last executing test programs: 23m24.870788198s ago: executing program 0 (id=1): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, 0x0, 0x0, 0x20048301) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffc50c, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000007c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs$userns(r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) pipe(0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x3fc, 0x8, 0x13, 0x0, 0x8}, 0x9c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) 23m19.675278499s ago: executing program 0 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r3) 23m16.366425483s ago: executing program 0 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x44}}, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvfrom(r0, &(0x7f00000002c0)=""/40, 0x28, 0x2000, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00\t\x00\x00\x00\x00'], 0x30) 23m0.57759068s ago: executing program 32 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x44}}, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvfrom(r0, &(0x7f00000002c0)=""/40, 0x28, 0x2000, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00\t\x00\x00\x00\x00'], 0x30) 20m13.129802044s ago: executing program 2 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) connect(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a8"], 0x21e) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x20000400) 20m10.428970321s ago: executing program 2 (id=226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x1000) fanotify_mark(r2, 0x105, 0x10000839, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) readv(r2, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r3 = syz_open_dev$video4linux(&(0x7f0000000180), 0x5, 0x40) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000000)={0x0, 0x10004, 0x1008, 0x1}) 20m9.809918644s ago: executing program 2 (id=227): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x40, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x208c, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x20fe, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000100), &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x3, 0x3, 0xfffffffe) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) write(0xffffffffffffffff, &(0x7f0000000000)="3000000024000106010000000000000000000000010000000000fffff1ffffff00000000", 0x24) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x7}}]}, 0x30}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="500000002c0001060200000000000000000000000100000000000000f1ffffff000301000c000100666c6f7765720000200002801c0054801800058005000100010000000c0002000000000000000001", 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x106}}, 0x20) close(r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0xe3, 0x2, 0x2000000, 0x0, @irqchip={0x7, 0x100}}]}) 20m7.383574381s ago: executing program 2 (id=230): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1ee, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffffee, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8534, 0x80, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x0, 0x0, 0x0}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 20m6.957426658s ago: executing program 2 (id=231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc8001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r6}, 0x4) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r7 = fcntl$dupfd(r1, 0x406, r1) sendmsg$IPCTNL_MSG_CT_DELETE(r7, 0x0, 0x4040941) write$binfmt_elf64(r7, &(0x7f0000000400)=ANY=[], 0xfffffdcf) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x34da418c8bae5fd1}) write$tun(r0, &(0x7f0000000140)={@void, @val={0x2, 0x1, 0x0, 0x8, 0x2, 0xf001}, @x25={0x2, 0x8, 0x1}}, 0xd) socket$inet_tcp(0x2, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0) socket(0xa, 0x5, 0x0) 20m4.156110808s ago: executing program 2 (id=235): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x404e881) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x8985, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280), &(0x7f0000000300)=0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_ublk_add_dev(r4, r5, r2, r6, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe34, 0x0, 0x0, 0x1000, 0xfff, 0x0, 0x0, 0x34}}}, &(0x7f0000000200)=0x0) r9 = dup(r3) syz_ublk_setup_queues(r9, r8, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r4}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000040)=0x1) dup2(r10, r0) 19m48.930189451s ago: executing program 33 (id=235): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x404e881) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x8985, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280), &(0x7f0000000300)=0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_ublk_add_dev(r4, r5, r2, r6, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe34, 0x0, 0x0, 0x1000, 0xfff, 0x0, 0x0, 0x34}}}, &(0x7f0000000200)=0x0) r9 = dup(r3) syz_ublk_setup_queues(r9, r8, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r4}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000040)=0x1) dup2(r10, r0) 18m6.006856914s ago: executing program 1 (id=352): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x2c9, 0x32314752, 0x0, 0x100000ff, 0x9, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) 18m4.413845581s ago: executing program 1 (id=355): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) close(0x4) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a7c000000060a0104000000000000000002000000500004804c0001800c0001007061796c6f6164003c000280080004400000005a0800054000000002080003400000001708000240000000020800064000000002080007400000000808000840000000000900010073797a30000000000900020073797a32"], 0xa4}}, 0x4) listen(0xffffffffffffffff, 0x5) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r8, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r8, r9, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r4}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60f, 0x2000, 0x1, 0x321, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x3, 0xc4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0) 18m2.269283101s ago: executing program 1 (id=357): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x314f9fb3272b80c2) openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x89, @empty, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x80800) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x144, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x6eb0}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17m58.292346831s ago: executing program 1 (id=360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) connect(r2, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a8"], 0x21e) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x3, @remote, 0x40}, @in6={0xa, 0x4e22, 0x0, @private1, 0x80000001}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) 17m56.302298883s ago: executing program 1 (id=361): socket$netlink(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x240003, 0x42) fsetxattr$system_posix_acl(r1, &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[], 0x2c, 0x3) socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000d40)={0x0, 