last executing test programs: 28.554305233s ago: executing program 2 (id=298): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 25.279230886s ago: executing program 1 (id=304): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) 24.539020551s ago: executing program 4 (id=306): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4b, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df793"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 24.391200728s ago: executing program 1 (id=308): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff80}}, 0xe8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x10000, 0x2}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008844) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="d39c1a93623f4df8a1557e75138dd3ceb5b2ace2b6f8c09a02e0205413e8bdab43fb6268de0d14a3496e307e93d7f749cb9c8cf5", 0x34}], 0x1, 0xc) 23.936760299s ago: executing program 4 (id=309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x5057c0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) rseq(0xfffffffffffffffc, 0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x54, 0x1, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}, @NFQA_PAYLOAD={0x34, 0xa, "6000000000080040fe8000000000000000000000000000aafe8000000000000000000000000000bb3b00010400000000"}]}, 0x54}}, 0x0) 23.304381239s ago: executing program 3 (id=310): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) io_uring_setup(0x66a5, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r0, r5, 0x0, 0x7ffff004) 21.502199423s ago: executing program 4 (id=311): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sendmmsg(r0, &(0x7f0000005280), 0x4000000000001cd, 0x1008c811) 21.484429304s ago: executing program 3 (id=312): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 21.374496679s ago: executing program 1 (id=313): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f00000003c0)=[{r2, 0xc080}], 0x1, 0xffbffff5) writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000200)="31dc68f864f9ddf89518ac8b9b825f93049fc06204cefc218246242553c6f4461651cf7cd863ef00e9f954ebb6bc02f6f99caa78827925d34aa408dc4f1dac43f318f0971e1942ed74562c81f8b2ceb6338eba369301e454d579cb990b2163eb5411d0cc7a54a282e7be1b0ee5a92d8746b4923ec43bd4b6b03a4d795b9bffb269a4cd857464e5654dc9b22c6c10ba6eb97d5a31c7e0f9a9d3dc99bf006cbc9010d66dd02e676dc04fc89686e3211d27f26903eec1ee253b5ea51cf65e17cac69bb29a983923325b0bdbce51452ffbbf81014ed26657ea6b87a3452b118d68016e79d5d08d6e8d647b01", 0xea}, {&(0x7f00000004c0)="c161ae5f0cdf53d30336b2f8648eb381cec4b31277ebdb83f02ee63962c9350021d5d65634a4760890a01872d6682b1b1fef51a57c1a96a9fbeef4fa1f99f86373e4aab7a98245cdc0708bdeff9fa2f1ff637a06978f6de0f339d56374ca47b100ccc6307333f8d6a5119f771e73d5ae34aa71f1ff059bf867de622f3da94d022f1d2d3cd9b2e451ae1d09b967d0b8ff101296ebf50950c360b9fd5a12fb21b9bc40490d8c6a8f1955ac7af7b76dc2fd79e6e0820c027a", 0xb7}, {&(0x7f00000005c0)="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", 0xfa0}, {&(0x7f00000015c0)="c7def51d03d99eeceb6fb5e17c41eca97e47a2de8440e92963bf16b896ea2d70fca590737ba17a4f9743dabe8e1186457869fbf5c391bd10f6e4fd9b2e76fba809e8d47961e568dbeddf7d9b4f7b68731391b6bac1e0f01aac09103021b6f7f2fff5", 0x62}, {&(0x7f0000001640)="1cdb5dde38f7176cd056440d9a0483661c4312433e9e8bb5dc4ac33ca840a05d52f23f320d54ffd77c469d62343c3484f2e13e5a9d417c7f5f44aad5943a8edbdc2d", 0x42}], 0x5) dup2(r1, r2) prlimit64(0x0, 0xb, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setown(r1, 0x8, r0) mount(&(0x7f0000000080)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) 19.183468472s ago: executing program 0 (id=314): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000000280)=@udp=r0}, 0x20) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12102) 19.145289224s ago: executing program 2 (id=315): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b90101000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) set_mempolicy(0x3, 0x0, 0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c010000100001000000000000000000fe880000000000000000000000000001000000000000000000000000000000000000000000000000020001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000012346c000000ac1414bb000000000000000000000000ffefffffffffffff0200000000000000ffffffffffffffffffffffffffffffff00"/92], 0x15c}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup(r8) write$6lowpan_enable(r9, 0x0, 0x0) 19.143110954s ago: executing program 4 (id=316): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) 18.498112184s ago: executing program 0 (id=317): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = eventfd(0x0) read$eventfd(r1, 0x0, 0x0) writev(r1, &(0x7f0000000080), 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53048e8) write$binfmt_elf32(r2, 0x0, 0x58) close(r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f0000000040)=0x1) io_submit(0x0, 0x0, 0x0) 18.418256658s ago: executing program 1 (id=318): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6375, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={0x0}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r2, 0xc01c586b, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f00000017c0)={0x6, 0x46, 0x45, 0xb0e, 0x2, 0xae12}) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xbf, 0x1, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x2, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x8000, 0x401, 0x9, 0x9, 0x7fff, 0xf, 0xa, 0x9, 0xffd, 0x8, 0xaf, 0x0, 0x10001fc, 0x0, 0x2]}) 18.174358169s ago: executing program 0 (id=319): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4e, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddf"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 17.962053069s ago: executing program 0 (id=320): epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x5) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map, r1, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'\x00', 0x1}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000080)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2b, 0x801, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = syz_io_uring_setup(0xb28, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3ab}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000180)) io_uring_enter(r5, 0x8a1, 0xb08a, 0x6, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) 15.687182026s ago: executing program 0 (id=321): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000100)="cfed", 0xffda}], 0x1) socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) keyctl$update(0x2, 0x0, 0x0, 0xfe00) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)=0x15) ioctl(r5, 0x404c4701, &(0x7f00000001c0)="0100000000000000000000000100000001000000010000000000000020000000200000000100000001") ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000240)=0xf9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000241)=0x3) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000242)=0x3f) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000245)=0xf9) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) 15.565477551s ago: executing program 2 (id=322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x5057c0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) rseq(0xfffffffffffffffc, 0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x54, 0x1, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}, @NFQA_PAYLOAD={0x34, 0xa, "6000000000080040fe8000000000000000000000000000aafe8000000000000000000000000000bb3b00010400000000"}]}, 0x54}}, 0x0) 14.498629901s ago: executing program 1 (id=323): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff80}}, 0xe8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x10000, 0x2}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008844) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f0000000140)="d39c1a93623f4df8a1557e75138dd3ceb5b2ace2b6f8c09a02e0205413e8bdab43fb6268de0d14a3496e307e93d7f749cb9c8cf5", 0x34}], 0x1, 0xc) 12.313498544s ago: executing program 1 (id=324): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/../file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(r0) 11.063850272s ago: executing program 2 (id=325): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x0, 0xa2c65) syz_usb_connect(0x3, 0xc7, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffe00000000003, 0x20000000000000b, 0x1, 0x200, 0x4a, 0x28, 0x80000005, 0x2}) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000180)) 11.005060045s ago: executing program 3 (id=326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x275a, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0001f1ff07000800ffd000000000cde1d36283c9c4fb74dab28618ff503e0d102bad18820402e9abffba95c8b150a61e68165079a4650b3e3f286936cd36a18fdecba5b399febcf1cdafbb88adbdfbd4ea6194aeb140f6f246d6994e7f6c43600c7595d4e199b82592e83d1ab7bf5e81dc8270f3cfa8485c5d65782285e92e8095c79f650fc5ad96b12246066ba9b40d1a8974397843548a7580030b647cd513830cceb64293ebb9d5a7bfe185cb145bc5dad1db495084b3fac53a4e0cc14d180fe70f2eecd961dfbf0e10c2454cf3df33000000000000000000"], 0xde) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r3 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x7a) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x458, 0x528, 0xfeffffff, 0x458, 0x528, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'nr0\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {}, 0xe, 0x1}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x1, 0x6, 0x1], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r8, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="400000000b06010800000000000000000300fffe050001"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) 9.735696155s ago: executing program 3 (id=327): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r0, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = msgget$private(0x0, 0x3ac) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="9800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac14141608000740000000050800048004000380080008400000a90224000f"], 0x98}}, 0x4004000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r4, 0x4b2) msgrcv(r2, 0x0, 0x0, 0x0, 0x800) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000000)=""/126) syz_clone3(0x0, 0x0) socket(0x10, 0x803, 0x2) socket$nl_route(0x10, 0x3, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) 8.822781897s ago: executing program 0 (id=328): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f00000003c0)=[{r2, 0xc080}], 0x1, 0xffbffff5) writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000200)="31dc68f864f9ddf89518ac8b9b825f93049fc06204cefc218246242553c6f4461651cf7cd863ef00e9f954ebb6bc02f6f99caa78827925d34aa408dc4f1dac43f318f0971e1942ed74562c81f8b2ceb6338eba369301e454d579cb990b2163eb5411d0cc7a54a282e7be1b0ee5a92d8746b4923ec43bd4b6b03a4d795b9bffb269a4cd857464e5654dc9b22c6c10ba6eb97d5a31c7e0f9a9d3dc99bf006cbc9010d66dd02e676dc04fc89686e3211d27f26903eec1ee253b5ea51cf65e17cac69bb29a983923325b0bdbce51452ffbbf81014ed26657ea6b87a3452b118d68016e79d5d08d6e8d647b01", 0xea}, {&(0x7f00000004c0)="c161ae5f0cdf53d30336b2f8648eb381cec4b31277ebdb83f02ee63962c9350021d5d65634a4760890a01872d6682b1b1fef51a57c1a96a9fbeef4fa1f99f86373e4aab7a98245cdc0708bdeff9fa2f1ff637a06978f6de0f339d56374ca47b100ccc6307333f8d6a5119f771e73d5ae34aa71f1ff059bf867de622f3da94d022f1d2d3cd9b2e451ae1d09b967d0b8ff101296ebf50950c360b9fd5a12fb21b9bc40490d8c6a8f1955ac7af7b76dc2fd79e6e0820c027a", 0xb7}, {&(0x7f00000005c0)="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", 0xfa0}, {&(0x7f00000015c0)="c7def51d03d99eeceb6fb5e17c41eca97e47a2de8440e92963bf16b896ea2d70fca590737ba17a4f9743dabe8e1186457869fbf5c391bd10f6e4fd9b2e76fba809e8d47961e568dbeddf7d9b4f7b68731391b6bac1e0f01aac09103021b6f7f2fff5", 0x62}, {&(0x7f0000001640)="1cdb5dde38f7176cd056440d9a0483661c4312433e9e8bb5dc4ac33ca840a05d52f23f320d54ffd77c469d62343c3484f2e13e5a9d417c7f5f44aad5943a8edbdc2d", 0x42}], 0x5) dup2(r1, r2) prlimit64(0x0, 0xb, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setown(r1, 0x8, r0) mount(&(0x7f0000000080)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) 8.820385437s ago: executing program 4 (id=329): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = eventfd(0x0) read$eventfd(r1, 0x0, 0x0) writev(r1, &(0x7f0000000080), 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53048e8) write$binfmt_elf32(r2, 0x0, 0x58) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f0000000040)=0x1) io_submit(0x0, 0x0, 0x0) 8.710756403s ago: executing program 3 (id=330): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4e, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddf"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 3.895299248s ago: executing program 2 (id=331): epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x5) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map, r1, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'\x00', 0x1}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000080)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2b, 0x801, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = syz_io_uring_setup(0xb28, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3ab}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000180)) io_uring_enter(r5, 0x8a1, 0xb08a, 0x6, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) 950.650716ms ago: executing program 3 (id=332): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x1, 0x6) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x30) sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x10) 35.048378ms ago: executing program 2 (id=333): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_vhci(&(0x7f0000001740)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x11}, @hci_ev_le_direct_adv_info={{}, {0xe8, 0x1, @none, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}}, 0x14) 0s ago: executing program 4 (id=334): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x12) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x8080, 0x0) ioctl(r4, 0x40186f40, &(0x7f0000000300)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts. [ 59.655837][ T4173] cgroup: Unknown subsys name 'net' [ 59.814732][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.169530][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.598726][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 62.621675][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 