a2d74e176606bef7671669332a8771fc589c5e3d3e93b0c38e3df3cd86aac8d76fed4b2769965f108b028dccc17c75d4f02a137d71ce0282d794815fba86e4b5178f4db6977d63c9f8c829924d7144f09115513880551ab9373402f473c6374ca76adeeec5f94c1309c2dc276651c6bf9b8842ff1f23178e7fa82bdfacf521c8eebf3b3f3880b03f09748b7c731a55686970bac80a32e2c71de562294d10bb21125773c302749e900e314657a3eca0c63f57ade4d43fe9d17ac1c632ca8721f31a7023b2dd9928b7411cb41437cb996c44bacf875e6eca70fa1caa506bbc41de5045f559db28352be75315fd142bdbda06081edfd5e88160949b9eea27140a40107a1806b83f987befd6e4138f6835fbf8d7d90fb733558915de2af31c08eed0077040d29d34f1ea17346d9ca58e86190576609534f84be37aa47ed3c9fdc3152fe002ce0e55594ff4f5734c39ebd27655cddd6be1d0a2391d262343eeceb1046650a1b430b0332362a754c2000b9b619219710c7b5681f5e2041f1547d4acbccf5ac790176e8331427fa11b6463791b3b0d90cec7ecd016ca4b921754d27881d719cb6eec803cdd7a32fabd87bd9cf702e27d7767d437b59686ca10d0978b78bdec62f13d102fa621274bba5120546de4fd51b0ff40651ca7d7bfef542b706093065b7c5c44c1ea9f616e5b2c6b086da532687087f638912e39006c81d1c6599d1730c79709aababec58bbfafb7f0462d15a209693bf7c14e6f4918158e1ee357a32cb6b873d953ad36bdf0b28fcf3b157c6de9536fb172a0c009872b759df4d048f7843016371a25e972cb2d8b4e19236ff232889d02438b386f9aecf523854d93e54372a0c8195f86694ddb50bb09a0b49de057e173c1516674eb6cd8d30b4edd30eaa2da770cf86fd0d081cda99cd6e2d8496e29e15ad5d3df6b924918809a88b4284c3bb6d8eee3dddf98a9c319a738424bc3f74974117d276e83bf0a4461e1c14360b3f7417872be3072a75726f100eb7214549e9f4e5cf6e8af82e9432d202c9a41bf7f6e8123442309b983e9d15dce55af4f1befcff19aab6bd78c1ac518f56af5269646d27480b45922a7f5a13afc04f770db257c75084636c1ab1ac640c87f9281f348ddf27370d3beea539e273a7b1572f4c370578719bd045e1f810ac63901989ba8d5c6bd2da2f74f940cef28cd6cc186dba5b4c3a9ef37cb5e933b76ba721118f21a6f5bff0312f11c6d16a3ac86c829dde77a797556ba30b279e1873b1549db9af5cef31a79e2e1e871bf7265d2febde1a177439ade54e2d98ce9b0e69ec769e6505910194774bf7e5e77e49608ee74c3ff0227ccae49ae296a58ec82fc072aac1b663f277a2f209c5de2ee4c99f2a9d9458787f6051f542681c8a0f2d0a785d11eef685b5c289e2440bdfef47711d639aa234a98f5724b6af39cbcbad5ec1c8612caaf1258f8de9efd32806d4f3cdc2cddac85614be49b65e2042c392527270c4cc83f69669b3f90082801c7bff79eab109de1d79c541f7d69f99396cfe76d8434dea2a374b5720341e98b5e3f4a29b9e1e6333eff7940dcab3db6cfd7177c35a131646361df7df8643544dff679e257516387618d120658cf89cd5c10602bd714957b3c0515e5563ee7caea9ad6cc8c5b0f461e8007e7b2317933a28c1a18d3cb243271161c6e06398f2c4973a10af52ebff40d0e7b09fd1233cb6746c0f7c44a684ff32d59534eddf83944747fc87c128051abf05d2a7f798ecd911700ffa239165809c3bebc3b096a020f1cc1f26ba4fe4b0aa474a928acf4e63b203deab52d8802e332b89be29345d870a21f502e034a3932d1633d3070ce75f111367e44af8bdcf808a30b8c66dd76408dc3b6655943b0deec5fde5cb024b243873f662fde64b0eb81204df0db284f42d5dbc72d75cf8a0e8b00c0372c47547074c5810c2e629a8c61a77ef217a742be40b23cf8aaa977ab351cea44393cb4d751e9b2c059d4d46b206775a47009f4e2df15239c2eabbf3830633576510520dc73268f9253082ce915dfabf4a15a36a06402f5be988ede11a8e16b0141a0399e6a9c9325647abef7100f876713b5d0422f60aeef3ec3eda6bd5e1bcd3065334e9e500ace3b05aacb9ee235ac2eebf4908fd4e2a1197ca1265ea6883924ba40a0d686a842c4c507928f53f307a0919aef29a4f1e9b74554a12ce0e1f63b8fd8d477cccb7b944271a351f1ff9b136f1b1fe3cb0fb3dc2771e2176cc99d4507c046f813a4d554c1af0cf77a742f1aaf1939555d791053190db66ddc9b318d87d3253ee251e9e824e1d307599fcd69bca4a3ad50f25ea8b3c3e660fd0d50f643e077d567be89c0ea02ee3664acf26c3b0474def084d35e4bac70cf3fe4df9e1390c4da3ca9687ac14f23fda276875fdc635026ace0617886472c6266bc5722581a1db7e03896e00cf24fe126d9df36868030084cf3f498ebec3c19165856e0e101f0b25b37b384b9ffe2cca2a45aa4fb5fce255adc55cd71243ad386947715529e80ba98b8add55bedc742bcbcc1c840f3c441e17bd702b8c2160d8951053b6bf8d1a021694c420748720a702fcffe64d44d444048de0be5ee62007c616919e0f03210e37d48da24214590c397c2f75716ed18fa8f59c3afdc4381a0a32113f0ea49673012969855fc407ef9bf3e8765f885349f1055241157b336449a109befadc5da2b95a1da85abcc897c89642e6c946e3b9bcd17cd71b8ff3e14c15d271e7e8ba4352053481f373da10d30b007dd566690915a2f37f4cfda34bdd992ceb45cd825a7a90ec41312a8c3d158c3fe75165acff4e8e34067a8275cdb6b031beb6dd219cb0d4dc96d571c938ecac850e5c3d105d5f7665f33e22055f219055fc5d7c2e4a4fd3f6dea6a4a0a7f7b35c15c02f293a057413cb36d96a8bdcdfe71f1ef5e50e516d051b1bfe21594e064bb1bbe28425f10a8102fbdf5d0164d503521b3629d5f1e83e3a6b18d54462890451e718007039486b57b5a8fec290ccc8d37f7ed73c14d442ecb325ba774b843b2aee003ee6919d9ebecf7292160ffface504a7052000aa4a795c4b9b535dfad7fa6ff9180e9df71c95c67b3294309ce6bfeb38c81d06111e96c8eb079b233dc0c3057c3e91d55737c45c5950a4c4ebe47eaf29558f27b424419d7d733c48b334f73580a39280651c297f973a5c1325f17eeecfbc28e7eb9cd5355ee9bf9ddd74e20503cd2aeae5b8975ee164c885e58dbe1aa9e1daf4e6227ae67dfd2cc8968e1b325fe7fc50675b5b506cca0c6c6ad9deb79bae2dc37475e3ef35ebd828cf484f231e7ab54d9afcc3dedc9087debc155cd1c60737a02a55200127a988460f25b84ffd8cd79b4dc0517e18513e8bd3de2d39f2c28bfb179e2a342ad4c98fac50d80fc39deef984ffce0e13fd50879f3bfab80802557a56be1246ef1a94120fe6f92ad9ec0aaee169a9607c536169ee99e6fd90084fe22b9a5fa920886c105f11572ebdc77012a34b1b5b000611cd357cce689bf03fbb3fdc97886449ec97ac6244060372469579f63abdd1e1bcde52722fd393225dec9d0d76e6472e02f2550bbac4d18878fa64c2b864294035d56f4f5ccbc0471f2f1e67ab0b38f138d48562632483b3f77ce8666f788ac9dac5f481d3e9b5ba628d3da88c86dca9e099ac512b44639bfdbbf87aef666403a2895a8efe2d44bb2a892a31d134a8147c3463ca719ae12466ad061e93430687ca189c0c83357e48dbaa912c66f51ec048f2e7e99f5d622cc7ff0fe2d5039fb5b0a976cc6fcef5d1ee5cffa01bcd306c4c57d350f6dc3c2ef45ffb59b9f2a3f17f6a1562023054aeddf2ed1cd4c135c0b5eb6e4080fffd0141984e835007a8e21838d93391d605f9db455490ff401578519608606acfa68182dd59feac0a1b7a59ec449266ec0c2472f0dff3538558243eb7b54ce128eba1c0540933d4f219db5f9fd815f7f38def8f8a18fa8aa46bc46473953354d809521c7767e3c4055cdcb524b803128c7a13dbaca12a03ecebc7118ef9ebb6548c473ac7a9662724c039bc068a2a40fa008c83e858cdb04e4f24a07ffd3c9402fa6ea51042c18fb299719a61c222e51b7bbc194dd080041140324f61a7b73fe21c7a984206ed7dd3c02b2db3ccc5a03a0c8ff03b74f2d10aee77de80f1c6ef8e48aa1f8858c37ef75eb74b096c2f21bce374ce1eb51c5ae09b2c378e90ceb100bc2b492bb23e9aed12734b89c99c7973c188fc583779b77adb7271c589b1425473f4f36044239e123e65fff0d2031873d2fbfcd89b6c449b25af8d68d33ebc3fd816d254598853cfd8ba8e2d509c4a72313b84ebee68ddf47a85ecbeb12f44b4bbfd0132d633568baa7d9299ef649bf0c9490d5b54fe6b284f49746286fd0a15fec0a855a2dce7d5cda7a5630029bf4a76e934d8d5204d6e53c32b121145ef12837986e7ab1132d98e85f90fcf590755491a9ec478eecdc7a3d24620c4254768cf723901b33ff98fda1bf744e27aa1f49c7e08d6ea93735a7da1c4da05f70904d60a4be9b66458360e9100380ef0f43449733449b92af7270cdaebaed3ddca03e14a22d53c485f60686644d39b13032f4898d6db581933b9ae5b66337268fadca088880b3b0c7c562f8b1ce891f87f38266151f20160f0ce7f8abcd341c8df55a1c65bf732545ee88ca41aa3cbd56e10eeb609c0702e4a88908ea5fd6dd19b4873", 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 5.42636078s ago: executing program 3 (id=570): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}}], 0x1, 0x20008000) shutdown(r0, 0x1) close(0x3) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214e, 0xc000, 0x0, 0xc6}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) io_uring_enter(r1, 0x2219, 0x1adf, 0x16, 0x0, 0x0) 5.319298717s ago: executing program 0 (id=571): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x8, 0xb, 0x7ffc0001}]}) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x62, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 5.287988604s ago: executing program 4 (id=572): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffffe}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)={{}, {0x20, 0xffff}, [], {0x4, 0x7}}, 0x24, 0x3) umount2(&(0x7f0000000000)='./file0\x00', 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x20, 0x10, 0xffffffff, 0x5, {{0xb, 0x4, 0x1, 0x8, 0x2c, 0x64, 0x0, 0x9, 0x29, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x34}, {[@ssrr={0x89, 0x17, 0xe, [@broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty]}]}}}}}) sendto$packet(r1, &(0x7f0000000200)="41042a2a5464eea3d2144d6f936f6f67dfc0e37b3ca905aea280efc66362ecc657cb1425b3235164e6419747b817076757bf2bc7fd381c67f8c997b6c6397c7d8e438e1b99fc3a6cb134d93ef16189a61cc0b8b5ea249066aad31798fb73ef412760c3628d9c087f2705c1bfa21b56259fceae046d5fcb2be1a5c8d2ebe5dc7b331b79b8ab343f68f023d5bcccbc532864b0ada3fed8fd12", 0x98, 0x24004800, &(0x7f0000000480)={0x11, 0x9, r2, 0x1, 0xb8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 4.787446969s ago: executing program 4 (id=573): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080)=r2, 0x12) 4.754767579s ago: executing program 5 (id=574): listen(0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x2, 0x9, 0x3) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket(0x28, 0x801, 0x28) writev(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x80c00) syz_usb_connect(0x4, 0x51, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0x541b, 0x0) 4.736381565s ago: executing program 2 (id=575): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0xfffffff1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x819b}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x6, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @remote}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000180)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c5805000000451697efe42811ee1df0fa9264f7d866b19705487b00", 0xb2, 0xfffffff7, 0x4, 0xe}, 0x3c) 4.672665176s ago: executing program 0 (id=576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x4dec, &(0x7f0000000000)={0x0, 0x54c4, 0x8, 0x0, 0x2ff}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) 4.64404966s ago: executing program 3 (id=577): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f0000000300)=""/220, &(0x7f0000000100)=0xdc) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0xa) fchdir(r2) chdir(&(0x7f00000000c0)='./sys\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x104) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r4, 0x2000000) getdents(r3, &(0x7f00000000c0)=""/29, 0x1d) 3.390454261s ago: executing program 0 (id=578): syz_usb_connect(0x5, 0x24, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x100) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x84) close_range(r0, 0xffffffffffffffff, 0x0) 3.39015311s ago: executing program 4 (id=579): syz_open_procfs$namespace(0x0, 0x0) r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) write$cgroup_pid(r4, &(0x7f0000000140)=r0, 0x12) 3.313977149s ago: executing program 3 (id=580): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffff8]}, 0x8, 0x80000) r2 = syz_io_uring_setup(0xf0b, &(0x7f0000000400)={0x0, 0x8000595d, 0x1000, 0x20003, 0x1000051, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x110a}, 0x1}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x31, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000002f40)=""/4097, 0x1001) 3.196037982s ago: executing program 5 (id=581): r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 3.139003523s ago: executing program 2 (id=582): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1e3) r1 = landlock_create_ruleset(&(0x7f0000000200)={0x6490, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 