0x7}, 0x8) socket$inet6(0xa, 0x80003, 0x6) 17m54.378032988s ago: executing program 1 (id=362): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x2c9, 0x32314752, 0x0, 0x100000ff, 0x9, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) 17m38.576018616s ago: executing program 34 (id=362): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x2c9, 0x32314752, 0x0, 0x100000ff, 0x9, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) 7m38.931374593s ago: executing program 4 (id=843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) connect(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="1e02000004000000"], 0x21e) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x3, @remote, 0x40}, @in6={0xa, 0x4e22, 0x0, @private1, 0x80000001}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) 7m37.591832883s ago: executing program 4 (id=844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x2c9, 0x32314752, 0x0, 0x100000ff, 0x9, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) 7m35.339725424s ago: executing program 4 (id=846): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) connect(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005"], 0x21e) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x3, @remote, 0x40}, @in6={0xa, 0x4e22, 0x0, @private1, 0x80000001}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) 7m32.345951262s ago: executing program 4 (id=847): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf25110000000800150000000000080015000000000008001500010000", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x855) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0x5437fbe4261c9da4, 0x4b) write(r3, &(0x7f0000000300), 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='1', 0x1) 7m29.783414558s ago: executing program 4 (id=849): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, 0x0, 0x0, 0x20048301) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffc50c, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000007c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs$userns(r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 7m25.881219285s ago: executing program 4 (id=851): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x2c9, 0x32314752, 0x0, 0x100000ff, 0x9, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) 7m10.802602132s ago: executing program 35 (id=851): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x2c9, 0x32314752, 0x0, 0x100000ff, 0x9, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) 18.572176712s ago: executing program 5 (id=1105): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x2c9, 0x32314752, 0x0, 0x100000ff, 0x9, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r3, &(0x7f0000000100)=[{0x0}], 0x1, 0x3ab3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) 16.935291049s ago: executing program 3 (id=1106): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r2, 0x84, 0x80, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) close(0x4) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a7c000000060a0104000000000000000002000000500004804c0001800c0001007061796c6f6164003c000280080004400000005a0800054000000002080003400000001708000240000000020800064000000002080007400000000808000840000000000900010073797a30000000000900020073797a32"], 0xa4}}, 0x4) listen(0xffffffffffffffff, 0x5) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r8, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r8, r9, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r4}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60f, 0x2000, 0x1, 0x321, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x3, 0xc4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0) 12.684894882s ago: executing program 3 (id=1107): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test/cgroup.procs\x00', 0x1202, 0x2) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000280)={0x3, 0x0, [{0x1, 0x0, 0x0, 0xe2a, 0x3, 0x0, 0xfffff000}, {0x80000001, 0x7a93, 0x4, 0x2, 0x81, 0xdde, 0x8}, {0x40000000, 0x4, 0x6, 0x0, 0x3, 0x6, 0x5}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x161142, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x1000000) socket$nl_xfrm(0x10, 0x3, 0x6) write$6lowpan_enable(r2, &(0x7f0000000300)='0', 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x80000100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x8080000, 0x3c5200}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x4, 0x112000}) 11.873735126s ago: executing program 5 (id=1108): socket$netlink(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x240003, 0x42) fsetxattr$system_posix_acl(r1, &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[], 0x2c, 0x3) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400, 0xc2) socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r5, 0x5421, &(0x7f0000000440)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) close(r5) socket$inet6(0xa, 0x80003, 0x6) 9.966795177s ago: executing program 3 (id=1109): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) close(0x4) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a7c000000060a0104000000000000000002000000500004804c0001800c0001007061796c6f6164003c000280080004400000005a0800054000000002080003400000001708000240000000020800064000000002080007400000000808000840000000000900010073797a30000000000900020073797a32"], 0xa4}}, 0x4) listen(0xffffffffffffffff, 0x5) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r8, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r8, r9, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r4}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60f, 0x2000, 0x1, 0x321, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x3, 0xc4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0) 9.963969115s ago: executing program 5 (id=1110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) connect(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a8"], 0x21e) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x3, @remote, 0x40}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) 6.957141698s ago: executing program 5 (id=1111): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r2, 0x84, 0x80, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) close(0x4) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a7c000000060a0104000000000000000002000000500004804c0001800c0001007061796c6f6164003c000280080004400000005a0800054000000002080003400000001708000240000000020800064000000002080007400000000808000840000000000900010073797a30000000000900020073797a32"], 0xa4}}, 0x4) listen(0xffffffffffffffff, 0x5) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r8, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r8, r9, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r4}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60f, 0x2000, 0x1, 0x321, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x3, 0xc4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0) 6.91131308s ago: executing program 3 (id=1112): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="14000000090000", 