last executing test programs: 8m2.602068465s ago: executing program 2 (id=87): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) sendmsg$tipc(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0) 7m59.100667805s ago: executing program 2 (id=90): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) listen(0xffffffffffffffff, 0x50) setrlimit(0xf, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x21) mount(0x0, 0x0, 0x0, 0x0, 0x0) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x5, 0x2, 0x1, 0x1}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000200, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x22a02, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) sendmsg$NFT_BATCH(r3, 0x0, 0x40) 7m56.68304997s ago: executing program 2 (id=96): r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) r1 = userfaultfd(0x80801) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000300)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) setpriority(0x0, 0xffffffffffffffff, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005f0800000000000018000000000000000000000000010000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) tee(0xffffffffffffffff, r7, 0x7, 0x0) vmsplice(r6, &(0x7f0000000340)=[{&(0x7f0000000000)="b0", 0x1}], 0x1, 0x9) close_range(r1, 0xffffffffffffffff, 0x0) 7m46.105509316s ago: executing program 2 (id=106): socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e21, 0x2, @mcast1}, 0x1c) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, &(0x7f00000000c0), 0xffffffffffffffff, 0xfe, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r3, 0x100000000) socket$inet_udp(0x2, 0x2, 0x0) 7m41.822193378s ago: executing program 2 (id=110): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() setrlimit(0xa, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x4, 0xd, 0x0, 0x0, &(0x7f0000000040)=0xffffffff, 0x2) landlock_restrict_self(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast1, 0x5, 0x6, 0x0, 0x0, 0x3, 0x867000c0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @private0={0xfc, 0x0, '\x00', 0x3}, 0x1, 0x6, 0x0, 0x0, 0x6, 0x58010a}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}], 0x1) 7m38.531126601s ago: executing program 2 (id=114): syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0x148, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd25, 0x5}}]}, 0x148}}, 0x20000000) write(r0, &(0x7f00000004c0)='\n', 0x1) 7m22.852248756s ago: executing program 32 (id=114): syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0x148, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd25, 0x5}}]}, 0x148}}, 0x20000000) write(r0, &(0x7f00000004c0)='\n', 0x1) 7m9.926630708s ago: executing program 4 (id=162): bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x23) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xab7f) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) epoll_create(0x9) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r2, &(0x7f0000000840), 0x36, 0x12022, 0x0) r3 = syz_open_dev$loop(0x0, 0x7, 0x20000) ioctl$BLKFRASET(r3, 0x1264, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c) 7m7.162350457s ago: executing program 4 (id=166): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x1, 0x100) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000440)=0x91) r3 = io_uring_setup(0x6957, &(0x7f0000000700)={0x0, 0xc54b, 0x1, 0x20001, 0x2de}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000240)=[{0x0}], 0x1) r4 = io_uring_setup(0x110, &(0x7f0000000680)={0x0, 0x653f, 0x400, 0xfffffffc, 0x1b2, 0x0, r3}) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x140, 0xb, 0x79b, 0x2, 0x10000007, 0x7fffffff, 0x7fff, 0x6, 0x3, 0xc72d, 0x0, 0x7, 0xfffff9f5, 0xc, 0x29, 0x72f0, 0x9, 0x7c, 0x4, 0x3fe, 0x4, 0x488, 0xc, 0x9, 0x1004, 0x80000001, 0xe, 0x0, 0x1, 0x8001, 0x1]}) 7m5.950505737s ago: executing program 4 (id=170): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) sendmsg$tipc(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0) 7m2.4640933s ago: executing program 4 (id=176): socket$kcm(0x29, 0x2, 0x0) 7m2.239363786s ago: executing program 4 (id=177): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)) r1 = eventfd2(0x80, 0x800) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) 7m1.409648738s ago: executing program 4 (id=180): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x22020600) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xe6}]}}]}, 0x3c}}, 0x20000000) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a497", 0x1a}], 0x3, 0x0, 0x0, 0x4004014}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x20) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = fsmount(r0, 0x0, 0x0) r6 = openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000240)={'ipvs\x00'}, &(0x7f0000000280)=0x1e) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) 6m45.536369985s ago: executing program 33 (id=180): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x22020600) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xe6}]}}]}, 0x3c}}, 0x20000000) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a497", 0x1a}], 0x3, 0x0, 0x0, 0x4004014}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x20) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = fsmount(r0, 0x0, 0x0) r6 = openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000240)={'ipvs\x00'}, &(0x7f0000000280)=0x1e) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) 5m54.445491753s ago: executing program 0 (id=252): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)="315218cb0b0032201f28dd5fc940737070e4d90dfd5b0c61b017d631a0e431f909046ce19cd63fc6473d0307ee68fb29f798047501668f3fb51e66db58b8e730d17a869c744e876873fc41a9c9376ab992d1b078d24a4b91e9786047f4400c24c0c29228479ebf61cca9a1dc73a9edc0d8e75c91be939eb02609aff92732c9bbd28fe400c18bf1de0180", 0x8a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setpriority(0x1, 0x0, 0x2) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000003cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003c80)={0x0, 0x32f4}, 0x1, 0x0, 0x0, 0x80}, 0x48800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/filecache\x00', 0x2, 0x80) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="00000000000010ea43ce0d728dc2000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101441) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_ublk_setup_io_uring(0x32f3, &(0x7f0000002380)={0x0, 0x5d50, 0x0, 0x2, 0x17c}, &(0x7f0000002400), &(0x7f0000002440), &(0x7f0000002480)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x7e80, 0xffffffffffffff4f, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xeb) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m50.116132967s ago: executing program 0 (id=254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) clock_settime(0x100000000000000, &(0x7f0000000040)={0x8000000000000802, 0xfffffffffffffffe}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'wg2\x00', &(0x7f0000000140)=@ethtool_ts_info}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0x70, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x0, 0x1, 0x7, {0x19, 0x1, 0x8000, 0x3, 0x6}, {0x5, 0x1, 0xedf3, 0xfffa, 0xa9, 0xffffbf00}, 0x91, 0x10001, 0x2}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) listen(r6, 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 5m47.070368882s ago: executing program 0 (id=256): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 5m45.595173079s ago: executing program 0 (id=257): eventfd2(0x0, 0x0) io_setup(0x81, 0x0) socket$netlink(0x10, 0x3, 0xf) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x60000726) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000053c0)={0x0, 0x0, &(0x7f0000005380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000001020102000825bb0d00002c0001800600134000000000140001800800"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m43.415811159s ago: executing program 0 (id=259): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec000905"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x40003) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) sendmsg$tipc(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) 5m40.799136094s ago: executing program 0 (id=261): r0 = epoll_create1(0x0) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0x2}) r3 = syz_open_dev$radio(0x0, 0x0, 0x2) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x24000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socket$inet6(0xa, 0x3, 0x1) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101000, 0x46) openat(r5, &(0x7f0000000180)='./file0\x00', 0x80080, 0x1) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 0x10}, 0xa) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020}, 0x2020) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000006c00)={0x8190000, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 5m25.54769947s ago: executing program 34 (id=261): r0 = epoll_create1(0x0) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0x2}) r3 = syz_open_dev$radio(0x0, 0x0, 0x2) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x24000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socket$inet6(0xa, 0x3, 0x1) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101000, 0x46) openat(r5, &(0x7f0000000180)='./file0\x00', 0x80080, 0x1) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 0x10}, 0xa) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020}, 0x2020) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000006c00)={0x8190000, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 17.749841778s ago: executing program 5 (id=591): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa1b71da", 0xe, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) 17.591038801s ago: executing program 3 (id=592): eventfd2(0x0, 0x0) io_setup(0x81, 0x0) socket$netlink(0x10, 0x3, 0xf) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x60000726) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000053c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16.484915265s ago: executing program 3 (id=602): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000002c0)={r0, &(0x7f00000001c0)='*/#\x00', 0x800, &(0x7f0000000200)={@_ha_fsid={[0x3, 0x1aa5]}, {0x6, 0x9, 0x6, 0x3}}, 0xffff5d98, &(0x7f0000000240), &(0x7f0000000280)=0xf}) fanotify_mark(r1, 0x2, 0x1000, r2, &(0x7f0000000300)='./file0\x00') r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0x15, &(0x7f0000000040)=0xfffe, 0x4) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x2, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x2, 0x88, &(0x7f0000000840)=""/136}]}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000580)={@my=0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x1a, 0x0, 0x8}, 0x28) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="34000005000007012dbd7000fedbdf25027c00001c002d80180009801100998032881935c6d6e2c0dea5ea75b600000004000180"], 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) unshare(0x10200) sendto(r0, &(0x7f00000004c0)="0a363b4b485ccf10360eacddfc33c446ffd9fa74ebf7423d84e5c9bef5a1686913dc9d7ef572c648a7c15547f8faec7d681bc7a91ce44e66", 0x38, 0x40004, &(0x7f0000000540)=@rc={0x1d, @none, 0x94}, 0x80) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6018232500002c00fe80000000000000000000000000007419bc57253f49045e6e8842bbfe8000000000000000000000000000aa"], 0x0) fanotify_mark(0xffffffffffffffff, 0x4, 0x20, 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') 16.48428861s ago: executing program 5 (id=594): socketpair(0x1, 0x1, 0x0, 0x0) r0 = creat(0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002a80)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(r0, 0x0, 0x141a41, 0x0) write(r5, &(0x7f0000000180)='r:s/p .', 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008800}, 0x40040c5) r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1000, 0xa, 0x20002f7}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x0, 0x1a}, 0x28) io_uring_enter(r6, 0x2215, 0x7700, 0x16, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000d23000/0x3000)=nil, 0x0}, 0x68) socket$can_raw(0x1d, 0x3, 0x1) 16.214165701s ago: executing program 6 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0xca033, 0xffffffffffffffff, 0xbd837000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000400)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000140)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) read(r4, &(0x7f00000002c0)=""/10, 0x5b) socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) syz_emit_ethernet(0x14, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000128001007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001440)={r7, 0x0, 0x0}, 0x20) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4) 14.592332101s ago: executing program 3 (id=597): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10400, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYBLOB]) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="3ce2", 0x2, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) 14.488551328s ago: executing program 6 (id=598): bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="05000000010000", 0x7) syz_emit_vhci(0x0, 0xd) sched_setscheduler(r0, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[], &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) 13.161794789s ago: executing program 3 (id=599): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x10, 0x0, 0x7fc00100}]}) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000019340)=ANY=[@ANYBLOB], 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xd, 0x2, {0x10, "00000010000000001000000000001010"}}}]}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040040) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}]}, 0x34}}, 0x0) 13.142579932s ago: executing program 5 (id=600): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000800), 0xffffffffffffffff) r4 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2000006, 0x9, 0x9, 0x7ffb, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, 0x0) r5 = syz_open_dev$sg(0x0, 0x0, 0x0) close_range(r5, r5, 0x0) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r6, 0x8000000) shutdown(r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x2, 0x1}, {0x16, 0x1}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x33) 12.906687072s ago: executing program 1 (id=601): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x8000) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x140f, 0x1, 0x70bd2d, 0x25dfdbf4, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0xd7082272f25212d0}, 0x4000) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x48, &(0x7f0000000140)=ANY=[], 0x8) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r6, 0x1, 0x28, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffd, @loopback, @loopback}}}}}}, 0x0) recvmmsg(r6, &(0x7f0000002a00), 0x0, 0x10000, 0x0) 11.629764282s ago: executing program 6 (id=603): eventfd2(0x0, 0x0) io_setup(0x81, 0x0) socket$netlink(0x10, 0x3, 0xf) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x60000726) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000053c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.233022401s ago: executing program 1 (id=604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r4) stat(&(0x7f00000060c0)='./file0\x00', &(0x7f0000006100)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x38328a2, 0x0) sendmmsg$unix(r1, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000003500)=[{0x0}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f00000034c0)="5b6fa9", 0x3}], 0x3, 0x0, 0x0, 0x80}}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000003640)="846c355ac0a763f528feb4", 0xb}, {0x0}, {&(0x7f0000003700)="9cca187827f053cd65c6ed35dfd1869fc97d4ee0ec167c964f3cd4b8e88b2419e807a049a743cb7bd12576a491eea02f8ada86c48b177ee19e0240da62ac42593cd17a3a1d1c7a3aeebc35cf3b5a0dc913242bdb89eb400eb32400db5565b8f1fd68934c2af3bb93bb0520fd781f980c4316a0824256267e82bf30d9d055dcf0d5898bbda731c6a0879e1e5bbd4764a3ee2bca4efde1e56c", 0x98}, {&(0x7f00000037c0)="5c4f554b36936bb2c530ff39de149e7328e73ee4102b1c9e6cdf62a08c7f6e4d095dce9c77b8dd506daa4948bdcbe6273452cc26c44db9645325eb53d9d11c1dc062235fd69e58f585b8c644148209546b9b78065e3a615bf6380f7952c6f1ff3674a4a547f3bb51012d8701f206c9a0a94d8b7a9b736d6f1d3db95fe9b5e77ab9d2503c8179d7accae1e2a54077250e1624ee6b7ad4aaa6dcd05265f79486f013dbb33905645e58b74b1af3c95592dfcb5639b5", 0xb4}], 0x4, &(0x7f0000003940)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, r2, r1, r2, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x50, 0x10}}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f00000039c0)="f6c75a0cda9a50f9dc3feea8b7", 0xd}, {&(0x7f0000003a00)="a0179a543da0262385100c60cd0275f9724c897b34c57388b55920c0dba0fef201d043a120137dba0a08df95313eb7393a5f07666a67a7955d9a3211e5466e1794b9e38729be2c1b3f27e53e3b1b27290f911f15c5496d21ca7926f936c37427d2cf332f2097e35b410e27852c1ffbc571a6b11ad23b1f393e88b10c608d6cee9100f3ccdc6ff851658b9bbaa2399e7f3bb0cf1a06a5458cfd7897041b16faefe60904668434488ef548659020c18eb38efd0ad358ee6fc3f4e192954592d252a7767efbc6fd93e3828feb039d62c049a98602eacbdb955a507ef21e", 0xdc}], 0x2, &(0x7f0000003bc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}], 0x18, 0x40000}}, {{&(0x7f0000003c00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004100)=[{&(0x7f0000003c80)="54d43eb5110e2903c45aa601ccf224407daed94886eb61c586f473610598b46ef0592e8dd65799e0", 0x28}, {&(0x7f0000003cc0)="08a15285f7479200793be2b0eb0d2f8dc2c61daf9830072f337cf5f0594ae95c435f08e1680f2ae65df38435938652bb95c2575015ff2781bf3ea20d371ad49f4370", 0x42}, {&(0x7f0000003d40)="c02363c98e178454c996b3a2c2145c641af9eb2065bc03d98651baa7f65319b83048ca6d824cfdde010f3dd8303587e04bbac79652e4327d2175345142ff3d76fd870e7ff47eda35c608826fe0fe375a59e0768d958adf21c02e45c01793bcb525e749cafc48be54dae33a215551e4cd711c0d805f94170ce6f57a8ae2274aeb3129cb6342debc1d123a25978e97a996cc", 0x91}, {&(0x7f0000003e00)="8ee6e251a459572cb347ab3fa60f76f4dadeea4b83f092c8ff8251224b9158137d7541efbdba9da2528dff6f791dad6a66c0eb2a8ece05dcf963bfe22af46db22e7d1b50d51b26541dd3f749e82ae46e2224ad82ec268a74deb345828f33b0f7695351", 0x63}, {&(0x7f0000003e80)="c5071f3d8b168887dddadffe7dad350cd57087115c260f7b2e6ba92448c30c02d113aa297ec40bb056865377a249479ee6748b7d7dd8e54b87f153c18819052b1fcff745fbd14d6c8441bc4b1af6f1484804857120d55a58c81ca77aabfa318b7a2921fbd0737a931ffe3ea2eb6d8dafbf46b4e3702bae764cd465b7ebf7f2", 