last executing test programs: 5m4.683575471s ago: executing program 2 (id=60): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x5, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0x7}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5m3.68721666s ago: executing program 2 (id=62): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='B'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 5m3.206165418s ago: executing program 2 (id=65): syz_open_dev$vim2m(0x0, 0x0, 0x2) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x220400, 0x0) dup3(r2, r1, 0x80000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) 4m58.747506099s ago: executing program 2 (id=83): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000000c0)={[{@nobh}, {@auto_da_alloc}, {@errors_remount}]}, 0x3, 0x4cc, &(0x7f0000000c80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x4000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) fanotify_mark(0xffffffffffffffff, 0x5, 0x1018, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') umount2(&(0x7f0000000180)='./file0\x00', 0xb) 4m57.916777979s ago: executing program 2 (id=79): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x18, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x24, &(0x7f0000000000)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 4m57.090548467s ago: executing program 2 (id=81): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x20000000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 4m56.736330387s ago: executing program 32 (id=81): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x20000000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3m31.743581435s ago: executing program 4 (id=244): epoll_create1(0x80000) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 3m29.327533867s ago: executing program 4 (id=248): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000ac0)=""/102392, 0x18ff8) io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x10, 0xfffffffc, 0x87}) eventfd2(0x0, 0x1803) sendmsg$nl_route(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x38, 0x48, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x0, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000881}, 0x44040) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) 2m47.823856724s ago: executing program 4 (id=248): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000ac0)=""/102392, 0x18ff8) io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x10, 0xfffffffc, 0x87}) eventfd2(0x0, 0x1803) sendmsg$nl_route(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x38, 0x48, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x0, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000881}, 0x44040) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) 2m45.515423379s ago: executing program 4 (id=314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000100)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}, {@noquota}, {@data_err_ignore}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xb, &(0x7f00000002c0)=0x41, 0x4) accept4(r1, 0x0, &(0x7f0000000040), 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) fsmount(r4, 0x0, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file7\x00', 0x0, 0x10000, 0x0) 2m43.79143104s ago: executing program 4 (id=318): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_getattr(r2, 0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fchdir(r1) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x1000000201005) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x1000c1f, &(0x7f0000000200)={[{@mblk_io_submit}, {@norecovery}, {@orlov}, {@test_dummy_encryption}, {@sysvgroups}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@data_ordered}, {@barrier_val={'barrier', 0x3d, 0x80000001}}]}, 0x4, 0x5cd, &(0x7f0000001400)="$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") 2m38.900000457s ago: executing program 4 (id=320): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000001e00)=""/218, 0x0) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [], "578e0e048d23cf66029067c74a20dc68d161baf5682a678673d745cab12ff3ba"}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x1000, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x1, 0x0, 0x8000000, r1}, 0x10) 2m22.753299145s ago: executing program 33 (id=320): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000001e00)=""/218, 0x0) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [], "578e0e048d23cf66029067c74a20dc68d161baf5682a678673d745cab12ff3ba"}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x1000, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x1, 0x0, 0x8000000, r1}, 0x10) 7.869938259s ago: executing program 0 (id=614): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f00000005c0)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) socket$nl_generic(0x10, 0x3, 0x10) 7.810148932s ago: executing program 5 (id=615): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r5, @ANYBLOB="8106e2bc00000200140012800b000100627269646765"], 0x34}}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 6.99801953s ago: executing program 5 (id=618): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000080)={0x0, 0x0, 0x2, "bc3e098e0000f403040000000000000000000000000000ffffffffffffffec00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x104) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f00000000c0)="66ec", 0x2, 0x5}]) 6.784269433s ago: executing program 3 (id=619): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) r1 = socket(0xa, 0x3, 0xff) ioperm(0x0, 0x33, 0x3) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5e54e507da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x28}}], 0x2, 0x4046040) 6.462297322s ago: executing program 1 (id=620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80b02, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x24}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 6.289069411s ago: executing program 0 (id=621): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r5, @ANYBLOB="8106e2bc00000200140012800b000100627269646765"], 0x34}}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 5.647455279s ago: executing program 3 (id=622): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000080)={0x0, 0x0, 0x2, "bc3e098e0000f403040000000000000000000000000000ffffffffffffffec00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x104) io_setup(0x20, &(0x7f0000001140)) 5.405457433s ago: executing program 1 (id=623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x102000, 0x0) flock(r3, 0x1) r4 = socket(0x840000000002, 0x3, 0x100) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) sendmmsg$inet(r4, &(0x7f0000010580)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000010540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}}], 0x1, 0x20000) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)={0x28, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3e}, @void, @val={0xc, 0x99, {0x5, 0x38}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040048}, 0x4800) flock(0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 5.205870395s ago: executing program 5 (id=624): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000080)={0x0, 0x0, 0x2, "bc3e098e0000f403040000000000000000000000000000ffffffffffffffec00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x104) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f00000000c0)="66ec", 0x2, 0x5}]) 4.218310293s ago: executing program 3 (id=625): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000080)={0x0, 0x0, 0x2, "bc3e098e0000f403040000000000000000000000000000ffffffffffffffec00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x104) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f00000000c0)="66ec", 0x2, 0x5}]) 4.052331153s ago: executing program 0 (id=626): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) r1 = socket(0xa, 0x3, 0xff) ioperm(0x0, 0x33, 0x3) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5e54e507da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00C'], 0x28}}], 0x2, 0x4046040) 4.030335074s ago: executing program 1 (id=627): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000080)={0x0, 0x0, 0x2, "bc3e098e0000f403040000000000000000000000000000ffffffffffffffec00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x104) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f00000000c0)="66ec", 0x2, 0x5}]) 2.429079978s ago: executing program 5 (id=628): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0) 2.428086118s ago: executing program 3 (id=629): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) r3 = socket(0xa, 0x3, 0xff) ioperm(0x0, 0x33, 0x3) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5e54e507da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}], 0x1, 0x4046040) 2.418115048s ago: executing program 0 (id=630): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x34}}, 0x20044002) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x34}}, 0x0) 2.125135476s ago: executing program 1 (id=631): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r2) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r4, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0) 2.112758607s ago: executing program 0 (id=632): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) r1 = socket(0xa, 0x3, 0xff) ioperm(0x0, 0x33, 0x3) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5e54e507da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x28}}], 0x2, 0x4046040) 1.420485217s ago: executing program 5 (id=633): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f00000005c0)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r2, &(0x7f00000001c0), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) socket$nl_generic(0x10, 0x3, 0x10) 1.229119699s ago: executing program 3 (id=634): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) r3 = socket(0xa, 0x3, 0xff) ioperm(0x0, 0x33, 0x3) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5e54e507da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}], 0x1, 0x4046040) 1.127656835s ago: executing program 1 (id=635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80b02, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x24}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 989.781553ms ago: executing program 0 (id=636): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000080)={0x0, 0x0, 0x2, "bc3e098e0000f403040000000000000000000000000000ffffffffffffffec00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x104) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f00000000c0)="66ec", 0x2, 0x5}]) 789.846274ms ago: executing program 5 (id=637): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) flock(0xffffffffffffffff, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 39.113748ms ago: executing program 3 (id=638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) open(&(0x7f0000000300)='.