2.873537576s ago: executing program 2 (id=583): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) listen(r1, 0x5) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e23, 0x311e7a3, @remote, 0x3}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) listen(r0, 0x5) 2.514176177s ago: executing program 2 (id=584): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x65fa50457c0da9b7) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) 2.501821208s ago: executing program 4 (id=585): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x8) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000001", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x9, &(0x7f0000000300)=ANY=[@ANYBLOB="bf16000000000000b702000064000000bf6100000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000b704000001000000850000003c00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r3, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r2}, 0x20) sendto(r2, &(0x7f0000000700)='a', 0x1, 0x0, 0x0, 0x0) 2.416309954s ago: executing program 3 (id=586): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0x0, 0x160, 0x1f8, 0x290, 0x328, 0xc8, 0x160, 0x1f8, 0x290, 0x328, 0x6, 0x0, {[{{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x420) r1 = socket$inet6(0xa, 0x80000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6820681b, 0x48, &(0x7f0000000040)="26f84f854dea4ae84b2d9a2a86f9dd326e2b821c88e8d7967ccaf9919d97b2cec76fc96de3ac57a371aebe604f072d3c0a04f411685a06a8a4ae81b558ba9c96bfc2e7c651026eb4", 0x0, 0x1}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x1000}]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) 2.011650839s ago: executing program 2 (id=587): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10003, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, 0x0, 0x0) 1.610647141s ago: executing program 5 (id=588): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x10, 0xf, 0x3c}, 0x2c) 1.552090109s ago: executing program 3 (id=589): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.251919472s ago: executing program 4 (id=590): socket$kcm(0x10, 0x2, 0x4) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 1.114829828s ago: executing program 5 (id=591): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.013885549s ago: executing program 3 (id=592): epoll_create1(0x80000) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r1) 944.375824ms ago: executing program 2 (id=593): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 422.224233ms ago: executing program 0 (id=594): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0)={0x0, 0xd8}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 256.207644ms ago: executing program 0 (id=595): ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20980, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x85, 0x6, 0x0, 0x3, 0x10003, 0x3d, 0x400200cc4, 0xffd, 0x4, 0x9, 0x8001, 0x4, 0x2, 0xfffffffffffffffc, 0x6a, 0x8d], 0x60000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=596): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x200000005c831, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x1000000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='vers=4,minorversion=0,addr=127.0.0.1,port=2050\x00') timer_create(0x4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts. [ 92.685614][ T5574] cgroup: Unknown subsys name 'net' [ 92.927338][ T5574] cgroup: Unknown subsys name 'cpuset' [ 93.000146][ T5574] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.954585][ T5574] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.294622][ T31] cfg80211: failed to load regulatory.db [ 97.816599][ T5592] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.838314][ T5593] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.879632][ T5591] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.882911][ T5591] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.883903][ T5591] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.884797][ T5591] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.892575][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.926087][ T5591] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.942461][ T5591] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.945253][ T5591] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.945428][ T5591] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.947296][ T5591] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.947921][ T5591] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.965927][ T5591] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.972425][ T5591] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.983890][ T5591] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.993976][ T5592] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.057254][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.071899][ T5592] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.103655][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.169549][ T5592] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.218299][ T5602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.219132][ T5602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.233020][ T5602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.242932][ T5602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.142333][ T5599] Bluetooth: hci1: command tx timeout [ 100.229558][ T5602] Bluetooth: hci0: command tx timeout [ 100.229751][ T5599] Bluetooth: hci2: command tx timeout [ 100.300293][ T5599] Bluetooth: hci4: command tx timeout [ 100.390408][ T5599] Bluetooth: hci3: command tx timeout [ 101.052041][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.053354][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.053581][ T5594] bridge_slave_0: entered allmulticast mode [ 101.055746][ T5594] bridge_slave_0: entered promiscuous mode [ 101.137489][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.137577][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.137957][ T5594] bridge_slave_1: entered allmulticast mode [ 101.147287][ T5594] bridge_slave_1: entered promiscuous mode [ 101.167890][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.168045][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.168611][ T5587] bridge_slave_0: entered allmulticast mode [ 101.191224][ T5587] bridge_slave_0: entered promiscuous mode [ 101.245101][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.245268][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.245405][ T5587] bridge_slave_1: entered allmulticast mode [ 101.247311][ T5587] bridge_slave_1: entered promiscuous mode [ 101.289929][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.290102][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.290230][ T5588] bridge_slave_0: entered allmulticast mode [ 101.292162][ T5588] bridge_slave_0: entered promiscuous mode [ 101.378273][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.378399][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.378575][ T5588] bridge_slave_1: entered allmulticast mode [ 101.388884][ T5588] bridge_slave_1: entered promiscuous mode [ 101.426847][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.452177][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.452303][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.452475][ T5590] bridge_slave_0: entered allmulticast mode [ 101.454799][ T5590] bridge_slave_0: entered promiscuous mode [ 101.494578][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.494726][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.495077][ T5598] bridge_slave_0: entered allmulticast mode [ 101.496960][ T5598] bridge_slave_0: entered promiscuous mode [ 101.519653][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.542433][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.542863][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.542967][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.543100][ T5590] bridge_slave_1: entered allmulticast mode [ 101.546631][ T5590] bridge_slave_1: entered promiscuous mode [ 101.592622][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.592724][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.593158][ T5598] bridge_slave_1: entered allmulticast mode [ 101.595220][ T5598] bridge_slave_1: entered promiscuous mode [ 101.640349][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.680721][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.754504][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.756866][ T5594] team0: Port device team_slave_0 added [ 101.787631][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.800631][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.827866][ T5594] team0: Port device team_slave_1 added [ 101.839935][ T5587] team0: Port device team_slave_0 added [ 101.855193][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.861412][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.913200][ T5587] team0: Port device team_slave_1 added [ 101.949072][ T5588] team0: Port device team_slave_0 added [ 102.026122][ T5588] team0: Port device team_slave_1 added [ 102.027715][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.027728][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.027749][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.104244][ T5590] team0: Port device team_slave_0 added [ 102.108878][ T5598] team0: Port device team_slave_0 added [ 102.133175][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.133189][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.133209][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.134318][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.134330][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.134350][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.137631][ T5590] team0: Port device team_slave_1 added [ 102.151795][ T5598] team0: Port device team_slave_1 added [ 102.230363][ T5599] Bluetooth: hci1: command tx timeout [ 102.269243][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.269257][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.269277][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.299972][ T5602] Bluetooth: hci0: command tx timeout [ 102.300250][ T5599] Bluetooth: hci2: command tx timeout [ 102.361268][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.361281][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.361302][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.379789][ T5599] Bluetooth: hci4: command tx timeout [ 102.455609][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.455627][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.455658][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.469630][ T5599] Bluetooth: hci3: command tx timeout [ 