0x7f}, {&(0x7f0000003f00)="f170578a12fd19851763af2e07d6dc848f49ab7e33bf1f13c9d3ff7dabc6c922a262f0970590a975f6242c7524f600ceaaae0da8d3899206e0dd7b4d0ccd9919cbea4e2cb8a5e2d6059cf0bc969df6e71ceb5831a7576f784bd09920ebc704e43a743caa21fba3873e466b974afafa985695fb4c1d26dff67c4c2772dc9327566602f4c330687b37e2ca19d72c7ce1cb9fd4ab7c6fb715b33278dff05a781577c30d09a4b810f46a4d5a0f56f399c5973159c1afcc3be3d27c43d0ec32a4e2457c6ce68d03cba87b7688550f6cc0c1e226485afbf8cf2bc2e4ca8234cb918cb83f9803e1f9bd2256342b", 0xea}, {&(0x7f0000004000)="e42e3d3d7d60eb6c66b485bb417b71be4856b599cd9ba17478e4cf216296ec072f324f207951a244da946b6949e1d1a33b271e84cdbfa806413f1492a409c5862d36aa21d9bd4a787b1d3f00d646eda369b617626663338f1c538f4f9e32553146efef6aafb7bf48c525416a1da9d6b11128d80e66d6895b72bab25707edac5a105f937be30b095eb55e326e219810f0a2", 0x91}, {&(0x7f00000040c0)}], 0x8, &(0x7f0000004180)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4008080}}, {{&(0x7f00000041c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000005600)=[{0x0}, {&(0x7f00000043c0)="2ecd9a978adc83a053d1315718c421d3407822509277268bd3e3743cfa2a32276b0da67f96694acd4abd68f2ea384f19a4a94c9576e0bfe6b9e85cd9092572f017436e3b8c011a39b90b63a7a4", 0x4d}, {&(0x7f00000044c0)="a2f53b2c5d37bcec743aba989e9556c0738e218bc78d6f1c220363f097061992474d08d255eb737b8de9c9fe12ac62ec37e72cdaa95a3597ca97bf31b6faa35507f8f1c8eabc13fef9260e12318566f3471106d99ee5747ae0d16f45fe631f6554d4d145be50868d93118b5e7a80b2e3fa3d8f655d0fa745a87f44481924ba29d7d0d3991919464d6392f2faad65bb6e1c05a5e1c400f0a00f02372a911759a3501671797d8b981a9328206da6d8d54c60de166101f5c43cbc987840c5530b35", 0xc0}, {&(0x7f0000004580)="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", 0x6fc}, {&(0x7f0000005580)="78ddedcaf242564609bdca8d0bc95b108caa363c3db65f67a712e12d6e979a042e578c901271dac3f9fa019fe6359f0aa5926de0ff678a760292c694c95170f7d43b418fa5f3d7b44822e44d93e6cd18979e2dbb5b84eab5acfef3cbd129", 0x5e}], 0x5, &(0x7f0000005900)=[@rights={{0x30, 0x1, 0x1, [r1, r1, r2, 0xffffffffffffffff, r1, r2, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r1, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0xd0, 0x240000d0}}, {{&(0x7f0000005a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005e00), 0x0, 0x0, 0x0, 0x41}}, {{&(0x7f0000005e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006080)=[{0x0}, {&(0x7f0000005f80)="f87e63767ba10e78ecffa097cc864eb060e4abd01c9e9ad0c3a84834a67b64fb02d3fed0229ba94f010653f43ff39837f3c92b69ae2c79e0758dc060fc082c212f28d845d5ac409e92202c96d3d89363dbf0890599961a0d7cd45d8490179bce5dee3f68bdd7ba0d8456babc1ec76aaa448e8b8589c4c1fcab0ad2e6c8", 0x7d}], 0x2, &(0x7f0000006180)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r0, r5, r6}}}], 0x38, 0x4048444}}, {{&(0x7f00000061c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006300)=[{0x0}], 0x1, 0x0, 0x0, 0x48}}, {{&(0x7f0000006340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006780)=[{&(0x7f00000063c0)="ece2f38f576765672bb2acf8ad182ed150d19b632834f2af3a752bc0981a7b1b235983dcd6a79ae072793e6b4cced6d9b24facb4e0319d5a1a39c5e434de80b0261aff99bbca671d9b34a893fea8a56e27627714456597d4b7a55d973ab10e6e74f3cf1aa1fcea1530defcb302c4de84c0555e0bc1a72363c5eb6eaab48f1b768d5f274164b010ec5fe087141b31c8b105b8f6166be28b4d7eb47f89cba0109bec639b4af007d08e2faf5baa9aab59ae718588a287fe0a223029e8", 0xbb}, {&(0x7f0000006480)="945ac9c5c634e4afc4bf46606f9c786a0ac31cb5b6fb9a609aa44547036bf790f285799860bbc48517ed8b11072f20355399414f593274d7c7ddae174f1e35cb411c190100d18eb0da145b", 0x4b}, {&(0x7f0000006500)="a1bb4ee473fb3103161771", 0xb}, {&(0x7f0000006540)="144aea2fae8e0c994d0ea637e4479fec51866a67f9c59be2c6c97b3f1f9f392b514ff6c25d74b84ca9229e710b5a13a07619cbe6d78d111847542936d96f848e9ba91743ea11dfd6e8fbd6907d312227504b0d76978310257f68a675a5ffd33cdea5df2290bc", 0x66}, {&(0x7f00000065c0)="6e514e36a5fe046064c28af1af2a988ecae5a0751c90b4ed65d43856aa927b3d220b86c8a67d7750038a71ac84e1a2b992ccf8f1d400ed161134bea91e8ea6925350319d09392d75a844441f1229b3f6566362bc7e7708b73721b409c6274df15e216016cff8d6a25a623aaa147dcd493e4727f8aabd13fed7087b0ce04a82586048b35596393b80a2519b15941b970f90269d7a022d06afb79e9e2041222e3a85fc94fef51e250af540cf2bf4724c5bda97aafd258a16e166e54b15d894a7e24f", 0xc1}, {&(0x7f00000066c0)="1e69774d32166509b193d4672d8811d2603f339f7dfe8fa2c47004a89ebc8e9e0421308749c246143be37b391130c840b7a64de7e8668992bbdd9402560f4055177812a72a73b5fc430c2d84a1a0eea850dfc4e89542433a18c92a324a954dbe11513948eb0e7aa77d0d098f8288a25b7f4cda0e8bb499df2077b1bc5b8fb60d22b3fda019d512436973edb253fb739562f4a8d729385fbbad7251f45a06734f1b5eff1cd269ea650f7e1d645d", 0xad}], 0x6, &(0x7f0000006800)=[@rights={{0x2c, 0x1, 0x1, [r1, r1, r1, r1, r1, r1, r1]}}, @rights={{0x10}}], 0x40, 0xc000010}}], 0x9, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/zoneinfo\x00', 0x0, 0x0) syz_io_uring_setup(0xefd, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) connect$tipc(r8, 0x0, 0x0) read$FUSE(r7, &(0x7f0000000480)={0x2020}, 0x2020) 9.176146987s ago: executing program 3 (id=605): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000001c0)={0x0, 0x1, 0x8, 0x0, 0xfffffffd}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000354000/0x3000)=nil, 0x3000, 0x20, 0x10012, 0xffffffffffffffff, 0xfacb8000) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x62040, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xc1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001080)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 9.119046135s ago: executing program 6 (id=606): eventfd2(0x0, 0x0) io_setup(0x81, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x60000726) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000053c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.368137813s ago: executing program 1 (id=607): r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) r1 = userfaultfd(0x80801) syz_open_dev$ttys(0xc, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) setpriority(0x0, 0xffffffffffffffff, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) pipe2(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x9) close_range(r1, 0xffffffffffffffff, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7ff000000000000, 0x2003) sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x10000881) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000370000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a3000000000380000003a0a010400000000000000000100000008000b40000000000900010073797a3000000000100004800c00018008"], 0xac}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009"], 0xb0}}, 0x0) 7.977063694s ago: executing program 5 (id=608): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000001c0)={0x0, 0x1, 0x8, 0x0, 0xfffffffd}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000354000/0x3000)=nil, 0x3000, 0x20, 0x10012, 0xffffffffffffffff, 0xfacb8000) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x62040, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xc1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 5.769729152s ago: executing program 6 (id=609): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'dummy0\x00', &(0x7f00000003c0)=@ethtool_ringparam={0x11, 0x5, 0x5, 0x8001, 0x961, 0x2483602a, 0x3, 0x0, 0xffffffff}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002a80)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, r4}, @generic={0x3d, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r5, &(0x7f0000000180)='r:s/p ./file0:0', 0xf) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x44, 0x1a, 0x1, 0x70bd2d, 0x4000800, {0xa, 0x0, 0x0, 0x0, 0x80, 0x8, 0x36eb47deb9f71e09}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x0, 0x0, 0x1}}, @NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x90) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) 5.112468351s ago: executing program 1 (id=610): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10400, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYBLOB]) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="3ce2", 0x2, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x278, 0x3d8, 0x3d8, 0x278, 0x3d8, 0x3, 0x0, {[{{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xffffff00, 0xff000000], [0x0, 0xffffff00, 0xffffffff], 'ip6gretap0\x00', 'bond0\x00', {0x1722a77d736144f5}, {0xff}, 0x8, 0x0, 0x3, 0x14}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_vlan\x00', {0x22, 0x9, 0x0, 0x1, 0x6, 0xb3c, 0x10, 0x20, 0x20}, {0x6}}}, @common=@unspec=@addrtype1={{0x28}, {0x684, 0x9, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x1, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x60, 0x1, "bf50e684840e31838b38a8722c839ed5aca31d87e30f043f5135ab48dfbc"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 3.395714964s ago: executing program 6 (id=611): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000001c0)={0x0, 0x1, 0x8, 0x0, 0xfffffffd}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000354000/0x3000)=nil, 0x3000, 0x20, 0x10012, 0xffffffffffffffff, 0xfacb8000) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x62040, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xc1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) 2.100776089s ago: executing program 1 (id=612): bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="05000000010000", 0x7) syz_emit_vhci(0x0, 0xd) sched_setscheduler(r0, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[], &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) 1.615695078s ago: executing program 3 (id=613): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@fallback, 0xffffffffffffffff, 0x37, 0x18}, 0x20) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000340)={0x6, "1803c8098000000000000000000000000000000000000000f34100"}) r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80800, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=12544 wIndex=0 wLength', 0x37) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000000040), 0x43000002) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x401c2103, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010400000000000000000700000014000780080011400600000005001500050000000500010006000000050005000200000005000400030000000900020073797a30000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x20004000) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000630138000000000095"], &(0x7f00000012c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000002740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002700)={&(0x7f0000002540)={0x19c, 0x0, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x94, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x27}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_EXPECT_MASK={0x70, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xa}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4000015}, 0x400c000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000000)={0x4, @meta={0x48435655, 0x6c4c6504, 0xfa75, 0xb6f1, 0x2b40e32e}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f00000004c0)=@vmx={0x100, 0x0, 0x20dd, {0xffffffffffffffff, 0xffffffffffffffff, {}, 0x1, 0x800000000008}, {"00f5c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"}}) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write$P9_RREADDIR(r9, &(0x7f0000000140)={0x46, 0x29, 0x1, {0x8000, [{{0x8, 0x0, 0x2}, 0x4, 0xfe, 0x6, './proc'}, {{0x2, 0x3, 0x4}, 0x81d1, 0x0, 0x5, './sys'}]}}, 0x46) 1.487145264s ago: executing program 5 (id=614): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa1b71da", 0xe, 0xfffffffffffffffe) setfsgid(0xee00) r4 = socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007f00)=ANY=[@ANYRES8=r3], 0x228}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) 152.824702ms ago: executing program 1 (id=615): eventfd2(0x0, 0x0) io_setup(0x81, 0x0) socket$netlink(0x10, 0x3, 0xf) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x60000726) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000053c0)={0x0, 0x0, &(0x7f0000005380)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 5 (id=616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)='addr\x00', &(0x7f0000000280)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) msgctl$IPC_STAT(0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): 0 isolated_anon:0 [ 227.276606][ T6441] active_file:25090 inactive_file:36547 isolated_file:0 [ 227.276606][ T6441] unevictable:0 dirty:170 writeback:0 [ 227.276606][ T6441] slab_reclaimable:11800 slab_unreclaimable:99673 [ 227.276606][ T6441] mapped:31993 shmem:3373 pagetables:1201 [ 227.276606][ T6441] sec_pagetables:0 bounce:0 [ 227.276606][ T6441] kernel_misc_reclaimable:0 [ 227.276606][ T6441] free:1289664 free_pcp:9413 free_cma:0 [ 227.276674][ T6441] Node 0 active_anon:3328kB inactive_anon:32240kB active_file:100148kB inactive_file:146188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127972kB dirty:676kB writeback:0kB shmem:13492kB kernel_stack:13096kB pagetables:4640kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 227.276731][ T6441] Node 1 active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 227.276783][ T6441] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 227.276846][ T6441] lowmem_reserve[]: 0 2499 2500 2500 2500 [ 227.276887][ T6441] Node 0 DMA32 free:1207696kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:3328kB inactive_anon:32240kB active_file:100148kB inactive_file:146188kB unevictable:0kB writepending:676kB zspages:0kB present:3129332kB managed:2559152kB mlocked:0kB bounce:0kB free_pcp:37624kB local_pcp:10956kB free_cma:0kB [ 227.276991][ T6441] lowmem_reserve[]: 0 0 1 1 1 [ 227.277030][ T6441] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1824kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:8kB free_cma:0kB [ 227.277095][ T6441] lowmem_reserve[]: 0 0 0 0 0 [ 227.277134][ T6441] Node 1 Normal free:3935600kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 227.277201][ T6441] lowmem_reserve[]: 0 0 0 0 0 [ 227.277238][ T6441] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 227.277370][ T6441] Node 0 DMA32: 633*4kB (ME) 541*8kB (UM) 125*16kB (UME) 205*32kB (UME) 50*64kB (UME) 147*128kB (UME) 113*256kB (ME) 41*512kB (UM) 12*1024kB (UME) 9*2048kB (ME) 266*4096kB (UM) = 1207612kB [ 227.277547][ T6441] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 227.277668][ T6441] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 11*16kB (UM) 5*32kB (UM) 10*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3935600kB [ 227.277844][ T6441] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 227.277863][ T6441] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 227.277881][ T6441] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 227.277899][ T6441] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 227.277916][ T6441] 65006 total pagecache pages [ 227.277925][ T6441] 0 pages in swap cache [ 227.277932][ T6441] Free swap = 124996kB [ 227.277940][ T6441] Total swap = 124996kB [ 227.277949][ T6441] 2097051 pages RAM [ 227.277956][ T6441] 0 pages HighMem/MovableOnly [ 227.277964][ T6441] 425191 pages reserved [ 227.277972][ T6441] 0 pages cma reserved [ 227.423032][ T5590] Bluetooth: hci5: command tx timeout [ 227.589371][ T66] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.647480][ T6450] fuse: Unknown parameter ' ' [ 229.075188][ T6463] netlink: 112 bytes leftover after parsing attributes in process `syz.0.156'. [ 229.575187][ T5590] Bluetooth: hci5: command tx timeout [ 229.769030][ T66] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.840592][ T36] audit: type=1804 audit(1787632314.285:23): pid=6487 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.164" name="/newroot/33/file0" dev="tmpfs" ino=198 res=1 errno=0 [ 232.904862][ T6486] uprobe: syz.0.164:6486 failed to unregister, leaking uprobe [ 232.947473][ T66] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.188940][ T66] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.567750][ T5718] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 234.753069][ T5718] usb 5-1: Using ep0 maxpacket: 32 [ 234.754727][ T5718] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 234.757150][ T5718] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 234.757188][ T5718] usb 5-1: can't read configurations, error -61 [ 234.883006][ T5718] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 235.138248][ T6520] netlink: 104 bytes leftover after parsing attributes in process `syz.3.172'. [ 236.120929][ T5718] usb 5-1: Using ep0 maxpacket: 32 [ 236.264601][ T5718] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 236.266974][ T5718] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 236.267005][ T5718] usb 5-1: can't read configurations, error -61 [ 236.385783][ T5718] usb usb5-port1: attempt power cycle [ 236.743098][ T5718] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 236.763901][ T5718] usb 5-1: Using ep0 maxpacket: 32 [ 236.765762][ T5718] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 236.767828][ T5718] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 236.767872][ T5718] usb 5-1: can't read configurations, error -61 [ 236.903140][ T5718] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 236.933755][ T5718] usb 5-1: Using ep0 maxpacket: 32 [ 236.934390][ T5718] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 236.936628][ T5718] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 236.936660][ T5718] usb 5-1: can't read configurations, error -61 [ 236.937079][ T5718] usb usb5-port1: unable to enumerate USB device [ 237.055538][ T6527] device-mapper: ioctl: only supply one of name or uuid, cmd(14) [ 238.409802][ T6542] warn_alloc: 1 callbacks suppressed [ 238.409817][ T6542] syz.3.178: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 238.409881][ T6542] CPU: 1 UID: 0 PID: 6542 Comm: syz.3.178 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 238.409908][ T6542] Tainted: [L]=SOFTLOCKUP [ 238.409916][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.409937][ T6542] Call Trace: [ 238.409945][ T6542] [ 238.409957][ T6542] dump_stack_lvl+0xe8/0x150 [ 238.409992][ T6542] warn_alloc+0x24d/0x270 [ 238.410020][ T6542] ? __pfx_warn_alloc+0x10/0x10 [ 238.410054][ T6542] ? register_lock_class+0x31/0x2e0 [ 238.410077][ T6542] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 238.410102][ T6542] __vmalloc_node_range_noprof+0x130/0x1560 [ 238.410126][ T6542] ? __lock_acquire+0x683/0x2ce0 [ 238.410176][ T6542] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 238.410206][ T6542] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 238.410231][ T6542] vmalloc_noprof+0xb2/0xe0 [ 238.410252][ T6542] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 238.410279][ T6542] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 238.410306][ T6542] ? dvb_demux_do_ioctl+0x323/0x540 [ 238.410334][ T6542] dvb_demux_do_ioctl+0x460/0x540 [ 238.410363][ T6542] dvb_usercopy+0x199/0x2e0 [ 238.410384][ T6542] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 238.410409][ T6542] ? __pfx_dvb_usercopy+0x10/0x10 [ 238.410443][ T6542] ? __fget_files+0x3a8/0x420 [ 238.410474][ T6542] ? __fget_files+0x2a/0x420 [ 238.410507][ T6542] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 238.410532][ T6542] dvb_demux_ioctl+0x29/0x40 [ 238.410556][ T6542] __se_sys_ioctl+0xff/0x170 [ 238.410582][ T6542] do_syscall_64+0x166/0x520 [ 238.410606][ T6542] ? trace_irq_disable+0x3b/0x140 [ 238.410630][ T6542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.410653][ T6542] ? clear_bhb_loop+0x70/0xc0 [ 238.410681][ T6542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.410703][ T6542] RIP: 0033:0x7f54d348e0d9 [ 238.410724][ T6542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.410743][ T6542] RSP: 002b:00007f54d16e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.410765][ T6542] RAX: ffffffffffffffda RBX: 00007f54d3715fa0 RCX: 00007f54d348e0d9 [ 238.410790][ T6542] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000009 [ 238.410804][ T6542] RBP: 00007f54d3525024 R08: 0000000000000000 R09: 0000000000000000 [ 238.410818][ T6542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.410831][ T6542] R13: 00007f54d3716038 R14: 00007f54d3715fa0 R15: 00007ffec289eb58 [ 238.410864][ T6542] [ 238.411066][ T6542] Mem-Info: [ 238.411077][ T6542] active_anon:184 inactive_anon:5932 isolated_anon:0 [ 238.411077][ T6542] active_file:25097 inactive_file:36914 isolated_file:0 [ 238.411077][ T6542] unevictable:0 dirty:252 writeback:25 [ 238.411077][ T6542] slab_reclaimable:11690 slab_unreclaimable:100671 [ 238.411077][ T6542] mapped:29840 shmem:521 pagetables:1239 [ 238.411077][ T6542] sec_pagetables:0 bounce:0 [ 238.411077][ T6542] kernel_misc_reclaimable:0 [ 238.411077][ T6542] free:1295836 free_pcp:6567 free_cma:0 [ 238.411138][ T6542] Node 0 active_anon:736kB inactive_anon:23728kB active_file:100176kB inactive_file:147656kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119360kB dirty:1004kB writeback:100kB shmem:2084kB kernel_stack:13272kB pagetables:4792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 238.411194][ T6542] Node 1 active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 238.411245][ T6542] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 238.411308][ T6542] lowmem_reserve[]: 0 2499 2500 2500 2500 [ 238.411348][ T6542] Node 0 DMA32 free:1232384kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:736kB inactive_anon:23728kB active_file:100176kB inactive_file:147656kB unevictable:0kB writepending:1104kB zspages:0kB present:3129332kB managed:2559152kB mlocked:0kB bounce:0kB free_pcp:26240kB local_pcp:16044kB free_cma:0kB [ 238.411414][ T6542] lowmem_reserve[]: 0 0 1 1 1 [ 238.411452][ T6542] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1824kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:8kB free_cma:0kB [ 238.411514][ T6542] lowmem_reserve[]: 0 0 0 0 0 [ 238.411551][ T6542] Node 1 Normal free:3935600kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 238.411616][ T6542] lowmem_reserve[]: 0 0 0 0 0 [ 238.411652][ T6542] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 238.411788][ T6542] Node 0 DMA32: 756*4kB (UME) 588*8kB (UM) 179*16kB (UME) 103*32kB (UME) 302*64kB (UME) 147*128kB (ME) 112*256kB (UME) 41*512kB (M) 12*1024kB (UME) 10*2048kB (ME) 268*4096kB (UM) = 1232192kB [ 238.411959][ T6542] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 238.412068][ T6542] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 11*16kB (UM) 5*32kB (UM) 10*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3935600kB [ 238.412238][ T6542] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 238.412255][ T6542] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 238.412273][ T6542] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 238.412290][ T6542] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 238.412307][ T6542] 62528 total pagecache pages [ 238.412316][ T6542] 0 pages in swap cache [ 238.412323][ T6542] Free swap = 124996kB [ 238.412331][ T6542] Total swap = 124996kB [ 238.412340][ T6542] 2097051 pages RAM [ 238.412347][ T6542] 0 pages HighMem/MovableOnly [ 238.412354][ T6542] 425191 pages reserved [ 238.412362][ T6542] 0 pages cma reserved [ 239.430911][ T6566] netlink: 'syz.4.180': attribute type 16 has an invalid length. [ 239.430933][ T6566] netlink: 'syz.4.180': attribute type 17 has an invalid length. [ 239.496543][ T66] bridge_slave_1: left allmulticast mode [ 239.496715][ T66] bridge_slave_1: left promiscuous mode [ 239.584429][ T6569] netlink: 44 bytes leftover after parsing attributes in process `syz.1.181'. [ 240.497848][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.678627][ T6582] netlink: 104 bytes leftover after parsing attributes in process `syz.0.182'. [ 241.616476][ T6580] netlink: 'syz.1.183': attribute type 2 has an invalid length. [ 241.616505][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 241.616518][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 241.616549][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 241.988286][ T66] bridge_slave_0: left allmulticast mode [ 241.988322][ T66] bridge_slave_0: left promiscuous mode [ 242.020834][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.157275][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 242.189197][ T6593] netlink: 44 bytes leftover after parsing attributes in process `syz.0.184'. [ 242.315070][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 242.319149][ T31] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 242.321318][ T31] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 242.321343][ T31] usb 4-1: can't read configurations, error -61 [ 243.020199][ T6597] capability: warning: `syz.1.187' uses 32-bit capabilities (legacy support in use) [ 244.209151][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 244.363061][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 244.363746][ T31] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 244.374706][ T31] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 244.374741][ T31] usb 4-1: can't read configurations, error -61 [ 244.375524][ T31] usb usb4-port1: attempt power cycle [ 245.294840][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 245.313773][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 245.314648][ T31] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 245.348746][ T31] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 245.348786][ T31] usb 4-1: can't read configurations, error -61 [ 246.413295][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 249.850150][ T31] usb 4-1: device descriptor read/8, error -71 [ 249.993278][ T31] usb usb4-port1: unable to enumerate USB device [ 250.227785][ T6619] netlink: 44 bytes leftover after parsing attributes in process `syz.0.192'. [ 255.948515][ T5587] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 255.991812][ T5587] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.005113][ T5587] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.028259][ T5587] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.031045][ T5587] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.161978][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.162052][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.510780][ T6644] syz.3.194: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 256.510859][ T6644] CPU: 1 UID: 0 PID: 6644 Comm: syz.3.194 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 256.510890][ T6644] Tainted: [L]=SOFTLOCKUP [ 256.510898][ T6644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 256.510911][ T6644] Call Trace: [ 256.510920][ T6644] [ 256.510930][ T6644] dump_stack_lvl+0xe8/0x150 [ 256.510969][ T6644] warn_alloc+0x24d/0x270 [ 256.511001][ T6644] ? __pfx_warn_alloc+0x10/0x10 [ 256.511042][ T6644] ? register_lock_class+0x31/0x2e0 [ 256.511067][ T6644] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 256.511095][ T6644] __vmalloc_node_range_noprof+0x130/0x1560 [ 256.511119][ T6644] ? __lock_acquire+0x683/0x2ce0 [ 256.511173][ T6644] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 256.511206][ T6644] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 256.511233][ T6644] vmalloc_noprof+0xb2/0xe0 [ 256.511255][ T6644] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 256.511284][ T6644] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 256.511310][ T6644] ? dvb_demux_do_ioctl+0x323/0x540 [ 256.511347][ T6644] dvb_demux_do_ioctl+0x460/0x540 [ 256.511376][ T6644] dvb_usercopy+0x199/0x2e0 [ 256.511399][ T6644] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 256.511425][ T6644] ? __pfx_dvb_usercopy+0x10/0x10 [ 256.511460][ T6644] ? __fget_files+0x3a8/0x420 [ 256.511490][ T6644] ? __fget_files+0x2a/0x420 [ 256.511523][ T6644] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 256.511548][ T6644] dvb_demux_ioctl+0x29/0x40 [ 256.511573][ T6644] __se_sys_ioctl+0xff/0x170 [ 256.511606][ T6644] do_syscall_64+0x166/0x520 [ 256.511631][ T6644] ? trace_irq_disable+0x3b/0x140 [ 256.511667][ T6644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.511707][ T6644] ? clear_bhb_loop+0x70/0xc0 [ 256.511735][ T6644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.511757][ T6644] RIP: 0033:0x7f54d348e0d9 [ 256.511782][ T6644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.511801][ T6644] RSP: 002b:00007f54d16e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.511823][ T6644] RAX: ffffffffffffffda RBX: 00007f54d3715fa0 RCX: 00007f54d348e0d9 [ 256.511839][ T6644] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000009 [ 256.511853][ T6644] RBP: 00007f54d3525024 R08: 0000000000000000 R09: 0000000000000000 [ 256.511867][ T6644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.511880][ T6644] R13: 00007f54d3716038 R14: 00007f54d3715fa0 R15: 00007ffec289eb58 [ 256.511916][ T6644] [ 256.512063][ T6644] Mem-Info: [ 256.512074][ T6644] active_anon:186 inactive_anon:9808 isolated_anon:0 [ 256.512074][ T6644] active_file:26112 inactive_file:35906 isolated_file:0 [ 256.512074][ T6644] unevictable:0 dirty:48 writeback:0 [ 256.512074][ T6644] slab_reclaimable:11820 slab_unreclaimable:100406 [ 256.512074][ T6644] mapped:37555 shmem:4545 pagetables:1155 [ 256.512074][ T6644] sec_pagetables:0 bounce:0 [ 256.512074][ T6644] kernel_misc_reclaimable:0 [ 256.512074][ T6644] free:1267594 free_pcp:18470 free_cma:0 [ 256.512150][ T6644] Node 0 active_anon:744kB inactive_anon:39232kB active_file:104236kB inactive_file:143624kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150220kB dirty:192kB writeback:0kB shmem:18180kB kernel_stack:13236kB pagetables:4456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 256.512207][ T6644] Node 1 active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 256.512259][ T6644] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 256.512354][ T6644] lowmem_reserve[]: 0 2499 2500 2500 2500 [ 256.512395][ T6644] Node 0 DMA32 free:1119416kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:744kB inactive_anon:39256kB active_file:104236kB inactive_file:143624kB unevictable:0kB writepending:128kB zspages:0kB present:3129332kB managed:2559152kB mlocked:0kB bounce:0kB free_pcp:73868kB local_pcp:29512kB free_cma:0kB [ 256.512465][ T6644] lowmem_reserve[]: 0 0 1 1 1 [ 256.512503][ T6644] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1824kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 256.512568][ T6644] lowmem_reserve[]: 0 0 0 0 0 [ 256.512606][ T6644] Node 1 Normal free:3935600kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 256.512672][ T6644] lowmem_reserve[]: 0 0 0 0 0 [ 256.512710][ T6644] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 256.512842][ T6644] Node 0 DMA32: 132*4kB (UME) 233*8kB (UME) 324*16kB (UME) 311*32kB (UME) 129*64kB (UME) 74*128kB (UME) 109*256kB (ME) 9*512kB (M) 3*1024kB (UME) 2*2048kB (ME) 255*4096kB (M) = 1119416kB [ 256.519069][ T6644] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 256.519393][ T6644] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 11*16kB (UM) 5*32kB (UM) 10*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3935600kB [ 256.527783][ T6644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 256.527829][ T6644] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 256.527873][ T6644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 256.527926][ T6644] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 256.527969][ T6644] 66559 total pagecache pages [ 256.527991][ T6644] 0 pages in swap cache [ 256.528044][ T6644] Free swap = 124996kB [ 256.528066][ T6644] Total swap = 124996kB [ 256.528088][ T6644] 2097051 pages RAM [ 256.528108][ T6644] 0 pages HighMem/MovableOnly [ 256.528130][ T6644] 425191 pages reserved [ 256.528152][ T6644] 0 pages cma reserved [ 257.239452][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.274110][ T5590] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 257.274425][ T5590] Bluetooth: hci0: command 0x0c1a tx timeout [ 257.323833][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.379705][ T6650] netlink: 44 bytes leftover after parsing attributes in process `syz.1.198'. [ 257.544089][ T66] bond0 (unregistering): Released all slaves [ 258.153864][ T5598] Bluetooth: hci3: command tx timeout [ 258.706009][ T5243] 8021q: adding VLAN 0 to HW filter on device eth1 [ 260.224236][ T5598] Bluetooth: hci3: command tx timeout [ 260.501495][ T6676] netlink: 44 bytes leftover after parsing attributes in process `syz.1.202'. [ 262.564585][ T5598] Bluetooth: hci3: command tx timeout [ 263.171457][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 264.878499][ T6376] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.878681][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.878883][ T6376] bridge_slave_0: entered allmulticast mode [ 264.881885][ T6376] bridge_slave_0: entered promiscuous mode [ 266.244555][ T5598] Bluetooth: hci3: command tx timeout [ 267.637282][ T6725] netlink: 44 bytes leftover after parsing attributes in process `syz.1.210'. [ 267.999264][ T6376] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.999652][ T6376] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.999855][ T6376] bridge_slave_1: entered allmulticast mode [ 268.175892][ T6376] bridge_slave_1: entered promiscuous mode [ 268.898108][ T6376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.983635][ T6737] netlink: 44 bytes leftover after parsing attributes in process `syz.3.213'. [ 269.889228][ T6376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.098810][ T6745] syz.3.215 (6745): attempted to duplicate a private mapping with mremap. This is not supported. [ 273.611897][ T5598] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 273.786173][ T5598] Bluetooth: hci0: command 0x0c1a tx timeout [ 277.583761][ T6774] loop5: detected capacity change from 0 to 7 [ 278.476330][ T6774] Dev loop5: unable to read RDB block 7 [ 278.476368][ T6774] loop5: AHDI p1 [ 278.476390][ T6774] loop5: partition table partially beyond EOD, truncated [ 278.537826][ T6777] usb usb8: usbfs: process 6777 (syz.3.224) did not claim interface 0 before use [ 278.848811][ T6376] team0: Port device team_slave_0 added [ 279.084064][ T6783] netlink: 44 bytes leftover after parsing attributes in process `syz.1.225'. [ 281.061749][ T5590] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 281.117170][ T5590] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 281.134445][ T5590] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 281.138389][ T5590] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 281.142299][ T5590] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 281.402565][ T6796] Bluetooth: MGMT ver 1.23 [ 281.473187][ T66] hsr_slave_0: left promiscuous mode [ 281.492518][ T6802] syz.3.227 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 281.505353][ T66] hsr_slave_1: left promiscuous mode [ 281.523146][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.523986][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.801167][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.801187][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.859242][ T36] audit: type=1326 audit(1787632363.635:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6795 comm="syz.3.227" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f54d348e0d9 code=0x0 [ 281.913606][ T196] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 282.477000][ T66] veth1_macvtap: left promiscuous mode [ 282.576265][ T66] veth0_macvtap: left promiscuous mode [ 282.676917][ T66] veth1_vlan: left promiscuous mode [ 283.120502][ T66] veth0_vlan: left promiscuous mode [ 283.484088][ T5590] Bluetooth: hci1: command tx timeout [ 285.502997][ T5590] Bluetooth: hci1: command tx timeout [ 287.582961][ T5590] Bluetooth: hci1: command tx timeout [ 288.772133][ T196] libceph: connect (1)[c::]:6789 error -101 [ 288.811695][ T196] libceph: mon0 (1)[c::]:6789 connect error [ 288.863976][ T196] libceph: connect (1)[c::]:6789 error -101 [ 288.942670][ T196] libceph: mon0 (1)[c::]:6789 connect error [ 289.341662][ T196] libceph: connect (1)[c::]:6789 error -101 [ 289.342380][ T196] libceph: mon0 (1)[c::]:6789 connect error [ 289.673445][ T5590] Bluetooth: hci1: command tx timeout [ 289.925125][ T196] libceph: connect (1)[c::]:6789 error -101 [ 289.947720][ T196] libceph: mon0 (1)[c::]:6789 connect error [ 290.538388][ T6844] PKCS7: Unknown OID: [4] 0.0 [ 290.538429][ T6844] PKCS7: Only support pkcs7_signedData type [ 291.168369][ T196] libceph: connect (1)[c::]:6789 error -101 [ 291.171306][ T196] libceph: mon0 (1)[c::]:6789 connect error [ 291.237655][ T6836] ceph: No mds server is up or the cluster is laggy [ 292.609220][ T9] libceph: connect (1)[c::]:6789 error -101 [ 292.609428][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 