62.669356][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 62.745305][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 62.767164][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 62.816294][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.824630][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.833907][ T4186] device bridge_slave_0 entered promiscuous mode [ 62.843666][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.851078][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.860241][ T4185] device bridge_slave_0 entered promiscuous mode [ 62.886620][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.894303][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.902747][ T4188] device bridge_slave_0 entered promiscuous mode [ 62.911879][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.919660][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.927395][ T4186] device bridge_slave_1 entered promiscuous mode [ 62.935331][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.942653][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.951168][ T4185] device bridge_slave_1 entered promiscuous mode [ 62.975190][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.982697][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.991354][ T4188] device bridge_slave_1 entered promiscuous mode [ 63.037795][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.045960][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.054178][ T4187] device bridge_slave_0 entered promiscuous mode [ 63.069567][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.085253][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.096406][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.104332][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.112663][ T4187] device bridge_slave_1 entered promiscuous mode [ 63.121771][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.133418][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.148256][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.173560][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.223037][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.244149][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.251770][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.261497][ T4192] device bridge_slave_0 entered promiscuous mode [ 63.271763][ T4186] team0: Port device team_slave_0 added [ 63.278123][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.286085][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.295304][ T4192] device bridge_slave_1 entered promiscuous mode [ 63.305602][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.317419][ T4188] team0: Port device team_slave_0 added [ 63.326662][ T4185] team0: Port device team_slave_0 added [ 63.335143][ T4186] team0: Port device team_slave_1 added [ 63.363840][ T4188] team0: Port device team_slave_1 added [ 63.371607][ T4185] team0: Port device team_slave_1 added [ 63.401975][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.412206][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.419743][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.447924][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.473249][ T4187] team0: Port device team_slave_0 added [ 63.481064][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.491767][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.499718][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.527622][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.554021][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.561355][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.588564][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.602186][ T4187] team0: Port device team_slave_1 added [ 63.617592][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.628833][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.657061][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.673777][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.683485][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.711797][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.742826][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.750407][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.777087][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.792943][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.800742][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.827672][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.847764][ T4192] team0: Port device team_slave_0 added [ 63.855901][ T4192] team0: Port device team_slave_1 added [ 63.867628][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.875371][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.902939][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.945364][ T4186] device hsr_slave_0 entered promiscuous mode [ 63.955406][ T4186] device hsr_slave_1 entered promiscuous mode [ 63.974241][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.981876][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.011051][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.033515][ T4185] device hsr_slave_0 entered promiscuous mode [ 64.041241][ T4185] device hsr_slave_1 entered promiscuous mode [ 64.048786][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.057682][ T4185] Cannot create hsr debugfs directory [ 64.072878][ T4188] device hsr_slave_0 entered promiscuous mode [ 64.080888][ T4188] device hsr_slave_1 entered promiscuous mode [ 64.087647][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.096351][ T4188] Cannot create hsr debugfs directory [ 64.102789][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.110124][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.138122][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.188829][ T4187] device hsr_slave_0 entered promiscuous mode [ 64.197138][ T4187] device hsr_slave_1 entered promiscuous mode [ 64.205255][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.213666][ T4187] Cannot create hsr debugfs directory [ 64.252646][ T4192] device hsr_slave_0 entered promiscuous mode [ 64.260102][ T4192] device hsr_slave_1 entered promiscuous mode [ 64.266866][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.274957][ T4192] Cannot create hsr debugfs directory [ 64.340196][ T4196] Bluetooth: hci4: command 0x0409 tx timeout [ 64.348521][ T4196] Bluetooth: hci0: command 0x0409 tx timeout [ 64.349386][ T1340] Bluetooth: hci3: command 0x0409 tx timeout [ 64.359781][ T4196] Bluetooth: hci2: command 0x0409 tx timeout [ 64.379133][ T1340] Bluetooth: hci1: command 0x0409 tx timeout [ 64.587282][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.600852][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.611075][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.621311][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.681502][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.698339][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.714881][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.724109][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.771852][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.787288][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.797422][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.806920][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.864082][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.876834][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.888845][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.906113][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.921579][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.932776][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.941719][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.951323][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.961066][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.968620][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.977686][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.986767][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.996146][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.027360][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.038650][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.047528][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.054790][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.064582][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.075191][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.103689][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.113526][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.135365][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.143982][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.154026][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.174921][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.184344][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.193843][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.206009][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.216287][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.226491][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.239860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.248705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.265327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.273857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.290141][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.303002][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.317624][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.366577][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.381514][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.392670][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.400169][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.410638][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.420143][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.428938][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.436223][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.445962][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.471066][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.478567][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.509134][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.520722][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.535372][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.547163][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.561028][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.571001][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.581079][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.590487][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.607827][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.622318][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.652998][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.662475][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.672195][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.686417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.695367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.714095][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.730461][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.739405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.747299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.761468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.774224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.787958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.804007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.813838][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.822006][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.832410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.846365][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.855659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.865203][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.872803][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.887617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.897263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.906723][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.914393][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.924222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.935400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.945625][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.953408][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.965555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.978838][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.008699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.018632][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.028651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.038930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.050478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.062060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.071402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.093474][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.104404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.113736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.123185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.132686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.140816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.150414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.159164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.168812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.178331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.191915][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.202277][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.219544][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.251939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.261497][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.270649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.279700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.288040][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.295633][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.304384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.313358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.322463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.331532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.342156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.353790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.363528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.373480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.383529][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.400656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.412396][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.424031][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.430663][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 