102.834726][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.834741][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.834761][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.837087][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.837105][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.837135][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.966505][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.966518][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.966539][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.967810][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.967826][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.967856][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.109871][ T5594] hsr_slave_0: entered promiscuous mode [ 103.111217][ T5594] hsr_slave_1: entered promiscuous mode [ 103.166049][ T5587] hsr_slave_0: entered promiscuous mode [ 103.167075][ T5587] hsr_slave_1: entered promiscuous mode [ 103.168300][ T5587] debugfs: 'hsr0' already exists in 'hsr' [ 103.168418][ T5587] Cannot create hsr debugfs directory [ 103.256527][ T5588] hsr_slave_0: entered promiscuous mode [ 103.257713][ T5588] hsr_slave_1: entered promiscuous mode [ 103.258486][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 103.258506][ T5588] Cannot create hsr debugfs directory [ 103.362206][ T5598] hsr_slave_0: entered promiscuous mode [ 103.363212][ T5598] hsr_slave_1: entered promiscuous mode [ 103.363904][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 103.363922][ T5598] Cannot create hsr debugfs directory [ 103.383689][ T5590] hsr_slave_0: entered promiscuous mode [ 103.387593][ T5590] hsr_slave_1: entered promiscuous mode [ 103.398969][ T5590] debugfs: 'hsr0' already exists in 'hsr' [ 103.399051][ T5590] Cannot create hsr debugfs directory [ 104.301683][ T5599] Bluetooth: hci1: command tx timeout [ 104.380245][ T5599] Bluetooth: hci2: command tx timeout [ 104.380310][ T5599] Bluetooth: hci0: command tx timeout [ 104.459736][ T5602] Bluetooth: hci4: command tx timeout [ 104.543234][ T5602] Bluetooth: hci3: command tx timeout [ 104.547891][ T5594] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.602752][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.620482][ T5594] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.645219][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.648185][ T5594] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.674811][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.705214][ T5594] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.735036][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.855683][ T5588] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.884766][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.898148][ T5588] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.925819][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.937172][ T5588] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.964095][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.017424][ T5588] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.047221][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.225646][ T5587] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.263907][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.281831][ T5587] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.323558][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.328691][ T5587] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.375154][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.411172][ T5587] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.444870][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.605046][ T5598] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.644563][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.666154][ T5598] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.698938][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.714032][ T5598] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.753688][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.798960][ T5598] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.844943][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.983745][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.037580][ T5590] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.078386][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.096939][ T5590] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.135218][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.152746][ T5590] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.177081][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.194337][ T5590] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.225815][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.286230][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.338419][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.360570][ T1455] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.360744][ T1455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.380750][ T5602] Bluetooth: hci1: command tx timeout [ 106.461509][ T5602] Bluetooth: hci2: command tx timeout [ 106.470458][ T5602] Bluetooth: hci0: command tx timeout [ 106.508998][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.517155][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.550065][ T5602] Bluetooth: hci4: command tx timeout [ 106.607528][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.621346][ T5602] Bluetooth: hci3: command tx timeout [ 106.665301][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.665451][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.719151][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.747822][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.747946][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.880748][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.945467][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.966988][ T1404] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.967408][ T1404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.088237][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.088463][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.213684][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.306935][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.323709][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.323834][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.406832][ T1434] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.406943][ T1434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.552873][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.659091][ T1416] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.675083][ T1416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.783227][ T1416] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.783384][ T1416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.329017][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.816304][ T5594] veth0_vlan: entered promiscuous mode [ 108.941280][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.967640][ T5594] veth1_vlan: entered promiscuous mode [ 109.298669][ T5594] veth0_macvtap: entered promiscuous mode [ 109.450445][ T5594] veth1_macvtap: entered promiscuous mode [ 109.478506][ T5588] veth0_vlan: entered promiscuous mode [ 109.515846][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.629004][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.648635][ T5588] veth1_vlan: entered promiscuous mode [ 109.734274][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.804296][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.916582][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.064060][ T5588] veth0_macvtap: entered promiscuous mode [ 110.174223][ T5588] veth1_macvtap: entered promiscuous mode [ 110.195376][ T5587] veth0_vlan: entered promiscuous mode [ 110.266491][ T5598] veth0_vlan: entered promiscuous mode [ 110.534197][ T5587] veth1_vlan: entered promiscuous mode [ 110.629626][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.630905][ T5598] veth1_vlan: entered promiscuous mode [ 110.699166][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.746858][ T1066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.746889][ T1066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.982591][ T5587] veth0_macvtap: entered promiscuous mode [ 111.067883][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.067904][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.184354][ T5587] veth1_macvtap: entered promiscuous mode [ 111.214876][ T5598] veth0_macvtap: entered promiscuous mode [ 111.292315][ T5590] veth0_vlan: entered promiscuous mode [ 111.320611][ T5598] veth1_macvtap: entered promiscuous mode [ 111.412437][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.412461][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.452350][ T5590] veth1_vlan: entered promiscuous mode [ 111.487799][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.554486][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.600630][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.663862][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.753278][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.753302][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.144457][ T5590] veth0_macvtap: entered promiscuous mode [ 112.587283][ T5590] veth1_macvtap: entered promiscuous mode [ 113.108060][ T1066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.108085][ T1066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.220844][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.228317][ T5791] sctp: [Deprecated]: syz.3.7 (pid 5791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.228317][ T5791] Use struct sctp_sack_info instead [ 113.531204][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.531228][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.566165][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.986097][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.986119][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.183840][ T1455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.183866][ T1455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.505180][ T281] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.639709][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.731188][ T1066] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.960358][ T1066] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.052800][ T1066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.052820][ T1066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.150010][ T281] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.220175][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.221462][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.224766][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.267758][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.268109][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.268520][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.296443][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.297035][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.581273][ T1404] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.583253][ T1404] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.655070][ T1066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.655116][ T1066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.763833][ T1416] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.765878][ T1416] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.766048][ T1416] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.766718][ T1416] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.935355][ T1416] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.920281][ T5829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 116.920319][ T5829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 119.288704][ T5863] tipc: Started in network mode [ 119.288729][ T5863] tipc: Node identity ac14140f, cluster identity 4711 [ 119.597314][ T5863] tipc: Enabled bearer , priority 10 [ 120.646264][ T5720] tipc: Node number set to 2886997007 [ 121.458497][ T198] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.478854][ T5319] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 121.784328][ T198] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 121.803074][ T5319] usb 5-1: New USB device found, idVendor=07c4, idProduct=a000, bcdDevice= 0.01 [ 121.849142][ T5319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.849169][ T5319] usb 5-1: Product: syz [ 121.849183][ T5319] usb 5-1: Manufacturer: syz [ 121.849198][ T5319] usb 5-1: SerialNumber: syz [ 121.946809][ T198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.946882][ T198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.340335][ T198] usb 1-1: config 0 descriptor?? [ 122.381522][ T5319] ums-datafab 5-1:1.0: USB Mass Storage device detected [ 122.662320][ T198] usbhid 1-1:0.0: can't add hid device: -71 [ 122.662458][ T198] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 122.821629][ T198] usb 1-1: USB disconnect, device number 2 [ 122.853592][ T5319] ums-datafab 5-1:1.0: This device (07c4,a000,0001 S 06 P f2) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 122.853592][ T5319] Please send a copy of this message to and [ 122.896468][ T5319] scsi host1: usb-storage 5-1:1.0 [ 123.279753][ T5319] usb 5-1: USB disconnect, device number 2 [ 123.941640][ T5925] fuse: Bad value for 'fd' [ 124.005159][ T198] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 124.710732][ T5892] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 124.932709][ T5892] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 124.934752][ T5892] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.999646][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.999679][ T5892] usb 2-1: Product: syz [ 124.999696][ T5892] usb 2-1: Manufacturer: syz [ 124.999875][ T5892] usb 2-1: SerialNumber: syz [ 125.678074][ T5892] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 126.466422][ T5892] gspca_mr97310a: reg write [19] error -71 [ 126.466520][ T5892] mr97310a 2-1:1.0: probe with driver mr97310a failed with error -71 [ 126.586601][ T5966] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 126.641665][ T5892] usb 2-1: USB disconnect, device number 2 [ 129.230013][ T6014] netlink: 'syz.4.81': attribute type 7 has an invalid length. [ 130.906733][ T6037] syz.1.87 (6037) used greatest stack depth: 18256 bytes left [ 132.281490][ T6027] syzkaller0: entered promiscuous mode [ 132.281524][ T6027] syzkaller0: entered allmulticast mode [ 133.102794][ T6064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.190113][ T6064] warning: `syz.2.96' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 133.535573][ T6062] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 133.636777][ T6069] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 134.245273][ T6079] MTD: Couldn't look up 'mtdblock0': -2 [ 137.759658][ T5725] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 137.990422][ T5725] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 137.992041][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.011175][ T1252] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 138.116454][ T5725] usb 2-1: USB2VGA dongle found at address 3 [ 138.143465][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'. [ 138.180265][ T1252] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 138.181761][ T1252] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.181788][ T1252] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 138.181839][ T1252] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.233778][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.233879][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.346638][ T1252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.346669][ T1252] usb 5-1: Product: syz [ 138.346686][ T1252] usb 5-1: Manufacturer: syz [ 138.346702][ T1252] usb 5-1: SerialNumber: syz [ 138.498462][ T5725] usb 2-1: Allocated 8 output buffers [ 138.515011][ T1252] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -22 [ 138.776458][ T1252] usb 5-1: USB disconnect, device number 3 [ 138.849541][ T5722] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 139.035760][ T5722] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 139.053788][ T5722] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.053847][ T5722] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 139.053934][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 139.053967][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 139.053991][ T5722] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 139.127334][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 139.127365][ T5722] usb 4-1: Product: syz [ 139.127607][ T5722] usb 4-1: Manufacturer: syz [ 139.127625][ T5722] usb 4-1: SerialNumber: syz [ 139.211179][ T5722] usb 4-1: config 0 descriptor?? [ 139.315396][ T5725] usb 2-1: Failed to early initialize device [ 139.446467][ T5725] usb 2-1: USB disconnect, device number 3 [ 139.517994][ T5722] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 139.518022][ T5722] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 139.803259][ T5722] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 139.803286][ T5722] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 139.803306][ T5722] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 140.159542][ T5722] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 140.159607][ T5722] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 140.160061][ T5722] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 140.160420][ T5722] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 140.239028][ T5722] usb 4-1: USB disconnect, device number 2 [ 140.269584][ T6164] tipc: Started in network mode [ 140.269607][ T6164] tipc: Node identity 2000004, cluster identity 4711 [ 140.269621][ T6164] tipc: Node number set to 33554436 [ 141.295503][ T6186] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 142.822550][ T5892] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 142.989072][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 142.990109][ T5892] usb 5-1: New USB device found, idVendor=41de, idProduct=4351, bcdDevice=84.53 [ 142.991632][ T5892] usb 5-1: config 12 has an invalid interface number: 159 but max is 0 [ 142.991662][ T5892] usb 5-1: config 12 has no interface number 0 [ 142.991713][ T5892] usb 5-1: config 12 interface 159 altsetting 234 endpoint 0x1 has an invalid bInterval 28, changing to 7 [ 142.991746][ T5892] usb 5-1: config 12 interface 159 altsetting 234 bulk endpoint 0xC has invalid maxpacket 8 [ 142.991775][ T5892] usb 5-1: config 12 interface 159 altsetting 234 bulk endpoint 0xF has invalid maxpacket 32 [ 142.991802][ T5892] usb 5-1: config 12 interface 159 has no altsetting 0 [ 143.007884][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.007968][ T5892] usb 5-1: Product: syz [ 143.008012][ T5892] usb 5-1: Manufacturer: syz [ 143.008054][ T5892] usb 5-1: SerialNumber: syz [ 143.255665][ T6202] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 143.255914][ T6202] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 143.599077][ T5892] usb-storage 5-1:12.159: USB Mass Storage device detected [ 143.805947][ T5892] usb 5-1: USB disconnect, device number 4 [ 144.103001][ T6226] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 144.222508][ T1252] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 144.343918][ T5602] Bluetooth: hci3: unexpected event 0x04 length: 9 < 10 [ 144.344086][ T5602] Bluetooth: hci3: unexpected event 0x03 length: 10 < 11 [ 144.439495][ T1252] usb 1-1: Using ep0 maxpacket: 32 [ 144.440393][ T1252] usb 1-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=c7.8c [ 144.443398][ T1252] usb 1-1: config 164 has an invalid interface number: 195 but max is 0 [ 144.443427][ T1252] usb 1-1: config 164 has no interface number 0 [ 144.443470][ T1252] usb 1-1: config 164 interface 195 has no altsetting 0 [ 144.447976][ T1252] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.448000][ T1252] usb 1-1: Product: syz [ 144.448013][ T1252] usb 1-1: Manufacturer: syz [ 144.448025][ T1252] usb 1-1: SerialNumber: syz [ 146.783811][ T1252] usb 1-1: USB disconnect, device number 4 [ 147.868365][ T6282] bond1: entered allmulticast mode [ 147.874692][ T5725] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 148.038429][ T6288] wireguard0: entered promiscuous mode [ 148.038450][ T6288] wireguard0: entered allmulticast mode [ 148.038941][ T6288] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 148.046160][ T5725] usb 5-1: Using ep0 maxpacket: 32 [ 148.053371][ T5725] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 148.089922][ T5725] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 148.089961][ T5725] usb 5-1: config 0 has no interface number 0 [ 148.090010][ T5725] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 148.090040][ T5725] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 148.090066][ T5725] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 148.090084][ T5725] usb 5-1: config 0 interface 196 has no altsetting 0 [ 148.094630][ T5725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.094663][ T5725] usb 5-1: Product: syz [ 148.094674][ T5725] usb 5-1: Manufacturer: syz [ 148.094685][ T5725] usb 5-1: SerialNumber: syz [ 148.189206][ T5725] usb 5-1: config 0 descriptor?? [ 148.240626][ T6278] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 148.263752][ T6288] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 148.361359][ T6299] netlink: 24 bytes leftover after parsing attributes in process `syz.0.163'. [ 148.529187][ T6300] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 148.682640][ T5725] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 148.683076][ T5725] ipheth 5-1:0.196: probe with driver ipheth failed with error -22 [ 148.884349][ T6278] Zero length message leads to an empty skb [ 148.956562][ T5725] usb 5-1: USB disconnect, device number 5 [ 152.210244][ T37] audit: type=1326 