\x00', 0x102000, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 1 (id=639): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) r3 = socket(0xa, 0x3, 0xff) ioperm(0x0, 0x33, 0x3) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5e54e507da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x28}}], 0x2, 0x4046040) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.68' (ED25519) to the list of known hosts. [ 80.168663][ T5758] cgroup: Unknown subsys name 'net' [ 80.342817][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.142859][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.920372][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.938558][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.950010][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.958843][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.966737][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.983695][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.991923][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.008006][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.017768][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.027086][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.032962][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.044681][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.044886][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.057902][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.061129][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.074895][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.082258][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.085709][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.093017][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.101167][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.113387][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.113661][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.127875][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.137179][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.680579][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 84.742504][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 84.857173][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 84.908043][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.918119][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.926151][ T5776] bridge_slave_0: entered allmulticast mode [ 84.933763][ T5776] bridge_slave_0: entered promiscuous mode [ 84.949766][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 84.974909][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.982340][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.990359][ T5776] bridge_slave_1: entered allmulticast mode [ 84.997810][ T5776] bridge_slave_1: entered promiscuous mode [ 85.066724][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.074755][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.083313][ T5777] bridge_slave_0: entered allmulticast mode [ 85.091146][ T5777] bridge_slave_0: entered promiscuous mode [ 85.110064][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.118445][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.125867][ T5777] bridge_slave_1: entered allmulticast mode [ 85.134116][ T5777] bridge_slave_1: entered promiscuous mode [ 85.152146][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.168627][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.269622][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.279169][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.287917][ T5769] bridge_slave_0: entered allmulticast mode [ 85.295757][ T5769] bridge_slave_0: entered promiscuous mode [ 85.315208][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.328639][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.341776][ T5776] team0: Port device team_slave_0 added [ 85.352191][ T5776] team0: Port device team_slave_1 added [ 85.358989][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.366533][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.375117][ T5769] bridge_slave_1: entered allmulticast mode [ 85.382404][ T5769] bridge_slave_1: entered promiscuous mode [ 85.442365][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.449541][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.476020][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.522533][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.529976][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.556971][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.593606][ T5777] team0: Port device team_slave_0 added [ 85.602363][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.618844][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.630013][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.637675][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.646375][ T5770] bridge_slave_0: entered allmulticast mode [ 85.654964][ T5770] bridge_slave_0: entered promiscuous mode [ 85.664972][ T5777] team0: Port device team_slave_1 added [ 85.671614][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.679263][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.686793][ T5770] bridge_slave_1: entered allmulticast mode [ 85.695191][ T5770] bridge_slave_1: entered promiscuous mode [ 85.763776][ T5769] team0: Port device team_slave_0 added [ 85.808595][ T5769] team0: Port device team_slave_1 added [ 85.825787][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.832910][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.863828][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.878109][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.886018][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.912771][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.927431][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.941188][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.969402][ T5776] hsr_slave_0: entered promiscuous mode [ 85.976776][ T5776] hsr_slave_1: entered promiscuous mode [ 86.030109][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.037609][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.064052][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.100959][ T5770] team0: Port device team_slave_0 added [ 86.124050][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.131156][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.161631][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.174583][ T51] Bluetooth: hci1: command tx timeout [ 86.180445][ T51] Bluetooth: hci2: command tx timeout [ 86.187805][ T51] Bluetooth: hci0: command tx timeout [ 86.194332][ T5775] Bluetooth: hci3: command tx timeout [ 86.231422][ T5770] team0: Port device team_slave_1 added [ 86.283967][ T5777] hsr_slave_0: entered promiscuous mode [ 86.290805][ T5777] hsr_slave_1: entered promiscuous mode [ 86.300581][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.310037][ T5777] Cannot create hsr debugfs directory [ 86.357922][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.365337][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.392607][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.436800][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.445078][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.474265][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.525058][ T5769] hsr_slave_0: entered promiscuous mode [ 86.532802][ T5769] hsr_slave_1: entered promiscuous mode [ 86.540134][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.548419][ T5769] Cannot create hsr debugfs directory [ 86.601687][ T5770] hsr_slave_0: entered promiscuous mode [ 86.608831][ T5770] hsr_slave_1: entered promiscuous mode [ 86.616177][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.624432][ T5770] Cannot create hsr debugfs directory [ 87.033603][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.048813][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.062045][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.076971][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.160014][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.171612][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.194339][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.231929][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.336148][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.362964][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.408956][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.427846][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.577540][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.596572][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.638763][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.647190][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.686762][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.768541][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.809736][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.817527][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.872833][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.880149][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.018989][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.101396][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.146745][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.179278][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.186682][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.217810][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.228868][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.253336][ T51] Bluetooth: hci0: command tx timeout [ 88.258937][ T51] Bluetooth: hci2: command tx timeout [ 88.265740][ T5775] Bluetooth: hci3: command tx timeout [ 88.267787][ T5772] Bluetooth: hci1: command tx timeout [ 88.286391][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.293681][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.314225][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.321481][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.367085][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.374468][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.460781][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.522854][ T2941] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.530076][ T2941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.582208][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.589565][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.681750][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.877316][ T5776] veth0_vlan: entered promiscuous mode [ 88.916141][ T5776] veth1_vlan: entered promiscuous mode [ 89.058356][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.075449][ T5776] veth0_macvtap: entered promiscuous mode [ 89.105669][ T5776] veth1_macvtap: entered promiscuous mode [ 89.181333][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.197240][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.218946][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.250192][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.260727][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.269848][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.280034][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.291559][ T5769] veth0_vlan: entered promiscuous mode [ 89.331504][ T5769] veth1_vlan: entered promiscuous mode [ 89.388933][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.423717][ T5769] veth0_macvtap: entered promiscuous mode [ 89.448536][ T5777] veth0_vlan: entered promiscuous mode [ 89.459570][ T5769] veth1_macvtap: entered promiscuous mode [ 89.508675][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.521717][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.540417][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.580492][ T5777] veth1_vlan: entered promiscuous mode [ 89.634180][ T5770] veth0_vlan: entered promiscuous mode [ 89.642624][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.654376][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.668668][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.682373][ T2941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.698465][ T2941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.716481][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.726023][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.735830][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.745518][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.777115][ T5777] veth0_macvtap: entered promiscuous mode [ 89.799198][ T5770] veth1_vlan: entered promiscuous mode [ 89.831537][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.836691][ T5777] veth1_macvtap: entered promiscuous mode [ 89.846858][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.952801][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.971965][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.982588][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.993748][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.007165][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.062632][ T5770] veth0_macvtap: entered promiscuous mode [ 90.075854][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.103206][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.113175][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.124694][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.137107][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.168226][ T2941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.180388][ T5770] veth1_macvtap: entered promiscuous mode [ 90.198428][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.214092][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.222997][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.224009][ T2941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.244797][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.335643][ T5772] Bluetooth: hci2: command tx timeout [ 90.341175][ T5772] Bluetooth: hci3: command tx timeout [ 90.347210][ T5783] Bluetooth: hci0: command tx timeout [ 90.347231][ T51] Bluetooth: hci1: command tx timeout [ 90.386206][ T2941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.395595][ T2941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.419231][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.444035][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.469214][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.480159][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.490700][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.503393][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.524516][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.572117][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.590448][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.601909][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.613031][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.624885][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.635545][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.650800][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.721610][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.733692][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.743574][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.752444][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.843905][ T2941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.851839][ T2941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.964807][ T5866] syz.3.6[5866]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.986046][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.003635][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.021167][ T5866] loop3: detected capacity change from 0 to 256 [ 91.036397][ T5866] ======================================================= [ 91.036397][ T5866] WARNING: The mand mount option has been deprecated and [ 91.036397][ T5866] and is ignored by this kernel. Remove the mand [ 91.036397][ T5866] option from the mount to silence this warning. [ 91.036397][ T5866] ======================================================= [ 91.154082][ T5866] exfat: Deprecated parameter 'utf8' [ 91.159643][ T5866] exfat: Deprecated parameter 'namecase' [ 91.218812][ T5864] overlayfs: failed to verify origin (0/file1, ino=27, err=-116) [ 91.245273][ T5866] exfat: Deprecated parameter 'utf8' [ 91.257577][ T5864] overlayfs: failed to look up (file2) for ino (-116) [ 91.279989][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.319081][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.366571][ T5866] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 91.468858][ T5866] syz.3.6: attempt to access beyond end of device [ 91.468858][ T5866] loop3: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 91.490264][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.540287][ T5866] syz.3.6: attempt to access beyond end of device [ 91.540287][ T5866] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 91.563606][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.640192][ T28] audit: type=1800 audit(1769842718.964:2): pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6" name="file1" dev="loop3" ino=1048589 res=0 errno=0 [ 91.711979][ T5876] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.978888][ T5881] Illegal XDP return value 4294967294 on prog (id 2) dev syz_tun, expect packet loss! [ 92.163548][ T5887] loop0: detected capacity change from 0 to 512 [ 92.191250][ T5887] EXT4-fs: Ignoring removed bh option [ 92.294388][ T5887] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 92.345539][ T23] cfg80211: failed to load regulatory.db [ 92.413772][ T51] Bluetooth: hci0: command tx timeout [ 92.419445][ T5775] Bluetooth: hci3: command tx timeout [ 92.420187][ T5783] Bluetooth: hci2: command tx timeout [ 92.425990][ T5775] Bluetooth: hci1: command tx timeout [ 92.458457][ T5887] EXT4-fs (loop0): 1 truncate cleaned up [ 92.502505][ T5887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.614363][ T5891] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 92.745770][ T5891] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 92.756815][ T5891] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 92.765711][ T5891] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 92.858194][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.973946][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 92.986778][ T5908] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.193010][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 93.219716][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.237752][ T9] usb 2-1: Product: syz [ 93.242937][ T9] usb 2-1: Manufacturer: syz [ 93.249972][ T9] usb 2-1: SerialNumber: syz [ 93.269517][ T9] usb 2-1: config 0 descriptor?? [ 93.438753][ T5918] loop0: detected capacity change from 0 to 512 [ 93.475103][ T5918] EXT4-fs: Ignoring removed nobh option [ 93.519536][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 93.574616][ T5918] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.19: invalid indirect mapped block 256 (level 2) [ 93.658524][ T5918] EXT4-fs (loop0): Remounting filesystem read-only [ 93.709792][ T5918] EXT4-fs (loop0): 2 truncates cleaned up [ 93.743458][ T5918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.015423][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.488659][ T28] audit: type=1800 audit(1769842721.814:3): pid=5936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.25" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 94.668918][ T5938] bridge_slave_0: left allmulticast mode [ 94.674798][ T5938] bridge_slave_0: left promiscuous mode [ 94.681799][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.702826][ T5938] bridge_slave_1: left allmulticast mode [ 94.708654][ T5938] bridge_slave_1: left promiscuous mode [ 94.715250][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.733950][ T5938] bond0: (slave bond_slave_0): Releasing backup interface [ 94.762378][ T5938] bond0: (slave bond_slave_1): Releasing backup interface [ 94.803216][ T5938] team0: Port device team_slave_0 removed [ 94.851022][ T5938] team0: Port device team_slave_1 removed [ 94.857986][ T5938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.871544][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.900875][ T5938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.908482][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.958597][ T9] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 95.016887][ T9] usb 2-1: USB disconnect, device number 2 [ 95.172264][ T5942] syzkaller0: entered promiscuous mode [ 95.180002][ T5942] syzkaller0: entered allmulticast mode [ 95.807940][ T5957] loop1: detected capacity change from 0 to 1024 [ 95.907742][ T5957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.046427][ T28] audit: type=1800 audit(1769842723.374:4): pid=5957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.33" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 96.080259][ T11] Trying to write to read-only block-device loop1 [ 96.112539][ T5957] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.720330][ T5977] input: syz1 as /devices/virtual/input/input5 [ 97.760455][ T5975] syzkaller0: entered promiscuous mode [ 97.803296][ T5975] syzkaller0: entered allmulticast mode [ 97.851150][ T5979] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 97.980863][ T5981] loop0: detected capacity change from 0 to 4096 [ 98.069585][ T5983] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.229353][ T6002] loop3: detected capacity change from 0 to 512 [ 99.257479][ T6002] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.284540][ T6002] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 99.353179][ T6002] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 99.429896][ T6002] EXT4-fs (loop3): 1 truncate cleaned up [ 99.459288][ T6002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.813280][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.893541][ T5812] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.003184][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 100.017410][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 100.033122][ T23] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 100.040860][ T23] usb 2-1: can't read configurations, error -71 [ 100.075610][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.086881][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.098001][ T5812] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.111298][ T5812] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.120664][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.132124][ T5812] usb 4-1: config 0 descriptor?? [ 100.199026][ T6020] syzkaller0: entered promiscuous mode [ 100.206921][ T6020] syzkaller0: entered allmulticast mode [ 100.567572][ T5812] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 100.611569][ T5812] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 100.783781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.931122][ T6030] loop2: detected capacity change from 0 to 128 [ 101.027258][ T6030] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.053381][ T6030] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.200636][ T6033] EXT4-fs (loop2): shut down requested (2) [ 101.233835][ T6033] fscrypt (loop2, inode 12): Error -5 getting encryption context [ 101.433838][ T5769] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.444882][ T6042] loop0: detected capacity change from 0 to 1024 [ 101.479146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 101.510055][ T6042] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.556821][ T6042] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 101.581300][ T6042] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000] [ 101.621722][ T5875] usb 4-1: USB disconnect, device number 2 [ 101.665773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 101.725385][ T6042] EXT4-fs error (device loop0): ext4_free_blocks:6692: comm syz.0.58: Freeing blocks not in datazone - block = 0, count = 4096 [ 101.767716][ T6042] EXT4-fs (loop0): Remounting filesystem read-only [ 101.792585][ T6042] EXT4-fs (loop0): 1 orphan inode deleted [ 101.830664][ T6042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.844508][ T59] EXT4-fs (loop0): Quota write (off=3072, len=1024) cancelled because transaction is not started [ 101.906390][ T59] Quota error (device loop0): write_blk: dquota write failed [ 101.909645][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60'. [ 101.930219][ T59] Quota error (device loop0): free_dqentry: Can't move quota data block (2) to free list [ 102.126138][ T6042] kvm: pic: non byte read [ 102.138755][ T6042] kvm: pic: non byte read [ 102.310477][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.413399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.496146][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.551965][ T6050] binder: 6049:6050 ioctl c0306201 200000000300 returned -14 [ 103.293668][ T5812] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.494161][ T5812] usb 3-1: Using ep0 maxpacket: 8 [ 103.506811][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.520110][ T5812] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 103.532173][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.567835][ T5812] usb 3-1: config 0 descriptor?? [ 103.814521][ T5812] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 103.843294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 104.287376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.390055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.492358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.505229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c8!!! [ 104.698009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.581777][ T23] usb 3-1: USB disconnect, device number 2 [ 107.047348][ T6089] syzkaller0: entered promiscuous mode [ 107.059909][ T6089] syzkaller0: entered allmulticast mode [ 107.306515][ T6082] loop1: detected capacity change from 0 to 32768 [ 107.526004][ T6093] loop2: detected capacity change from 0 to 512 [ 107.546632][ T6093] EXT4-fs: Ignoring removed nobh option [ 107.629482][ T6093] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.83: invalid indirect mapped block 256 (level 2) [ 107.657335][ T6093] EXT4-fs (loop2): Remounting filesystem read-only [ 107.678107][ T6010] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (6010) [ 107.730624][ T6093] EXT4-fs (loop2): 2 truncates cleaned up [ 107.759004][ T6093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.797744][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 107.849670][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.76'. [ 108.288884][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.941791][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 109.045417][ T1032] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.160205][ T1032] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.252614][ T1032] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.351799][ T1032] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.933751][ T5875] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.183766][ T6126] input: syz1 as /devices/virtual/input/input6 [ 110.203790][ T5875] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.245236][ T5875] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.283674][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.292426][ T5875] usb 2-1: Product: syz [ 110.329244][ T5875] usb 2-1: Manufacturer: syz [ 110.344126][ T5875] usb 2-1: SerialNumber: syz [ 110.350673][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.363406][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.372536][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.387769][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.400850][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 110.418328][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.136925][ T6146] tipc: Started in network mode [ 111.142652][ T6146] tipc: Node identity a2066ffd3ece, cluster identity 4711 [ 111.158153][ T6146] tipc: Enabled bearer , priority 0 [ 111.322441][ T6146] syzkaller0: entered promiscuous mode [ 111.383329][ T6146] syzkaller0: entered allmulticast mode [ 111.392717][ T6146] tipc: Resetting bearer [ 111.442263][ T5875] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 111.463226][ T5875] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 111.487469][ T5875] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 111.536520][ T6145] tipc: Resetting bearer [ 112.494733][ T5775] Bluetooth: hci1: command tx timeout [ 112.996075][ T6159] input: syz1 as /devices/virtual/input/input7 [ 114.576468][ T5775] Bluetooth: hci1: command tx timeout [ 114.607571][ T6166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.93'. [ 114.761228][ T5775] block nbd0: Receive control failed (result -1) [ 115.262887][ T6145] tipc: Disabling bearer [ 115.327886][ T9] tipc: Node number set to 2630381565 [ 115.407690][ T5875] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 115.591529][ T5875] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 115.697101][ T5875] usb 2-1: USB disconnect, device number 5 [ 115.747871][ T5875] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 115.917953][ T6186] kvm: emulating exchange as write [ 116.169481][ T6129] chnl_net:caif_netlink_parms(): no params data found [ 116.382620][ T6191] syzkaller0: entered promiscuous mode [ 116.399641][ T6191] syzkaller0: entered allmulticast mode [ 116.411443][ T6197] loop0: detected capacity change from 0 to 128 [ 116.448851][ T6197] FAT-fs (loop0): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 116.495507][ T1032] hsr_slave_0: left promiscuous mode [ 116.510961][ T1032] hsr_slave_1: left promiscuous mode [ 116.529613][ T6010] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 116.552461][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.575488][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.598491][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.620259][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.634265][ T1032] bridge_slave_1: left allmulticast mode [ 116.649416][ T1032] bridge_slave_1: left promiscuous mode [ 116.657083][ T5775] Bluetooth: hci1: command tx timeout [ 116.666792][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.685463][ T1032] bridge_slave_0: left allmulticast mode [ 116.691352][ T1032] bridge_slave_0: left promiscuous mode [ 116.701823][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.765197][ T1032] veth1_macvtap: left promiscuous mode [ 116.771835][ T1032] veth0_macvtap: left promiscuous mode [ 116.782008][ T1032] veth1_vlan: left promiscuous mode [ 116.788778][ T1032] veth0_vlan: left promiscuous mode [ 117.790218][ T1032] team0 (unregistering): Port device team_slave_1 removed [ 117.849086][ T1032] team0 (unregistering): Port device team_slave_0 removed [ 117.899823][ T1032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.958015][ T1032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.351086][ T1032] bond0 (unregistering): Released all slaves [ 118.517125][ T6129] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.529577][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.539145][ T6129] bridge_slave_0: entered allmulticast mode [ 118.547224][ T6129] bridge_slave_0: entered promiscuous mode [ 118.569981][ T6129] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.599897][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.615639][ T6129] bridge_slave_1: entered allmulticast mode [ 118.640111][ T6129] bridge_slave_1: entered promiscuous mode [ 118.720602][ T6129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.753267][ T5775] Bluetooth: hci1: command tx timeout [ 118.786830][ T6129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.968539][ T6129] team0: Port device team_slave_0 added [ 118.994853][ T6129] team0: Port device team_slave_1 added [ 119.188669][ T6129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.212310][ T6129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.335182][ T6129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.383250][ T6129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.404040][ T6129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.441407][ T6129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.621045][ T6129] hsr_slave_0: entered promiscuous mode [ 119.648860][ T6129] hsr_slave_1: entered promiscuous mode [ 119.679611][ T6129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.698948][ T6129] Cannot create hsr debugfs directory [ 119.816163][ T6230] kvm: pic: non byte write [ 120.329933][ T6129] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.366787][ T6129] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 120.434916][ T6129] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 120.505493][ T6129] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 121.021372][ T6129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.083927][ T5155] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 121.099277][ T6129] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.179428][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.187934][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.252191][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.259609][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.299930][ T5155] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 121.323013][ T5155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.424353][ T5155] usb 4-1: Product: syz [ 121.434439][ T5155] usb 4-1: Manufacturer: syz [ 121.443793][ T5155] usb 4-1: SerialNumber: syz [ 121.581608][ T5155] usb 4-1: config 0 descriptor?? [ 122.063432][ T5155] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 123.456688][ T6129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.716847][ T5155] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 123.745912][ T5155] usb 4-1: USB disconnect, device number 3 [ 124.420985][ T6129] veth0_vlan: entered promiscuous mode [ 124.485986][ T6129] veth1_vlan: entered promiscuous mode [ 124.727743][ T6129] veth0_macvtap: entered promiscuous mode [ 125.124272][ T6129] veth1_macvtap: entered promiscuous mode [ 125.537779][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.555509][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.585431][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.616218][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.632893][ T6129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.648970][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.661204][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.671419][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.682974][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.695356][ T786] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.715054][ T6129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.759701][ T6129] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.781395][ T6129] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.801745][ T6129] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.841996][ T6129] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.934294][ T786] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 125.955844][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.994662][ T786] usb 4-1: config 0 descriptor?? [ 126.025746][ T786] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 126.080474][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.114667][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.949590][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.042927][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.297478][ T5775] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 127.307840][ T5775] CPU: 1 PID: 5775 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 127.315482][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.325729][ T5775] Workqueue: hci0 hci_rx_work [ 127.330539][ T5775] Call Trace: [ 127.333894][ T5775] [ 127.336882][ T5775] dump_stack_lvl+0x18c/0x250 [ 127.341653][ T5775] ? show_regs_print_info+0x20/0x20 [ 127.346937][ T5775] ? load_image+0x400/0x400 [ 127.351517][ T5775] sysfs_create_dir_ns+0x26e/0x2a0 [ 127.356688][ T5775] ? sysfs_warn_dup+0xa0/0xa0 [ 127.361439][ T5775] ? do_raw_spin_unlock+0x121/0x230 [ 127.366720][ T5775] kobject_add_internal+0x61c/0xcc0 [ 127.372089][ T5775] kobject_add+0x164/0x240 [ 127.376733][ T5775] ? __rwlock_init+0x150/0x150 [ 127.381584][ T5775] ? kobject_init+0x1e0/0x1e0 [ 127.386335][ T5775] ? _raw_spin_unlock+0x28/0x40 [ 127.391384][ T5775] ? get_device_parent+0x366/0x390 [ 127.396926][ T5775] device_add+0x408/0xc20 [ 127.401615][ T5775] hci_conn_add_sysfs+0xd5/0x1e0 [ 127.406610][ T5775] le_conn_complete_evt+0xf5d/0x1540 [ 127.412140][ T5775] ? hci_event_packet+0x4cb/0x1270 [ 127.417355][ T5775] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 127.423853][ T5775] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 127.429555][ T5775] ? skb_pull_data+0xfb/0x200 [ 127.434308][ T5775] hci_le_conn_complete_evt+0x187/0x440 [ 127.439932][ T5775] ? hci_remote_host_features_evt+0x150/0x150 [ 127.446060][ T5775] hci_event_packet+0x7ba/0x1270 [ 127.451167][ T5775] ? bis_list+0x290/0x290 [ 127.455667][ T5775] ? lockdep_hardirqs_on+0x98/0x150 [ 127.460945][ T5775] ? hci_send_to_monitor+0xd7/0x4f0 [ 127.466330][ T5775] hci_rx_work+0x43a/0xd60 [ 127.470842][ T5775] ? process_scheduled_works+0x96f/0x15d0 [ 127.476639][ T5775] process_scheduled_works+0xa5d/0x15d0 [ 127.482294][ T5775] ? assign_work+0x430/0x430 [ 127.487131][ T5775] ? assign_work+0x3d0/0x430 [ 127.491790][ T5775] worker_thread+0xa55/0xfc0 [ 127.496439][ T5775] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 127.502407][ T5775] ? _raw_spin_unlock+0x40/0x40 [ 127.507312][ T5775] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 127.513405][ T5775] kthread+0x2fa/0x390 [ 127.517647][ T5775] ? pr_cont_work+0x560/0x560 [ 127.522473][ T5775] ? kthread_blkcg+0xd0/0xd0 [ 127.527240][ T5775] ret_from_fork+0x48/0x80 [ 127.531722][ T5775] ? kthread_blkcg+0xd0/0xd0 [ 127.536372][ T5775] ret_from_fork_asm+0x11/0x20 [ 127.541202][ T5775] [ 127.557842][ T5775] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 127.572320][ T5775] Bluetooth: hci0: failed to register connection device [ 127.953165][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 128.173570][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.208533][ T23] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 128.220725][ T6349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.123'. [ 128.252386][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.289573][ T23] usb 5-1: config 0 descriptor?? [ 128.320292][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 128.455002][ T786] gspca_stv06xx: HDCS-1020 sensor detected [ 128.748186][ T23] pwc: recv_control_msg error -32 req 02 val 2b00 [ 128.772301][ T23] pwc: recv_control_msg error -32 req 02 val 2700 [ 128.800551][ T23] pwc: recv_control_msg error -32 req 02 val 2c00 [ 128.809016][ T23] pwc: recv_control_msg error -32 req 04 val 1000 [ 128.822208][ T23] pwc: recv_control_msg error -32 req 04 val 1300 [ 128.833457][ T23] pwc: recv_control_msg error -32 req 04 val 1400 [ 128.842438][ T23] pwc: recv_control_msg error -32 req 02 val 2000 [ 128.868681][ T23] pwc: recv_control_msg error -32 req 02 val 2100 [ 129.087551][ T23] pwc: recv_control_msg error -71 req 02 val 2500 [ 129.104670][ T23] pwc: recv_control_msg error -71 req 02 val 2400 [ 129.137962][ T786] STV06xx: probe of 4-1:0.0 failed with error -71 [ 129.146848][ T23] pwc: recv_control_msg error -71 req 02 val 2600 [ 129.161500][ T786] usb 4-1: USB disconnect, device number 4 [ 129.181947][ T23] pwc: recv_control_msg error -71 req 02 val 2900 [ 129.211270][ T23] pwc: recv_control_msg error -71 req 02 val 2800 [ 129.233248][ T23] pwc: recv_control_msg error -71 req 04 val 1100 [ 129.268683][ T23] pwc: recv_control_msg error -71 req 04 val 1200 [ 129.305218][ T23] pwc: Registered as video103. [ 129.330726][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 129.379863][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'. [ 129.416015][ T23] usb 5-1: USB disconnect, device number 2 [ 133.311824][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.319992][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.575258][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 135.897037][ T6425] syz.3.139 (6425): drop_caches: 2 [ 138.073085][ C0] sched: RT throttling activated [ 141.993624][ T6474] loop4: detected capacity change from 0 to 512 [ 142.022378][ T6476] loop3: detected capacity change from 0 to 512 [ 142.066406][ T6476] FAT-fs (loop3): Directory bread(block 199916) failed [ 142.077216][ T6476] FAT-fs (loop3): Directory bread(block 199917) failed [ 142.085021][ T6476] FAT-fs (loop3): Directory bread(block 199918) failed [ 142.092142][ T6476] FAT-fs (loop3): Directory bread(block 199919) failed [ 142.104793][ T6476] FAT-fs (loop3): Directory bread(block 199920) failed [ 142.132350][ T6476] FAT-fs (loop3): Directory bread(block 199921) failed [ 142.140153][ T6476] FAT-fs (loop3): Directory bread(block 199922) failed [ 142.149891][ T6474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.178864][ T6474] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.195224][ T6476] FAT-fs (loop3): Directory bread(block 199923) failed [ 142.238521][ T6479] loop0: detected capacity change from 0 to 4096 [ 142.261712][ T6479] ext4: Unknown parameter 'fowner' [ 142.369276][ T6486] FAT-fs (loop3): Directory bread(block 199916) failed [ 142.418847][ T6486] FAT-fs (loop3): Directory bread(block 199917) failed [ 142.468762][ T6479] loop0: detected capacity change from 0 to 256 [ 142.696562][ T6129] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.747083][ T6529] syzkaller0: entered promiscuous mode [ 145.763224][ T6529] syzkaller0: entered allmulticast mode [ 146.173456][ T6538] loop0: detected capacity change from 0 to 16 [ 146.257303][ T6538] erofs: Unknown parameter 'erofs' [ 153.102316][ T6582] netlink: 'syz.0.173': attribute type 11 has an invalid length. [ 153.110334][ T6582] netlink: 36 bytes leftover after parsing attributes in process `syz.0.173'. [ 154.386171][ T6587] loop0: detected capacity change from 0 to 764 [ 155.089890][ T6596] loop3: detected capacity change from 0 to 128 [ 155.114504][ T6596] FAT-fs (loop3): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 155.384001][ T6602] syzkaller0: entered promiscuous mode [ 155.390326][ T6602] syzkaller0: entered allmulticast mode [ 155.430293][ T6607] loop1: detected capacity change from 0 to 1024 [ 155.554977][ T6602] tipc: Started in network mode [ 155.623274][ T6602] tipc: Node identity 62a11b10646f, cluster identity 4711 [ 155.650788][ T6602] tipc: Enabled bearer , priority 0 [ 156.230486][ T6600] tipc: Resetting bearer [ 156.610655][ T6600] tipc: Disabling bearer [ 160.408858][ T6642] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 161.823118][ T5833] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 162.083392][ T5833] usb 2-1: Using ep0 maxpacket: 32 [ 162.092646][ T5833] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 162.111449][ T5833] usb 2-1: config 0 has no interface number 0 [ 162.136669][ T5833] usb 2-1: config 0 interface 184 has no altsetting 0 [ 162.159352][ T5833] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 162.178996][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.199322][ T5833] usb 2-1: Product: syz [ 162.213279][ T5833] usb 2-1: Manufacturer: syz [ 162.217972][ T5833] usb 2-1: SerialNumber: syz [ 162.294558][ T5833] usb 2-1: config 0 descriptor?? [ 162.316753][ T5833] smsc75xx v1.0.0 [ 162.915563][ T5833] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 162.947505][ T5833] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 163.225308][ T6677] tipc: Enabled bearer , priority 0 [ 163.258954][ T6677] syzkaller0: entered promiscuous mode [ 163.271434][ T6677] syzkaller0: entered allmulticast mode [ 163.277142][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 164.895402][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.933185][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.954925][ T5833] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 164.986894][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 164.993406][ T5833] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 165.019191][ T6685] tipc: Resetting bearer [ 165.033485][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 165.041588][ T9] usb 5-1: SerialNumber: syz [ 165.065876][ T5833] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 165.104156][ T5833] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 165.114430][ T6676] tipc: Resetting bearer [ 165.139041][ T5833] usb 2-1: USB disconnect, device number 6 [ 165.212476][ T6676] tipc: Disabling bearer [ 165.309839][ T9] usb 5-1: 0:2 : does not exist [ 165.445000][ T9] usb 5-1: USB disconnect, device number 3 [ 165.568159][ T6010] udevd[6010]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.143305][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 169.264306][ T9] usb 4-1: config 0 has no interfaces? [ 169.277772][ T9] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 169.303567][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.332736][ T9] usb 4-1: config 0 descriptor?? [ 169.484736][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.200'. [ 169.992285][ T6749] loop3: detected capacity change from 0 to 128 [ 171.618490][ T6763] fuse: Bad value for 'fd' [ 171.709707][ T9] usb 4-1: USB disconnect, device number 5 [ 171.774021][ T6765] syzkaller0: entered promiscuous mode [ 171.783167][ T6765] syzkaller0: entered allmulticast mode [ 174.671068][ T6795] tls_set_device_offload_rx: netdev not found [ 174.844907][ T1195] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 175.788375][ T6810] xt_hashlimit: max too large, truncated to 1048576 [ 175.804197][ T1195] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.833085][ T1195] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.861636][ T1195] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 175.886138][ T1195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 175.917643][ T1195] usb 5-1: SerialNumber: syz [ 176.170964][ T1195] usb 5-1: 0:2 : does not exist [ 176.236451][ T1195] usb 5-1: USB disconnect, device number 4 [ 177.280328][ T6010] udevd[6010]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.065494][ T6843] syzkaller0: entered promiscuous mode [ 181.071074][ T6843] syzkaller0: entered allmulticast mode [ 184.244524][ T6888] syzkaller0: entered promiscuous mode [ 184.319323][ T6888] syzkaller0: entered allmulticast mode [ 184.896968][ T6904] tipc: Enabled bearer , priority 0 [ 184.925549][ T6904] syzkaller0: entered promiscuous mode [ 184.931294][ T6904] syzkaller0: entered allmulticast mode [ 185.070935][ T6904] tipc: Resetting bearer [ 185.364565][ T6902] tipc: Resetting bearer [ 185.719035][ T6902] tipc: Disabling bearer [ 189.802327][ T6945] tipc: Can't bind to reserved service type 2 [ 191.653383][ T6945] netlink: 277 bytes leftover after parsing attributes in process `syz.0.239'. [ 194.843859][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.850291][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.336056][ T6984] syzkaller0: entered promiscuous mode [ 196.341631][ T6984] syzkaller0: entered allmulticast mode [ 197.427182][ T42] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.611886][ T42] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.770203][ T42] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.513444][ T28] audit: type=1326 audit(1769842825.714:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922439aeb9 code=0x7ffc0000 [ 198.561344][ T28] audit: type=1326 audit(1769842825.724:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922439aeb9 code=0x7ffc0000 [ 198.886614][ T7000] loop1: detected capacity change from 0 to 128 [ 198.925048][ T28] audit: type=1326 audit(1769842825.734:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f922439aeb9 code=0x7ffc0000 [ 199.083974][ T28] audit: type=1326 audit(1769842825.734:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922439aeb9 code=0x7ffc0000 [ 199.137538][ T42] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.171785][ T28] audit: type=1326 audit(1769842825.754:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922439aeb9 code=0x7ffc0000 [ 199.222458][ T28] audit: type=1326 audit(1769842825.764:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f922439aeb9 code=0x7ffc0000 [ 199.229947][ T6946] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 199.245606][ T28] audit: type=1326 audit(1769842825.764:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922439aeb9 code=0x7ffc0000 [ 200.873178][ T28] audit: type=1326 audit(1769842825.774:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922439aeb9 code=0x7ffc0000 [ 201.048313][ T28] audit: type=1326 audit(1769842825.784:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f922439aeb9 code=0x7ffc0000 [ 201.084275][ T28] audit: type=1326 audit(1769842825.784:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922439aeb9 code=0x7ffc0000 [ 201.395704][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.434635][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.445875][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 201.457635][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.505029][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 201.514345][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.070434][ T51] Bluetooth: hci1: Opcode 0x0c38 failed: -110 [ 204.153229][ T28] audit: type=1326 audit(1769842825.784:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922439aeb9 code=0x7ffc0000 [ 204.244524][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 204.263270][ T28] audit: type=1326 audit(1769842825.784:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f922439aeb9 code=0x7ffc0000 [ 204.285816][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 204.315478][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 204.343318][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 204.351220][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 204.358918][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.513455][ T42] tipc: Left network mode [ 206.958021][ T5772] Bluetooth: hci1: command tx timeout [ 207.119820][ T5772] Bluetooth: hci3: command 0x0406 tx timeout [ 207.126505][ T5772] Bluetooth: hci0: command 0x0406 tx timeout [ 207.136215][ T5772] Bluetooth: hci2: command 0x0406 tx timeout [ 208.993427][ T5775] Bluetooth: hci1: command tx timeout [ 209.056615][ T7068] syzkaller0: entered promiscuous mode [ 209.069727][ T7068] syzkaller0: entered allmulticast mode [ 209.711104][ T7010] chnl_net:caif_netlink_parms(): no params data found [ 211.783466][ T5775] Bluetooth: hci1: command tx timeout [ 211.883315][ T23] IPVS: starting estimator thread 0... [ 212.023719][ T7095] IPVS: using max 16 ests per chain, 38400 per kthread [ 212.367166][ T42] hsr_slave_0: left promiscuous mode [ 212.395297][ T42] hsr_slave_1: left promiscuous mode [ 212.417902][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.443230][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.471245][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.493569][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.524753][ T42] bridge_slave_1: left allmulticast mode [ 212.546461][ T42] bridge_slave_1: left promiscuous mode [ 212.583668][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.604554][ T42] bridge_slave_0: left allmulticast mode [ 212.610296][ T42] bridge_slave_0: left promiscuous mode [ 213.063500][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.402421][ T42] veth1_macvtap: left promiscuous mode [ 213.418416][ T42] veth0_macvtap: left promiscuous mode [ 213.429322][ T42] veth1_vlan: left promiscuous mode [ 213.436349][ T7109] loop1: detected capacity change from 0 to 512 [ 213.453606][ T42] veth0_vlan: left promiscuous mode [ 214.504653][ T5775] Bluetooth: hci1: command tx timeout [ 218.291595][ T7142] overlayfs: failed to clone lowerpath [ 218.460284][ T42] team0 (unregistering): Port device team_slave_1 removed [ 218.554873][ T42] team0 (unregistering): Port device team_slave_0 removed [ 218.639833][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.695297][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.302731][ T42] bond0 (unregistering): Released all slaves [ 219.479607][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.277'. [ 219.508203][ T7136] bond0: option lp_interval: invalid value (0) [ 219.553298][ T7136] bond0: option lp_interval: allowed values 1 - 2147483647 [ 219.588957][ T7010] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.597257][ T7010] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.607932][ T7010] bridge_slave_0: entered allmulticast mode [ 219.624806][ T7010] bridge_slave_0: entered promiscuous mode [ 219.642089][ T7010] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.653168][ T7010] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.664775][ T7010] bridge_slave_1: entered allmulticast mode [ 219.672894][ T7010] bridge_slave_1: entered promiscuous mode [ 219.749877][ T7010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.811959][ T7010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.840409][ T7156] loop1: detected capacity change from 0 to 512 [ 219.882356][ T7156] ext4: Unknown parameter 'fsuuid' [ 223.344762][ T7010] team0: Port device team_slave_0 added [ 223.355012][ T7010] team0: Port device team_slave_1 added [ 223.470974][ T7010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.493316][ T7010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.597995][ T7010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.651806][ T7010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.683169][ T7010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.736307][ T7010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.909197][ T7010] hsr_slave_0: entered promiscuous mode [ 223.954150][ T7010] hsr_slave_1: entered promiscuous mode [ 223.978954][ T7010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.003206][ T7010] Cannot create hsr debugfs directory [ 224.933521][ T7182] fuse: Bad value for 'fd' [ 224.993593][ T7182] process 'syz.0.290' launched './file0' with NULL argv: empty string added [ 226.162059][ T7010] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 226.226150][ T7010] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 226.292030][ T7010] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 226.428331][ T7010] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 226.739782][ T7010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.817428][ T7010] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.022909][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.030242][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.300110][ T7217] warning: `syz.1.294' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 227.608533][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.615859][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.008672][ T7227] syzkaller0: entered promiscuous mode [ 229.027280][ T7227] syzkaller0: entered allmulticast mode [ 230.338129][ T7010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.544300][ T7258] Zero length message leads to an empty skb [ 232.562776][ T7290] sctp: failed to load transform for md5: -2 [ 233.078745][ T7010] veth0_vlan: entered promiscuous mode [ 234.764527][ T7010] veth1_vlan: entered promiscuous mode [ 235.334424][ T7010] veth0_macvtap: entered promiscuous mode [ 235.851893][ T7010] veth1_macvtap: entered promiscuous mode [ 236.116345][ T7010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.135618][ T7010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.145725][ T7010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.156351][ T7010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.168473][ T7010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.382367][ T7010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.395450][ T7010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.419511][ T7010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.593997][ T7010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.254724][ T7010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.317836][ T7010] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.463226][ T7010] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.472122][ T7010] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.488886][ T7329] loop1: detected capacity change from 0 to 256 [ 237.522205][ T7010] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.783556][ T786] IPVS: starting estimator thread 0... [ 237.893309][ T7333] IPVS: using max 27 ests per chain, 64800 per kthread [ 238.024911][ T6920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.061813][ T6920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.108292][ T6920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.117408][ T6920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.758444][ T7354] loop4: detected capacity change from 0 to 512 [ 240.805198][ T7354] ext4: Unknown parameter '"' [ 240.924928][ T7314] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.601619][ T7371] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 242.619879][ T7371] cgroup: name respecified [ 245.965487][ T7373] loop4: detected capacity change from 0 to 1024 [ 245.974547][ T7373] EXT4-fs: Ignoring removed mblk_io_submit option [ 245.981065][ T7373] EXT4-fs: Ignoring removed orlov option [ 246.812128][ T7373] EXT4-fs (loop4): Test dummy encryption mode enabled [ 246.838772][ T7373] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 246.849781][ T7373] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 246.860011][ T7373] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 247.412955][ T7379] loop3: detected capacity change from 0 to 512 [ 247.469614][ T7379] ext4: Unknown parameter 'fsuuid' [ 249.485586][ T7388] overlayfs: failed to clone upperpath [ 254.287940][ T5819] IPVS: starting estimator thread 0... [ 254.403153][ T7408] IPVS: using max 18 ests per chain, 43200 per kthread [ 254.944853][ T7411] loop1: detected capacity change from 0 to 1024 [ 255.052421][ T7414] loop3: detected capacity change from 0 to 128 [ 255.177259][ T7414] No source specified [ 255.256597][ T7411] EXT4-fs: Ignoring removed nomblk_io_submit option [ 256.480463][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.488268][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.042445][ T7420] syz_tun: entered allmulticast mode [ 263.534023][ T7434] syz_tun: left allmulticast mode [ 263.798778][ T7448] hub 8-0:1.0: USB hub found [ 263.808137][ T7448] hub 8-0:1.0: 1 port detected [ 265.511265][ T7457] kernel profiling enabled (shift: 9) [ 268.081224][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 268.090946][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 268.100423][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 268.129919][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 268.138024][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 268.145766][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.791027][ T7472] netlink: 'syz.3.341': attribute type 27 has an invalid length. [ 271.293284][ T51] Bluetooth: hci4: command tx timeout [ 273.157195][ T7500] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 273.483349][ T51] Bluetooth: hci4: command tx timeout [ 273.752430][ T7470] chnl_net:caif_netlink_parms(): no params data found [ 274.228686][ T7507] input: syz0 as /devices/virtual/input/input10 [ 275.579430][ T51] Bluetooth: hci4: command tx timeout [ 276.509528][ T7515] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 278.103590][ T51] Bluetooth: hci4: command tx timeout [ 278.273436][ T7522] netlink: 'syz.0.352': attribute type 10 has an invalid length. [ 278.281959][ T7522] batman_adv: batadv0: Adding interface: wlan0 [ 278.288377][ T7522] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.313604][ T7522] batman_adv: batadv0: Interface activated: wlan0 [ 278.511835][ T2954] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.719406][ T7527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.834382][ T7527] bond0: (slave rose0): Enslaving as an active interface with an up link [ 278.994219][ T7470] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.003908][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.033443][ T7470] bridge_slave_0: entered allmulticast mode [ 279.041199][ T7470] bridge_slave_0: entered promiscuous mode [ 279.169355][ T2954] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.254501][ T7470] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.325240][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.332578][ T7470] bridge_slave_1: entered allmulticast mode [ 279.363549][ T7470] bridge_slave_1: entered promiscuous mode [ 279.513626][ T2954] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.600365][ T7470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.664731][ T7470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.847612][ T2954] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.369914][ T7470] team0: Port device team_slave_0 added [ 280.966237][ T7470] team0: Port device team_slave_1 added [ 281.069109][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.107260][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.193110][ T7470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.741184][ T7556] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 282.843931][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.924269][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.011730][ T7470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.236425][ T7573] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 284.435224][ T7470] hsr_slave_0: entered promiscuous mode [ 284.640976][ T7470] hsr_slave_1: entered promiscuous mode [ 284.773268][ T7470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.780903][ T7470] Cannot create hsr debugfs directory [ 285.282901][ T7579] input: syz0 as /devices/virtual/input/input11 [ 287.239896][ T51] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 288.237357][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.369'. [ 288.871600][ T51] block nbd1: Receive control failed (result -1) [ 289.490181][ T7470] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 289.671980][ T7470] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 290.344675][ T7470] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 290.643447][ T7470] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 294.617508][ T51] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 295.024360][ T7652] loop3: detected capacity change from 0 to 256 [ 295.104677][ T7652] exfat: Deprecated parameter 'namecase' [ 295.110580][ T7652] exfat: Deprecated parameter 'utf8' [ 295.289394][ T7652] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 295.402384][ T7470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.032049][ T7662] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 296.637971][ T7470] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.835990][ T2954] hsr_slave_0: left promiscuous mode [ 296.927683][ T2954] hsr_slave_1: left promiscuous mode [ 296.947994][ T2954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.963505][ T2954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.019506][ T2954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.082345][ T2954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.130245][ T2954] bridge_slave_1: left allmulticast mode [ 297.162795][ T2954] bridge_slave_1: left promiscuous mode [ 297.220044][ T2954] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.300363][ T2954] bridge_slave_0: left allmulticast mode [ 297.335550][ T2954] bridge_slave_0: left promiscuous mode [ 297.400520][ T2954] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.798525][ T2954] veth1_macvtap: left promiscuous mode [ 297.814491][ T2954] veth0_macvtap: left promiscuous mode [ 297.841312][ T2954] veth1_vlan: left promiscuous mode [ 297.867758][ T2954] veth0_vlan: left promiscuous mode [ 298.884155][ T7686] netlink: 'syz.0.371': attribute type 27 has an invalid length. [ 304.058263][ T7729] loop1: detected capacity change from 0 to 256 [ 304.081080][ T7729] exfat: Deprecated parameter 'namecase' [ 304.098834][ T7729] exfat: Deprecated parameter 'utf8' [ 304.273130][ T7314] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 304.372367][ T7732] comedi comedi0: pcl812: I/O port conflict (0x8001,16) [ 304.889647][ T7735] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 305.716970][ T2954] team0 (unregistering): Port device team_slave_1 removed [ 305.776275][ T2954] team0 (unregistering): Port device team_slave_0 removed [ 305.839197][ T2954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.899134][ T2954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.342156][ T2954] bond0 (unregistering): Released all slaves [ 306.458502][ T7727] netlink: 'syz.0.394': attribute type 1 has an invalid length. [ 306.491382][ T7727] 8021q: adding VLAN 0 to HW filter on device bond1 [ 306.551935][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.559223][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.603051][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.610278][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.042456][ T7470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.674145][ T7470] veth0_vlan: entered promiscuous mode [ 308.689638][ T7470] veth1_vlan: entered promiscuous mode [ 309.243383][ T7470] veth0_macvtap: entered promiscuous mode [ 309.355954][ T7470] veth1_macvtap: entered promiscuous mode [ 309.526498][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.585322][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.612024][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.632809][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.669981][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.784507][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.808717][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.829486][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.842739][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.855781][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.885893][ T7785] netlink: 'syz.1.396': attribute type 1 has an invalid length. [ 309.954264][ T7785] 8021q: adding VLAN 0 to HW filter on device bond1 [ 309.984388][ T7470] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.009828][ T7470] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.044284][ T7470] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.068497][ T7470] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.100425][ T7786] vlan2: entered allmulticast mode [ 310.113099][ T7786] veth0_to_bond: entered allmulticast mode [ 310.270065][ T7470] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 310.303157][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.362885][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.404774][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.497373][ T6920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.521278][ T6920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.234656][ T7856] loop1: detected capacity change from 0 to 512 [ 314.319987][ T7314] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 315.432936][ T7876] loop5: detected capacity change from 0 to 512 [ 316.149886][ T7876] FAT-fs (loop5): Directory bread(block 199916) failed [ 316.203345][ T7876] FAT-fs (loop5): Directory bread(block 199917) failed [ 316.263030][ T7876] FAT-fs (loop5): Directory bread(block 199918) failed [ 316.270014][ T7876] FAT-fs (loop5): Directory bread(block 199919) failed [ 316.283761][ T7876] FAT-fs (loop5): Directory bread(block 199920) failed [ 316.290732][ T7876] FAT-fs (loop5): Directory bread(block 199921) failed [ 316.302150][ T7876] FAT-fs (loop5): Directory bread(block 199922) failed [ 316.311181][ T7876] FAT-fs (loop5): Directory bread(block 199923) failed [ 316.653810][ T7894] FAT-fs (loop5): Directory bread(block 199916) failed [ 316.681112][ T7876] FAT-fs (loop5): FAT read failed (blocknr 128) [ 317.620957][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.627575][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.647405][ T7902] netlink: 'syz.1.422': attribute type 1 has an invalid length. [ 317.795881][ T7902] 8021q: adding VLAN 0 to HW filter on device bond2 [ 317.818384][ T7905] netlink: 'syz.0.420': attribute type 1 has an invalid length. [ 317.867534][ T7916] loop5: detected capacity change from 0 to 512 [ 317.950447][ T7905] 8021q: adding VLAN 0 to HW filter on device bond2 [ 317.980689][ T7916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.025271][ T7916] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.052132][ T7910] vlan2: entered allmulticast mode [ 318.073644][ T7910] veth0_to_bond: entered allmulticast mode [ 318.085123][ T7910] bond2: (slave vlan2): making interface the new active one [ 318.095353][ T7910] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 319.055968][ T7470] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.588088][ T8180] netlink: 'syz.3.476': attribute type 11 has an invalid length. [ 339.596104][ T8180] netlink: 36 bytes leftover after parsing attributes in process `syz.3.476'. [ 339.821599][ T8178] netlink: 'syz.1.477': attribute type 1 has an invalid length. [ 340.550580][ T8178] 8021q: adding VLAN 0 to