66.431277][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.437509][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 66.457389][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 66.463886][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 66.472398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.482318][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 66.490133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.514042][ T4186] device veth0_vlan entered promiscuous mode [ 66.535640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.544823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.555521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.564713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.604051][ T4186] device veth1_vlan entered promiscuous mode [ 66.619454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.627978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.638924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.648738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.659065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.668993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.678330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.688817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.698777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.707413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.716345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.725287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.734241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.743659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.751768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.759912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.770481][ T4192] device veth0_vlan entered promiscuous mode [ 66.788774][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.819568][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.828511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.842590][ T4192] device veth1_vlan entered promiscuous mode [ 66.887656][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.907843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.918075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.935064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.945756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.961987][ T4186] device veth0_macvtap entered promiscuous mode [ 66.983149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.998795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.008988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.028855][ T4186] device veth1_macvtap entered promiscuous mode [ 67.041445][ T4192] device veth0_macvtap entered promiscuous mode [ 67.078781][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.089812][ T4192] device veth1_macvtap entered promiscuous mode [ 67.105733][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.113551][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.123551][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.133406][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.141928][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.152442][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.162952][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.173026][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.182239][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.191033][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.205718][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.222264][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.232171][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.245886][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.255773][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.265092][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.278046][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.297827][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.310801][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.322247][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.344823][ T4187] device veth0_vlan entered promiscuous mode [ 67.353739][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.364061][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.373562][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.383490][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.392282][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.401472][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.410557][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.419740][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.428558][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.437291][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.446794][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.458119][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.472632][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.493271][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.503486][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.513200][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.522712][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.533403][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.544184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.553356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.563022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.572379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.581374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.591703][ T4185] device veth0_vlan entered promiscuous mode [ 67.615268][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.624435][ T4187] device veth1_vlan entered promiscuous mode [ 67.655686][ T4185] device veth1_vlan entered promiscuous mode [ 67.761461][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.775938][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.786734][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.801807][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.811146][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.820692][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.838956][ T4185] device veth0_macvtap entered promiscuous mode [ 67.865245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.882812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.894479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.919613][ T4187] device veth0_macvtap entered promiscuous mode [ 67.935227][ T4185] device veth1_macvtap entered promiscuous mode [ 67.959564][ T4256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.969459][ T4187] device veth1_macvtap entered promiscuous mode [ 67.981113][ T4256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.016458][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.027637][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.039820][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.051529][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.063181][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.077411][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.089030][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.100429][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.111955][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.122520][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.135166][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.147452][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.155548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.166152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.174900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.185096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.194475][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.204123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.213539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.223181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.232238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.248107][ T299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.259124][ T299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.276164][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.286965][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.298065][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.309027][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.321213][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.335379][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.346171][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.355515][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.365889][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.377618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.386234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.395377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.420700][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.431821][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.442926][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.456041][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.466337][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.477309][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.488564][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.500790][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.510059][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 68.510140][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.519575][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 68.525279][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.535738][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 68.540583][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.547017][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 68.563433][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.566667][ T4188] device veth0_vlan entered promiscuous mode [ 68.580688][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.592050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.601360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.610171][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 68.610803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.625688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.634763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.643152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.651510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.667543][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.685911][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.711540][ T4188] device veth1_vlan entered promiscuous mode [ 68.729448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.765085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.887115][ T4188] device veth0_macvtap entered promiscuous mode [ 68.925272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.996619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.109902][ T3067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.112900][ T4188] device veth1_macvtap entered promiscuous mode [ 69.118480][ T3067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.225375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.234923][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.286856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.312205][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.426206][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.523608][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.930589][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.968791][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.979479][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.990220][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.003320][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.014493][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.024946][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.036143][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.048577][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.070499][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.088417][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.118535][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.118602][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.146945][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.163773][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.181212][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.197162][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.208476][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.220677][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.231536][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.243298][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.256581][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.272363][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.299765][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.313500][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.349468][ T4256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.367348][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.409029][ T4256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.427667][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.447637][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.456760][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.468631][ T4196] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 70.486772][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.589546][ T1340] Bluetooth: hci3: command 0x0419 tx timeout [ 70.596566][ T1340] Bluetooth: hci0: command 0x0419 tx timeout [ 70.631289][ T1340] Bluetooth: hci4: command 0x0419 tx timeout [ 70.659753][ T1340] Bluetooth: hci1: command 0x0419 tx timeout [ 70.667275][ T4256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.829255][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 70.839488][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 70.851826][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 70.862431][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 70.872762][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 70.882239][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 70.891695][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 70.909248][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 70.919223][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 70.929222][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.292877][ T4288] binder: BINDER_SET_CONTEXT_MGR already set [ 71.302027][ T4288] binder: 4284:4288 ioctl 4018620d 200000004a80 returned -16 [ 72.060670][ T4232] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 72.068485][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.083883][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.103906][ T1340] Bluetooth: hci2: command 0x0419 tx timeout [ 72.691475][ T4256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.838767][ T4280] ubi0: attaching mtd0 [ 72.869947][ T4196] usb 2-1: config 0 has no interfaces? [ 72.878531][ T4196] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 72.881169][ T4280] ubi0: scanning is finished [ 72.894779][ T4280] ubi0: empty MTD device detected [ 72.920195][ T4196] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.325770][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.359068][ T4196] usb 2-1: config 0 descriptor?? [ 73.396047][ T4280] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 73.500219][ T4196] usb 2-1: can't set config #0, error -71 [ 74.146318][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.340307][ T4196] usb 2-1: USB disconnect, device number 2 [ 74.391402][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.401482][ T4232] usb 1-1: string descriptor 0 read error: -71 [ 74.411746][ T4232] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 74.427999][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 74.441261][ T4232] usb 1-1: config 0 descriptor?? [ 74.460183][ T4232] usb 1-1: can't set config #0, error -71 [ 74.474464][ T4232] usb 1-1: USB disconnect, device number 2 [ 74.563468][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.935131][ T4309] Zero length message leads to an empty skb [ 78.863322][ T4335] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.614982][ T4347] CacheFiles: Failed to register: -95 [ 82.396115][ T4355] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4359] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4355] [ 83.052213][ T4283] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.469927][ T4283] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 83.479486][ T4262] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 83.553420][ T4283] usb 3-1: config 0 has no interface number 0 [ 83.711425][ T4283] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 83.910015][ T4262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 83.987158][ T4262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.997884][ T4262] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 84.009541][ T4262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.030890][ T4262] usb 4-1: config 0 descriptor?? [ 84.139711][ T4283] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 84.156286][ T4283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.196610][ T4283] usb 3-1: Product: syz [ 84.206520][ T4283] usb 3-1: Manufacturer: syz [ 84.234525][ T4283] usb 3-1: SerialNumber: syz [ 84.255600][ T4283] usb 3-1: config 0 descriptor?? [ 84.915622][ T4353] udc-core: couldn't find an available UDC or it's busy [ 85.018955][ T4353] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 85.188247][ T4283] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 85.219889][ T4262] usb 4-1: string descriptor 0 read error: -22 [ 85.305748][ T4262] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input5 [ 85.331979][ T7] usb 3-1: USB disconnect, device number 2 [ 85.360856][ T7] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 85.532712][ T4262] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 85.637166][ T4386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 85.646400][ T4386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.676145][ T4262] usb 4-1: USB disconnect, device number 2 [ 85.824793][ T4196] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 86.100542][ T4196] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 86.588479][ T4353] ceph: No mds server is up or the cluster is laggy [ 86.630855][ T4283] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 86.899259][ C0] sched: RT throttling activated [ 86.915870][ T13] cfg80211: failed to load regulatory.db [ 87.491947][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.574419][ T4393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31'. [ 88.069745][ T4395] virtio-fs: tag not found [ 91.725576][ T4408] fido_id[4408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 91.859450][ T4262] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.972350][ T4419] kvm: emulating exchange as write [ 93.179916][ T4262] usb 3-1: device descriptor read/64, error -71 [ 93.459428][ T4262] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 93.829424][ T4262] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 95.159257][ T4229] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.059450][ T4229] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.168429][ T4262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.181612][ T4262] usb 3-1: config 0 descriptor?? [ 96.209339][ T4262] usb 3-1: can't set config #0, error -71 [ 96.218163][ T4262] usb 3-1: USB disconnect, device number 4 [ 96.409460][ T4229] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 97.239242][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.247355][ T4229] usb 4-1: Product: syz [ 97.269601][ T4229] usb 4-1: Manufacturer: syz [ 97.274911][ T4229] usb 4-1: SerialNumber: syz [ 97.319433][ T4229] usb 4-1: can't set config #1, error -71 [ 97.384756][ T4229] usb 4-1: USB disconnect, device number 3 [ 98.176288][ T4283] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.309893][ T4283] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.328902][ T4283] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.519912][ T4283] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 99.537798][ T4283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.813052][ T4457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 99.902032][ T4283] usb 2-1: Product: syz [ 99.911665][ T4283] usb 2-1: Manufacturer: syz [ 99.918925][ T4283] usb 2-1: SerialNumber: syz [ 100.699554][ T4464] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.519454][ T4283] usb 2-1: USB disconnect, device number 3 [ 101.677319][ T4477] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 105.100016][ T4283] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 106.579499][ T4283] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.949273][ T4283] usb 3-1: string descriptor 0 read error: -71 [ 107.956904][ T4283] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 107.973321][ T4283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.999408][ T4283] usb 3-1: can't set config #1, error -71 [ 108.010934][ T4283] usb 3-1: USB disconnect, device number 5 [ 108.274949][ T4514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'. [ 108.286047][ T4514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.521912][ T4514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.553612][ T4519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 111.809801][ T4538] virtio-fs: tag not found [ 114.269672][ T21] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 115.359459][ T21] usb 3-1: device descriptor read/all, error -71 [ 117.265429][ T4560] capability: warning: `syz.0.81' uses 32-bit capabilities (legacy support in use) [ 117.289480][ T4570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 119.367545][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 122.569844][ T4601] virtio-fs: tag not found [ 125.466111][ T4617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.97'. [ 127.639332][ T4542] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 127.955442][ T4634] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 128.229358][ T4542] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 128.273908][ T4542] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.314873][ T4542] usb 4-1: Product: syz [ 130.005776][ T4542] usb 4-1: Manufacturer: syz [ 130.011451][ T4542] usb 4-1: SerialNumber: syz [ 130.900888][ T4656] virtio-fs: tag not found [ 131.336452][ T1108] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 131.754421][ T4294] usb 4-1: USB disconnect, device number 4 [ 131.759445][ T4542] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 131.787565][ T4294] usb 4-1: ath9k_htc: USB layer deinitialized [ 131.856138][ T4664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.96'. [ 131.865292][ T4664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.771997][ T1108] usb 3-1: device descriptor read/64, error -71 [ 132.991489][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.998747][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.421765][ T4664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.609284][ T1108] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 133.609687][ T4684] device vlan2 entered promiscuous mode [ 133.879238][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 134.496627][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'. [ 134.528730][ T4684] device hsr_slave_0 left promiscuous mode [ 134.549386][ T1108] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 134.564644][ T1108] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.586415][ T1108] usb 3-1: config 0 has no interface number 0 [ 134.593096][ T1108] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.687491][ T4689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 134.779375][ T1108] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 134.848863][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.857941][ T1108] usb 3-1: Product: syz [ 134.863405][ T1108] usb 3-1: Manufacturer: syz [ 134.868977][ T1108] usb 3-1: SerialNumber: syz [ 134.878721][ T1108] usb 3-1: config 0 descriptor?? [ 135.547236][ T4294] Bluetooth: hci0: command 0x1407 tx timeout [ 135.559432][ T1108] usb 3-1: can't set config #0, error -71 [ 135.570057][ T1108] usb 3-1: USB disconnect, device number 9 [ 135.762908][ T4695] virtio-fs: tag not found [ 136.929284][ T1108] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 139.209425][ T1108] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.349316][ T1108] usb 3-1: string descriptor 0 read error: -71 [ 139.357550][ T1108] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 139.503330][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.616876][ T4722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.127'. [ 139.626904][ T4722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.878336][ T4722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.879514][ T1108] usb 3-1: can't set config #1, error -71 [ 140.949506][ T1108] usb 3-1: USB disconnect, device number 10 [ 141.257022][ T4736] virtio-fs: tag not found [ 146.313138][ T4783] virtio-fs: tag not found [ 150.468030][ T4824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.155'. [ 150.477342][ T4824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.528966][ T4824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.233197][ T4849] FAULT_INJECTION: forcing a failure. [ 154.233197][ T4849] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 154.248126][ T4849] CPU: 1 PID: 4849 Comm: syz.1.156 Not tainted syzkaller #0 [ 154.255414][ T4849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.266133][ T4849] Call Trace: [ 154.269912][ T4849] [ 154.273732][ T4849] dump_stack_lvl+0x188/0x250 [ 154.278658][ T4849] ? show_regs_print_info+0x20/0x20 [ 154.284320][ T4849] ? load_image+0x410/0x410 [ 154.289352][ T4849] ? mark_lock+0x94/0x320 [ 154.293849][ T4849] should_fail+0x383/0x4b0 [ 154.298316][ T4849] prepare_alloc_pages+0x1e3/0x5b0 [ 154.303534][ T4849] __alloc_pages+0x11b/0x480 [ 154.308126][ T4849] ? zone_statistics+0x170/0x170 [ 154.313364][ T4849] ? rcu_lock_acquire+0x30/0x30 [ 154.318752][ T4849] ? alloc_pages+0x452/0x560 [ 154.323807][ T4849] __get_free_pages+0x8/0x30 [ 154.329066][ T4849] __tlb_remove_page_size+0x1f2/0x3f0 [ 154.334985][ T4849] unmap_page_range+0xfcf/0x2410 [ 154.340515][ T4849] unmap_vmas+0x131/0x250 [ 154.345574][ T4849] ? unmap_page_range+0x2410/0x2410 [ 154.355032][ T4849] ? __mutex_lock_common+0x435/0x2400 [ 154.361188][ T4849] ? exit_mm_release+0x16/0x30 [ 154.366695][ T4849] exit_mmap+0x3b9/0x640 [ 154.371204][ T4849] ? vm_brk+0x20/0x20 [ 154.375532][ T4849] ? uprobe_clear_state+0x2f6/0x460 [ 154.381500][ T4849] __mmput+0x115/0x390 [ 154.385900][ T4849] exit_mm+0x632/0x7b0 [ 154.390298][ T4849] ? perf_pmu_migrate_context+0xb70/0xb70 [ 154.396383][ T4849] ? do_exit+0x2110/0x2110 [ 154.401064][ T4849] ? __ia32_sys_timer_delete+0x40/0x40 [ 154.406630][ T4849] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 154.412258][ T4849] ? tty_audit_exit+0x149/0x1f0 [ 154.417193][ T4849] do_exit+0x5b8/0x2110 [ 154.421405][ T4849] ? put_task_struct+0x80/0x80 [ 154.426260][ T4849] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 154.432603][ T4849] ? _raw_spin_lock_irq+0xb7/0xf0 [ 154.437954][ T4849] do_group_exit+0x12c/0x2f0 [ 154.442684][ T4849] ? lockdep_hardirqs_on+0x94/0x140 [ 154.447914][ T4849] get_signal+0x7eb/0x12e0 [ 