audit(1787029049.283:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6346 comm="syz.0.180" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3e0f3e0d9 code=0x0 [ 153.008548][ T6360] ======================================================= [ 153.008548][ T6360] WARNING: The mand mount option has been deprecated and [ 153.008548][ T6360] and is ignored by this kernel. Remove the mand [ 153.008548][ T6360] option from the mount to silence this warning. [ 153.008548][ T6360] ======================================================= [ 153.671563][ T6369] process 'syz.4.187' launched './file1' with NULL argv: empty string added [ 155.955852][ T6397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.974150][ T6397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.977228][ T6397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.988441][ T6396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.306265][ T43] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.033739][ T5602] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.106665][ T5602] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.123401][ T5602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.208354][ T5602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.218704][ T5602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.696735][ T6405] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 157.696767][ T6405] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 158.350340][ T43] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.909083][ T6428] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 159.323359][ T43] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.590445][ T5599] Bluetooth: hci4: command tx timeout [ 161.670030][ T5599] Bluetooth: hci4: command tx timeout [ 162.875805][ T43] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.431022][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 163.601977][ T31] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 1.00 [ 163.606321][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.715271][ T31] usb 4-1: USB2VGA dongle found at address 3 [ 163.730867][ T31] usb 4-1: Allocated 8 output buffers [ 163.749471][ T5599] Bluetooth: hci4: command tx timeout [ 164.117336][ T31] usb 4-1: Failed to early initialize device [ 164.202316][ T31] usb 4-1: USB disconnect, device number 3 [ 165.819391][ T5599] Bluetooth: hci4: command tx timeout [ 166.150406][ T1252] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 166.305842][ T1252] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 166.307140][ T1252] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.307177][ T1252] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.307208][ T1252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.353913][ T1252] usb 5-1: config 0 descriptor?? [ 166.566400][ T1252] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 166.634927][ T6552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.655828][ T6552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.735085][ T31] usb 5-1: USB disconnect, device number 6 [ 167.241956][ T6566] netlink: 'syz.3.238': attribute type 11 has an invalid length. [ 167.359993][ T43] bridge_slave_1: left allmulticast mode [ 167.360180][ T43] bridge_slave_1: left promiscuous mode [ 167.393923][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.839607][ T43] bridge_slave_0: left allmulticast mode [ 167.839643][ T43] bridge_slave_0: left promiscuous mode [ 167.839864][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.467799][ T6584] syz.2.244 uses obsolete (PF_INET,SOCK_PACKET) [ 170.411676][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.552053][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.573467][ T43] bond0 (unregistering): Released all slaves [ 171.348270][ T6600] bridge_slave_0: left allmulticast mode [ 171.348305][ T6600] bridge_slave_0: left promiscuous mode [ 171.371712][ T6600] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.665169][ T6600] bridge_slave_1: left allmulticast mode [ 171.665201][ T6600] bridge_slave_1: left promiscuous mode [ 171.665785][ T6600] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.086735][ T6600] bond0: (slave bond_slave_0): Releasing backup interface [ 172.114011][ T6618] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.255'. [ 172.114035][ T6618] netlink: 116 bytes leftover after parsing attributes in process `syz.2.255'. [ 172.198127][ T6600] bond0: (slave bond_slave_1): Releasing backup interface [ 172.379142][ T6600] team0: Port device team_slave_0 removed [ 172.457763][ T6600] team0: Port device team_slave_1 removed [ 172.458587][ T6600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.458607][ T6600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.509006][ T6600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.509037][ T6600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.558750][ T6600] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 175.014417][ T6646] fuse: fd is not a fuse device [ 175.099454][ T5722] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 175.259543][ T5722] usb 4-1: Using ep0 maxpacket: 16 [ 175.260713][ T5722] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 175.262024][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 175.264566][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.264591][ T5722] usb 4-1: Product: syz [ 175.264606][ T5722] usb 4-1: Manufacturer: syz [ 175.264622][ T5722] usb 4-1: SerialNumber: syz [ 175.342095][ T5722] usb 4-1: config 0 descriptor?? [ 175.391415][ T5722] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 175.391474][ T5722] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 175.594578][ T6637] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 176.017680][ T5722] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 176.606379][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.268'. [ 176.703280][ T5722] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 176.703323][ T5722] em28xx 4-1:0.0: board has no eeprom [ 177.009439][ T5722] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 177.009469][ T5722] em28xx 4-1:0.0: dvb set to bulk mode. [ 177.072426][ T5725] em28xx 4-1:0.0: Binding DVB extension [ 177.154768][ T5722] usb 4-1: USB disconnect, device number 4 [ 177.158205][ T5722] em28xx 4-1:0.0: Disconnecting em28xx [ 177.323434][ T43] hsr_slave_0: left promiscuous mode [ 177.341656][ T43] hsr_slave_1: left promiscuous mode [ 177.342979][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.383095][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.593836][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.593867][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.674142][ T5725] em28xx 4-1:0.0: Registering input extension [ 177.677247][ T5722] em28xx 4-1:0.0: Closing input extension [ 178.325374][ T5599] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 178.325425][ T5599] CPU: 1 UID: 0 PID: 5599 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 178.325453][ T5599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.325469][ T5599] Workqueue: hci1 hci_rx_work [ 178.325530][ T5599] Call Trace: [ 178.325539][ T5599] [ 178.325549][ T5599] dump_stack_lvl+0xe8/0x150 [ 178.325589][ T5599] sysfs_create_dir_ns+0x271/0x2a0 [ 178.325621][ T5599] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 178.325654][ T5599] ? rt_spin_unlock+0x163/0x200 [ 178.325681][ T5599] kobject_add_internal+0x62c/0xce0 [ 178.325709][ T5599] kobject_add+0x163/0x240 [ 178.325743][ T5599] ? rt_spin_unlock+0x157/0x200 [ 178.325771][ T5599] ? __pfx_kobject_add+0x10/0x10 [ 178.325816][ T5599] ? get_device_parent+0x370/0x3a0 [ 178.325854][ T5599] device_add+0x3fa/0xb80 [ 178.325888][ T5599] hci_conn_add_sysfs+0xd5/0x210 [ 178.325921][ T5599] le_conn_complete_evt+0xfef/0x1580 [ 178.325967][ T5599] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 178.326000][ T5599] ? lockdep_hardirqs_on+0x7a/0x110 [ 178.326030][ T5599] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 178.326060][ T5599] ? rt_mutex_slowunlock+0x219/0x460 [ 178.326084][ T5599] ? skb_pull_data+0xf0/0x200 [ 178.326125][ T5599] hci_le_conn_complete_evt+0x187/0x470 [ 178.326168][ T5599] hci_event_packet+0x67a/0xf10 [ 178.326204][ T5599] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 178.326236][ T5599] ? __pfx_hci_event_packet+0x10/0x10 [ 178.326263][ T5599] ? rt_spin_unlock+0x157/0x200 [ 178.326310][ T5599] ? hci_send_to_monitor+0xe2/0x590 [ 178.326351][ T5599] hci_rx_work+0x3ee/0x1020 [ 178.326389][ T5599] ? process_scheduled_works+0xa20/0x14e0 [ 178.326416][ T5599] process_scheduled_works+0xa8e/0x14e0 [ 178.326476][ T5599] ? __pfx_process_scheduled_works+0x10/0x10 [ 178.326511][ T5599] ? assign_work+0x3cf/0x5d0 [ 178.326544][ T5599] worker_thread+0xa47/0xfb0 [ 178.326589][ T5599] ? __kthread_parkme+0x71/0x1f0 [ 178.326631][ T5599] kthread+0x388/0x470 [ 178.326676][ T5599] ? __pfx_worker_thread+0x10/0x10 [ 178.326702][ T5599] ? __pfx_kthread+0x10/0x10 [ 178.326739][ T5599] ret_from_fork+0x514/0xb70 [ 178.326779][ T5599] ? __pfx_ret_from_fork+0x10/0x10 [ 178.326815][ T5599] ? __switch_to+0xc89/0x1420 [ 178.326848][ T5599] ? __pfx_kthread+0x10/0x10 [ 178.326883][ T5599] ret_from_fork_asm+0x1a/0x30 [ 178.326939][ T5599] [ 178.326973][ T5599] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 178.327016][ T5599] Bluetooth: hci1: failed to register connection device [ 178.765152][ T43] veth1_macvtap: left promiscuous mode [ 178.788589][ T43] veth0_macvtap: left promiscuous mode [ 178.788922][ T43] veth1_vlan: left promiscuous mode [ 178.811873][ T5722] em28xx 4-1:0.0: Freeing device [ 178.839781][ T43] veth0_vlan: left promiscuous mode [ 179.209508][ T5576] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 179.359662][ T5576] usb 5-1: Using ep0 maxpacket: 8 [ 179.360968][ T5576] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 179.361739][ T5576] usb 5-1: config 0 has no interfaces? [ 179.361768][ T5576] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.430072][ T5576] usb 5-1: config 0 descriptor?? [ 179.665821][ T5576] usb 5-1: USB disconnect, device number 7 [ 179.837672][ T6709] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 180.361624][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 180.516917][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.518765][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.518800][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.518826][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 180.518872][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.602495][ T10] usb 4-1: config 0 descriptor?? [ 181.068976][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 181.069018][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 181.069046][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 181.069073][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 181.069098][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 181.069135][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 