295.604317][ T66] team0 (unregistering): Port device team_slave_1 removed [ 295.718705][ T6868] 9pnet_virtio: no channels available for device 127.0.0.1 [ 296.828669][ T66] team0 (unregistering): Port device team_slave_0 removed [ 297.102965][ T5590] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 297.183079][ T5590] Bluetooth: hci0: command 0x0c1a tx timeout [ 299.826997][ T5243] 8021q: adding VLAN 0 to HW filter on device eth2 [ 300.453367][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 301.723270][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 301.724214][ T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 301.731501][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.731652][ T9] usb 2-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 301.731676][ T9] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 301.731710][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 301.738990][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.739015][ T9] usb 2-1: Product: syz [ 301.739030][ T9] usb 2-1: Manufacturer: syz [ 301.739045][ T9] usb 2-1: SerialNumber: syz [ 301.788812][ T6882] kAFS: Can only specify source 'none' with -o dyn [ 302.080653][ T9] usb 2-1: config 0 descriptor?? [ 302.406707][ T9] gs_usb 2-1:0.0: Required endpoints not found [ 302.864307][ T6909] netlink: 44 bytes leftover after parsing attributes in process `syz.3.248'. [ 304.359386][ T9] usb 2-1: USB disconnect, device number 2 [ 305.944232][ T6926] netlink: 44 bytes leftover after parsing attributes in process `syz.3.251'. [ 307.518923][ T5590] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 307.584757][ T5590] Bluetooth: hci0: command 0x0c1a tx timeout [ 309.520560][ T5243] 8021q: adding VLAN 0 to HW filter on device eth3 [ 309.924635][ T6637] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.924753][ T6637] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.924941][ T6637] bridge_slave_0: entered allmulticast mode [ 309.939202][ T6637] bridge_slave_0: entered promiscuous mode [ 310.081897][ T6637] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.082056][ T6637] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.082276][ T6637] bridge_slave_1: entered allmulticast mode [ 310.099421][ T6637] bridge_slave_1: entered promiscuous mode [ 312.003403][ T6949] 9p: Bad value for 'rfdno' [ 313.435591][ T6637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.537460][ T6637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.922183][ T6637] team0: Port device team_slave_0 added [ 315.107165][ T6637] team0: Port device team_slave_1 added [ 315.245043][ T6970] 9pnet_virtio: no channels available for device 127.0.0.1 [ 315.422641][ T6637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.423246][ T6637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.423324][ T6637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.538946][ T6637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.538990][ T6637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.539046][ T6637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.218426][ T6975] netlink: 44 bytes leftover after parsing attributes in process `syz.0.257'. [ 317.330281][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.330352][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.446183][ T6983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.500880][ T6983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.008834][ T5598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 319.045059][ T5598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 319.048109][ T5598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 319.067359][ T5598] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 319.068215][ T5598] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 321.113354][ T5590] Bluetooth: hci5: command tx timeout [ 321.176082][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.993066][ T5590] Bluetooth: hci0: command 0x0c1a tx timeout [ 321.993149][ T5598] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 323.185503][ T5598] Bluetooth: hci5: command tx timeout [ 323.230967][ T7013] syz.1.264: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 323.240151][ T7013] CPU: 1 UID: 0 PID: 7013 Comm: syz.1.264 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 323.240181][ T7013] Tainted: [L]=SOFTLOCKUP [ 323.240189][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.240202][ T7013] Call Trace: [ 323.240209][ T7013] [ 323.240218][ T7013] dump_stack_lvl+0xe8/0x150 [ 323.240255][ T7013] warn_alloc+0x24d/0x270 [ 323.240286][ T7013] ? __pfx_warn_alloc+0x10/0x10 [ 323.240324][ T7013] ? register_lock_class+0x31/0x2e0 [ 323.240348][ T7013] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 323.240374][ T7013] __vmalloc_node_range_noprof+0x130/0x1560 [ 323.240398][ T7013] ? __lock_acquire+0x683/0x2ce0 [ 323.240445][ T7013] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 323.240487][ T7013] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 323.240510][ T7013] vmalloc_noprof+0xb2/0xe0 [ 323.240530][ T7013] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 323.240555][ T7013] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 323.240579][ T7013] ? dvb_demux_do_ioctl+0x323/0x540 [ 323.240604][ T7013] dvb_demux_do_ioctl+0x460/0x540 [ 323.240631][ T7013] dvb_usercopy+0x199/0x2e0 [ 323.240651][ T7013] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 323.240674][ T7013] ? __pfx_dvb_usercopy+0x10/0x10 [ 323.240704][ T7013] ? __fget_files+0x3a8/0x420 [ 323.240731][ T7013] ? __fget_files+0x2a/0x420 [ 323.240761][ T7013] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 323.240783][ T7013] dvb_demux_ioctl+0x29/0x40 [ 323.240805][ T7013] __se_sys_ioctl+0xff/0x170 [ 323.240829][ T7013] do_syscall_64+0x166/0x520 [ 323.240851][ T7013] ? trace_irq_disable+0x3b/0x140 [ 323.240872][ T7013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.240892][ T7013] ? clear_bhb_loop+0x70/0xc0 [ 323.240924][ T7013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.240963][ T7013] RIP: 0033:0x7f7d6fb8e0d9 [ 323.240988][ T7013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.241005][ T7013] RSP: 002b:00007f7d6ddc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 323.241026][ T7013] RAX: ffffffffffffffda RBX: 00007f7d6fe16090 RCX: 00007f7d6fb8e0d9 [ 323.241060][ T7013] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000008 [ 323.241075][ T7013] RBP: 00007f7d6fc25024 R08: 0000000000000000 R09: 0000000000000000 [ 323.241089][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.241103][ T7013] R13: 00007f7d6fe16128 R14: 00007f7d6fe16090 R15: 00007ffef3221ee8 [ 323.241140][ T7013] [ 323.241155][ T7013] Mem-Info: [ 323.241184][ T7013] active_anon:188 inactive_anon:34340 isolated_anon:0 [ 323.241184][ T7013] active_file:26161 inactive_file:35759 isolated_file:0 [ 323.241184][ T7013] unevictable:0 dirty:260 writeback:0 [ 323.241184][ T7013] slab_reclaimable:11929 slab_unreclaimable:100387 [ 323.241184][ T7013] mapped:29611 shmem:29348 pagetables:1164 [ 323.241184][ T7013] sec_pagetables:0 bounce:0 [ 323.241184][ T7013] kernel_misc_reclaimable:0 [ 323.241184][ T7013] free:1265790 free_pcp:6611 free_cma:0 [ 323.541765][ T7013] Node 0 active_anon:752kB inactive_anon:137360kB active_file:104432kB inactive_file:143036kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118444kB dirty:1036kB writeback:0kB shmem:117392kB kernel_stack:13632kB pagetables:4492kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 323.568555][ T7013] Node 1 active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 323.568618][ T7013] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 323.701689][ T7013] lowmem_reserve[]: 0 2499 2500 2500 2500 [ 323.701890][ T7013] Node 0 DMA32 free:1112072kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:752kB inactive_anon:137360kB active_file:104432kB inactive_file:143036kB unevictable:0kB writepending:1036kB zspages:0kB present:3129332kB managed:2559152kB mlocked:0kB bounce:0kB free_pcp:26456kB local_pcp:21768kB free_cma:0kB [ 323.702081][ T7013] lowmem_reserve[]: 0 0 1 1 1 [ 323.702346][ T7013] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1824kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 323.702637][ T7013] lowmem_reserve[]: 0 0 0 0 0 [ 323.711740][ T7013] Node 1 Normal free:3935600kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 323.712491][ T7013] lowmem_reserve[]: 0 0 0 0 0 [ 323.713212][ T7013] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 323.739470][ T7013] Node 0 DMA32: 346*4kB (UME) 149*8kB (UME) 227*16kB (UME) 238*32kB (UME) 294*64kB (UME) 105*128kB (UME) 42*256kB (UME) 29*512kB (UM) 14*1024kB (UME) 1*2048kB (E) 250*4096kB (UM) = 1112064kB [ 323.856323][ T7013] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 323.904400][ T7013] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 11*16kB (UM) 5*32kB (UM) 10*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3935600kB [ 323.905080][ T7013] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.905108][ T7013] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 323.905126][ T7013] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.905243][ T7013] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 323.905308][ T7013] 91263 total pagecache pages [ 323.905318][ T7013] 0 pages in swap cache [ 323.905326][ T7013] Free swap = 124996kB [ 323.905375][ T7013] Total swap = 124996kB [ 323.905385][ T7013] 2097051 pages RAM [ 323.905439][ T7013] 0 pages HighMem/MovableOnly [ 323.905447][ T7013] 425191 pages reserved [ 323.905455][ T7013] 0 pages cma reserved [ 324.577665][ T5243] 8021q: adding VLAN 0 to HW filter on device eth4 [ 324.818364][ T7019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.265'. [ 325.625113][ T5598] Bluetooth: hci5: command tx timeout [ 326.177832][ T7033] 9pnet_virtio: no channels available for device 127.0.0.1 [ 327.659455][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.267'. [ 327.659693][ T7038] netlink: 16 bytes leftover after parsing attributes in process `syz.3.267'. [ 328.205048][ T5598] Bluetooth: hci5: command tx timeout [ 330.021808][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.113269][ T5718] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 330.264754][ T5718] usb 4-1: Using ep0 maxpacket: 32 [ 330.265598][ T5718] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 330.270352][ T5718] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.270390][ T5718] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 330.270405][ T5718] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 330.270423][ T5718] usb 4-1: config 0 interface 0 has no altsetting 0 [ 330.285507][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.285526][ T5718] usb 4-1: Product: syz [ 330.285536][ T5718] usb 4-1: Manufacturer: syz [ 330.285547][ T5718] usb 4-1: SerialNumber: syz [ 330.385430][ T5718] usb 4-1: config 0 descriptor?? [ 330.407205][ T5718] gs_usb 4-1:0.0: Required endpoints not found [ 331.926843][ T196] usb 4-1: USB disconnect, device number 9 [ 332.092272][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.467645][ T6792] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.468643][ T6792] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.468844][ T6792] bridge_slave_0: entered allmulticast mode [ 332.471679][ T6792] bridge_slave_0: entered promiscuous mode [ 332.498672][ T6792] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.500773][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.501224][ T6792] bridge_slave_1: entered allmulticast mode [ 332.556832][ T6792] bridge_slave_1: entered promiscuous mode [ 333.904161][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.342987][ T5587] Bluetooth: hci5: command 0x0405 tx timeout [ 335.419133][ T7069] PKCS7: Unknown OID: [4] 0.0 [ 335.419182][ T7069] PKCS7: Only support pkcs7_signedData type [ 336.143045][ T5590] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 336.223132][ T5590] Bluetooth: hci0: command 0x0c1a tx timeout [ 336.311709][ T6792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.466064][ T6792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.558563][ T5598] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 336.619491][ T5598] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 336.689922][ T5598] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 336.701262][ T5598] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 336.702266][ T5598] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 336.925113][ T6792] team0: Port device team_slave_0 added [ 336.957633][ T6792] team0: Port device team_slave_1 added [ 338.788688][ T5590] Bluetooth: hci3: command tx timeout [ 338.896734][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.896751][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.896777][ T6792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.359696][ T7098] input: syz0 as /devices/virtual/input/input6 [ 340.051474][ T7100] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:2": -EINTR [ 340.863265][ T5590] Bluetooth: hci3: command tx timeout [ 342.251094][ T5598] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.310381][ T5598] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.390257][ T5598] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.405455][ T5598] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.424479][ T5598] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.943086][ T5598] Bluetooth: hci3: command tx timeout [ 344.623482][ T5598] Bluetooth: hci4: command tx timeout [ 345.033724][ T5598] Bluetooth: hci3: command tx timeout [ 345.857087][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.857106][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.857142][ T6792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.773694][ T5590] Bluetooth: hci4: command tx timeout [ 347.911421][ T7143] loop5: detected capacity change from 0 to 7 [ 348.622990][ T5598] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 348.636886][ T7143] Dev loop5: unable to read RDB block 7 [ 348.636920][ T7143] loop5: AHDI p1 [ 348.636940][ T7143] loop5: partition table partially beyond EOD, truncated [ 348.703248][ T5598] Bluetooth: hci0: command 0x0c1a tx timeout [ 348.873129][ T5598] Bluetooth: hci4: command tx timeout [ 348.932975][ T5718] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 350.054574][ T5718] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 350.087801][ T5718] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.087826][ T5718] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.089368][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 350.089393][ T5718] usb 2-1: SerialNumber: syz [ 350.095827][ T12] bridge_slave_1: left allmulticast mode [ 350.095854][ T12] bridge_slave_1: left promiscuous mode [ 350.096083][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.281236][ T12] bridge_slave_0: left allmulticast mode [ 350.281263][ T12] bridge_slave_0: left promiscuous mode [ 350.291503][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.598248][ T12] bridge_slave_1: left allmulticast mode [ 350.598285][ T12] bridge_slave_1: left promiscuous mode [ 350.599114][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.766744][ T12] bridge_slave_0: left allmulticast mode [ 350.767115][ T12] bridge_slave_0: left promiscuous mode [ 350.767689][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.942980][ T5598] Bluetooth: hci4: command tx timeout [ 351.522313][ T5718] usb 2-1: 0:2 : does not exist [ 354.725780][ T5718] usb 2-1: USB disconnect, device number 3 [ 354.755809][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.883910][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.181448][ T12] bond0 (unregistering): Released all slaves [ 355.363378][ T7171] trusted_key: syz.1.287 sent an empty control message without MSG_MORE. [ 356.186931][ T7160] udevd[7160]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 357.773059][ T5718] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 357.883700][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.925178][ T5718] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 357.926419][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 357.926479][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.972448][ T5718] usb 2-1: config 0 descriptor?? [ 357.975178][ T7178] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 358.025641][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.055957][ T12] bond0 (unregistering): Released all slaves [ 358.188307][ T7178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.190279][ T7178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.677650][ T7178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.678338][ T7178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.764818][ T5718] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 358.764845][ T5718] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 358.764862][ T5718] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 358.764879][ T5718] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 358.764895][ T5718] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 358.764911][ T5718] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 358.764927][ T5718] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 358.764943][ T5718] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 358.764959][ T5718] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 358.764975][ T5718] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 358.783559][ T5598] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 358.863183][ T5598] Bluetooth: hci0: command 0x0c1a tx timeout [ 358.924280][ T5718] uclogic 0003:5543:0064.0001: hidraw0: USB HID v7b.fd Device [HID 5543:0064] on usb-dummy_hcd.1-1/input0 [ 358.969158][ T5718] usb 2-1: USB disconnect, device number 4 [ 359.071597][ T7181] fido_id[7181]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 362.930322][ T7209] Bluetooth: MGMT ver 1.23 [ 367.175466][ T5840] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 367.229395][ T5243] 8021q: adding VLAN 0 to HW filter on device eth5 [ 367.414646][ T5840] usb 2-1: Using ep0 maxpacket: 8 [ 367.508073][ T5840] usb 2-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 367.725307][ T5840] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 367.725575][ T5840] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 367.725733][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.103800][ T5840] usb 2-1: config 0 descriptor?? [ 368.504613][ T6987] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.504747][ T6987] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.507230][ T6987] bridge_slave_0: entered allmulticast mode [ 368.509843][ T6987] bridge_slave_0: entered promiscuous mode [ 368.544120][ T6987] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.491000][ T6987] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.491230][ T6987] bridge_slave_1: entered allmulticast mode [ 369.520724][ T6987] bridge_slave_1: entered promiscuous mode [ 369.552627][ T5840] usbhid 2-1:0.0: can't add hid device: -71 [ 369.552737][ T5840] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 369.771880][ T5840] usb 2-1: USB disconnect, device number 5 [ 372.013155][ T12] hsr_slave_0: left promiscuous mode [ 372.054176][ T12] hsr_slave_1: left promiscuous mode [ 372.055068][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.055085][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.115983][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.116013][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.225274][ T12] veth1_macvtap: left promiscuous mode [ 372.225332][ T12] veth0_macvtap: left promiscuous mode [ 372.225712][ T12] veth1_vlan: left promiscuous mode [ 372.225835][ T12] veth0_vlan: left promiscuous mode [ 372.573663][ T12] team0 (unregistering): Port device team_slave_0 removed [ 373.274561][ T12] team0 (unregistering): Port device team_slave_1 removed [ 373.336396][ T12] team0 (unregistering): Port device team_slave_0 removed [ 373.536326][ T6987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.576942][ T6987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.795689][ T6987] team0: Port device team_slave_0 added [ 373.826526][ T6987] team0: Port device team_slave_1 added [ 373.956294][ T6987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.956311][ T6987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.956336][ T6987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.056649][ T6987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.056667][ T6987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.056696][ T6987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.329638][ T6987] hsr_slave_0: entered promiscuous mode [ 374.330849][ T6987] hsr_slave_1: entered promiscuous mode [ 374.871955][ T5243] 8021q: adding VLAN 0 to HW filter on device eth6 [ 374.910077][ T7075] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.910296][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.910467][ T7075] bridge_slave_0: entered allmulticast mode [ 374.912790][ T7075] bridge_slave_0: entered promiscuous mode [ 374.991497][ T7075] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.991630][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.991808][ T7075] bridge_slave_1: entered allmulticast mode [ 375.015516][ T7075] bridge_slave_1: entered promiscuous mode [ 375.351194][ T7075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.372145][ T7104] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.372346][ T7104] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.372513][ T7104] bridge_slave_0: entered allmulticast mode [ 375.399480][ T7104] bridge_slave_0: entered promiscuous mode [ 375.450149][ T7075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.540153][ T7104] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.540301][ T7104] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.540474][ T7104] bridge_slave_1: entered allmulticast mode [ 375.542306][ T7104] bridge_slave_1: entered promiscuous mode [ 375.780822][ T7075] team0: Port device team_slave_0 added [ 375.798392][ T7104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.807519][ T7075] team0: Port device team_slave_1 added [ 375.836719][ T7104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.059800][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.059817][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.059846][ T7075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.121194][ T7104] team0: Port device team_slave_0 added [ 376.135682][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.135698][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.135723][ T7075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.247655][ T7104] team0: Port device team_slave_1 added [ 376.473366][ T7104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.473383][ T7104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.473407][ T7104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.539761][ T7104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.539779][ T7104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.539807][ T7104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.603466][ T7075] hsr_slave_0: entered promiscuous mode [ 376.604381][ T7075] hsr_slave_1: entered promiscuous mode [ 376.604979][ T7075] debugfs: 'hsr0' already exists in 'hsr' [ 376.604999][ T7075] Cannot create hsr debugfs directory [ 376.891120][ T5590] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 376.956528][ T5590] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 376.960133][ T5590] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 376.970211][ T5590] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 376.974571][ T5590] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 376.997648][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.552733][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.631619][ T7104] hsr_slave_0: entered promiscuous mode [ 377.632755][ T7104] hsr_slave_1: entered promiscuous mode [ 377.645505][ T7104] debugfs: 'hsr0' already exists in 'hsr' [ 377.645528][ T7104] Cannot create hsr debugfs directory [ 378.116853][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.707156][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.707222][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.868635][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.918655][ T5243] 8021q: adding VLAN 0 to HW filter on device eth7 [ 379.183194][ T5590] Bluetooth: hci1: command tx timeout [ 379.751905][ T7075] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 379.786452][ T7075] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 379.856421][ T7075] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 379.927441][ T7075] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 379.956553][ T7075] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 379.990482][ T7075] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 380.183254][ T12] bridge_slave_1: left allmulticast mode [ 380.183278][ T12] bridge_slave_1: left promiscuous mode [ 380.183460][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.359786][ T12] bridge_slave_0: left allmulticast mode [ 380.359833][ T12] bridge_slave_0: left promiscuous mode [ 380.372123][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.624282][ T12] bridge_slave_1: left allmulticast mode [ 380.624316][ T12] bridge_slave_1: left promiscuous mode [ 380.624561][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.754142][ T12] bridge_slave_0: left allmulticast mode [ 380.754167][ T12] bridge_slave_0: left promiscuous mode [ 380.754326][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.963542][ T12] bridge_slave_1: left allmulticast mode [ 380.963567][ T12] bridge_slave_1: left promiscuous mode [ 380.963732][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.044406][ T12] bridge_slave_0: left allmulticast mode [ 381.044430][ T12] bridge_slave_0: left promiscuous mode [ 381.044615][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.263361][ T5590] Bluetooth: hci1: command tx timeout [ 381.483538][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.583705][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.644598][ T12] bond0 (unregistering): Released all slaves [ 382.103493][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.183637][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.205252][ T12] bond0 (unregistering): Released all slaves [ 382.423643][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.503621][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.565034][ T12] bond0 (unregistering): Released all slaves [ 382.590688][ T7075] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 382.662689][ T7075] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.067242][ T7104] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 383.116188][ T7104] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 383.135503][ T7104] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 383.189014][ T7104] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 383.212701][ T7104] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 383.266779][ T7104] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.283982][ T7104] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 383.309914][ T7104] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.362968][ T5590] Bluetooth: hci1: command tx timeout [ 383.496332][ T7303] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.496496][ T7303] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.496688][ T7303] bridge_slave_0: entered allmulticast mode [ 383.499817][ T7303] bridge_slave_0: entered promiscuous mode [ 383.537462][ T7303] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.537573][ T7303] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.537742][ T7303] bridge_slave_1: entered allmulticast mode [ 383.548357][ T7303] bridge_slave_1: entered promiscuous mode [ 383.887316][ T5243] 8021q: adding VLAN 0 to HW filter on device eth8 [ 383.902478][ T7303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.940229][ T7303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.059778][ T7303] team0: Port device team_slave_0 added [ 384.087869][ T7303] team0: Port device team_slave_1 added [ 384.335269][ T7303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.335285][ T7303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.335305][ T7303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.456541][ T7303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.456558][ T7303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.456601][ T7303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.614118][ T7303] hsr_slave_0: entered promiscuous mode [ 384.615540][ T7303] hsr_slave_1: entered promiscuous mode [ 384.616551][ T7303] debugfs: 'hsr0' already exists in 'hsr' [ 384.616588][ T7303] Cannot create hsr debugfs directory [ 384.708626][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.733934][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.933068][ T12] hsr_slave_0: left promiscuous mode [ 384.984625][ T12] hsr_slave_1: left promiscuous mode [ 384.985804][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.985827][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.045440][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.045469][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.098111][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.133833][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.194743][ T12] veth1_macvtap: left promiscuous mode [ 385.194786][ T12] veth0_macvtap: left promiscuous mode [ 385.194895][ T12] veth1_vlan: left promiscuous mode [ 385.195000][ T12] veth0_vlan: left promiscuous mode [ 385.423067][ T5590] Bluetooth: hci1: command tx timeout [ 385.543804][ T12] team0 (unregistering): Port device team_slave_1 removed [ 385.593886][ T12] team0 (unregistering): Port device team_slave_0 removed [ 386.293579][ T12] team0 (unregistering): Port device team_slave_1 removed [ 386.333577][ T12] team0 (unregistering): Port device team_slave_0 removed [ 386.545282][ T12] team0 (unregistering): Port device team_slave_1 removed [ 386.587277][ T12] team0 (unregistering): Port device team_slave_0 removed [ 386.906839][ T5243] 8021q: adding VLAN 0 to HW filter on device eth9 [ 386.991070][ T7075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.198462][ T7075] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.292579][ T7104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.357205][ T6701] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.357330][ T6701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.570917][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.571100][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.701584][ T7104] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.809162][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.809305][ T6613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.974258][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.975901][ T6613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.132348][ T5243] 8021q: adding VLAN 0 to HW filter on device eth10 [ 389.796876][ T7075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.055641][ T7104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.091805][ T5243] 8021q: adding VLAN 0 to HW filter on device eth11 [ 390.128401][ T7303] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 390.240352][ T7303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 390.259910][ T7303] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 390.361826][ T7303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 390.371750][ T7303] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 390.436320][ T7303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 390.438449][ T7303] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 390.491330][ T7303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 390.808248][ T7075] veth0_vlan: entered promiscuous mode [ 390.855150][ T7075] veth1_vlan: entered promiscuous mode [ 391.053262][ T12] bridge_slave_1: left allmulticast mode [ 391.053296][ T12] bridge_slave_1: left promiscuous mode [ 391.053549][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.204486][ T12] bridge_slave_0: left allmulticast mode [ 391.204518][ T12] bridge_slave_0: left promiscuous mode [ 391.204758][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.653489][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.733756][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.794890][ T12] bond0 (unregistering): Released all slaves [ 391.822685][ T5243] 8021q: adding VLAN 0 to HW filter on device eth12 [ 391.927658][ T7104] veth0_vlan: entered promiscuous mode [ 391.947775][ T7303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.029271][ T7104] veth1_vlan: entered promiscuous mode [ 392.030903][ T7075] veth0_macvtap: entered promiscuous mode [ 392.064098][ T7075] veth1_macvtap: entered promiscuous mode [ 392.103665][ T7303] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.128994][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.129217][ T1057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.253165][ T12] hsr_slave_0: left promiscuous mode [ 392.293011][ T12] hsr_slave_1: left promiscuous mode [ 392.293879][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.317042][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.693597][ T12] team0 (unregistering): Port device team_slave_1 removed [ 392.733477][ T12] team0 (unregistering): Port device team_slave_0 removed [ 392.933166][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.980646][ T1057] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.980783][ T1057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.027593][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.089408][ T7104] veth0_macvtap: entered promiscuous mode [ 393.142014][ T7104] veth1_macvtap: entered promiscuous mode [ 393.552939][ T7104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.715427][ T7104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.716795][ T6613] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.013135][ T56] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.014318][ T56] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.014355][ T56] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.014384][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.014409][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.014434][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.014458][ T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.090968][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.090986][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.327047][ T6699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.327068][ T6699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.270238][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.270258][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.468290][ T5598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 395.538958][ T5598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 395.540448][ T5598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 395.542778][ T5598] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 395.582296][ T5598] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 395.756059][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.756081][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.782037][ T7303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.097787][ T5892] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 397.565305][ T5892] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 397.591812][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.591845][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.591867][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 397.591908][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.710160][ T5892] usb 2-1: config 0 descriptor?? [ 397.758448][ T5590] Bluetooth: hci5: command tx timeout [ 398.201043][ T6701] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.606338][ T7554] PKCS7: Unknown OID: [4] 0.0 [ 398.606354][ T7554] PKCS7: Only support pkcs7_signedData type [ 399.824096][ T5590] Bluetooth: hci5: command tx timeout [ 400.374711][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 400.374830][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 400.804053][ T5892] usb 2-1: USB disconnect, device number 