HW filter on device bond3 [ 340.631487][ T8188] loop3: detected capacity change from 0 to 1024 [ 340.820573][ T8195] netlink: 'syz.0.481': attribute type 1 has an invalid length. [ 340.880651][ T8195] 8021q: adding VLAN 0 to HW filter on device bond3 [ 340.931989][ T8188] hfsplus: failed to extend attributes file [ 344.467636][ T8237] netlink: 'syz.3.491': attribute type 1 has an invalid length. [ 344.635007][ T8237] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.706551][ T8242] vlan2: entered allmulticast mode [ 344.711822][ T8242] veth0_to_bond: entered allmulticast mode [ 344.786924][ T8242] bond1: (slave vlan2): Enslaving as an active interface with a down link [ 350.076460][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.5.508'. [ 350.271891][ T8303] netlink: 28 bytes leftover after parsing attributes in process `syz.5.508'. [ 351.175016][ T8309] netlink: 'syz.3.509': attribute type 1 has an invalid length. [ 351.354770][ T8309] 8021q: adding VLAN 0 to HW filter on device bond2 [ 351.382239][ T8323] netlink: 28 bytes leftover after parsing attributes in process `syz.1.512'. [ 351.410525][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'. [ 351.468806][ T8321] netlink: 'syz.0.513': attribute type 1 has an invalid length. [ 351.597341][ T8321] 8021q: adding VLAN 0 to HW filter on device bond4 [ 351.641129][ T8329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.514'. [ 351.662273][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'. [ 357.847073][ T8376] netlink: 277 bytes leftover after parsing attributes in process `syz.3.522'. [ 360.083562][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.528'. [ 366.936456][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.539'. [ 367.054202][ T8443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.539'. [ 367.431890][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.5.541'. [ 367.499757][ T8449] netlink: 28 bytes leftover after parsing attributes in process `syz.5.541'. [ 371.489945][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.556'. [ 371.521605][ T8489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.556'. [ 373.173273][ T8506] netlink: 'syz.1.551': attribute type 1 has an invalid length. [ 373.262644][ T8506] 8021q: adding VLAN 0 to HW filter on device bond4 [ 377.829103][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.561'. [ 379.065709][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.072300][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.383858][ T8593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.569'. [ 391.380153][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 397.609079][ T8806] netlink: 28 bytes leftover after parsing attributes in process `syz.5.612'. [ 398.409060][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.5.615'. [ 398.557000][ T8818] netlink: 28 bytes leftover after parsing attributes in process `syz.5.615'. [ 400.874339][ T8844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'. [ 401.547710][ T8844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.621'. [ 511.492882][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 511.500038][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8906/1:b..l [ 511.508654][ C1] rcu: (detected by 1, t=10503 jiffies, g=33469, q=130 ncpus=2) [ 511.516430][ C1] task:syz.0.636 state:R running task stack:25768 pid:8906 ppid:5770 flags:0x00004002 [ 511.529042][ C1] Call Trace: [ 511.532397][ C1] [ 511.535375][ C1] __schedule+0x1553/0x45a0 [ 511.540064][ C1] ? asan.module_dtor+0x20/0x20 [ 511.545017][ C1] ? mark_lock+0x94/0x320 [ 511.549425][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 511.555817][ C1] ? preempt_schedule_irq+0xb4/0x150 [ 511.561294][ C1] preempt_schedule_irq+0xbf/0x150 [ 511.566472][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 511.572295][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 511.578171][ C1] irqentry_exit+0x67/0x70 [ 511.582643][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 511.588695][ C1] RIP: 0010:lock_acquire+0xa/0x420 [ 511.593880][ C1] Code: f3 0f 1e fa 65 8b 05 6d 94 9b 7e a9 00 ff ff 00 0f 95 c0 c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 f3 0f 1e fa 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 48 83 e4 e0 48 81 ec e0 00 00 00 4c 89 4c 24 [ 511.613537][ C1] RSP: 0018:ffffc90005387940 EFLAGS: 00000246 [ 511.619677][ C1] RAX: 0000000000000001 RBX: ffff88805dbad000 RCX: 0000000000000002 [ 511.627718][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8d131fe0 [ 511.635741][ C1] RBP: ffffc90005387948 R08: 0000000000000000 R09: 0000000000000000 [ 511.643879][ C1] R10: dffffc0000000000 R11: fffffbfff1d15bf6 R12: ffff88807d7dc280 [ 511.651938][ C1] R13: 0000000000000b36 R14: 00000000000000c0 R15: 000000007e8bc007 [ 511.660092][ C1] handle_mm_fault+0x31ed/0x4c00 [ 511.665099][ C1] ? handle_mm_fault+0xe7/0x4c00 [ 511.670098][ C1] ? handle_mm_fault+0xe7/0x4c00 [ 511.675192][ C1] ? numa_migrate_prep+0x350/0x350 [ 511.680499][ C1] ? follow_page_pte+0x6dd/0x1ac0 [ 511.685692][ C1] ? pmd_lock+0x60/0x60 [ 511.689918][ C1] __get_user_pages+0x5d0/0x1380 [ 511.694976][ C1] ? mtree_destroy+0x30/0x30 [ 511.699624][ C1] ? populate_vma_page_range+0x380/0x380 [ 511.705321][ C1] populate_vma_page_range+0x2c1/0x380 [ 511.710850][ C1] ? fixup_user_fault+0x700/0x700 [ 511.715924][ C1] ? userfaultfd_unmap_complete+0x29f/0x320 [ 511.721873][ C1] ? down_read+0x1ac/0x2e0 [ 511.726355][ C1] __mm_populate+0x260/0x390 [ 511.731018][ C1] ? faultin_page_range+0x8e0/0x8e0 [ 511.736362][ C1] ? up_write+0x1c3/0x410 [ 511.740756][ C1] vm_mmap_pgoff+0x2da/0x3f0 [ 511.745433][ C1] ? account_locked_vm+0x210/0x210 [ 511.750602][ C1] ? ksys_mmap_pgoff+0xea/0x700 [ 511.755504][ C1] ? __x64_sys_mmap+0x7a/0x130 [ 511.760331][ C1] do_syscall_64+0x55/0xa0 [ 511.765065][ C1] ? clear_bhb_loop+0x40/0x90 [ 511.769811][ C1] ? clear_bhb_loop+0x40/0x90 [ 511.774567][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.780596][ C1] RIP: 0033:0x7f922439aeb9 [ 511.785167][ C1] RSP: 002b:00007f92251b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 511.793633][ C1] RAX: ffffffffffffffda RBX: 00007f9224615fa0 RCX: 00007f922439aeb9 [ 511.801762][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 511.809885][ C1] RBP: 00007f9224408c1f R08: ffffffffffffffff R09: 0000000000000000 [ 511.817910][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 511.825995][ C1] R13: 00007f9224616038 R14: 00007f9224615fa0 R15: 00007ffee80bca98 [ 511.834134][ C1] [ 511.837208][ C1] rcu: rcu_preempt kthread starved for 10536 jiffies! g33469 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 511.848457][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 511.858464][ C1] rcu: RCU grace-period kthread stack dump: [ 511.864391][ C1] task:rcu_preempt state:R running task stack:27720 pid:17 ppid:2 flags:0x00004000 [ 511.875228][ C1] Call Trace: [ 511.878566][ C1] [ 511.881537][ C1] __schedule+0x1553/0x45a0 [ 511.886156][ C1] ? _raw_spin_lock_bh+0x31/0x50 [ 511.891164][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 511.897113][ C1] ? asan.module_dtor+0x20/0x20 [ 511.902034][ C1] ? enqueue_timer+0x23d/0x550 [ 511.906852][ C1] ? __mod_timer+0x984/0xdb0 [ 511.911523][ C1] schedule+0xbd/0x170 [ 511.915646][ C1] schedule_timeout+0x188/0x2d0 [ 511.920570][ C1] ? console_conditional_schedule+0x40/0x40 [ 511.926510][ C1] ? update_process_times+0x1b0/0x1b0 [ 511.931990][ C1] ? prepare_to_swait_event+0x339/0x360 [ 511.937692][ C1] rcu_gp_fqs_loop+0x313/0x1590 [ 511.942589][ C1] ? rcu_gp_init+0x1162/0x1560 [ 511.947405][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 511.952387][ C1] ? preempt_schedule+0xc0/0xd0 [ 511.957300][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 511.963075][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 511.968418][ C1] ? rcu_gp_init+0x1560/0x1560 [ 511.973236][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 511.978769][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 511.983964][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 511.989235][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 511.994233][ C1] ? __kthread_parkme+0x162/0x1c0 [ 511.999589][ C1] kthread+0x2fa/0x390 [ 512.003779][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 512.008941][ C1] ? kthread_blkcg+0xd0/0xd0 [ 512.013584][ C1] ret_from_fork+0x48/0x80 [ 512.018050][ C1] ? kthread_blkcg+0xd0/0xd0 [ 512.022798][ C1] ret_from_fork_asm+0x11/0x20 [ 512.027691][ C1] [ 512.030759][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 512.037228][ C1] Sending NMI from CPU 1 to CPUs 0: [ 512.042494][ C0] NMI backtrace for cpu 0 [ 512.042509][ C0] CPU: 0 PID: 8912 Comm: syz.5.637 Not tainted syzkaller #0 [ 512.042524][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 512.042533][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 512.042558][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 8b 2f 23 03 66 2e 0f 1f 84 00 00 00 00 00 [ 512.042571][ C0] RSP: 0018:ffffc90005217ae0 EFLAGS: 00000046 [ 512.042596][ C0] RAX: 00000000000003fe RBX: ffff8880b8e28280 RCX: 0000000000000838 [ 512.042607][ C0] RDX: 0000000000000000 RSI: 00000000000003fe RDI: 0000000000000838 [ 512.042620][ C0] RBP: 0000000000000001 R08: ffffffff8e8adfaf R09: 1ffffffff1d15bf5 [ 512.042631][ C0] R10: dffffc0000000000 R11: fffffbfff1d15bf6 R12: dffffc0000000000 [ 512.042643][ C0] R13: 000000001000614e R14: 00000000000003fe R15: 0000000000000020 [ 512.042653][ C0] FS: 000055557fdd7500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 512.042666][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 512.042677][ C0] CR2: 00007f37e71e8600 CR3: 000000002e168000 CR4: 00000000003506f0 [ 512.042691][ C0] Call Trace: [ 512.042699][ C0] [ 512.042704][ C0] lapic_next_event+0x11/0x20 [ 512.042725][ C0] clockevents_program_event+0x1c0/0x310 [ 512.042750][ C0] hrtimer_start_range_ns+0xbfb/0xff0 [ 512.042825][ C0] posixtimer_rearm+0x135/0x340 [ 512.042853][ C0] dequeue_signal+0x1ba/0x4b0 [ 512.042965][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 512.042994][ C0] get_signal+0x551/0x13f0 [ 512.043021][ C0] arch_do_signal_or_restart+0xc2/0x800 [ 512.043051][ C0] ? get_sigframe_size+0x20/0x20 [ 512.043085][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 512.043111][ C0] exit_to_user_mode_loop+0x70/0x110 [ 512.043136][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 512.043160][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 512.043180][ C0] do_syscall_64+0x61/0xa0 [ 512.043202][ C0] ? clear_bhb_loop+0x40/0x90 [ 512.043221][ C0] ? clear_bhb_loop+0x40/0x90 [ 512.043240][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 512.043259][ C0] RIP: 0033:0x7f2cfc06b46d [ 512.043276][ C0] Code: 08 48 83 c3 08 48 39 d1 72 f3 48 8d 46 f8 48 8b 76 f8 48 39 f2 73 13 66 0f 1f 44 00 00 48 8b 70 f8 48 83 e8 08 48 39 f2 72 f3 <48> 39 c3 73 3e 48 89 33 48 89 c6 48 83 c3 08 48 89 08 48 8b 0b 48 [ 512.043289][ C0] RSP: 002b:00007ffc3af3e400 EFLAGS: 00000216 [ 512.043304][ C0] RAX: 00007f2cfbad5418 RBX: 00007f2cfba7bf08 RCX: ffffffff81cb1f22 [ 512.043316][ C0] RDX: ffffffff81775641 RSI: ffffffff8176d995 RDI: 00007f2cfbaa2108 [ 512.043327][ C0] RBP: 00007f2cfb9e6948 R08: 00007f2cfc400000 R09: 00007f2cfc416128 [ 512.043338][ C0] R10: 0000000000000007 R11: 000000000000000e R12: 00007f2cfbb5d8d0 [ 512.043349][ C0] R13: 0000000000000021 R14: 000000000002edf1 R15: 0000000000000007 [ 512.043364][ C0] ? __might_fault+0x22/0x120 [ 512.043381][ C0] ? ktime_get_with_offset+0x121/0x330 [ 512.043400][ C0] ? hrtimer_start_range_ns+0x325/0xff0 [ 512.043421][ C0]