154.452603][ T4849] arch_do_signal_or_restart+0xe6/0x12a0 [ 154.458767][ T4849] ? futex_exit_release+0x1c0/0x1c0 [ 154.464243][ T4849] ? get_sigframe_size+0x10/0x10 [ 154.469268][ T4849] ? __context_tracking_exit+0x4c/0x80 [ 154.474729][ T4849] ? exit_to_user_mode_loop+0x3b/0x130 [ 154.480375][ T4849] exit_to_user_mode_loop+0x9e/0x130 [ 154.485749][ T4849] exit_to_user_mode_prepare+0xee/0x180 [ 154.491427][ T4849] syscall_exit_to_user_mode+0x16/0x40 [ 154.497665][ T4849] do_syscall_64+0x58/0xa0 [ 154.502195][ T4849] ? clear_bhb_loop+0x30/0x80 [ 154.506873][ T4849] ? clear_bhb_loop+0x30/0x80 [ 154.511586][ T4849] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.517847][ T4849] RIP: 0033:0x7fc4cb72d159 [ 154.522315][ T4849] Code: Unable to access opcode bytes at RIP 0x7fc4cb72d12f. [ 154.530384][ T4849] RSP: 002b:00007fc4c99850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 154.539052][ T4849] RAX: 0000000000000001 RBX: 00007fc4cb9b4fa8 RCX: 00007fc4cb72d159 [ 154.547292][ T4849] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc4cb9b4fac [ 154.555365][ T4849] RBP: 00007fc4cb9b4fa0 R08: 000bb1b6cac7dcb1 R09: 0000000000000000 [ 154.563588][ T4849] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.571698][ T4849] R13: 00007fc4cb9b5038 R14: 00007fff89752c10 R15: 00007fff89752cf8 [ 154.580594][ T4849] [ 154.946969][ T26] audit: type=1326 audit(1789464178.762:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4852 comm="syz.3.169" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff099dfa159 code=0x0 [ 154.950437][ T4855] netlink: 'syz.4.168': attribute type 1 has an invalid length. [ 155.090324][ T4855] netlink: 'syz.4.168': attribute type 2 has an invalid length. [ 155.384086][ T4863] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 155.575274][ T4235] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 156.537021][ T4872] netlink: 24 bytes leftover after parsing attributes in process `syz.3.175'. [ 156.779470][ T4235] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.806216][ T4235] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 156.824185][ T4235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.844620][ T4235] usb 5-1: config 0 descriptor?? [ 156.890734][ T4235] pwc: Askey VC010 type 2 USB webcam detected. [ 158.259577][ T4235] pwc: recv_control_msg error -71 req 02 val 2700 [ 158.279425][ T4235] pwc: recv_control_msg error -71 req 02 val 2c00 [ 158.339328][ T4235] pwc: recv_control_msg error -71 req 04 val 1000 [ 158.481192][ T4235] pwc: recv_control_msg error -71 req 04 val 1300 [ 159.472597][ T4235] pwc: recv_control_msg error -71 req 04 val 1400 [ 159.534223][ T4235] pwc: recv_control_msg error -71 req 02 val 2000 [ 159.584138][ T4235] pwc: recv_control_msg error -71 req 02 val 2100 [ 159.659375][ T4235] pwc: recv_control_msg error -71 req 04 val 1500 [ 159.684097][ T4235] pwc: recv_control_msg error -71 req 02 val 2500 [ 159.738342][ T4908] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 159.769699][ T4235] pwc: recv_control_msg error -71 req 02 val 2400 [ 159.811932][ T4235] pwc: recv_control_msg error -71 req 02 val 2600 [ 159.859606][ T4235] pwc: recv_control_msg error -71 req 02 val 2900 [ 159.991340][ T4235] pwc: recv_control_msg error -71 req 02 val 2800 [ 160.549354][ T4235] pwc: recv_control_msg error -71 req 04 val 1100 [ 160.590188][ T4235] pwc: recv_control_msg error -71 req 04 val 1200 [ 160.622234][ T4235] pwc: Registered as video103. [ 160.644538][ T4235] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 160.657405][ T4913] event trace: Could not enable event p [ 160.785129][ T4235] usb 5-1: USB disconnect, device number 3 [ 163.290071][ T4934] virtio-fs: tag not found [ 164.605350][ T4950] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 164.628985][ T4949] netlink: 32 bytes leftover after parsing attributes in process `syz.0.198'. [ 165.349272][ T4229] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 165.599478][ T4229] usb 4-1: device descriptor read/64, error -71 [ 166.559254][ T4229] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 166.789467][ T4229] usb 4-1: device descriptor read/64, error -71 [ 167.451188][ T4229] usb usb4-port1: attempt power cycle [ 168.838433][ T4976] virtio-fs: tag not found [ 170.849480][ T4229] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 171.248790][ T5006] ODEBUG: Out of memory. ODEBUG disabled [ 171.561739][ T4229] usb 3-1: Using ep0 maxpacket: 8 [ 172.714335][ T4229] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 172.739301][ T4229] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.765132][ T4229] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.799271][ T4229] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.839253][ T4229] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.853573][ T5017] netlink: 32 bytes leftover after parsing attributes in process `syz.4.214'. [ 172.869710][ T4229] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 172.942854][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.231950][ T4229] usb 3-1: usb_control_msg returned -32 [ 173.239270][ T4294] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 173.254378][ T4229] usbtmc 3-1:16.0: can't read capabilities [ 173.846394][ T4294] usb 2-1: device descriptor read/64, error -71 [ 173.999809][ T5026] virtio-fs: tag not found [ 174.119241][ T4294] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 174.313947][ T4294] usb 2-1: device descriptor read/64, error -71 [ 174.412949][ T5028] udc-core: couldn't find an available UDC or it's busy [ 174.444145][ T5028] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 174.452765][ T4294] usb usb2-port1: attempt power cycle [ 174.859213][ T4294] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 175.323334][ T4228] usb 3-1: USB disconnect, device number 11 [ 175.609417][ T4294] usb 2-1: device descriptor read/8, error -71 [ 175.890835][ T4294] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 177.265041][ T4294] usb 2-1: device not accepting address 7, error -71 [ 177.311481][ T4294] usb usb2-port1: unable to enumerate USB device [ 177.719576][ T4294] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 178.099923][ T4294] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 178.146591][ T4294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.600591][ T4294] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 180.170574][ T23] usb 2-1: USB disconnect, device number 8 [ 180.258761][ T5076] virtio-fs: tag not found [ 181.849302][ T4294] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 182.039344][ T4294] usb 2-1: device descriptor read/64, error -71 [ 182.319495][ T4294] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 182.534238][ T4294] usb 2-1: device descriptor read/64, error -71 [ 182.676052][ T4294] usb usb2-port1: attempt power cycle [ 183.099362][ T4294] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 183.399462][ T4294] usb 2-1: device descriptor read/8, error -71 [ 183.669513][ T4294] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 183.979305][ T23] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 184.189287][ T4294] usb 2-1: device descriptor read/8, error -71 [ 184.459684][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 184.520323][ T23] usb 4-1: not running at top speed; connect to a high speed hub [ 184.869756][ T23] usb 4-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 184.920541][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.967154][ T4294] usb usb2-port1: unable to enumerate USB device [ 185.020811][ T23] usb 4-1: Product: syz [ 185.049488][ T5110] binder: BINDER_SET_CONTEXT_MGR already set [ 185.072666][ T23] usb 4-1: Manufacturer: syz [ 185.089714][ T23] usb 4-1: SerialNumber: syz [ 185.096436][ T5116] netlink: 32 bytes leftover after parsing attributes in process `syz.0.230'. [ 185.112035][ T5110] binder: 5108:5110 ioctl 4018620d 200000004a80 returned -16 [ 186.462319][ T4294] Bluetooth: hci2: command 0x0406 tx timeout [ 186.475264][ T4294] Bluetooth: hci1: command 0x0406 tx timeout [ 186.491674][ T4294] Bluetooth: hci4: command 0x0406 tx timeout [ 186.524913][ T4294] Bluetooth: hci0: command 0x0406 tx timeout [ 186.538064][ T4294] Bluetooth: hci3: command 0x0406 tx timeout [ 186.709612][ T23] usb 4-1: MIDIStreaming interface descriptor not found [ 187.206750][ T5132] virtio-fs: tag not found [ 188.438088][ T23] usb 4-1: USB disconnect, device number 8 [ 191.383439][ T5157] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 191.393792][ T5157] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.412346][ T5157] vhci_hcd vhci_hcd.0: Device attached [ 191.647103][ T5172] netlink: 32 bytes leftover after parsing attributes in process `syz.1.256'. [ 191.679195][ T21] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 191.714348][ T4229] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 192.119274][ T4229] usb 3-1: config 0 has no interfaces? [ 192.125226][ T4229] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 192.784882][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.799088][ T4229] usb 3-1: config 0 descriptor?? [ 192.846947][ T5183] virtio-fs: tag not found [ 193.066335][ T5160] usb 37-1: recv xbuf, 0 [ 193.076894][ T4270] vhci_hcd: stop threads [ 193.082372][ T4270] vhci_hcd: release socket [ 193.089544][ T4270] vhci_hcd: disconnect device [ 193.149380][ T21] vhci_hcd: vhci_device speed not set [ 193.149559][ T4294] usb 3-1: USB disconnect, device number 12 [ 193.919196][ T4294] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 194.479559][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.486062][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.369801][ T5200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.263'. [ 196.032347][ T4294] usb 5-1: device descriptor read/64, error -71 [ 198.232082][ T5221] virtio-fs: tag not found [ 200.200629][ T5225] netlink: 32 bytes leftover after parsing attributes in process `syz.4.274'. [ 204.648575][ T5272] syz.0.282 (5272) used greatest stack depth: 19664 bytes left [ 204.862077][ T5270] virtio-fs: tag not found [ 205.993654][ T4235] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 206.199223][ T4235] usb 4-1: device descriptor read/64, error -71 [ 206.469287][ T4235] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 206.659271][ T4235] usb 4-1: device descriptor read/64, error -71 [ 207.340690][ T5285] overlayfs: missing 'lowerdir' [ 207.729705][ T4235] usb usb4-port1: attempt power cycle [ 208.091791][ T5290] netlink: 32 bytes leftover after parsing attributes in process `syz.3.289'. [ 213.743054][ T5331] virtio-fs: tag not found [ 213.779329][ T4294] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 213.976669][ T5336] SET target dimension over the limit! [ 213.985736][ T5336] syz.4.300 uses obsolete (PF_INET,SOCK_PACKET) [ 214.019274][ T4294] usb 1-1: device descriptor read/64, error -71 [ 215.709185][ T4294] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 215.899210][ T4294] usb 1-1: device descriptor read/64, error -71 [ 216.024897][ T4294] usb usb1-port1: attempt power cycle [ 216.599312][ T4294] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 216.656900][ T5352] FAULT_INJECTION: forcing a failure. [ 216.656900][ T5352] name fail_futex, interval 1, probability 0, space 0, times 1 [ 216.689223][ T4294] usb 1-1: device descriptor read/8, error -71 [ 216.779246][ T5352] CPU: 0 PID: 5352 Comm: syz.1.304 Not tainted syzkaller #0 [ 216.786857][ T5352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.797320][ T5352] Call Trace: [ 216.800794][ T5352] [ 216.804011][ T5352] dump_stack_lvl+0x188/0x250 [ 216.808850][ T5352] ? show_regs_print_info+0x20/0x20 [ 216.814299][ T5352] ? load_image+0x410/0x410 [ 216.819102][ T5352] ? cgroup_rstat_updated+0xce/0x350 [ 216.824528][ T5352] ? place_entity+0x4f0/0x4f0 [ 216.829301][ T5352] should_fail+0x383/0x4b0 [ 216.834189][ T5352] get_futex_key+0x1a1/0x12d0 [ 216.839202][ T5352] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 216.845241][ T5352] ? futex_wait_restart+0x250/0x250 [ 216.850757][ T5352] ? lock_chain_count+0x20/0x20 [ 216.855941][ T5352] futex_wait_setup+0x4b/0x520 [ 216.860880][ T5352] ? lockdep_hardirqs_on+0x94/0x140 [ 216.867035][ T5352] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 216.873130][ T5352] futex_wait+0x22f/0x680 [ 216.877569][ T5352] ? do_futex+0x12b0/0x12b0 [ 216.882381][ T5352] ? verify_lock_unused+0x140/0x140 [ 216.887925][ T5352] ? verify_lock_unused+0x140/0x140 [ 216.893221][ T5352] do_futex+0xdc2/0x12b0 [ 216.897474][ T5352] ? futex_exit_release+0x1c0/0x1c0 [ 216.902943][ T5352] ? __context_tracking_exit+0x4c/0x80 [ 216.908965][ T5352] __se_sys_futex+0x389/0x420 [ 216.914021][ T5352] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 216.920642][ T5352] ? __x64_sys_futex+0xf0/0xf0 [ 216.925522][ T5352] ? __x64_sys_futex+0x1d/0xf0 [ 216.930372][ T5352] do_syscall_64+0x4c/0xa0 [ 216.934817][ T5352] ? clear_bhb_loop+0x30/0x80 [ 216.939805][ T5352] ? clear_bhb_loop+0x30/0x80 [ 216.944861][ T5352] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 216.950898][ T5352] RIP: 0033:0x7fc4cb72d159 [ 216.955315][ T5352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.975288][ T5352] RSP: 002b:00007fc4c99850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 216.983965][ T5352] RAX: ffffffffffffffda RBX: 00007fc4cb9b4fa8 RCX: 00007fc4cb72d159 [ 216.992432][ T5352] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc4cb9b4fa8 [ 217.000790][ T5352] RBP: 00007fc4cb9b4fa0 R08: 0000000000000000 R09: 0000000000000000 [ 217.008985][ T5352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.017953][ T5352] R13: 00007fc4cb9b5038 R14: 00007fff89752c10 R15: 00007fff89752cf8 [ 217.026129][ T5352] [ 217.030595][ T4490] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 217.840640][ T4490] usb 3-1: Using ep0 maxpacket: 8 [ 217.989729][ T4490] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 218.360477][ T1340] Bluetooth: hci4: command 0x0409 tx timeout [ 218.410769][ T4490] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 218.473325][ T4490] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 218.519205][ T4490] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.584733][ T4490] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 218.599411][ T4490] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.419302][ T4490] usb 3-1: usb_control_msg returned -32 [ 219.425164][ T4490] usbtmc 3-1:16.0: can't read capabilities [ 220.504808][ T23] usb 3-1: USB disconnect, device number 13 [ 223.269393][ T5377] virtio-fs: tag not found [ 223.579316][ T23] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 224.039570][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.837384][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 224.846869][ T23] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 224.856716][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.868713][ T23] usb 3-1: config 0 descriptor?? [ 226.110488][ T5398] netlink: 108 bytes leftover after parsing attributes in process `syz.2.315'. [ 226.270031][ T23] usb 3-1: USB disconnect, device number 14 [ 227.541602][ T4235] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 227.647822][ T4235] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 229.848578][ T5112] syz.0.230 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 230.069418][ T4228] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 230.809802][ T5112] CPU: 1 PID: 5112 Comm: syz.0.230 Not tainted syzkaller #0 [ 230.817219][ T5112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.827791][ T5112] Call Trace: [ 230.831093][ T5112] [ 230.834309][ T5112] dump_stack_lvl+0x188/0x250 [ 230.839103][ T5112] ? show_regs_print_info+0x20/0x20 [ 230.844581][ T5112] ? load_image+0x410/0x410 [ 230.849106][ T5112] ? local_lock_release+0x170/0x170 [ 230.854889][ T5112] ? __rwlock_init+0x140/0x140 [ 230.859677][ T5112] dump_header+0xd9/0x780 [ 230.864124][ T5112] oom_kill_process+0x20e/0x3d0 [ 230.869023][ T5112] out_of_memory+0xdb2/0x1190 [ 230.874024][ T5112] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 230.880295][ T5112] ? mutex_lock_io_nested+0x60/0x60 [ 230.886167][ T5112] ? unregister_oom_notifier+0x20/0x20 [ 230.892604][ T5112] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 230.898633][ T5112] ? mem_cgroup_oom_trylock+0x210/0x210 [ 230.904353][ T5112] ? do_raw_spin_unlock+0x11d/0x230 [ 230.909948][ T5112] try_charge_memcg+0x1075/0x15b0 [ 230.915802][ T5112] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 230.921824][ T5112] ? rcu_lock_acquire+0x30/0x30 [ 230.927024][ T5112] charge_memcg+0x100/0x300 [ 230.931667][ T5112] ? __mem_cgroup_charge+0x80/0x80 [ 230.937421][ T5112] __mem_cgroup_charge+0x21/0x80 [ 230.942640][ T5112] shmem_add_to_page_cache+0xa8a/0x14d0 [ 230.948522][ T5112] ? put_page+0x200/0x200 [ 230.953304][ T5112] ? verify_lock_unused+0x140/0x140 [ 230.958874][ T5112] ? mark_lock+0x94/0x320 [ 230.963493][ T5112] shmem_getpage_gfp+0x1735/0x2c10 [ 230.969269][ T5112] shmem_fault+0x1ac/0x550 [ 230.973710][ T5112] ? shmem_fallocate+0xec0/0xec0 [ 230.979246][ T5112] ? filemap_read_page+0x4b0/0x4b0 [ 230.984552][ T5112] ? count_memcg_event_mm+0x324/0x370 [ 230.990027][ T5112] __do_fault+0x141/0x330 [ 230.994589][ T5112] handle_mm_fault+0x2982/0x4440 [ 231.000075][ T5112] ? get_page+0xe0/0xe0 [ 231.004580][ T5112] ? follow_page_mask+0xa51/0x12b0 [ 231.010589][ T5112] __get_user_pages+0x952/0x11e0 [ 231.015957][ T5112] ? read_lock_is_recursive+0x10/0x10 [ 231.021333][ T5112] ? populate_vma_page_range+0x290/0x290 [ 231.027156][ T5112] ? get_dump_page+0xee/0x670 [ 231.032607][ T5112] ? down_read_killable+0x1ce/0x340 [ 231.037900][ T5112] get_dump_page+0x18c/0x670 [ 231.042748][ T5112] ? fault_in_readable+0x150/0x150 [ 231.048526][ T5112] ? wait_for_dump_helpers+0x3e0/0x3e0 [ 231.054116][ T5112] ? dump_emit+0x2d/0x3d0 [ 231.058955][ T5112] ? dump_emit+0x145/0x3d0 [ 231.063503][ T5112] dump_user_range+0x54/0x340 [ 231.068314][ T5112] elf_core_dump+0x2fe0/0x3530 [ 231.073298][ T5112] ? load_elf_library+0x980/0x980 [ 231.078430][ T5112] ? verify_lock_unused+0x140/0x140 [ 231.083782][ T5112] ? dump_vma_snapshot+0xaf1/0xe40 [ 231.089091][ T5112] ? rcu_read_lock_any_held+0xb0/0x130 [ 231.094577][ T5112] ? getname_kernel+0x142/0x2e0 [ 231.099963][ T5112] do_coredump+0x14e8/0x2a40 [ 231.104831][ T5112] ? nfs_stat_to_errno+0x170/0x170 [ 231.110214][ T5112] ? lock_chain_count+0x20/0x20 [ 231.115156][ T5112] ? _raw_spin_unlock_irq+0x1f/0x40 [ 231.120349][ T5112] ? lockdep_hardirqs_on+0x94/0x140 [ 231.125675][ T5112] get_signal+0x531/0x12e0 [ 231.131149][ T5112] arch_do_signal_or_restart+0xe6/0x12a0 [ 231.139574][ T5112] ? _raw_spin_unlock+0x40/0x40 [ 231.144779][ T5112] ? force_sig_info_to_task+0x318/0x3c0 [ 231.150678][ T5112] ? get_sigframe_size+0x10/0x10 [ 231.156353][ T5112] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 231.162623][ T5112] ? exit_to_user_mode_loop+0x3b/0x130 [ 231.168794][ T5112] exit_to_user_mode_loop+0x9e/0x130 [ 231.174328][ T5112] exit_to_user_mode_prepare+0xee/0x180 [ 231.180153][ T5112] irqentry_exit_to_user_mode+0x5/0x30 [ 231.186168][ T5112] exc_page_fault+0x88/0x100 [ 231.190856][ T5112] asm_exc_page_fault+0x22/0x30 [ 231.195878][ T5112] RIP: 0033:0x7f9c1244dbd7 [ 231.200384][ T5112] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 da 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 231.221027][ T5112] RSP: 002b:00007f9c107d1120 EFLAGS: 00010202 [ 231.227207][ T5112] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f9c12598159 [ 231.235993][ T5112] RDX: 00007f9c107d1140 RSI: 00007f9c107d1270 RDI: 000000000000000b [ 231.244613][ T5112] RBP: 00007f9c1262f03b R08: 0000000000000000 R09: 0000000000000000 [ 231.253011][ T5112] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 231.261376][ T5112] R13: 00007f9c12820038 R14: 00007f9c1281ffa0 R15: 00007ffc48b84138 [ 231.269756][ T5112] [ 231.352393][ T5427] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 231.383212][ T5427] CIFS: Attempting to mount \\127.0.0.1\share [ 231.390723][ T5427] CIFS: VFS: No username specified [ 231.459511][ T4228] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.493467][ T5432] netlink: 36 bytes leftover after parsing attributes in process `syz.3.326'. [ 231.554568][ T4228] usb 5-1: config 0 has no interfaces? [ 231.776632][ T5112] memory: usage 307200kB, limit 307200kB, failcnt 5673 [ 231.784158][ T5112] memory+swap: usage 359656kB, limit 9007199254740988kB, failcnt 0 [ 231.792730][ T5112] kmem: usage 3480kB, limit 9007199254740988kB, failcnt 0 [ 231.801004][ T5112] Memory cgroup stats for /syz0: [ 231.801989][ T5112] anon 475136 [ 231.801989][ T5112] file 310534144 [ 231.801989][ T5112] kernel_stack 163840 [ 231.801989][ T5112] pagetables 684032 [ 231.801989][ T5112] percpu 0 [ 231.801989][ T5112] sock 0 [ 231.801989][ T5112] shmem 310530048 [ 231.801989][ T5112] file_mapped 182763520 [ 231.801989][ T5112] file_dirty 0 [ 231.801989][ T5112] file_writeback 0 [ 231.801989][ T5112] swapcached 53714944 [ 231.801989][ T5112] anon_thp 0 [ 231.801989][ T5112] file_thp 0 [ 231.801989][ T5112] shmem_thp 0 [ 231.801989][ T5112] inactive_anon 310935552 [ 231.801989][ T5112] active_anon 69632 [ 231.801989][ T5112] inactive_file 4096 [ 231.801989][ T5112] active_file 0 [ 231.801989][ T5112] unevictable 0 [ 231.801989][ T5112] slab_reclaimable 1543488 [ 231.801989][ T5112] slab_unreclaimable 1101544 [ 231.801989][ T5112] slab 2645032 [ 231.801989][ T5112] workingset_refault_anon 0 [ 231.801989][ T5112] workingset_refault_file 6 [ 231.801989][ T5112] workingset_activate_anon 0 [ 231.864711][ T4228] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 231.902119][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.922220][ T5112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.198,pid=4947,uid=0 [ 232.000018][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.008242][ T4228] usb 5-1: Product: syz [ 232.019503][ T4228] usb 5-1: Manufacturer: syz [ 232.024209][ T4228] usb 5-1: SerialNumber: syz [ 232.035424][ T5112] Memory cgroup out of memory: Killed process 4947 (syz.0.198) total-vm:200552kB, anon-rss:1380kB, file-rss:20648kB, shmem-rss:112852kB, UID:0 pgtables:336kB oom_score_adj:1000 [ 232.055265][ T4228] usb 5-1: config 0 descriptor?? [ 232.375583][ T5438] netlink: 32 bytes leftover after parsing attributes in process `syz.3.327'. [ 232.477016][ T4490] usb 5-1: USB disconnect, device number 6 [ 233.282036][ T5451] syz.0.328 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 233.292650][ T5451] CPU: 0 PID: 5451 Comm: syz.0.328 Not tainted syzkaller #0 [ 233.300467][ T5451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 233.312114][ T5451] Call Trace: [ 233.317046][ T5451] [ 233.319988][ T5451] dump_stack_lvl+0x188/0x250 [ 233.325338][ T5451] ? show_regs_print_info+0x20/0x20 [ 233.332042][ T5451] ? load_image+0x410/0x410 [ 233.336595][ T5451] ? local_lock_release+0x170/0x170 [ 233.342132][ T5451] ? __rwlock_init+0x140/0x140 [ 233.347451][ T5451] dump_header+0xd9/0x780 [ 233.352141][ T5451] oom_kill_process+0x20e/0x3d0 [ 233.357421][ T5451] out_of_memory+0xdb2/0x1190 [ 233.362826][ T5451] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 233.369874][ T5451] ? mutex_lock_io_nested+0x60/0x60 [ 233.375799][ T5451] ? unregister_oom_notifier+0x20/0x20 [ 233.382404][ T5451] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 233.388582][ T5451] ? mem_cgroup_oom_trylock+0x210/0x210 [ 233.394374][ T5451] ? do_raw_spin_unlock+0x11d/0x230 [ 233.399764][ T5451] try_charge_memcg+0x1075/0x15b0 [ 233.405470][ T5451] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 233.411900][ T5451] ? rcu_lock_acquire+0x30/0x30 [ 233.416846][ T5451] charge_memcg+0x100/0x300 [ 233.421365][ T5451] ? __mem_cgroup_charge+0x80/0x80 [ 233.427273][ T5451] __mem_cgroup_charge+0x21/0x80 [ 233.432323][ T5451] shmem_add_to_page_cache+0xa8a/0x14d0 [ 233.437988][ T5451] ? put_page+0x200/0x200 [ 233.442678][ T5451] ? mark_lock+0x94/0x320 [ 233.447033][ T5451] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 233.453011][ T5451] shmem_getpage_gfp+0x1735/0x2c10 [ 233.458232][ T5451] shmem_write_begin+0xcd/0x1a0 [ 233.463196][ T5451] generic_perform_write+0x2b6/0x550 [ 233.469220][ T5451] ? atime_needs_update+0x770/0x770 [ 233.474745][ T5451] ? grab_cache_page_write_begin+0xa0/0xa0 [ 233.481014][ T5451] ? file_remove_privs+0x5d0/0x5d0 [ 233.486439][ T5451] ? rwsem_write_trylock+0x135/0x1c0 [ 233.492060][ T5451] ? clear_nonspinnable+0x60/0x60 [ 233.497383][ T5451] __generic_file_write_iter+0x261/0x4e0 [ 233.503232][ T5451] ? generic_write_checks+0x3be/0x460 [ 233.508856][ T5451] generic_file_write_iter+0xa6/0x1b0 [ 233.514484][ T5451] __kernel_write+0x522/0x980 [ 233.519552][ T5451] ? vfs_read+0xd50/0xd50 [ 233.523884][ T5451] ? __lock_acquire+0x7b50/0x7b50 [ 233.529222][ T5451] ? get_dump_page+0xee/0x670 [ 233.534306][ T5451] ? down_read_killable+0x1ce/0x340 [ 233.540056][ T5451] __dump_emit+0x258/0x380 [ 233.544493][ T5451] ? wait_for_dump_helpers+0x3e0/0x3e0 [ 233.550131][ T5451] ? generic_file_llseek_size+0x34a/0x3a0 [ 233.556147][ T5451] ? dump_emit+0x145/0x3d0 [ 233.561786][ T5451] dump_user_range+0x84/0x340 [ 233.566584][ T5451] elf_core_dump+0x2fe0/0x3530 [ 233.571525][ T5451] ? load_elf_library+0x980/0x980 [ 233.576756][ T5451] ? verify_lock_unused+0x140/0x140 [ 233.581959][ T5451] ? dump_vma_snapshot+0xaf1/0xe40 [ 233.587476][ T5451] ? rcu_read_lock_any_held+0xb0/0x130 [ 233.593177][ T5451] ? getname_kernel+0x142/0x2e0 [ 233.598189][ T5451] do_coredump+0x14e8/0x2a40 [ 233.603422][ T5451] ? nfs_stat_to_errno+0x170/0x170 [ 233.608829][ T5451] ? lock_chain_count+0x20/0x20 [ 233.614162][ T5451] ? _raw_spin_unlock_irq+0x1f/0x40 [ 233.620319][ T5451] ? lockdep_hardirqs_on+0x94/0x140 [ 233.625681][ T5451] get_signal+0x531/0x12e0 [ 233.630181][ T5451] arch_do_signal_or_restart+0xe6/0x12a0 [ 233.636177][ T5451] ? _raw_spin_unlock+0x40/0x40 [ 233.641417][ T5451] ? force_sig_info_to_task+0x318/0x3c0 [ 233.647195][ T5451] ? get_sigframe_size+0x10/0x10 [ 233.652334][ T5451] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 233.658325][ T5451] ? exit_to_user_mode_loop+0x3b/0x130 [ 233.664312][ T5451] exit_to_user_mode_loop+0x9e/0x130 [ 233.670092][ T5451] exit_to_user_mode_prepare+0xee/0x180 [ 233.675645][ T5451] irqentry_exit_to_user_mode+0x5/0x30 [ 233.681214][ T5451] exc_page_fault+0x88/0x100 [ 233.685988][ T5451] asm_exc_page_fault+0x22/0x30 [ 233.690917][ T5451] RIP: 0033:0x7f9c12598161 [ 233.695543][ T5451] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 233.716059][ T5451] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 233.722513][ T5451] RAX: 0000000000000000 RBX: 00007f9c12820090 RCX: 00007f9c12598159 [ 233.730836][ T5451] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 233.739173][ T5451] RBP: 00007f9c1262f03b R08: 0000000000000000 R09: 0000000000000000 [ 233.747157][ T5451] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 233.755858][ T5451] R13: 00007f9c12820128 R14: 00007f9c12820090 R15: 00007ffc48b84138 [ 233.764198][ T5451] [ 233.768052][ T5451] memory: usage 307200kB, limit 307200kB, failcnt 5833 [ 233.774930][ T5451] memory+swap: usage 359832kB, limit 9007199254740988kB, failcnt 0 [ 233.783460][ T5451] kmem: usage 3672kB, limit 9007199254740988kB, failcnt 0 [ 233.790914][ T5451] Memory cgroup stats for /syz0: [ 233.791455][ T5451] anon 458752 [ 233.791455][ T5451] file 310353920 [ 233.791455][ T5451] kernel_stack 196608 [ 233.791455][ T5451] pagetables 798720 [ 233.791455][ T5451] percpu 0 [ 233.791455][ T5451] sock 0 [ 233.791455][ T5451] shmem 310345728 [ 233.791455][ T5451] file_mapped 98828288 [ 233.791455][ T5451] file_dirty 8192 [ 233.791455][ T5451] file_writeback 0 [ 233.791455][ T5451] swapcached 54067200 [ 233.791455][ T5451] anon_thp 0 [ 233.791455][ T5451] file_thp 0 [ 233.791455][ T5451] shmem_thp 0 [ 233.791455][ T5451] inactive_anon 310681600 [ 233.791455][ T5451] active_anon 122880 [ 233.791455][ T5451] inactive_file 0 [ 233.791455][ T5451] active_file 8192 [ 233.791455][ T5451] unevictable 0 [ 233.791455][ T5451] slab_reclaimable 1537944 [ 233.791455][ T5451] slab_unreclaimable 1136168 [ 233.791455][ T5451] slab 2674112 [ 233.791455][ T5451] workingset_refault_anon 0 [ 233.791455][ T5451] workingset_refault_file 38 [ 233.791455][ T5451] workingset_activate_anon 0 [ 233.891148][ T5451] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.230,pid=5112,uid=0 [ 233.908376][ T5451] Memory cgroup out of memory: Killed process 5112 (syz.0.230) total-vm:200552kB, anon-rss:1380kB, file-rss:20648kB, shmem-rss:64540kB, UID:0 pgtables:240kB