6 [ 401.903608][ T5590] Bluetooth: hci5: command tx timeout [ 403.046418][ T6701] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.988596][ T5590] Bluetooth: hci5: command tx timeout [ 409.205696][ T6701] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.270678][ T7614] PKCS7: Unknown OID: [4] 0.0 [ 409.270696][ T7614] PKCS7: Only support pkcs7_signedData type [ 411.593449][ T7626] netlink: 104 bytes leftover after parsing attributes in process `syz.5.315'. [ 418.135118][ T6701] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.360524][ T7647] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 418.455291][ T7303] veth0_vlan: entered promiscuous mode [ 418.541706][ T7303] veth1_vlan: entered promiscuous mode [ 427.912303][ T7303] veth0_macvtap: entered promiscuous mode [ 428.085149][ T7303] veth1_macvtap: entered promiscuous mode [ 428.385722][ T6701] bridge_slave_1: left allmulticast mode [ 428.385758][ T6701] bridge_slave_1: left promiscuous mode [ 428.386005][ T6701] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.626056][ T6701] bridge_slave_0: left allmulticast mode [ 428.626088][ T6701] bridge_slave_0: left promiscuous mode [ 428.626302][ T6701] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.523452][ T6701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.583699][ T6701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.625919][ T6701] bond0 (unregistering): Released all slaves [ 429.884513][ T7303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.885084][ T7516] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.920466][ T7516] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.920638][ T7516] bridge_slave_0: entered allmulticast mode [ 429.923421][ T7516] bridge_slave_0: entered promiscuous mode [ 429.987201][ T7516] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.987323][ T7516] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.987476][ T7516] bridge_slave_1: entered allmulticast mode [ 429.995642][ T7516] bridge_slave_1: entered promiscuous mode [ 430.052039][ T7303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.359268][ T7516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.375901][ T7516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.549744][ T7516] team0: Port device team_slave_0 added [ 430.563832][ T7516] team0: Port device team_slave_1 added [ 431.077938][ T7516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.077949][ T7516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.077966][ T7516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.209448][ T7516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.209465][ T7516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.209491][ T7516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.218894][ T67] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.219929][ T67] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.220066][ T67] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.724028][ T6701] hsr_slave_0: left promiscuous mode [ 431.763149][ T6701] hsr_slave_1: left promiscuous mode [ 431.764281][ T6701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.764304][ T6701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.824054][ T6701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.824079][ T6701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.916552][ T6701] veth1_macvtap: left promiscuous mode [ 431.916625][ T6701] veth0_macvtap: left promiscuous mode [ 431.916802][ T6701] veth1_vlan: left promiscuous mode [ 431.916931][ T6701] veth0_vlan: left promiscuous mode [ 432.664643][ T6701] team0 (unregistering): Port device team_slave_1 removed [ 432.713460][ T6701] team0 (unregistering): Port device team_slave_0 removed [ 432.928280][ T7516] hsr_slave_0: entered promiscuous mode [ 432.929559][ T7516] hsr_slave_1: entered promiscuous mode [ 433.062478][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.062498][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.391051][ T1385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.391070][ T1385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.663620][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.003986][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.5.337'. [ 440.325895][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.325963][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.896602][ T7832] ======================================================= [ 443.896602][ T7832] WARNING: The mand mount option has been deprecated and [ 443.896602][ T7832] and is ignored by this kernel. Remove the mand [ 443.896602][ T7832] option from the mount to silence this warning. [ 443.896602][ T7832] ======================================================= [ 448.503131][ T5587] Bluetooth: hci2: unexpected event for opcode 0x2035 [ 449.743561][ T5590] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 449.822960][ T5590] Bluetooth: hci0: command 0x0c1a tx timeout [ 450.615553][ T7864] (syz.3.344,7864,1):ocfs2_get_sector:1713 ERROR: status = -5 [ 450.615591][ T7864] (syz.3.344,7864,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 450.615612][ T7864] (syz.3.344,7864,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 450.615631][ T7864] (syz.3.344,7864,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 453.038777][ T7872] syz.1.346: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 453.039024][ T7872] CPU: 1 UID: 0 PID: 7872 Comm: syz.1.346 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 453.039056][ T7872] Tainted: [L]=SOFTLOCKUP [ 453.039064][ T7872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 453.039083][ T7872] Call Trace: [ 453.039093][ T7872] [ 453.039103][ T7872] dump_stack_lvl+0xe8/0x150 [ 453.039145][ T7872] warn_alloc+0x24d/0x270 [ 453.039179][ T7872] ? __pfx_warn_alloc+0x10/0x10 [ 453.039222][ T7872] ? register_lock_class+0x31/0x2e0 [ 453.039248][ T7872] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 453.039278][ T7872] __vmalloc_node_range_noprof+0x130/0x1560 [ 453.039304][ T7872] ? __lock_acquire+0x683/0x2ce0 [ 453.039359][ T7872] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 453.039395][ T7872] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 453.039424][ T7872] vmalloc_noprof+0xb2/0xe0 [ 453.039448][ T7872] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 453.039479][ T7872] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 453.039506][ T7872] ? dvb_demux_do_ioctl+0x323/0x540 [ 453.039537][ T7872] dvb_demux_do_ioctl+0x460/0x540 [ 453.039568][ T7872] dvb_usercopy+0x199/0x2e0 [ 453.039600][ T7872] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 453.039627][ T7872] ? __pfx_dvb_usercopy+0x10/0x10 [ 453.039663][ T7872] ? __fget_files+0x3a8/0x420 [ 453.039695][ T7872] ? __fget_files+0x2a/0x420 [ 453.039731][ T7872] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 453.039757][ T7872] dvb_demux_ioctl+0x29/0x40 [ 453.039784][ T7872] __se_sys_ioctl+0xff/0x170 [ 453.039812][ T7872] do_syscall_64+0x166/0x520 [ 453.039839][ T7872] ? trace_irq_disable+0x3b/0x140 [ 453.039879][ T7872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.039913][ T7872] ? clear_bhb_loop+0x70/0xc0 [ 453.039937][ T7872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.039965][ T7872] RIP: 0033:0x7f7d6fb8e0d9 [ 453.039984][ T7872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.040001][ T7872] RSP: 002b:00007f7d6dde6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 453.040021][ T7872] RAX: ffffffffffffffda RBX: 00007f7d6fe15fa0 RCX: 00007f7d6fb8e0d9 [ 453.040036][ T7872] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000009 [ 453.040049][ T7872] RBP: 00007f7d6fc25024 R08: 0000000000000000 R09: 0000000000000000 [ 453.040061][ T7872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.040073][ T7872] R13: 00007f7d6fe16038 R14: 00007f7d6fe15fa0 R15: 00007ffef3221ee8 [ 453.040105][ T7872] [ 453.176242][ T7872] Mem-Info: [ 453.176317][ T7872] active_anon:197 inactive_anon:15751 isolated_anon:0 [ 453.176317][ T7872] active_file:26313 inactive_file:35681 isolated_file:0 [ 453.176317][ T7872] unevictable:0 dirty:251 writeback:0 [ 453.176317][ T7872] slab_reclaimable:12111 slab_unreclaimable:104247 [ 453.176317][ T7872] mapped:29627 shmem:9493 pagetables:1555 [ 453.176317][ T7872] sec_pagetables:0 bounce:0 [ 453.176317][ T7872] kernel_misc_reclaimable:0 [ 453.176317][ T7872] free:1278734 free_pcp:10655 free_cma:0 [ 453.176429][ T7872] Node 0 active_anon:788kB inactive_anon:63004kB active_file:105040kB inactive_file:142724kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118508kB dirty:1000kB writeback:0kB shmem:37972kB kernel_stack:14156kB pagetables:6056kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 453.176487][ T7872] Node 1 active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 453.176547][ T7872] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 453.176669][ T7872] lowmem_reserve[]: 0 2499 2500 2500 2500 [ 453.176764][ T7872] Node 0 DMA32 free:1164044kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:788kB inactive_anon:63004kB active_file:105040kB inactive_file:142724kB unevictable:0kB writepending:1000kB zspages:0kB present:3129332kB managed:2559152kB mlocked:0kB bounce:0kB free_pcp:42604kB local_pcp:9056kB free_cma:0kB [ 453.180329][ T7872] lowmem_reserve[]: 0 0 1 1 1 [ 453.180468][ T7872] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1824kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 453.448859][ T7872] lowmem_reserve[]: 0 0 0 0 0 [ 453.448908][ T7872] Node 1 Normal free:3935532kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 453.449028][ T7872] lowmem_reserve[]: 0 0 0 0 0 [ 453.449167][ T7872] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 453.449765][ T7872] Node 0 DMA32: 1210*4kB (UM) 598*8kB (UME) 554*16kB (UME) 543*32kB (UME) 78*64kB (UME) 25*128kB (UME) 109*256kB (UME) 65*512kB (UM) 26*1024kB (UME) 8*2048kB (ME) 248*4096kB (UM) = 1164056kB [ 453.450185][ T7872] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 453.450668][ T7872] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 11*16kB (UM) 3*32kB (UM) 10*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3935532kB [ 453.451091][ T7872] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.560905][ T7872] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 453.560967][ T7872] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.561020][ T7872] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 453.561037][ T7872] 71482 total pagecache pages [ 453.561141][ T7872] 0 pages in swap cache [ 453.561150][ T7872] Free swap = 124996kB [ 453.561193][ T7872] Total swap = 124996kB [ 453.561203][ T7872] 2097051 pages RAM [ 453.561210][ T7872] 0 pages HighMem/MovableOnly [ 453.561259][ T7872] 425191 pages reserved [ 453.561268][ T7872] 0 pages cma reserved [ 456.127554][ T7899] Mass Storage Function, version: 2009/09/11 [ 456.127778][ T7899] LUN: removable file: (no medium) [ 458.084469][ T5587] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 458.122052][ T5587] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 458.157365][ T5587] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 458.174866][ T5587] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 458.288409][ T7909] futex_wake_op: syz.3.351 tries to shift op by 144; fix this program [ 459.124779][ T5587] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 461.037645][ T36] audit: type=1326 audit(1787632542.815:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7930 comm="syz.5.355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cfc9e0d9 code=0x7ffc0000 [ 461.037708][ T36] audit: type=1326 audit(1787632542.815:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7930 comm="syz.5.355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cfc9e0d9 code=0x7ffc0000 [ 461.184250][ T36] audit: type=1326 audit(1787632542.955:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7930 comm="syz.5.355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cfc9e0d9 code=0x7ffc0000 [ 461.184794][ T36] audit: type=1326 audit(1787632542.965:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7930 comm="syz.5.355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f57cfc9e0d9 code=0x7ffc0000 [ 461.184839][ T36] audit: type=1326 audit(1787632542.965:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7930 comm="syz.5.355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cfc9e0d9 code=0x7ffc0000 [ 461.184879][ T36] audit: type=1326 audit(1787632542.965:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7930 comm="syz.5.355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cfc9e0d9 code=0x7ffc0000 [ 461.185145][ T36] audit: type=1326 audit(1787632542.965:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7930 comm="syz.5.355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cfc9e0d9 code=0x7ffc0000 [ 461.186730][ T36] audit: type=1326 audit(1787632542.965:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7930 comm="syz.5.355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cfc9e0d9 code=0x7ffc0000 [ 461.187126][ T36] audit: type=1326 audit(1787632542.965:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7930 comm="syz.5.355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cfc9e0d9 code=0x7ffc0000 [ 461.187169][ T36] audit: type=1326 audit(1787632542.965:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7930 comm="syz.5.355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f57cfc9e0d9 code=0x7ffc0000 [ 462.309389][ T5590] Bluetooth: hci3: command tx timeout [ 462.823346][ T7932] netlink: 16 bytes leftover after parsing attributes in process `syz.5.355'. [ 463.262997][ T7942] Bluetooth: MGMT ver 1.23 [ 464.393249][ T5590] Bluetooth: hci3: command tx timeout [ 466.501121][ T5590] Bluetooth: hci3: command tx timeout [ 468.162871][ T5590] Bluetooth: hci4: command 0x0406 tx timeout [ 468.621359][ T5587] Bluetooth: hci3: command tx timeout [ 468.639462][ T7954] fuse: Unknown parameter 'group_id00000000000000000000' [ 470.461273][ T7963] binder: 7962:7963 ioctl 4008550d 200000000000 returned -22 [ 470.712088][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 480.413145][ T8014] netlink: 'syz.3.369': attribute type 12 has an invalid length. [ 480.413168][ T8014] netlink: 'syz.3.369': attribute type 29 has an invalid length. [ 480.413181][ T8014] netlink: 132 bytes leftover after parsing attributes in process `syz.3.369'. [ 480.511071][ T5587] Bluetooth: hci0: unexpected event for opcode 0x2035 [ 481.684839][ T7904] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.685044][ T7904] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.685216][ T7904] bridge_slave_0: entered allmulticast mode [ 481.699827][ T7904] bridge_slave_0: entered promiscuous mode [ 481.748594][ T7904] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.750308][ T7904] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.750465][ T7904] bridge_slave_1: entered allmulticast mode [ 481.783353][ T7904] bridge_slave_1: entered promiscuous mode [ 481.892431][ T7904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.909304][ T7904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.017824][ T8028] ieee802154 phy0 wpan0: encryption failed: -22 [ 482.188560][ T7904] team0: Port device team_slave_0 added [ 483.245131][ T7904] team0: Port device team_slave_1 added [ 486.092938][ T8039] PKCS7: Unknown OID: [4] 0.0 [ 486.092950][ T8039] PKCS7: Only support pkcs7_signedData type [ 487.568566][ T7904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.568585][ T7904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.568615][ T7904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.276583][ T7904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.276659][ T7904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.276702][ T7904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.851426][ T8067] netlink: 32 bytes leftover after parsing attributes in process `syz.1.384'. [ 492.057126][ T7904] hsr_slave_0: entered promiscuous mode [ 492.087137][ T7904] hsr_slave_1: entered promiscuous mode [ 492.087979][ T7904] debugfs: 'hsr0' already exists in 'hsr' [ 492.088000][ T7904] Cannot create hsr debugfs directory [ 492.385603][ T1385] bridge_slave_1: left allmulticast mode [ 492.385679][ T1385] bridge_slave_1: left promiscuous mode [ 492.385871][ T1385] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.739335][ T8082] input: syz1 as /devices/virtual/input/input9 [ 492.739654][ T8082] input: failed to attach handler leds to device input9, error: -6 [ 493.284318][ T5719] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 493.414381][ T5719] usb 4-1: device descriptor read/64, error -71 [ 493.459788][ T1385] bridge_slave_0: left allmulticast mode [ 493.459831][ T1385] bridge_slave_0: left promiscuous mode [ 493.460106][ T1385] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.764457][ T5719] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 493.923084][ T5719] usb 4-1: device descriptor read/64, error -71 [ 494.036561][ T5719] usb usb4-port1: attempt power cycle [ 494.139815][ T8100] PKCS7: Unknown OID: [4] 0.0 [ 494.139858][ T8100] PKCS7: Only support pkcs7_signedData type [ 494.902948][ T5719] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 494.923777][ T5719] usb 4-1: device descriptor read/8, error -71 [ 494.993799][ T1385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.096014][ T1385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.145098][ T1385] bond0 (unregistering): Released all slaves [ 498.881422][ T5243] 8021q: adding VLAN 0 to HW filter on device eth13 [ 501.587864][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.587929][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.589841][ T5590] Bluetooth: hci3: command 0x0405 tx timeout [ 502.323452][ T1385] hsr_slave_0: left promiscuous mode [ 502.377102][ T1385] hsr_slave_1: left promiscuous mode [ 502.381178][ T1385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.428266][ T1385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.782709][ T8142] PKCS7: Unknown OID: [4] 0.0 [ 502.782810][ T8142] PKCS7: Only support pkcs7_signedData type [ 503.964013][ T5590] Bluetooth: hci1: command 0x0406 tx timeout [ 504.836328][ T36] kauditd_printk_skb: 155 callbacks suppressed [ 504.836347][ T36] audit: type=1326 