181.069161][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 181.069187][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 181.069213][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 181.990752][ T10] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 184.147644][ T43] team0 (unregistering): Port device team_slave_1 removed [ 184.240584][ T43] team0 (unregistering): Port device team_slave_0 removed [ 184.743149][ T198] usb 4-1: USB disconnect, device number 5 [ 184.940795][ T5602] Bluetooth: hci1: command 0x0406 tx timeout [ 185.706489][ T5248] 8021q: adding VLAN 0 to HW filter on device eth1 [ 186.885225][ T6407] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.885374][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.885609][ T6407] bridge_slave_0: entered allmulticast mode [ 186.943429][ T6407] bridge_slave_0: entered promiscuous mode [ 186.999270][ T5722] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 187.043154][ T6407] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.043286][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.043510][ T6407] bridge_slave_1: entered allmulticast mode [ 187.051545][ T6407] bridge_slave_1: entered promiscuous mode [ 187.187224][ T5722] usb 5-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 187.214890][ T5722] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 187.214929][ T5722] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 187.214971][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.624073][ T6407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.685033][ T6407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.963022][ T5722] pegasus 5-1:1.0: probe with driver pegasus failed with error -71 [ 188.062475][ T5722] usb 5-1: USB disconnect, device number 8 [ 188.130760][ T6407] team0: Port device team_slave_0 added [ 188.136212][ T6407] team0: Port device team_slave_1 added [ 188.566363][ T5248] 8021q: adding VLAN 0 to HW filter on device eth2 [ 188.613530][ T6407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.613548][ T6407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.613578][ T6407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.670210][ T6407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.670227][ T6407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.670258][ T6407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.296925][ T6407] hsr_slave_0: entered promiscuous mode [ 189.314227][ T6407] hsr_slave_1: entered promiscuous mode [ 189.317574][ T6407] debugfs: 'hsr0' already exists in 'hsr' [ 189.317623][ T6407] Cannot create hsr debugfs directory [ 190.472507][ T5599] Bluetooth: hci2: unexpected subevent 0x01 length: 20 > 18 [ 190.474982][ T5599] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 190.475009][ T5599] CPU: 0 UID: 0 PID: 5599 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 190.475036][ T5599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.475050][ T5599] Workqueue: hci2 hci_rx_work [ 190.475084][ T5599] Call Trace: [ 190.475092][ T5599] [ 190.475103][ T5599] dump_stack_lvl+0xe8/0x150 [ 190.475153][ T5599] sysfs_create_dir_ns+0x271/0x2a0 [ 190.475186][ T5599] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 190.475222][ T5599] ? rt_spin_unlock+0x163/0x200 [ 190.475250][ T5599] kobject_add_internal+0x62c/0xce0 [ 190.475279][ T5599] kobject_add+0x163/0x240 [ 190.475312][ T5599] ? rt_spin_unlock+0x157/0x200 [ 190.475343][ T5599] ? __pfx_kobject_add+0x10/0x10 [ 190.475385][ T5599] ? get_device_parent+0x370/0x3a0 [ 190.475421][ T5599] device_add+0x3fa/0xb80 [ 190.475454][ T5599] hci_conn_add_sysfs+0xd5/0x210 [ 190.475484][ T5599] le_conn_complete_evt+0xfef/0x1580 [ 190.475531][ T5599] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 190.475571][ T5599] ? rt_mutex_slowunlock+0x219/0x460 [ 190.475595][ T5599] ? skb_pull_data+0xf0/0x200 [ 190.475633][ T5599] hci_le_conn_complete_evt+0x187/0x470 [ 190.475675][ T5599] hci_event_packet+0x67a/0xf10 [ 190.475711][ T5599] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 190.475742][ T5599] ? __pfx_hci_event_packet+0x10/0x10 [ 190.475768][ T5599] ? rt_spin_unlock+0x157/0x200 [ 190.475800][ T5599] ? hci_send_to_monitor+0xe2/0x590 [ 190.475841][ T5599] hci_rx_work+0x3ee/0x1020 [ 190.475877][ T5599] ? process_scheduled_works+0xa20/0x14e0 [ 190.475904][ T5599] process_scheduled_works+0xa8e/0x14e0 [ 190.475963][ T5599] ? __pfx_process_scheduled_works+0x10/0x10 [ 190.475996][ T5599] ? assign_work+0x3cf/0x5d0 [ 190.476029][ T5599] worker_thread+0xa47/0xfb0 [ 190.476073][ T5599] ? __kthread_parkme+0x71/0x1f0 [ 190.476115][ T5599] kthread+0x388/0x470 [ 190.476160][ T5599] ? __pfx_worker_thread+0x10/0x10 [ 190.476187][ T5599] ? __pfx_kthread+0x10/0x10 [ 190.476223][ T5599] ret_from_fork+0x514/0xb70 [ 190.476261][ T5599] ? __pfx_ret_from_fork+0x10/0x10 [ 190.476294][ T5599] ? __switch_to+0xc89/0x1420 [ 190.476324][ T5599] ? __pfx_kthread+0x10/0x10 [ 190.476357][ T5599] ret_from_fork_asm+0x1a/0x30 [ 190.476410][ T5599] [ 190.476441][ T5599] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 190.476480][ T5599] Bluetooth: hci2: failed to register connection device [ 190.609523][ T5602] Bluetooth: Frame is too long (len 10, expected len 6) [ 190.647799][ T5602] Bluetooth: hci2: unexpected event 0x08 length: 6 > 4 [ 190.655882][ T5602] Bluetooth: Frame is too long (len 20, expected len 16) [ 190.657897][ T5602] Bluetooth: Frame is too long (len 22, expected len 18) [ 192.414114][ T6854] fuse: fd is not a fuse device [ 192.486568][ T6407] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 192.617544][ T5602] Bluetooth: hci2: command 0x2016 tx timeout [ 192.665699][ T6407] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 192.668681][ T5248] 8021q: adding VLAN 0 to HW filter on device eth3 [ 192.670969][ T6407] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 192.817718][ T6407] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 192.844980][ T6407] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 192.866910][ T6407] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 192.880169][ T6407] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 192.909937][ T6407] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 193.087402][ T6861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.324'. [ 194.103016][ T6407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.696107][ T6894] dummy0: entered allmulticast mode [ 194.738603][ T5602] Bluetooth: hci2: command 0x2016 tx timeout [ 196.403078][ T6407] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.404225][ T6890] dummy0: left allmulticast mode [ 196.753633][ T6486] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.753773][ T6486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.937966][ T1416] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.938198][ T1416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.833792][ T5248] 8021q: adding VLAN 0 to HW filter on device eth4 [ 199.694211][ T6407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.969085][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.969164][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.422883][ T6147] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 200.593369][ T6147] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 200.646145][ T6147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.646177][ T6147] usb 4-1: Product: syz [ 200.646194][ T6147] usb 4-1: Manufacturer: syz [ 200.646211][ T6147] usb 4-1: SerialNumber: syz [ 200.707954][ T6147] usb 4-1: config 0 descriptor?? [ 200.819427][ T6999] Illegal XDP return value 4291384576 on prog (id 36) dev N/A, expect packet loss! [ 201.169157][ T6407] veth0_vlan: entered promiscuous mode [ 201.366551][ T6987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.368357][ T6987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.380351][ T6147] usb 4-1: Firmware version (0.0) predates our first public release. [ 201.380380][ T6147] usb 4-1: Please update to version 0.2 or newer [ 201.426959][ T6407] veth1_vlan: entered promiscuous mode [ 202.003094][ T6147] usb 4-1: USB disconnect, device number 6 [ 202.820026][ T6407] veth0_macvtap: entered promiscuous mode [ 202.980983][ T6407] veth1_macvtap: entered promiscuous mode [ 203.162789][ T6407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.238192][ T6407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.502767][ T1416] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.503186][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.503230][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.503271][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.599488][ T1459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.599510][ T1459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.883890][ T1459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.883913][ T1459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.083412][ T7104] netlink: 'syz.3.391': attribute type 4 has an invalid length. [ 208.146839][ T7104] netlink: 'syz.3.391': attribute type 4 has an invalid length. [ 209.152057][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.5.397'. [ 209.504928][ T7121] hsr_slave_1 (unregistering): left promiscuous mode [ 210.853261][ T7152] netlink: 'syz.2.405': attribute type 2 has an invalid length. [ 215.490719][ T7234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.681685][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.430'. [ 219.938585][ T7309] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 219.975445][ T7309] CIFS: Attempting to mount //127.0.0.1/test [ 220.808817][ T7309] CIFS: VFS: cifs_mount failed w/return code = -512 [ 222.678225][ T5591] Bluetooth: hci1: command 0x0406 tx timeout [ 222.680730][ T5592] Bluetooth: hci0: command 0x0406 tx timeout [ 222.680770][ T5592] Bluetooth: hci2: command 0x2016 tx timeout [ 226.350658][ T7390] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.355420][ T7390] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.394812][ T7390] bridge0: entered allmulticast mode [ 226.490186][ T7391] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.490439][ T7391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.491024][ T7391] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.491190][ T7391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.555277][ T7391] bridge0: entered promiscuous mode [ 226.913324][ T7396] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.496670][ T37] audit: type=1326 audit(1787553413.091:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7413 comm="syz.2.476" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff80095e0d9 code=0x0 [ 229.633356][ T37] audit: type=1326 audit(1787553414.229:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7422 comm="syz.4.482" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2342e0d9 code=0x7ffc0000 [ 229.635298][ T37] audit: type=1326 audit(1787553414.239:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7422 