oom_score_adj:1000 [ 236.909731][ T28] oom_reaper: reaped process 5112 (syz.0.230), now anon-rss:0kB, file-rss:20480kB, shmem-rss:64540kB [ 236.950972][ T5451] syz.0.328 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 236.960748][ T5451] CPU: 0 PID: 5451 Comm: syz.0.328 Not tainted syzkaller #0 [ 236.968238][ T5451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.978476][ T5451] Call Trace: [ 236.981768][ T5451] [ 236.984874][ T5451] dump_stack_lvl+0x188/0x250 [ 236.990239][ T5451] ? show_regs_print_info+0x20/0x20 [ 236.995829][ T5451] ? load_image+0x410/0x410 [ 237.000513][ T5451] ? local_lock_release+0x170/0x170 [ 237.006238][ T5451] ? __rwlock_init+0x140/0x140 [ 237.011055][ T5451] dump_header+0xd9/0x780 [ 237.015471][ T5451] oom_kill_process+0x20e/0x3d0 [ 237.020512][ T5451] out_of_memory+0xdb2/0x1190 [ 237.025185][ T5451] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 237.030825][ T5451] ? mutex_lock_io_nested+0x60/0x60 [ 237.036115][ T5451] ? unregister_oom_notifier+0x20/0x20 [ 237.041668][ T5451] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 237.047476][ T5451] ? mem_cgroup_oom_trylock+0x210/0x210 [ 237.053306][ T5451] ? do_raw_spin_unlock+0x11d/0x230 [ 237.058501][ T5451] try_charge_memcg+0x1075/0x15b0 [ 237.063551][ T5451] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 237.069635][ T5451] ? rcu_lock_acquire+0x30/0x30 [ 237.074491][ T5451] charge_memcg+0x100/0x300 [ 237.079074][ T5451] ? __mem_cgroup_charge+0x80/0x80 [ 237.084185][ T5451] __mem_cgroup_charge+0x21/0x80 [ 237.089349][ T5451] shmem_add_to_page_cache+0xa8a/0x14d0 [ 237.094930][ T5451] ? put_page+0x200/0x200 [ 237.099253][ T5451] ? mark_lock+0x94/0x320 [ 237.103583][ T5451] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 237.109857][ T5451] shmem_getpage_gfp+0x1735/0x2c10 [ 237.114978][ T5451] shmem_write_begin+0xcd/0x1a0 [ 237.119818][ T5451] generic_perform_write+0x2b6/0x550 [ 237.125177][ T5451] ? atime_needs_update+0x770/0x770 [ 237.130363][ T5451] ? grab_cache_page_write_begin+0xa0/0xa0 [ 237.136521][ T5451] ? file_remove_privs+0x5d0/0x5d0 [ 237.141815][ T5451] ? rwsem_write_trylock+0x135/0x1c0 [ 237.147205][ T5451] ? clear_nonspinnable+0x60/0x60 [ 237.152436][ T5451] __generic_file_write_iter+0x261/0x4e0 [ 237.158264][ T5451] ? generic_write_checks+0x3be/0x460 [ 237.163628][ T5451] generic_file_write_iter+0xa6/0x1b0 [ 237.169002][ T5451] __kernel_write+0x522/0x980 [ 237.173687][ T5451] ? vfs_read+0xd50/0xd50 [ 237.178095][ T5451] ? __lock_acquire+0x7b50/0x7b50 [ 237.183210][ T5451] ? get_dump_page+0xee/0x670 [ 237.187874][ T5451] ? down_read_killable+0x1ce/0x340 [ 237.193056][ T5451] __dump_emit+0x258/0x380 [ 237.197465][ T5451] ? wait_for_dump_helpers+0x3e0/0x3e0 [ 237.202996][ T5451] ? generic_file_llseek_size+0x34a/0x3a0 [ 237.208808][ T5451] ? dump_emit+0x145/0x3d0 [ 237.213210][ T5451] dump_user_range+0x84/0x340 [ 237.217880][ T5451] elf_core_dump+0x2fe0/0x3530 [ 237.222762][ T5451] ? load_elf_library+0x980/0x980 [ 237.227969][ T5451] ? verify_lock_unused+0x140/0x140 [ 237.233151][ T5451] ? dump_vma_snapshot+0xaf1/0xe40 [ 237.238276][ T5451] ? rcu_read_lock_any_held+0xb0/0x130 [ 237.243819][ T5451] ? getname_kernel+0x142/0x2e0 [ 237.248660][ T5451] do_coredump+0x14e8/0x2a40 [ 237.253249][ T5451] ? nfs_stat_to_errno+0x170/0x170 [ 237.258406][ T5451] ? lock_chain_count+0x20/0x20 [ 237.263292][ T5451] ? _raw_spin_unlock_irq+0x1f/0x40 [ 237.268491][ T5451] ? lockdep_hardirqs_on+0x94/0x140 [ 237.273677][ T5451] get_signal+0x531/0x12e0 [ 237.278222][ T5451] arch_do_signal_or_restart+0xe6/0x12a0 [ 237.284018][ T5451] ? _raw_spin_unlock+0x40/0x40 [ 237.288883][ T5451] ? force_sig_info_to_task+0x318/0x3c0 [ 237.294509][ T5451] ? get_sigframe_size+0x10/0x10 [ 237.299438][ T5451] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 237.306127][ T5451] ? exit_to_user_mode_loop+0x3b/0x130 [ 237.311589][ T5451] exit_to_user_mode_loop+0x9e/0x130 [ 237.317371][ T5451] exit_to_user_mode_prepare+0xee/0x180 [ 237.323200][ T5451] irqentry_exit_to_user_mode+0x5/0x30 [ 237.328902][ T5451] exc_page_fault+0x88/0x100 [ 237.333711][ T5451] asm_exc_page_fault+0x22/0x30 [ 237.338720][ T5451] RIP: 0033:0x7f9c12598161 [ 237.349072][ T5451] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 237.369073][ T5451] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 237.375788][ T5451] RAX: 0000000000000000 RBX: 00007f9c12820090 RCX: 00007f9c12598159 [ 237.384394][ T5451] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 237.392731][ T5451] RBP: 00007f9c1262f03b R08: 0000000000000000 R09: 0000000000000000 [ 237.400794][ T5451] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 237.408938][ T5451] R13: 00007f9c12820128 R14: 00007f9c12820090 R15: 00007ffc48b84138 [ 237.417110][ T5451] [ 237.420892][ T5451] memory: usage 307200kB, limit 307200kB, failcnt 18103 [ 237.427825][ T5451] memory+swap: usage 359832kB, limit 9007199254740988kB, failcnt 0 [ 237.435736][ T5451] kmem: usage 3604kB, limit 9007199254740988kB, failcnt 0 [ 237.442840][ T5451] Memory cgroup stats for /syz0: [ 237.442944][ T5451] anon 335872 [ 237.442944][ T5451] file 310546432 [ 237.442944][ T5451] kernel_stack 196608 [ 237.442944][ T5451] pagetables 798720 [ 237.442944][ T5451] percpu 0 [ 237.442944][ T5451] sock 0 [ 237.442944][ T5451] shmem 310546432 [ 237.442944][ T5451] file_mapped 66117632 [ 237.442944][ T5451] file_dirty 0 [ 237.442944][ T5451] file_writeback 0 [ 237.442944][ T5451] swapcached 54239232 [ 237.442944][ T5451] anon_thp 0 [ 237.442944][ T5451] file_thp 0 [ 237.442944][ T5451] shmem_thp 0 [ 237.442944][ T5451] inactive_anon 310730752 [ 237.442944][ T5451] active_anon 131072 [ 237.442944][ T5451] inactive_file 0 [ 237.442944][ T5451] active_file 0 [ 237.442944][ T5451] unevictable 0 [ 237.442944][ T5451] slab_reclaimable 1538216 [ 237.442944][ T5451] slab_unreclaimable 1063936 [ 237.442944][ T5451] slab 2602152 [ 237.442944][ T5451] workingset_refault_anon 0 [ 237.442944][ T5451] workingset_refault_file 38 [ 237.442944][ T5451] workingset_activate_anon 0 [ 237.540711][ T5451] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.328,pid=5443,uid=0 [ 237.557333][ T5451] Memory cgroup out of memory: Killed process 5443 (syz.0.328) total-vm:102508kB, anon-rss:1392kB, file-rss:21928kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 239.902757][ T28] oom_reaper: reaped process 5443 (syz.0.328), now anon-rss:0kB, file-rss:21632kB, shmem-rss:0kB [ 240.947550][ T5451] syz.0.328 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 240.957844][ T5451] CPU: 0 PID: 5451 Comm: syz.0.328 Not tainted syzkaller #0 [ 240.965227][ T5451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.975815][ T5451] Call Trace: [ 240.979210][ T5451] [ 240.982287][ T5451] dump_stack_lvl+0x188/0x250 [ 240.987290][ T5451] ? show_regs_print_info+0x20/0x20 [ 240.992794][ T5451] ? load_image+0x410/0x410 [ 240.997423][ T5451] ? local_lock_release+0x170/0x170 [ 241.002672][ T5451] ? __rwlock_init+0x140/0x140 [ 241.007431][ T5451] dump_header+0xd9/0x780 [ 241.011762][ T5451] oom_kill_process+0x20e/0x3d0 [ 241.016708][ T5451] out_of_memory+0xdb2/0x1190 [ 241.021650][ T5451] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 241.027445][ T5451] ? mutex_lock_io_nested+0x60/0x60 [ 241.032895][ T5451] ? unregister_oom_notifier+0x20/0x20 [ 241.038557][ T5451] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 241.044103][ T5451] ? mem_cgroup_oom_trylock+0x210/0x210 [ 241.050080][ T5451] ? do_raw_spin_unlock+0x11d/0x230 [ 241.055498][ T5451] try_charge_memcg+0x1075/0x15b0 [ 241.060627][ T5451] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 241.066470][ T5451] ? rcu_lock_acquire+0x30/0x30 [ 241.071628][ T5451] charge_memcg+0x100/0x300 [ 241.076365][ T5451] ? __mem_cgroup_charge+0x80/0x80 [ 241.081487][ T5451] __mem_cgroup_charge+0x21/0x80 [ 241.086756][ T5451] shmem_add_to_page_cache+0xa8a/0x14d0 [ 241.092581][ T5451] ? put_page+0x200/0x200 [ 241.096944][ T5451] ? mark_lock+0x94/0x320 [ 241.101266][ T5451] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 241.107516][ T5451] shmem_getpage_gfp+0x1735/0x2c10 [ 241.112793][ T5451] shmem_write_begin+0xcd/0x1a0 [ 241.117689][ T5451] generic_perform_write+0x2b6/0x550 [ 241.122996][ T5451] ? atime_needs_update+0x770/0x770 [ 241.128194][ T5451] ? grab_cache_page_write_begin+0xa0/0xa0 [ 241.134097][ T5451] ? file_remove_privs+0x5d0/0x5d0 [ 241.139201][ T5451] ? rwsem_write_trylock+0x135/0x1c0 [ 241.144743][ T5451] ? clear_nonspinnable+0x60/0x60 [ 241.149892][ T5451] __generic_file_write_iter+0x261/0x4e0 [ 241.155610][ T5451] ? generic_write_checks+0x3be/0x460 [ 241.161160][ T5451] generic_file_write_iter+0xa6/0x1b0 [ 241.166624][ T5451] __kernel_write+0x522/0x980 [ 241.171399][ T5451] ? vfs_read+0xd50/0xd50 [ 241.176113][ T5451] ? __lock_acquire+0x7b50/0x7b50 [ 241.181144][ T5451] ? get_dump_page+0xee/0x670 [ 241.186081][ T5451] ? down_read_killable+0x1ce/0x340 [ 241.191369][ T5451] __dump_emit+0x258/0x380 [ 241.195890][ T5451] ? wait_for_dump_helpers+0x3e0/0x3e0 [ 241.201446][ T5451] ? generic_file_llseek_size+0x34a/0x3a0 [ 241.207333][ T5451] ? dump_emit+0x145/0x3d0 [ 241.211943][ T5451] dump_user_range+0x84/0x340 [ 241.216700][ T5451] elf_core_dump+0x2fe0/0x3530 [ 241.221504][ T5451] ? load_elf_library+0x980/0x980 [ 241.226527][ T5451] ? verify_lock_unused+0x140/0x140 [ 241.231846][ T5451] ? dump_vma_snapshot+0xaf1/0xe40 [ 241.236960][ T5451] ? rcu_read_lock_any_held+0xb0/0x130 [ 241.242416][ T5451] ? getname_kernel+0x142/0x2e0 [ 241.247454][ T5451] do_coredump+0x14e8/0x2a40 [ 241.252349][ T5451] ? nfs_stat_to_errno+0x170/0x170 [ 241.257465][ T5451] ? lock_chain_count+0x20/0x20 [ 241.262763][ T5451] ? _raw_spin_unlock_irq+0x1f/0x40 [ 241.268048][ T5451] ? lockdep_hardirqs_on+0x94/0x140 [ 241.273505][ T5451] get_signal+0x531/0x12e0 [ 241.278110][ T5451] arch_do_signal_or_restart+0xe6/0x12a0 [ 241.283766][ T5451] ? _raw_spin_unlock+0x40/0x40 [ 241.288612][ T5451] ? force_sig_info_to_task+0x318/0x3c0 [ 241.294153][ T5451] ? get_sigframe_size+0x10/0x10 [ 241.299104][ T5451] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 241.305364][ T5451] ? exit_to_user_mode_loop+0x3b/0x130 [ 241.310996][ T5451] exit_to_user_mode_loop+0x9e/0x130 [ 241.316778][ T5451] exit_to_user_mode_prepare+0xee/0x180 [ 241.323449][ T5451] irqentry_exit_to_user_mode+0x5/0x30 [ 241.329395][ T5451] exc_page_fault+0x88/0x100 [ 241.334264][ T5451] asm_exc_page_fault+0x22/0x30 [ 241.339467][ T5451] RIP: 0033:0x7f9c12598161 [ 241.344209][ T5451] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 241.366067][ T5451] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 241.372640][ T5451] RAX: 0000000000000000 RBX: 00007f9c12820090 RCX: 00007f9c12598159 [ 241.381088][ T5451] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 241.389225][ T5451] RBP: 00007f9c1262f03b R08: 0000000000000000 R09: 0000000000000000 [ 241.397437][ T5451] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 241.405487][ T5451] R13: 00007f9c12820128 R14: 00007f9c12820090 R15: 00007ffc48b84138 [ 241.413579][ T5451] [ 241.417190][ T5451] memory: usage 307200kB, limit 307200kB, failcnt 36413 [ 241.424435][ T5451] memory+swap: usage 359832kB, limit 9007199254740988kB, failcnt 0 [ 241.432643][ T5451] kmem: usage 3100kB, limit 9007199254740988kB, failcnt 0 [ 241.439965][ T5451] Memory cgroup stats for /syz0: [ 241.440806][ T5451] anon 217088 [ 241.440806][ T5451] file 311181312 [ 241.440806][ T5451] kernel_stack 131072 [ 241.440806][ T5451] pagetables 471040 [ 241.440806][ T5451] percpu 0 [ 241.440806][ T5451] sock 0 [ 241.440806][ T5451] shmem 311181312 [ 241.440806][ T5451] file_mapped 66117632 [ 241.440806][ T5451] file_dirty 0 [ 241.440806][ T5451] file_writeback 0 [ 241.440806][ T5451] swapcached 54239232 [ 241.440806][ T5451] anon_thp 0 [ 241.440806][ T5451] file_thp 0 [ 241.440806][ T5451] shmem_thp 0 [ 241.440806][ T5451] inactive_anon 311234560 [ 241.440806][ T5451] active_anon 131072 [ 241.440806][ T5451] inactive_file 0 [ 241.440806][ T5451] active_file 0 [ 241.440806][ T5451] unevictable 0 [ 241.440806][ T5451] slab_reclaimable 1458600 [ 241.440806][ T5451] slab_unreclaimable 1030512 [ 241.440806][ T5451] slab 2489112 [ 241.440806][ T5451] workingset_refault_anon 0 [ 241.440806][ T5451] workingset_refault_file 46 [ 241.440806][ T5451] workingset_activate_anon 0 [ 241.538598][ T5451] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.328,pid=5451,uid=0 [ 241.554351][ T5451] Memory cgroup out of memory: Killed process 5451 (syz.0.328) total-vm:102376kB, anon-rss:1436kB, file-rss:20480kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 242.243706][ T5464] ubi0: attaching mtd0 [ 242.248839][ T5464] ubi0: scanning is finished [ 242.301400][ T5468] syz.4.334 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 242.313466][ T5468] CPU: 1 PID: 5468 Comm: syz.4.334 Not tainted syzkaller #0 [ 242.320964][ T5468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.331636][ T5468] Call Trace: [ 242.335005][ T5468] [ 242.337954][ T5468] dump_stack_lvl+0x188/0x250 [ 242.342776][ T5468] ? show_regs_print_info+0x20/0x20 [ 242.348173][ T5468] ? load_image+0x410/0x410 [ 242.352891][ T5468] ? local_lock_release+0x170/0x170 [ 242.358604][ T5468] ? __rwlock_init+0x140/0x140 [ 242.363861][ T5468] dump_header+0xd9/0x780 [ 242.368481][ T5468] oom_kill_process+0x20e/0x3d0 [ 242.373748][ T5468] out_of_memory+0xdb2/0x1190 [ 242.378517][ T5468] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 242.384256][ T5468] ? mutex_lock_io_nested+0x60/0x60 [ 242.389875][ T5468] ? unregister_oom_notifier+0x20/0x20 [ 242.395346][ T5468] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 242.401108][ T5468] ? mem_cgroup_oom_trylock+0x210/0x210 [ 242.406754][ T5468] ? do_raw_spin_unlock+0x11d/0x230 [ 242.412217][ T5468] try_charge_memcg+0x1075/0x15b0 [ 242.417395][ T5468] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 242.423320][ T5468] ? rcu_lock_acquire+0x30/0x30 [ 242.428274][ T5468] charge_memcg+0x100/0x300 [ 242.432794][ T5468] ? __mem_cgroup_charge+0x80/0x80 [ 242.438181][ T5468] __mem_cgroup_charge+0x21/0x80 [ 242.443202][ T5468] shmem_add_to_page_cache+0xa8a/0x14d0 [ 242.448767][ T5468] ? put_page+0x200/0x200 [ 242.453161][ T5468] ? mark_lock+0x94/0x320 [ 242.457751][ T5468] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 242.464039][ T5468] shmem_getpage_gfp+0x1735/0x2c10 [ 242.469260][ T5468] shmem_write_begin+0xcd/0x1a0 [ 242.474342][ T5468] generic_perform_write+0x2b6/0x550 [ 242.479749][ T5468] ? atime_needs_update+0x770/0x770 [ 242.485036][ T5468] ? grab_cache_page_write_begin+0xa0/0xa0 [ 242.491648][ T5468] ? file_remove_privs+0x5d0/0x5d0 [ 242.496935][ T5468] ? rwsem_write_trylock+0x135/0x1c0 [ 242.502925][ T5468] ? clear_nonspinnable+0x60/0x60 [ 242.508095][ T5468] __generic_file_write_iter+0x261/0x4e0 [ 242.513740][ T5468] ? generic_write_checks+0x3be/0x460 [ 242.519140][ T5468] generic_file_write_iter+0xa6/0x1b0 [ 242.524521][ T5468] __kernel_write+0x522/0x980 [ 242.529191][ T5468] ? vfs_read+0xd50/0xd50 [ 242.533621][ T5468] ? __lock_acquire+0x7b50/0x7b50 [ 242.538642][ T5468] ? get_dump_page+0xee/0x670 [ 242.543310][ T5468] ? down_read_killable+0x1ce/0x340 [ 242.548520][ T5468] __dump_emit+0x258/0x380 [ 242.553022][ T5468] ? wait_for_dump_helpers+0x3e0/0x3e0 [ 242.558498][ T5468] ? generic_file_llseek_size+0x34a/0x3a0 [ 242.564214][ T5468] ? dump_emit+0x145/0x3d0 [ 242.568641][ T5468] dump_user_range+0x84/0x340 [ 242.573533][ T5468] elf_core_dump+0x2fe0/0x3530 [ 242.578411][ T5468] ? load_elf_library+0x980/0x980 [ 242.583508][ T5468] ? verify_lock_unused+0x140/0x140 [ 242.588887][ T5468] ? dump_vma_snapshot+0xaf1/0xe40 [ 242.594770][ T5468] ? rcu_read_lock_any_held+0xb0/0x130 [ 242.601011][ T5468] ? getname_kernel+0x142/0x2e0 [ 242.606040][ T5468] do_coredump+0x14e8/0x2a40 [ 242.610889][ T5468] ? nfs_stat_to_errno+0x170/0x170 [ 242.616307][ T5468] ? lock_chain_count+0x20/0x20 [ 242.621610][ T5468] ? _raw_spin_unlock_irq+0x1f/0x40 [ 242.626949][ T5468] ? lockdep_hardirqs_on+0x94/0x140 [ 242.632609][ T5468] get_signal+0x531/0x12e0 [ 242.637386][ T5468] arch_do_signal_or_restart+0xe6/0x12a0 [ 242.643253][ T5468] ? _raw_spin_unlock+0x40/0x40 [ 242.648392][ T5468] ? force_sig_info_to_task+0x318/0x3c0 [ 242.654173][ T5468] ? get_sigframe_size+0x10/0x10 [ 242.659325][ T5468] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 242.665632][ T5468] ? exit_to_user_mode_loop+0x3b/0x130 [ 242.671907][ T5468] exit_to_user_mode_loop+0x9e/0x130 [ 242.677833][ T5468] exit_to_user_mode_prepare+0xee/0x180 [ 242.683511][ T5468] irqentry_exit_to_user_mode+0x5/0x30 [ 242.689243][ T5468] exc_page_fault+0x88/0x100 [ 242.694206][ T5468] asm_exc_page_fault+0x22/0x30 [ 242.699080][ T5468] RIP: 0033:0x7f49551ab161 [ 242.703891][ T5468] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 242.723927][ T5468] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 242.730034][ T5468] RAX: 0000000000000000 RBX: 00007f4955433180 RCX: 00007f49551ab159 [ 242.738484][ T5468] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 242.747172][ T5468] RBP: 00007f495524203b R08: 0000000000000000 R09: 0000000000000000 [ 242.755377][ T5468] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 242.763549][ T5468] R13: 00007f4955433218 R14: 00007f4955433180 R15: 00007fff1caa6808 [ 242.771583][ T5468] [ 242.776332][ T5468] memory: usage 307200kB, limit 307200kB, failcnt 7594 [ 242.783761][ T5468] memory+swap: usage 379564kB, limit 9007199254740988kB, failcnt 0 [ 242.792144][ T5468] kmem: usage 3312kB, limit 9007199254740988kB, failcnt 0 [ 242.799356][ T5468] Memory cgroup stats for /syz4: [ 242.799454][ T5468] anon 466944 [ 242.799454][ T5468] file 310714368 [ 242.799454][ T5468] kernel_stack 262144 [ 242.799454][ T5468] pagetables 503808 [ 242.799454][ T5468] percpu 7184 [ 242.799454][ T5468] sock 0 [ 242.799454][ T5468] shmem 310616064 [ 242.799454][ T5468] file_mapped 66408448 [ 242.799454][ T5468] file_dirty 45056 [ 242.799454][ T5468] file_writeback 0 [ 242.799454][ T5468] swapcached 74280960 [ 242.799454][ T5468] anon_thp 0 [ 242.799454][ T5468] file_thp 0 [ 242.799454][ T5468] shmem_thp 0 [ 242.799454][ T5468] inactive_anon 311054336 [ 242.799454][ T5468] active_anon 28672 [ 242.799454][ T5468] inactive_file 61440 [ 242.799454][ T5468] active_file 36864 [ 242.799454][ T5468] unevictable 0 [ 242.799454][ T5468] slab_reclaimable 1674408 [ 242.799454][ T5468] slab_unreclaimable 857312 [ 242.799454][ T5468] slab 2531720 [ 242.799454][ T5468] workingset_refault_anon 0 [ 242.799454][ T5468] workingset_refault_file 368 [ 242.799454][ T5468] workingset_activate_anon 0 [ 242.899264][ T5468] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.274,pid=5232,uid=0 [ 242.914408][ T5468] Memory cgroup out of memory: Killed process 5232 (syz.4.274) total-vm:200684kB, anon-rss:1388kB, file-rss:20608kB, shmem-rss:53192kB, UID:0 pgtables:224kB oom_score_adj:1000 [ 346.849171][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 346.856583][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5437/1:b..l [ 346.865378][ C0] (detected by 0, t=10502 jiffies, g=15661, q=258) [ 346.872452][ C0] task:syz.3.327 state:R running task stack:23216 pid: 5437 ppid: 4192 flags:0x00004000 [ 346.884869][ C0] Call Trace: [ 346.888213][ C0] [ 346.891327][ C0] __schedule+0x11c3/0x4350 [ 346.896049][ C0] ? mark_lock+0x94/0x320 [ 346.900387][ C0] ? release_firmware_map_entry+0x190/0x190 [ 346.906543][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 346.912476][ C0] preempt_schedule_irq+0xbb/0x160 [ 346.917784][ C0] ? __cond_resched+0xd0/0xd0 [ 346.922660][ C0] ? rcu_is_watching+0x11/0xa0 [ 346.927783][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 346.934044][ C0] irqentry_exit+0x63/0x70 [ 346.938476][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 346.944857][ C0] RIP: 0010:lock_acquire+0x208/0x400 [ 346.950400][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 346.971029][ C0] RSP: 0000:ffffc90003bb6b60 EFLAGS: 00000206 [ 346.977336][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0097b65d14207f00 [ 346.986343][ C0] RDX: 0000000000000000 RSI: ffffffff8a2b3e80 RDI: ffffffff8a7a48c0 [ 346.994667][ C0] RBP: ffffc90003bb6c80 R08: dffffc0000000000 R09: 1ffffffff203e218 [ 347.003031][ C0] R10: dffffc0000000000 R11: fffffbfff203e219 R12: ffffffff8c31ef60 [ 347.011845][ C0] R13: 1ffff92000776d78 R14: 0000000000000246 R15: dffffc0000000000 [ 347.020360][ C0] ? read_lock_is_recursive+0x10/0x10 [ 347.026537][ C0] ? mark_lock+0x94/0x320 [ 347.031928][ C0] rcu_lock_acquire+0x2a/0x30 [ 347.036607][ C0] ? rcu_lock_acquire+0x5/0x30 [ 347.041990][ C0] pagecache_get_page+0x121/0xf20 [ 347.048711][ C0] ? page_cache_prev_miss+0x380/0x380 [ 347.054364][ C0] ? verify_lock_unused+0x140/0x140 [ 347.059847][ C0] ? mark_lock+0x94/0x320 [ 347.064203][ C0] shmem_getpage_gfp+0x2fd/0x2c10 [ 347.069313][ C0] shmem_fault+0x1ac/0x550 [ 347.073891][ C0] ? shmem_fallocate+0xec0/0xec0 [ 347.078894][ C0] ? filemap_read_page+0x4b0/0x4b0 [ 347.084360][ C0] ? count_memcg_event_mm+0x324/0x370 [ 347.090728][ C0] __do_fault+0x141/0x330 [ 347.095618][ C0] handle_mm_fault+0x2982/0x4440 [ 347.101636][ C0] ? get_page+0xe0/0xe0 [ 347.105920][ C0] ? follow_page_mask+0xa51/0x12b0 [ 347.111048][ C0] __get_user_pages+0x952/0x11e0 [ 347.116354][ C0] ? read_lock_is_recursive+0x10/0x10 [ 347.122146][ C0] ? populate_vma_page_range+0x290/0x290 [ 347.128311][ C0] ? get_dump_page+0xee/0x670 [ 347.133454][ C0] ? down_read_killable+0x1ce/0x340 [ 347.138747][ C0] get_dump_page+0x18c/0x670 [ 347.143775][ C0] ? fault_in_readable+0x150/0x150 [ 347.148997][ C0] ? wait_for_dump_helpers+0x3e0/0x3e0 [ 347.155923][ C0] ? dump_emit+0x145/0x3d0 [ 347.161628][ C0] dump_user_range+0x54/0x340 [ 347.166586][ C0] elf_core_dump+0x2fe0/0x3530 [ 347.171527][ C0] ? load_elf_library+0x980/0x980 [ 347.176548][ C0] ? verify_lock_unused+0x140/0x140 [ 347.182003][ C0] ? dump_vma_snapshot+0xaf1/0xe40 [ 347.187131][ C0] ? rcu_read_lock_any_held+0xb0/0x130 [ 347.192697][ C0] ? getname_kernel+0x142/0x2e0 [ 347.197562][ C0] do_coredump+0x14e8/0x2a40 [ 347.202422][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 347.208947][ C0] ? lock_chain_count+0x20/0x20 [ 347.213899][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 347.219270][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 347.224752][ C0] get_signal+0x531/0x12e0 [ 347.229798][ C0] arch_do_signal_or_restart+0xe6/0x12a0 [ 347.235652][ C0] ? _raw_spin_unlock+0x40/0x40 [ 347.240972][ C0] ? force_sig_info_to_task+0x318/0x3c0 [ 347.246907][ C0] ? get_sigframe_size+0x10/0x10 [ 347.252313][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 347.259514][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 347.265690][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 347.271446][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 347.277775][ C0] irqentry_exit_to_user_mode+0x5/0x30 [ 347.283457][ C0] exc_page_fault+0x88/0x100 [ 347.288195][ C0] asm_exc_page_fault+0x22/0x30 [ 347.293183][ C0] RIP: 0033:0x7ff099cafbd7 [ 347.297781][ C0] RSP: 002b:00007ff098033120 EFLAGS: 00010202 [ 347.305405][ C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007ff099dfa159 [ 347.313774][ C0] RDX: 00007ff098033140 RSI: 00007ff098033270 RDI: 000000000000000b [ 347.323181][ C0] RBP: 00007ff099e9103b R08: 0000000000000000 R09: 0000000000000000 [ 347.332142][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 347.340929][ C0] R13: 00007ff09a082038 R14: 00007ff09a081fa0 R15: 00007fffe9e1c118 [ 347.349515][ C0] [ 347.353009][ C0] rcu: rcu_preempt kthread starved for 10489 jiffies! g15661 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 347.365694][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 347.376396][ C0] rcu: RCU grace-period kthread stack dump: [ 347.382904][ C0] task:rcu_preempt state:R running task stack:27920 pid: 15 ppid: 2 flags:0x00004000 [ 347.394870][ C0] Call Trace: [ 347.398286][ C0] [ 347.401322][ C0] __schedule+0x11c3/0x4350 [ 347.406656][ C0] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 347.413231][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 347.419506][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 347.426264][ C0] ? _raw_spin_unlock+0x40/0x40 [ 347.431848][ C0] ? rcu_is_watching+0x11/0xa0 [ 347.436744][ C0] ? release_firmware_map_entry+0x190/0x190 [ 347.442966][ C0] schedule+0x11b/0x1e0 [ 347.447448][ C0] schedule_timeout+0x184/0x2d0 [ 347.452437][ C0] ? console_conditional_schedule+0x40/0x40 [ 347.458449][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 347.464614][ C0] ? update_process_times+0x200/0x200 [ 347.470200][ C0] ? prepare_to_swait_event+0x33d/0x360 [ 347.475777][ C0] rcu_gp_fqs_loop+0x2be/0x11f0 [ 347.480637][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 347.486311][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 347.492462][ C0] ? rcu_gp_init+0xd72/0x10f0 [ 347.497229][ C0] ? rcu_gp_init+0x10f0/0x10f0 [ 347.501991][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 347.507341][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 347.512664][ C0] rcu_gp_kthread+0x9a/0x370 [ 347.517657][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 347.523208][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 347.530124][ C0] ? __kthread_parkme+0x14e/0x1b0 [ 347.535176][ C0] kthread+0x42e/0x520 [ 347.539367][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 347.544631][ C0] ? kthread_blkcg+0xd0/0xd0 [ 347.549770][ C0] ret_from_fork+0x1f/0x30 [ 347.554523][ C0] [ 347.557626][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 347.565495][ C0] NMI backtrace for cpu 0 [ 347.570737][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 347.578471][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.589190][ C0] Call Trace: [ 347.592961][ C0] [ 347.595830][ C0] dump_stack_lvl+0x188/0x250 [ 347.600783][ C0] ? show_regs_print_info+0x20/0x20 [ 347.606200][ C0] ? load_image+0x410/0x410 [ 347.610879][ C0] nmi_cpu_backtrace+0x3a2/0x3d0 [ 347.616022][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 347.622548][ C0] ? _printk+0xda/0x130 [ 347.626697][ C0] ? cpu_online+0x1d/0x30 [ 347.631016][ C0] ? load_image+0x410/0x410 [ 347.636212][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 347.642810][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 347.649373][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 347.656594][ C0] print_other_cpu_stall+0x1110/0x1270 [ 347.666971][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 347.673021][ C0] ? timekeeping_advance+0x82c/0xb20 [ 347.680854][ C0] rcu_sched_clock_irq+0x845/0x1120 [ 347.686172][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 347.691640][ C0] ? hrtimer_run_queues+0x162/0x400 [ 347.697364][ C0] ? account_process_tick+0x22a/0x3a0 [ 347.703169][ C0] update_process_times+0x193/0x200 [ 347.708368][ C0] tick_sched_timer+0x37d/0x560 [ 347.714026][ C0] ? tick_setup_sched_timer+0x2b0/0x2b0 [ 347.719765][ C0] __hrtimer_run_queues+0x4b0/0xb60 [ 347.725148][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 347.731514][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 347.736709][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 347.743030][ C0] hrtimer_interrupt+0x397/0x8b0 [ 347.748328][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 347.754679][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 347.760685][ C0] [ 347.764199][ C0] [ 347.767815][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 347.774563][ C0] RIP: 0010:default_idle+0xb/0x10 [ 347.780344][ C0] Code: b7 48 89 df e8 06 bf f3 f7 eb ad e8 1f ab f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d c7 44 5b 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 347.800648][ C0] RSP: 0000:ffffffff8c007dc8 EFLAGS: 000002c6 [ 347.807067][ C0] RAX: 9f645575a5cd9f00 RBX: ffffffff8c0bc480 RCX: 9f645575a5cd9f00 [ 347.815047][ C0] RDX: 0000000000000001 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a48c0 [ 347.823022][ C0] RBP: ffffffff8c007ef8 R08: ffff8880b903b30b R09: 1ffff11017207661 [ 347.831191][ C0] R10: dffffc0000000000 R11: ffffed1017207662 R12: 1ffffffff1800fc4 [ 347.839600][ C0] R13: dffffc0000000000 R14: 1ffffffff1817890 R15: 0000000000000000 [ 347.847711][ C0] default_idle_call+0x81/0xc0 [ 347.852482][ C0] do_idle+0x251/0x650 [ 347.856632][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 347.862215][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 347.868145][ C0] ? schedule_idle+0x57/0x90 [ 347.872842][ C0] cpu_startup_entry+0x14/0x20 [ 347.878310][ C0] ? time_init+0x40/0x40 [ 347.882631][ C0] start_kernel+0x489/0x540 [ 347.887348][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 347.893424][ C0]