audit(1787632586.595:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8147 comm="syz.1.403" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6fb8e0d9 code=0x7ffc0000 [ 504.836396][ T36] audit: type=1326 audit(1787632586.605:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8147 comm="syz.1.403" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6fb8e0d9 code=0x7ffc0000 [ 504.894609][ T36] audit: type=1326 audit(1787632586.675:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8147 comm="syz.1.403" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6fb8e0d9 code=0x7ffc0000 [ 504.899037][ T36] audit: type=1326 audit(1787632586.675:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8147 comm="syz.1.403" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6fb8e0d9 code=0x7ffc0000 [ 504.900426][ T36] audit: type=1326 audit(1787632586.675:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8147 comm="syz.1.403" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f7d6fb8e0d9 code=0x7ffc0000 [ 504.900530][ T36] audit: type=1326 audit(1787632586.675:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8147 comm="syz.1.403" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6fb8e0d9 code=0x7ffc0000 [ 504.900621][ T36] audit: type=1326 audit(1787632586.675:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8147 comm="syz.1.403" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6fb8e0d9 code=0x7ffc0000 [ 504.912301][ T36] audit: type=1326 audit(1787632586.685:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8147 comm="syz.1.403" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6fb8e0d9 code=0x7ffc0000 [ 504.922319][ T36] audit: type=1326 audit(1787632586.695:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8147 comm="syz.1.403" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f7d6fb8e0d9 code=0x7ffc0000 [ 504.922476][ T36] audit: type=1326 audit(1787632586.695:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8147 comm="syz.1.403" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6fb8e0d9 code=0x7ffc0000 [ 505.166667][ T8155] Invalid logical block size (8192) [ 505.293463][ T8156] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1701064494.1634545526.1919250544), cmd(5) [ 507.418630][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 507.763178][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 507.772401][ T31] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 507.868895][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.869163][ T31] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 507.869227][ T31] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 507.869304][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 507.973725][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.973780][ T31] usb 4-1: Product: syz [ 507.973837][ T31] usb 4-1: Manufacturer: syz [ 507.973852][ T31] usb 4-1: SerialNumber: syz [ 508.167387][ T31] usb 4-1: config 0 descriptor?? [ 508.285558][ T31] gs_usb 4-1:0.0: Required endpoints not found [ 511.663928][ T31] usb 4-1: USB disconnect, device number 14 [ 511.682282][ T1385] team0 (unregistering): Port device team_slave_1 removed [ 513.286259][ T1385] team0 (unregistering): Port device team_slave_0 removed [ 513.671291][ T8187] PKCS7: Unknown OID: [4] 0.0 [ 513.671330][ T8187] PKCS7: Only support pkcs7_signedData type [ 518.688879][ T8206] device-mapper: ioctl: name not supplied when creating device [ 521.942306][ T5590] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 522.045321][ T5590] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 522.050344][ T5590] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 522.059149][ T5590] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 522.080496][ T5590] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 523.920785][ T5590] Bluetooth: hci0: unexpected event for opcode 0x2035 [ 524.196660][ T5590] Bluetooth: hci5: command tx timeout [ 525.457205][ T7696] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 525.558917][ T8240] random: crng reseeded on system resumption [ 525.603267][ T7696] usb 7-1: Using ep0 maxpacket: 32 [ 525.604230][ T7696] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 525.605606][ T7696] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.605654][ T7696] usb 7-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 525.605676][ T7696] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 525.605700][ T7696] usb 7-1: config 0 interface 0 has no altsetting 0 [ 525.608540][ T7696] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.608562][ T7696] usb 7-1: Product: syz [ 525.608575][ T7696] usb 7-1: Manufacturer: syz [ 525.608589][ T7696] usb 7-1: SerialNumber: syz [ 525.915798][ T7696] usb 7-1: config 0 descriptor?? [ 526.030817][ T7696] gs_usb 7-1:0.0: Required endpoints not found [ 527.792369][ T5590] Bluetooth: hci5: command tx timeout [ 527.908361][ T7696] usb 7-1: USB disconnect, device number 2 [ 528.712823][ T8266] Mass Storage Function, version: 2009/09/11 [ 528.712853][ T8266] LUN: removable file: (no medium) [ 529.845490][ T5590] Bluetooth: hci5: command tx timeout [ 530.808799][ T8281] syz.1.429 (8281) used greatest stack depth: 17280 bytes left [ 531.240823][ T8242] syz.5.423 (8242) used greatest stack depth: 16096 bytes left [ 531.381419][ T1385] bridge_slave_1: left allmulticast mode [ 531.381453][ T1385] bridge_slave_1: left promiscuous mode [ 531.381705][ T1385] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.624009][ T8288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.957635][ T5598] Bluetooth: hci5: command tx timeout [ 532.599896][ T8298] netlink: 16 bytes leftover after parsing attributes in process `syz.5.431'. [ 532.737619][ T8302] Context (ID=0x0) not attached to queue pair (handle=0x2:0x2) [ 533.534119][ T1385] bridge_slave_0: left allmulticast mode [ 533.534154][ T1385] bridge_slave_0: left promiscuous mode [ 533.534386][ T1385] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.226085][ T5590] Bluetooth: hci2: unexpected event for opcode 0x2035 [ 538.609258][ T1385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.130305][ T8346] file system registered [ 539.207374][ T8347] netlink: 32 bytes leftover after parsing attributes in process `syz.6.444'. [ 539.766252][ T1385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.944538][ T1385] bond0 (unregistering): Released all slaves [ 540.189433][ T8331] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 540.189467][ T8331] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 540.406409][ T5243] 8021q: adding VLAN 0 to HW filter on device eth14 [ 542.346694][ T1385] hsr_slave_0: left promiscuous mode [ 542.761754][ T1385] hsr_slave_1: left promiscuous mode [ 542.767907][ T1385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.389266][ T1385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.814472][ T8387] 9pnet_virtio: no channels available for device 127.0.0.1 [ 550.747237][ T1385] team0 (unregistering): Port device team_slave_1 removed [ 550.957399][ T1385] team0 (unregistering): Port device team_slave_0 removed [ 551.156104][ T8428] ubi0: attaching mtd0 [ 551.243589][ T8428] ubi0: scanning is finished [ 551.243631][ T8428] ubi0: empty MTD device detected [ 552.084753][ T8433] 9pnet_virtio: no channels available for device 127.0.0.1 [ 553.053547][ T8428] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 560.175593][ T8492] netlink: 12 bytes leftover after parsing attributes in process `syz.5.475'. [ 560.176345][ T5590] Bluetooth: hci4: Malformed LE Event: 0x1d [ 560.209892][ T8213] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.210036][ T8213] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.210190][ T8213] bridge_slave_0: entered allmulticast mode [ 560.235253][ T8213] bridge_slave_0: entered promiscuous mode [ 560.488442][ T8213] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.488564][ T8213] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.488805][ T8213] bridge_slave_1: entered allmulticast mode [ 560.616033][ T8506] 9pnet_virtio: no channels available for device 127.0.0.1 [ 561.752364][ T8213] bridge_slave_1: entered promiscuous mode [ 563.019953][ T5243] 8021q: adding VLAN 0 to HW filter on device eth15 [ 563.034536][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.034602][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.088056][ T8213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.307968][ T8213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.639066][ T8213] team0: Port device team_slave_0 added [ 565.649619][ T8213] team0: Port device team_slave_1 added [ 565.721238][ T8213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.721252][ T8213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.721277][ T8213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.842189][ T8213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.842205][ T8213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.842230][ T8213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.547124][ T8213] hsr_slave_0: entered promiscuous mode [ 566.565654][ T8213] hsr_slave_1: entered promiscuous mode [ 568.418241][ T5840] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 568.713503][ T5840] usb 4-1: Using ep0 maxpacket: 32 [ 568.714503][ T5840] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 568.716205][ T5840] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 568.716228][ T5840] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 568.716247][ T5840] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 568.716267][ T5840] usb 4-1: config 1 has no interface number 0 [ 568.716322][ T5840] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 568.716346][ T5840] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 568.716365][ T5840] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 568.716402][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.000728][ T5840] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 569.548598][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.491'. [ 570.473690][ T5840] snd_usb_pod 4-1:1.1: cannot start listening: -90 [ 570.474326][ T5840] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 570.474863][ T5840] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 570.901840][ T5719] usb 4-1: USB disconnect, device number 15 [ 571.411451][ T6700] IPVS: starting estimator thread 0... [ 571.544600][ T8583] IPVS: using max 9 ests per chain, 21600 per kthread [ 573.383174][ T8607] netlink: 44 bytes leftover after parsing attributes in process `syz.6.499'. [ 574.017545][ T8616] netlink: 44 bytes leftover after parsing attributes in process `syz.1.500'. [ 574.883075][ T8628] PKCS7: Unknown OID: [4] 0.0 [ 574.883094][ T8628] PKCS7: Only support pkcs7_signedData type [ 575.475658][ T8631] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 575.740708][ T8631] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 575.740913][ T8631] overlayfs: failed to look up (tracing) for ino (-66) [ 581.296405][ T5598] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 582.026705][ T5598] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 582.040991][ T5598] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 582.213807][ T8666] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 582.213858][ T8666] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 582.213879][ T8666] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x9bfe instead [ 582.213900][ T8666] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x7004 instead [ 582.213920][ T8666] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 582.213938][ T8666] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 582.213957][ T8666] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 582.213979][ T8666] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 582.214013][ T8666] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 582.214057][ T8666] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 582.214095][ T8666] jffs2: Further such events for this erase block will not be printed [ 582.214483][ T8666] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 582.214504][ T8666] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 582.214523][ T8666] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x9bfe instead [ 582.214544][ T8666] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x7004 instead [ 582.214562][ T8666] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 582.214580][ T8666] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 582.214598][ T8666] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 582.214620][ T8666] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 582.214653][ T8666] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 582.214685][ T8666] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 582.214710][ T8666] jffs2: Further such events for this erase block will not be printed [ 582.215103][ T8666] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 582.215114][ T8666] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 583.210687][ T5598] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 583.352176][ T5598] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 583.781207][ T8683] netlink: 44 bytes leftover after parsing attributes in process `syz.6.511'. [ 584.495601][ T8688] Bluetooth: MGMT ver 1.23 [ 584.992901][ T196] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 585.150791][ T196] usb 7-1: Using ep0 maxpacket: 32 [ 585.161378][ T196] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 585.186042][ T196] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.186066][ T196] usb 7-1: Product: syz [ 585.186079][ T196] usb 7-1: Manufacturer: syz [ 585.186092][ T196] usb 7-1: SerialNumber: syz [ 585.266600][ T8695] qnx6: unable to read the first superblock [ 585.269203][ T8695] qnx6: unable to read the first superblock [ 585.269215][ T8695] qnx6: unable to read the first superblock [ 585.316964][ T196] usb 7-1: config 0 descriptor?? [ 585.355753][ T196] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 585.370543][ T196] dvb-usb: bulk message failed: -22 (4/0) [ 585.370561][ T196] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 585.370676][ T196] dvb-usb: bulk message failed: -22 (5/0) [ 585.370689][ T196] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 585.488817][ T8695] netlink: 156 bytes leftover after parsing attributes in process `syz.1.514'. [ 585.712897][ T5598] Bluetooth: hci3: command tx timeout [ 586.491501][ T196] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 586.706119][ T196] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 586.706277][ T196] usb 7-1: media controller created [ 586.804716][ T196] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 586.911511][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'. [ 587.337676][ T196] usb 7-1: selecting invalid altsetting 3 [ 587.337697][ T196] ttusb2: set interface to alts=3 failed [ 587.592353][ T196] DVB: Unable to find symbol tda10086_attach() [ 587.592368][ T196] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 587.609762][ T196] dvb-usb: bulk message failed: -22 (4/0) [ 587.609785][ T196] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 587.609938][ T196] dvb-usb: bulk message failed: -22 (5/0) [ 587.609954][ T196] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 587.610029][ T196] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 587.742855][ T5598] Bluetooth: hci3: command tx timeout [ 588.092960][ T196] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 588.246383][ T196] usb 4-1: Using ep0 maxpacket: 32 [ 588.247198][ T196] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 588.265879][ T196] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 588.265913][ T196] usb 4-1: can't read configurations, error -61 [ 588.417981][ T196] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 588.564243][ T196] usb 4-1: Using ep0 maxpacket: 32 [ 588.569141][ T196] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 588.602181][ T196] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 588.602213][ T196] usb 4-1: can't read configurations, error -61 [ 588.617725][ T196] usb usb4-port1: attempt power cycle [ 589.232884][ T196] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 589.257669][ T196] usb 4-1: Using ep0 maxpacket: 32 [ 589.258289][ T196] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 589.261925][ T196] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 589.261958][ T196] usb 4-1: can't read configurations, error -61 [ 589.422880][ T196] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 589.456308][ T196] usb 4-1: Using ep0 maxpacket: 32 [ 589.457971][ T196] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 589.505076][ T196] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 589.505109][ T196] usb 4-1: can't read configurations, error -61 [ 589.506304][ T196] usb usb4-port1: unable to enumerate USB device [ 589.685216][ T8765] netlink: 44 bytes leftover after parsing attributes in process `syz.5.522'. [ 589.840153][ T5598] Bluetooth: hci3: command tx timeout [ 591.020476][ T8771] netlink: 'syz.5.523': attribute type 4 has an invalid length. [ 591.089528][ T8773] netlink: 'syz.5.523': attribute type 4 has an invalid length. [ 592.250061][ T5598] Bluetooth: hci3: command tx timeout [ 592.993018][ T67] bridge_slave_1: left allmulticast mode [ 592.993049][ T67] bridge_slave_1: left promiscuous mode [ 593.014629][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.468250][ T67] bridge_slave_0: left allmulticast mode [ 594.468278][ T67] bridge_slave_0: left promiscuous mode [ 594.469419][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.949351][ T8809] netlink: 'syz.6.529': attribute type 4 has an invalid length. [ 595.612863][ T8810] netlink: 'syz.6.529': attribute type 4 has an invalid length. [ 595.691573][ T8811] netlink: 116 bytes leftover after parsing attributes in process `syz.6.529'. [ 596.103567][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.287519][ T8818] netlink: 36 bytes leftover after parsing attributes in process `syz.3.530'. [ 596.830684][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.884170][ T8823] overlayfs: failed to resolve './file2': -2 [ 596.946950][ T8821] capability: warning: `syz.5.531' uses deprecated v2 