comm="syz.4.482" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7eff2342e0d9 code=0x7ffc0000 [ 229.851323][ T37] audit: type=1326 audit(1787553414.249:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7422 comm="syz.4.482" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2342e0d9 code=0x7ffc0000 [ 229.851383][ T37] audit: type=1326 audit(1787553414.408:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7422 comm="syz.4.482" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7eff2342e0d9 code=0x7ffc0000 [ 230.021679][ T37] audit: type=1326 audit(1787553414.618:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7422 comm="syz.4.482" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2342e0d9 code=0x7ffc0000 [ 230.021740][ T37] audit: type=1326 audit(1787553414.618:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7422 comm="syz.4.482" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2342e0d9 code=0x7ffc0000 [ 232.651013][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.502'. [ 232.651042][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.502'. [ 234.459720][ T5599] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 234.459752][ T5599] CPU: 0 UID: 0 PID: 5599 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 234.459782][ T5599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.459797][ T5599] Workqueue: hci3 hci_rx_work [ 234.459833][ T5599] Call Trace: [ 234.459842][ T5599] [ 234.459852][ T5599] dump_stack_lvl+0xe8/0x150 [ 234.459892][ T5599] sysfs_create_dir_ns+0x271/0x2a0 [ 234.459927][ T5599] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 234.459965][ T5599] ? rt_spin_unlock+0x163/0x200 [ 234.459994][ T5599] kobject_add_internal+0x62c/0xce0 [ 234.460026][ T5599] kobject_add+0x163/0x240 [ 234.460062][ T5599] ? rt_spin_unlock+0x157/0x200 [ 234.460094][ T5599] ? __pfx_kobject_add+0x10/0x10 [ 234.460139][ T5599] ? get_device_parent+0x370/0x3a0 [ 234.460176][ T5599] device_add+0x3fa/0xb80 [ 234.460212][ T5599] hci_conn_add_sysfs+0xd5/0x210 [ 234.460244][ T5599] le_conn_complete_evt+0xfef/0x1580 [ 234.460292][ T5599] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 234.460330][ T5599] ? lockdep_hardirqs_on+0x7a/0x110 [ 234.460362][ T5599] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 234.460394][ T5599] ? rt_mutex_slowunlock+0x219/0x460 [ 234.460420][ T5599] ? skb_pull_data+0xf0/0x200 [ 234.460471][ T5599] hci_le_conn_complete_evt+0x187/0x470 [ 234.460516][ T5599] hci_event_packet+0x67a/0xf10 [ 234.460553][ T5599] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 234.460587][ T5599] ? __pfx_hci_event_packet+0x10/0x10 [ 234.460616][ T5599] ? rt_spin_unlock+0x157/0x200 [ 234.460651][ T5599] ? hci_send_to_monitor+0xe2/0x590 [ 234.460695][ T5599] hci_rx_work+0x3ee/0x1020 [ 234.460734][ T5599] ? process_scheduled_works+0xa20/0x14e0 [ 234.460764][ T5599] process_scheduled_works+0xa8e/0x14e0 [ 234.460824][ T5599] ? __pfx_process_scheduled_works+0x10/0x10 [ 234.460862][ T5599] ? assign_work+0x3cf/0x5d0 [ 234.460896][ T5599] worker_thread+0xa47/0xfb0 [ 234.460942][ T5599] ? __kthread_parkme+0x71/0x1f0 [ 234.460986][ T5599] kthread+0x388/0x470 [ 234.461022][ T5599] ? __pfx_worker_thread+0x10/0x10 [ 234.461049][ T5599] ? __pfx_kthread+0x10/0x10 [ 234.461085][ T5599] ret_from_fork+0x514/0xb70 [ 234.461126][ T5599] ? __pfx_ret_from_fork+0x10/0x10 [ 234.461162][ T5599] ? __switch_to+0xc89/0x1420 [ 234.461213][ T5599] ? __pfx_kthread+0x10/0x10 [ 234.461252][ T5599] ret_from_fork_asm+0x1a/0x30 [ 234.461310][ T5599] [ 234.461417][ T5599] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 234.461461][ T5599] Bluetooth: hci3: failed to register connection device [ 237.079185][ T7558] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.533'. [ 237.532890][ T7567] netlink: 'syz.2.537': attribute type 4 has an invalid length. [ 238.482544][ T7587] fuse: fd is not a fuse device [ 240.534464][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.5.550'. [ 240.714161][ T4902] Bluetooth: hci3: command 0x0405 tx timeout [ 245.666718][ T7661] fuse: fd is not a fuse device [ 245.871870][ T7669] fuse: fd is not a fuse device [ 245.876742][ T37] audit: type=1326 audit(1787553430.457:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7665 comm="syz.0.571" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0f3e0d9 code=0x7ffc0000 [ 245.876797][ T37] audit: type=1326 audit(1787553430.457:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7665 comm="syz.0.571" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0f3e0d9 code=0x7ffc0000 [ 245.877448][ T37] audit: type=1326 audit(1787553430.457:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7665 comm="syz.0.571" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0f3e0d9 code=0x7ffc0000 [ 245.877702][ T37] audit: type=1326 audit(1787553430.457:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7665 comm="syz.0.571" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0f3e0d9 code=0x7ffc0000 [ 245.940916][ T37] audit: type=1326 audit(1787553430.477:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7665 comm="syz.0.571" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fe3e0f3e0d9 code=0x7ffc0000 [ 245.941105][ T37] audit: type=1326 audit(1787553430.477:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7665 comm="syz.0.571" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0f3e0d9 code=0x7ffc0000 [ 245.941228][ T37] audit: type=1326 audit(1787553430.477:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7665 comm="syz.0.571" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0f3e0d9 code=0x7ffc0000 [ 245.941355][ T37] audit: type=1326 audit(1787553430.477:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7665 comm="syz.0.571" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0f3e0d9 code=0x7ffc0000 [ 245.941478][ T37] audit: type=1326 audit(1787553430.497:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7665 comm="syz.0.571" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe3e0f3e0d9 code=0x7ffc0000 [ 245.941603][ T37] audit: type=1326 audit(1787553430.497:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7665 comm="syz.0.571" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0f3e0d9 code=0x7ffc0000 [ 246.451186][ T7678] syz_tun: entered allmulticast mode [ 248.144646][ T7704] mmap: syz.5.581 (7704) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 249.731426][ T7727] netlink: 'syz.3.589': attribute type 10 has an invalid length. [ 249.810554][ T7727] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.845171][ T7727] bond0: (slave team0): Enslaving as an active interface with an up link [ 249.869202][ T7724] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 249.905727][ T198] IPVS: starting estimator thread 0... [ 250.070015][ T7728] IPVS: using max 8 ests per chain, 19200 per kthread [ 251.155819][ T7747] netlink: 'syz.0.596': attribute type 10 has an invalid length. [ 251.155846][ T7747] netlink: 40 bytes leftover after parsing attributes in process `syz.0.596'. [ 251.156476][ T7747] erspan0: entered promiscuous mode [ 251.156500][ T7747] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 251.210509][ T7740] [ 251.210523][ T7740] ============================================ [ 251.210533][ T7740] WARNING: possible recursive locking detected [ 251.210548][ T7740] syzkaller #0 Not tainted [ 251.210562][ T7740] -------------------------------------------- [ 251.210569][ T7740] syz.3.592/7740 is trying to acquire lock: [ 251.210581][ T7740] ffffffff8eba0fc8 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xeb0 [ 251.210647][ T7740] [ 251.210647][ T7740] but task is already holding lock: [ 251.210654][ T7740] ffffffff8eba0fc8 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xeb0 [ 251.210720][ T7740] [ 251.210720][ T7740] other info that might help us debug this: [ 251.210728][ T7740] Possible unsafe locking scenario: [ 251.210728][ T7740] [ 251.210736][ T7740] CPU0 [ 251.210741][ T7740] ---- [ 251.210747][ T7740] lock(qp_broker_list.mutex); [ 251.210764][ T7740] lock(qp_broker_list.mutex); [ 251.210780][ T7740] [ 251.210780][ T7740] *** DEADLOCK *** [ 251.210780][ T7740] [ 251.210786][ T7740] May be due to missing lock nesting notation [ 251.210786][ T7740] [ 251.210794][ T7740] 1 lock held by syz.3.592/7740: [ 251.210807][ T7740] #0: ffffffff8eba0fc8 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xeb0 [ 251.210868][ T7740] [ 251.210868][ T7740] stack backtrace: [ 251.210881][ T7740] CPU: 1 UID: 0 PID: 7740 Comm: syz.3.592 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 251.210931][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.210946][ T7740] Call Trace: [ 251.210955][ T7740] [ 251.210964][ T7740] dump_stack_lvl+0xe8/0x150 [ 251.211005][ T7740] print_deadlock_bug+0x279/0x290 [ 251.211034][ T7740] __lock_acquire+0x24df/0x2ce0 [ 251.211059][ T7740] ? stack_depot_save_flags+0x3ec/0x800 [ 251.211100][ T7740] ? kasan_save_track+0x4f/0x80 [ 251.211120][ T7740] ? kasan_save_track+0x3e/0x80 [ 251.211137][ T7740] ? kasan_save_free_info+0x40/0x50 [ 251.211161][ T7740] ? __kasan_slab_free+0x5c/0x80 [ 251.211177][ T7740] ? kfree+0x1c5/0x6c0 [ 251.211204][ T7740] ? vmci_ctx_put+0x5ba/0xc00 [ 251.211227][ T7740] ? vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 251.211252][ T7740] ? vmci_datagram_dispatch+0x450/0xc80 [ 251.211280][ T7740] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 251.211299][ T7740] lock_acquire+0x106/0x350 [ 251.211315][ T7740] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 251.211339][ T7740] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 251.211361][ T7740] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 251.211380][ T7740] mutex_lock_nested+0x5a/0x1d0 [ 251.211397][ T7740] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 251.211418][ T7740] vmci_qp_broker_detach+0xe9/0xeb0 [ 251.211442][ T7740] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 251.211462][ T7740] ? kasan_quarantine_put+0xbb/0x1f0 [ 251.211489][ T7740] ? lockdep_hardirqs_on+0x7a/0x110 [ 251.211514][ T7740] ? kfree+0x1c5/0x6c0 [ 251.211539][ T7740] ? vmci_ctx_put+0x5ba/0xc00 [ 251.211563][ T7740] ? vmci_ctx_put+0x13e/0xc00 [ 251.211588][ T7740] vmci_ctx_put+0x619/0xc00 [ 251.211612][ T7740] ? vmci_ctx_put+0x13e/0xc00 [ 251.211638][ T7740] ? __pfx_vmci_ctx_put+0x10/0x10 [ 251.211670][ T7740] vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 251.211708][ T7740] vmci_datagram_dispatch+0x450/0xc80 [ 251.211738][ T7740] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 251.211770][ T7740] vmci_qp_broker_detach+0x87e/0xeb0 [ 251.211795][ T7740] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 251.211816][ T7740] ? kasan_quarantine_put+0xbb/0x1f0 [ 251.211846][ T7740] ? kfree+0x1c5/0x6c0 [ 251.211870][ T7740] ? vmci_ctx_put+0x5ba/0xc00 [ 251.211893][ T7740] ? vmci_ctx_put+0x13e/0xc00 [ 251.211919][ T7740] vmci_ctx_put+0x619/0xc00 [ 251.211942][ T7740] ? vmci_ctx_put+0x13e/0xc00 [ 251.211968][ T7740] ? __pfx_vmci_ctx_put+0x10/0x10 [ 251.212001][ T7740] vmci_host_close+0x91/0x140 [ 251.212020][ T7740] ? __pfx_vmci_host_close+0x10/0x10 [ 251.212039][ T7740] __fput+0x42a/0xa80 [ 251.212059][ T7740] fput_close_sync+0x11f/0x240 [ 251.212076][ T7740] ? __pfx_fput_close_sync+0x10/0x10 [ 251.212095][ T7740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.212114][ T7740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.212132][ T7740] __x64_sys_close+0x7e/0x110 [ 251.212150][ T7740] do_syscall_64+0x174/0x580 [ 251.212173][ T7740] ? trace_irq_disable+0x3b/0x140 [ 251.212202][ T7740] ? clear_bhb_loop+0x70/0xc0 [ 251.212223][ T7740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.212241][ T7740] RIP: 0033:0x7f0f578fe0d9 [ 251.212267][ T7740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.212283][ T7740] RSP: 002b:00007f0f55b35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 251.212302][ T7740] RAX: ffffffffffffffda RBX: 00007f0f57b86090 RCX: 00007f0f578fe0d9 [ 251.212316][ T7740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 251.212326][ T7740] RBP: 00007f0f57995024 R08: 0000000000000000 R09: 0000000000000000 [ 251.212338][ T7740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.212348][ T7740] R13: 00007f0f57b86128 R14: 00007f0f57b86090 R15: 00007ffd8606b8b8 [ 251.212370][ T7740] [ 251.212437][ T7740] ------------[ cut here ]------------ [ 251.212447][ T7740] rtmutex deadlock detected [ 251.212460][ T7740] WARNING: kernel/locking/rtmutex.c:1698 at rt_mutex_handle_deadlock+0x21/0xb0, CPU#1: syz.3.592/7740 [ 251.212497][ T7740] Modules linked in: [ 251.212519][ T7740] CPU: 1 UID: 0 PID: 7740 Comm: syz.3.592 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 251.212545][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.212558][ T7740] RIP: 0010:rt_mutex_handle_deadlock+0x21/0xb0 [ 251.212583][ T7740] Code: 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 81 00 00 00 48 89 f7 e8 16 40 01 00 48 8d 3d 5f a3 6a 04 <67> 48 0f b9 3a 4c 8d 3d 00 00 00 00 65 48 8b 1d a3 2a 56 07 4c 8d [ 251.212602][ T7740] RSP: 0000:ffffc9000785f530 EFLAGS: 00010286 [ 251.212620][ T7740] RAX: 0000000080000000 RBX: 00000000ffffffdd RCX: 0000000000000000 [ 251.212635][ T7740] RDX: 0000000000000000 RSI: ffffffff8bca7160 RDI: ffffffff8fb2f8b0 [ 251.212648][ T7740] RBP: ffffc9000785f6e0 R08: ffffffff8faf8c37 R09: 1ffffffff1f5f186 [ 251.212665][ T7740] R10: dffffc0000000000 R11: fffffbfff1f5f187 R12: 1ffff92000f0beb4 [ 251.212682][ T7740] R13: ffffffff8b484f92 R14: ffffffff8eba0f70 R15: dffffc0000000000 [ 251.212706][ T7740] FS: 00007f0f55b356c0(0000) GS:ffff888125d38000(0000) knlGS:0000000000000000 [ 251.212726][ T7740] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.212742][ T7740] CR2: 0000200000ff4000 CR3: 000000003146a000 CR4: 00000000003526f0 [ 251.212763][ T7740] Call Trace: [ 251.212770][ T7740] [ 251.212778][ T7740] ? rt_mutex_slowlock+0x1f2/0x780 [ 251.212799][ T7740] rt_mutex_slowlock+0x73c/0x780 [ 251.212820][ T7740] ? rt_mutex_slowlock+0x1f2/0x780 [ 251.212840][ T7740] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 251.212868][ T7740] ? lock_acquire+0x221/0x350 [ 251.212889][ T7740] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 251.212910][ T7740] mutex_lock_nested+0x168/0x1d0 [ 251.212931][ T7740] vmci_qp_broker_detach+0xe9/0xeb0 [ 251.212957][ T7740] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 251.212978][ T7740] ? kasan_quarantine_put+0xbb/0x1f0 [ 251.213007][ T7740] ? lockdep_hardirqs_on+0x7a/0x110 [ 251.213034][ T7740] ? kfree+0x1c5/0x6c0 [ 251.213060][ T7740] ? vmci_ctx_put+0x5ba/0xc00 [ 251.213085][ T7740] ? vmci_ctx_put+0x13e/0xc00 [ 251.213112][ T7740] vmci_ctx_put+0x619/0xc00 [ 251.213137][ T7740] ? vmci_ctx_put+0x13e/0xc00 [ 251.213165][ T7740] ? __pfx_vmci_ctx_put+0x10/0x10 [ 251.213200][ T7740] vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 251.213233][ T7740] vmci_datagram_dispatch+0x450/0xc80 [ 251.213265][ T7740] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 251.213299][ T7740] vmci_qp_broker_detach+0x87e/0xeb0 [ 251.213326][ T7740] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 251.213347][ T7740] ? kasan_quarantine_put+0xbb/0x1f0 [ 251.213380][ T7740] ? kfree+0x1c5/0x6c0 [ 251.213406][ T7740] ? vmci_ctx_put+0x5ba/0xc00 [ 251.213431][ T7740] ? vmci_ctx_put+0x13e/0xc00 [ 251.213458][ T7740] vmci_ctx_put+0x619/0xc00 [ 251.213483][ T7740] ? vmci_ctx_put+0x13e/0xc00 [ 251.213511][ T7740] ? __pfx_vmci_ctx_put+0x10/0x10 [ 251.213547][ T7740] vmci_host_close+0x91/0x140 [ 251.213568][ T7740] ? __pfx_vmci_host_close+0x10/0x10 [ 251.213588][ T7740] __fput+0x42a/0xa80 [ 251.213612][ T7740] fput_close_sync+0x11f/0x240 [ 251.213634][ T7740] ? __pfx_fput_close_sync+0x10/0x10 [ 251.213659][ T7740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.213683][ T7740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.213717][ T7740] __x64_sys_close+0x7e/0x110 [ 251.213741][ T7740] do_syscall_64+0x174/0x580 [ 251.213770][ T7740] ? trace_irq_disable+0x3b/0x140 [ 251.213805][ T7740] ? clear_bhb_loop+0x70/0xc0 [ 251.213830][ T7740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.213853][ T7740] RIP: 0033:0x7f0f578fe0d9 [ 251.213873][ T7740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.213892][ T7740] RSP: 002b:00007f0f55b35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 251.213915][ T7740] RAX: ffffffffffffffda RBX: 00007f0f57b86090 RCX: 00007f0f578fe0d9 [ 251.213932][ T7740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 251.213946][ T7740] RBP: 00007f0f57995024 R08: 0000000000000000 R09: 0000000000000000 [ 251.213961][ T7740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.213974][ T7740] R13: 00007f0f57b86128 R14: 00007f0f57b86090 R15: 00007ffd8606b8b8 [ 251.214001][ T7740] [ 251.214021][ T7740] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 251.214038][ T7740] CPU: 1 UID: 0 PID: 7740 Comm: syz.3.592 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 251.214064][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.214078][ T7740] Call Trace: [ 251.214086][ T7740] [ 251.214095][ T7740] vpanic+0x56c/0xa60 [ 251.214134][ T7740] ? __pfx__printk+0x10/0x10 [ 251.214161][ T7740] ? __pfx_vpanic+0x10/0x10 [ 251.214196][ T7740] ? is_bpf_text_address+0x292/0x2b0 [ 251.214222][ T7740] ? is_bpf_text_address+0x26/0x2b0 [ 251.214253][ T7740] panic+0xc5/0xd0 [ 251.214288][ T7740] ? __pfx_panic+0x10/0x10 [ 251.214331][ T7740] __warn+0x315/0x4c0 [ 251.214367][ T7740] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 251.214394][ T7740] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 251.214418][ T7740] __report_bug+0x276/0x570 [ 251.214446][ T7740] ? rcu_is_watching+0x15/0xb0 [ 251.214475][ T7740] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 251.214499][ T7740] ? __pfx___report_bug+0x10/0x10 [ 251.214533][ T7740] ? __schedule+0x16f2/0x5500 [ 251.214561][ T7740] ? __show_trace_log_lvl+0x478/0x550 [ 251.214600][ T7740] report_bug_entry+0x19a/0x290 [ 251.214631][ T7740] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 251.214655][ T7740] ? rt_mutex_handle_deadlock+0x26/0xb0 [ 251.214678][ T7740] handle_bug+0xce/0x200 [ 251.214723][ T7740] exc_invalid_op+0x1a/0x50 [ 251.214757][ T7740] asm_exc_invalid_op+0x1a/0x20 [ 251.214779][ T7740] RIP: 0010:rt_mutex_handle_deadlock+0x21/0xb0 [ 251.214805][ T7740] Code: 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 81 00 00 00 48 89 f7 e8 16 40 01 00 48 8d 3d 5f a3 6a 04 <67> 48 0f b9 3a 4c 8d 3d 00 00 00 00 65 48 8b 1d a3 2a 56 07 4c 8d [ 251.214826][ T7740] RSP: 0000:ffffc9000785f530 EFLAGS: 00010286 [ 251.214846][ T7740] RAX: 0000000080000000 RBX: 00000000ffffffdd RCX: 0000000000000000 [ 251.214862][ T7740] RDX: 0000000000000000 RSI: ffffffff8bca7160 RDI: ffffffff8fb2f8b0 [ 251.214880][ T7740] RBP: ffffc9000785f6e0 R08: ffffffff8faf8c37 R09: 1ffffffff1f5f186 [ 251.214898][ T7740] R10: dffffc0000000000 R11: fffffbfff1f5f187 R12: 1ffff92000f0beb4 [ 251.214917][ T7740] R13: ffffffff8b484f92 R14: ffffffff8eba0f70 R15: dffffc0000000000 [ 251.214937][ T7740] ? rt_mutex_slowlock+0x1f2/0x780 [ 251.214970][ T7740] ? rt_mutex_slowlock+0x1f2/0x780 [ 251.214993][ T7740] rt_mutex_slowlock+0x73c/0x780 [ 251.215017][ T7740] ? rt_mutex_slowlock+0x1f2/0x780 [ 251.215039][ T7740] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 251.215071][ T7740] ? lock_acquire+0x221/0x350 [ 251.215095][ T7740] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 251.215121][ T7740] mutex_lock_nested+0x168/0x1d0 [ 251.215147][ T7740] vmci_qp_broker_detach+0xe9/0xeb0 [ 251.215178][ T7740] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 251.215204][ T7740] ? kasan_quarantine_put+0xbb/0x1f0 [ 251.215239][ T7740] ? lockdep_hardirqs_on+0x7a/0x110 [ 251.215271][ T7740] ? kfree+0x1c5/0x6c0 [ 251.215303][ T7740] ? vmci_ctx_put+0x5ba/0xc00 [ 251.215333][ T7740] ? vmci_ctx_put+0x13e/0xc00 [ 251.215367][ T7740] vmci_ctx_put+0x619/0xc00 [ 251.215397][ T7740] ? vmci_ctx_put+0x13e/0xc00 [ 251.215430][ T7740] ? __pfx_vmci_ctx_put+0x10/0x10 [ 251.215472][ T7740] vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 251.215510][ T7740] vmci_datagram_dispatch+0x450/0xc80 [ 251.215548][ T7740] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 251.215590][ T7740] vmci_qp_broker_detach+0x87e/0xeb0 [ 251.215622][ T7740] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 251.215647][ T7740] ? kasan_quarantine_put+0xbb/0x1f0 [ 251.215685][ T7740] ? kfree+0x1c5/0x6c0 [ 251.215728][ T7740] ? vmci_ctx_put+0x5ba/0xc00 [ 251.215758][ T7740] ? vmci_ctx_put+0x13e/0xc00 [ 251.215792][ T7740] vmci_ctx_put+0x619/0xc00 [ 251.215822][ T7740] ? vmci_ctx_put+0x13e/0xc00 [ 251.215856][ T7740] ? __pfx_vmci_ctx_put+0x10/0x10 [ 251.215898][ T7740] vmci_host_close+0x91/0x140 [ 251.215923][ T7740] ? __pfx_vmci_host_close+0x10/0x10 [ 251.215947][ T7740] __fput+0x42a/0xa80 [ 251.215973][ T7740] fput_close_sync+0x11f/0x240 [ 251.215995][ T7740] ? __pfx_fput_close_sync+0x10/0x10 [ 251.216020][ T7740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.216045][ T7740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.216068][ T7740] __x64_sys_close+0x7e/0x110 [ 251.216092][ T7740] do_syscall_64+0x174/0x580 [ 251.216120][ T7740] ? trace_irq_disable+0x3b/0x140 [ 251.216156][ T7740] ? clear_bhb_loop+0x70/0xc0 [ 251.216183][ T7740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.216206][ T7740] RIP: 0033:0x7f0f578fe0d9 [ 251.216226][ T7740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.216245][ T7740] RSP: 002b:00007f0f55b35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 251.216269][ T7740] RAX: ffffffffffffffda RBX: 00007f0f57b86090 RCX: 00007f0f578fe0d9 [ 251.216286][ T7740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 251.216299][ T7740] RBP: 00007f0f57995024 R08: 0000000000000000 R09: 0000000000000000 [ 251.216313][ T7740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.216327][ T7740] R13: 00007f0f57b86128 R14: 00007f0f57b86090 R15: 00007ffd8606b8b8 [ 251.216353][ T7740] [ 251.216953][ T7740] Kernel Offset: disabled