capabilities in a way that may be insecure [ 597.341893][ T67] bond0 (unregistering): Released all slaves [ 598.014036][ T5719] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 598.443180][ T5719] usb 6-1: device descriptor read/64, error -71 [ 598.832962][ T5719] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 599.023497][ T5719] usb 6-1: device descriptor read/64, error -71 [ 599.160022][ T5719] usb usb6-port1: attempt power cycle [ 599.516781][ T8834] netlink: 44 bytes leftover after parsing attributes in process `syz.6.532'. [ 600.926457][ T8671] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.926584][ T8671] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.926734][ T8671] bridge_slave_0: entered allmulticast mode [ 600.954309][ T8671] bridge_slave_0: entered promiscuous mode [ 600.971304][ T8671] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.972666][ T8671] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.978226][ T8671] bridge_slave_1: entered allmulticast mode [ 601.072150][ T8671] bridge_slave_1: entered promiscuous mode [ 601.630946][ T8848] comedi comedi0: comedi_config --init_data is deprecated [ 606.909730][ T67] hsr_slave_0: left promiscuous mode [ 606.979601][ T67] hsr_slave_1: left promiscuous mode [ 606.980447][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.015191][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.498041][ T5598] Bluetooth: hci4: unexpected event for opcode 0x2035 [ 607.516511][ T67] team0 (unregistering): Port device team_slave_1 removed [ 607.978636][ T67] team0 (unregistering): Port device team_slave_0 removed [ 609.310717][ T8881] PKCS7: Unknown OID: [4] 0.0 [ 609.310765][ T8881] PKCS7: Only support pkcs7_signedData type [ 610.301610][ T8671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.321943][ T8671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.197557][ T8893] 9pnet_virtio: no channels available for device 127.0.0.1 [ 611.417424][ T8671] team0: Port device team_slave_0 added [ 611.421719][ T8671] team0: Port device team_slave_1 added [ 611.739995][ T8874] Bluetooth: hci0: command 0x0c1a tx timeout [ 611.740162][ T5598] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 611.770691][ T8671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.773045][ T8671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.773074][ T8671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.776074][ T8671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.776086][ T8671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.776113][ T8671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.932054][ T5587] Bluetooth: hci2: unexpected event for opcode 0x2035 [ 613.083945][ T8671] hsr_slave_0: entered promiscuous mode [ 613.086597][ T8671] hsr_slave_1: entered promiscuous mode [ 613.246616][ T8908] 9pnet_virtio: no channels available for device 127.0.0.1 [ 615.073863][ T5718] usb 7-1: USB disconnect, device number 3 [ 615.993758][ T5587] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 616.063347][ T5587] Bluetooth: hci0: command 0x0c1a tx timeout [ 616.402087][ T8921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.511062][ T5718] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 617.575687][ T8931] PKCS7: Unknown OID: [4] 0.0 [ 617.575724][ T8931] PKCS7: Only support pkcs7_signedData type [ 618.545951][ T8939] 9pnet_virtio: no channels available for device 127.0.0.1 [ 621.867746][ T5587] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 622.515302][ T5592] libceph: connect (1)[c::]:6789 error -101 [ 622.515492][ T5592] libceph: mon0 (1)[c::]:6789 connect error [ 622.679539][ T8671] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 622.733862][ T8671] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 622.735223][ T8671] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 622.932142][ T5592] libceph: connect (1)[c::]:6789 error -101 [ 622.933494][ T5592] libceph: mon0 (1)[c::]:6789 connect error [ 623.047070][ T8967] 9pnet_virtio: no channels available for device 127.0.0.1 [ 623.060817][ T8959] ceph: No mds server is up or the cluster is laggy [ 623.746643][ T8671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 623.749884][ T8671] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 623.934680][ T5592] libceph: connect (1)[c::]:6789 error -101 [ 623.934858][ T5592] libceph: mon0 (1)[c::]:6789 connect error [ 624.476127][ T8671] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 624.856707][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.856774][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.787767][ T5598] Bluetooth: hci0: command 0x0c1a tx timeout [ 625.788082][ T5587] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 625.832558][ T8671] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 626.181406][ T8671] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 626.541744][ T8982] PKCS7: Unknown OID: [4] 0.0 [ 626.541782][ T8982] PKCS7: Only support pkcs7_signedData type [ 629.019227][ T8671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.140686][ T8671] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.186310][ T771] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.186438][ T771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.277310][ T6696] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.277445][ T6696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.711218][ T9017] 9pnet_virtio: no channels available for device 127.0.0.1 [ 632.514034][ T9020] Can't find a SQUASHFS superblock on nullb0 [ 632.519278][ T5587] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 632.703347][ T5587] Bluetooth: hci0: command 0x0c1a tx timeout [ 632.775785][ T9025] 9pnet_virtio: no channels available for device 127.0.0.1 [ 633.732228][ T8671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.906091][ T9038] PKCS7: Unknown OID: [4] 0.0 [ 633.906130][ T9038] PKCS7: Only support pkcs7_signedData type [ 638.108234][ T9050] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 639.712154][ T9083] 9pnet_virtio: no channels available for device 127.0.0.1 [ 640.673245][ T8874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 640.722270][ T8874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 640.761897][ T8874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 640.789034][ T8874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 640.802996][ T8874] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 641.040519][ T9087] Can't find a SQUASHFS superblock on nullb0 [ 641.569815][ T5587] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 641.570101][ T5587] Bluetooth: hci0: command 0x0c1a tx timeout [ 643.207108][ T9111] PKCS7: Unknown OID: [4] 0.0 [ 643.207126][ T9111] PKCS7: Only support pkcs7_signedData type [ 643.643561][ T5598] Bluetooth: hci3: command tx timeout [ 645.664400][ T5598] Bluetooth: hci3: command tx timeout [ 646.081815][ T9138] 9pnet_virtio: no channels available for device 127.0.0.1 [ 647.605964][ T9149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.428991][ T5587] Bluetooth: hci3: command tx timeout [ 649.790150][ T5587] Bluetooth: hci0: command 0x0c1a tx timeout [ 649.790227][ T5598] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 649.995747][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.599'. [ 650.930412][ T8874] Bluetooth: hci3: command tx timeout [ 656.533116][ T9186] netlink: 'syz.6.609': attribute type 3 has an invalid length. [ 657.242555][ T9192] 9pnet_virtio: no channels available for device 127.0.0.1 [ 659.145895][ T9204] PKCS7: Unknown OID: [4] 0.0 [ 659.145936][ T9204] PKCS7: Only support pkcs7_signedData type [ 660.226878][ T27] [ 660.226890][ T27] ====================================================== [ 660.226909][ T27] WARNING: possible circular locking dependency detected [ 660.226924][ T27] syzkaller #0 Tainted: G L [ 660.226934][ T27] ------------------------------------------------------ [ 660.226941][ T27] migration/1/27 is trying to acquire lock: [ 660.226951][ T27] ffff8880b8740998 (_T->lock){....}-{2:2}, at: rt_spin_trylock+0x56/0x2b0 [ 660.227005][ T27] [ 660.227005][ T27] but task is already holding lock: [ 660.227011][ T27] ffff888027354980 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 660.227048][ T27] [ 660.227048][ T27] which lock already depends on the new lock. [ 660.227048][ T27] [ 660.227055][ T27] [ 660.227055][ T27] the existing dependency chain (in reverse order) is: [ 660.227061][ T27] [ 660.227061][ T27] -> #1 (&p->pi_lock){-...}-{2:2}: [ 660.227084][ T27] _raw_spin_lock+0x2e/0x40 [ 660.227101][ T27] rtlock_slowlock_locked+0x1ec/0x3c20 [ 660.227126][ T27] rt_spin_lock+0x165/0x400 [ 660.227147][ T27] finish_wait+0xbe/0x1e0 [ 660.227171][ T27] synchronize_rcu_expedited+0x63e/0x770 [ 660.227196][ T27] rcu_tasks_wait_gp+0x185/0xb90 [ 660.227211][ T27] rcu_tasks_one_gp+0xc4e/0xe30 [ 660.227225][ T27] rcu_tasks_kthread+0x19a/0x1c0 [ 660.227241][ T27] kthread+0x38b/0x470 [ 660.227264][ T27] ret_from_fork+0x514/0xb70 [ 660.227289][ T27] ret_from_fork_asm+0x1a/0x30 [ 660.227305][ T27] [ 660.227305][ T27] -> #0 (_T->lock){....}-{2:2}: [ 660.227330][ T27] __lock_acquire+0x1520/0x2ce0 [ 660.227348][ T27] lock_acquire+0x106/0x350 [ 660.227365][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 660.227382][ T27] rt_spin_trylock+0x56/0x2b0 [ 660.227407][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 660.227426][ T27] kvfree_call_rcu+0xa4/0x430 [ 660.227443][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 660.227466][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 660.227489][ T27] select_fallback_rq+0x11e/0x200 [ 660.227515][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 660.227531][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 660.227553][ T27] smpboot_thread_fn+0x565/0xa70 [ 660.227593][ T27] kthread+0x38b/0x470 [ 660.227617][ T27] ret_from_fork+0x514/0xb70 [ 660.227642][ T27] ret_from_fork_asm+0x1a/0x30 [ 660.227657][ T27] [ 660.227657][ T27] other info that might help us debug this: [ 660.227657][ T27] [ 660.227663][ T27] Possible unsafe locking scenario: [ 660.227663][ T27] [ 660.227669][ T27] CPU0 CPU1 [ 660.227674][ T27] ---- ---- [ 660.227680][ T27] lock(&p->pi_lock); [ 660.227692][ T27] lock(_T->lock); [ 660.227706][ T27] lock(&p->pi_lock); [ 660.227718][ T27] lock(_T->lock); [ 660.227729][ T27] [ 660.227729][ T27] *** DEADLOCK *** [ 660.227729][ T27] [ 660.227734][ T27] locks held by migration/1/27: 2, last CPU#1: [ 660.227748][ T27] #0: ffff888027354980 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 660.227791][ T27] #1: ffffffff8e1c3800 (rcu_read_lock){....}-{1:3}, at: cpuset_cpus_allowed_fallback+0x22/0x370 [ 660.227838][ T27] [ 660.227838][ T27] stack backtrace: [ 660.227852][ T27] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 660.227878][ T27] Tainted: [L]=SOFTLOCKUP [ 660.227884][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 660.227895][ T27] Stopper: __balance_push_cpu_stop+0x0/0x410 <- balance_push+0x28d/0x4f0 [ 660.227921][ T27] Call Trace: [ 660.227928][ T27] [ 660.227935][ T27] dump_stack_lvl+0xe8/0x150 [ 660.227963][ T27] print_circular_bug+0x2e1/0x300 [ 660.227989][ T27] check_noncircular+0x12e/0x150 [ 660.228015][ T27] __lock_acquire+0x1520/0x2ce0 [ 660.228035][ T27] ? __pfx_usage_match+0x10/0x10 [ 660.228058][ T27] ? lockdep_unlock+0x5c/0xd0 [ 660.228073][ T27] ? __lock_acquire+0x13e8/0x2ce0 [ 660.228098][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 660.228124][ T27] lock_acquire+0x106/0x350 [ 660.228142][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 660.228174][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 660.228191][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 660.228217][ T27] rt_spin_trylock+0x56/0x2b0 [ 660.228246][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 660.228269][ T27] kvfree_call_rcu+0xa4/0x430 [ 660.228288][ T27] ? do_raw_spin_unlock+0xf5/0x200 [ 660.228319][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 660.228349][ T27] ? __pfx_set_cpus_allowed_force+0x10/0x10 [ 660.228375][ T27] ? cpuset_cpus_allowed_fallback+0x22/0x370 [ 660.228404][ T27] ? cpuset_cpus_allowed_fallback+0x22/0x370 [ 660.228429][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 660.228456][ T27] select_fallback_rq+0x11e/0x200 [ 660.228485][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 660.228504][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 660.228522][ T27] ? _raw_spin_unlock_irq+0x23/0x50 [ 660.228541][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 660.228557][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 660.228596][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 660.228620][ T27] smpboot_thread_fn+0x565/0xa70 [ 660.228646][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 660.228672][ T27] kthread+0x38b/0x470 [ 660.228715][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 660.228742][ T27] ? __pfx_kthread+0x10/0x10 [ 660.228776][ T27] ret_from_fork+0x514/0xb70 [ 660.228807][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 660.228855][ T27] ? __switch_to+0xc89/0x1420 [ 660.228885][ T27] ? __pfx_kthread+0x10/0x10 [ 660.228918][ T27] ret_from_fork_asm+0x1a/0x30 [ 660.228946][ T27] [ 660.228972][ T27] select_fallback_rq: 159 callbacks suppressed [ 660.228985][ T27] process 9202 (syz.6.611) no longer affine to cpu1 [ 660.472791][ T5598] Bluetooth: hci0: command 0x0c1a tx timeout [ 660.472850][ T8874] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 660.906254][ T27] numa_remove_cpu cpu 1 node 0: mask now 0 [ 660.906275][ T27] numa_remove_cpu cpu 1 node 1: mask now 0 [ 660.920602][ T9197] smpboot: CPU 1 is now offline [ 663.350451][ T6279] bridge_slave_1: left allmulticast mode [ 663.350469][ T6279] bridge_slave_1: left promiscuous mode [ 663.350574][ T6279] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.379463][ T6279] bridge_slave_0: left allmulticast mode [ 663.379481][ T6279] bridge_slave_0: left promiscuous mode [ 663.379595][ T6279] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.540461][ T6279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.554574][ T6279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.557822][ T6279] bond0 (unregistering): Released all slaves [ 663.656769][ T6279] hsr_slave_0: left promiscuous mode [ 663.658562][ T6279] hsr_slave_1: left promiscuous mode [ 663.659000][ T6279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.661787][ T6279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.904547][ T6279] team0 (unregistering): Port device team_slave_1 removed [ 663.922374][ T6279] team0 (unregistering): Port device team_slave_0 removed [ 664.085719][ T5243] 8021q: adding VLAN 0 to HW filter on device eth13 [ 664.148656][ T9080] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.148705][ T9080] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.148774][ T9080] bridge_slave_0: entered allmulticast mode [ 664.150372][ T9080] bridge_slave_0: entered promiscuous mode [ 664.152136][ T9080] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.152185][ T9080] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.152251][ T9080] bridge_slave_1: entered allmulticast mode [ 664.199366][ T9080] bridge_slave_1: entered promiscuous mode [ 664.261732][ T9080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.275200][ T9080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.317504][ T9080] team0: Port device team_slave_0 added [ 664.320671][ T9080] team0: Port device team_slave_1 added [ 664.360487][ T9080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.360498][ T9080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.360516][ T9080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.362851][ T9080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.362860][ T9080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.362877][ T9080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.500422][ T9080] hsr_slave_0: entered promiscuous mode [ 664.502309][ T9080] hsr_slave_1: entered promiscuous mode [ 664.833328][ T9080] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 664.839112][ T9080] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 664.839831][ T9080] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 664.865076][ T9080] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 664.866902][ T9080] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 664.889920][ T9080] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 664.890512][ T9080] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 664.892424][ T9080] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 664.940686][ T9080] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.941492][ T9080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.028387][ T9080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.046727][ T6337] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.062954][ T9080] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.068664][ T6337] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.069740][ T6337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.101632][ T6337] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.101862][ T6337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.626798][ T9080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.927574][ T9080] veth0_vlan: entered promiscuous mode [ 665.944187][ T9080] veth1_vlan: entered promiscuous mode [ 665.982935][ T9080] veth0_macvtap: entered promiscuous mode [ 665.989261][ T9080] veth1_macvtap: entered promiscuous mode [ 666.020730][ T9080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.037626][ T9080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.052771][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.052796][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.052816][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.052836][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.124311][ T9080] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 666.165093][ T6337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.165106][ T6337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.171500][ T9080] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 666.226793][ T6337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.226806][ T6337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50