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) close(0x4) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a7c000000060a0104000000000000000002000000500004804c0001800c0001007061796c6f6164003c000280080004400000005a0800054000000002080003400000001708000240000000020800064000000002080007400000000808000840000000000900010073797a30000000000900020073797a32"], 0xa4}}, 0x4) listen(0xffffffffffffffff, 0x5) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r8, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r8, r9, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r4}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60f, 0x2000, 0x1, 0x321, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x3, 0xc4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0) 4.726327447s ago: executing program 5 (id=1113): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, 0x0, 0x0, 0x20048301) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) gettid() syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffc50c, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x3fc, 0x8, 0x13, 0x0, 0x8}, 0x9c) 2.842328955s ago: executing program 3 (id=1114): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETCARRIER(r1, 0x400454e2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x2c9, 0x32314752, 0x0, 0x100000ff, 0x9, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) 875.62619ms ago: executing program 5 (id=1115): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) close(0x4) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a7c000000060a0104000000000000000002000000500004804c0001800c0001007061796c6f6164003c000280080004400000005a0800054000000002080003400000001708000240000000020800064000000002080007400000000808000840000000000900010073797a30000000000900020073797a32"], 0xa4}}, 0x4) listen(0xffffffffffffffff, 0x5) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r8, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r8, r9, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r4}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60f, 0x2000, 0x1, 0x321, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x3, 0xc4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0) 0s ago: executing program 3 (id=1116): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test/cgroup.procs\x00', 0x1202, 0x2) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000280)={0x3, 0x0, [{0x1, 0x0, 0x0, 0xe2a, 0x3, 0x0, 0xfffff000}, {0x80000001, 0x7a93, 0x4, 0x2, 0x81, 0xdde, 0x8}, {0x40000000, 0x4, 0x6, 0x0, 0x3, 0x6, 0x5}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x161142, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x1000000) socket$nl_xfrm(0x10, 0x3, 0x6) write$6lowpan_enable(r2, &(0x7f0000000300)='0', 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x80000100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x8080000, 0x3c5200}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x4, 0x112000}) kernel console output (not intermixed with test programs): ll be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1217.720581][T12527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1217.793643][T12552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1217.822523][T12527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1217.822541][T12527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1217.822556][T12527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1219.721821][T12552] team0: Port device team_slave_0 added [ 1219.877147][T12552] team0: Port device team_slave_1 added [ 1220.154749][T12527] hsr_slave_0: entered promiscuous mode [ 1220.157367][T12527] hsr_slave_1: entered promiscuous mode [ 1220.157983][T12527] debugfs: 'hsr0' already exists in 'hsr' [ 1220.158006][T12527] Cannot create hsr debugfs directory [ 1220.289181][T12552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.289201][T12552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.289228][T12552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.395936][T12591] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.396064][T12591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.396262][T12591] bridge_slave_0: entered allmulticast mode [ 1220.398834][T12591] bridge_slave_0: entered promiscuous mode [ 1221.534336][T12552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1221.534355][T12552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1221.534382][T12552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1221.535172][T12591] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.535297][T12591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.535462][T12591] bridge_slave_1: entered allmulticast mode [ 1221.607176][T12591] bridge_slave_1: entered promiscuous mode [ 1222.044196][ T199] Process accounting resumed [ 1223.046873][T12591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1223.128877][T12591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1223.347797][T12552] hsr_slave_0: entered promiscuous mode [ 1223.349242][T12552] hsr_slave_1: entered promiscuous mode [ 1223.380763][T12552] debugfs: 'hsr0' already exists in 'hsr' [ 1223.380794][T12552] Cannot create hsr debugfs directory [ 1223.445149][T12591] team0: Port device team_slave_0 added [ 1223.494394][T12591] team0: Port device team_slave_1 added [ 1223.689663][T12591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1223.689677][T12591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.689690][T12591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1223.766849][T12591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1223.766868][T12591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.766895][T12591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1224.332950][T12591] hsr_slave_0: entered promiscuous mode [ 1224.334283][T12591] hsr_slave_1: entered promiscuous mode [ 1224.335288][T12591] debugfs: 'hsr0' already exists in 'hsr' [ 1224.335312][T12591] Cannot create hsr debugfs directory [ 1225.116518][T12679] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.116623][T12679] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.116728][T12679] bridge_slave_0: entered allmulticast mode [ 1225.119601][T12679] bridge_slave_0: entered promiscuous mode [ 1225.177676][T12679] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.177775][T12679] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.177887][T12679] bridge_slave_1: entered allmulticast mode [ 1225.187984][T12679] bridge_slave_1: entered promiscuous mode [ 1225.664860][ T9889] Process accounting resumed [ 1228.116363][T12679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1228.137957][T12679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1228.330967][T12679] team0: Port device team_slave_0 added [ 1228.337805][T12679] team0: Port device team_slave_1 added [ 1228.424567][T12679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1228.424582][T12679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1228.424608][T12679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1228.428690][T12679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1228.428706][T12679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1228.428732][T12679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1228.819646][T11383] bridge_slave_1: left allmulticast mode [ 1228.819673][T11383] bridge_slave_1: left promiscuous mode [ 1228.819861][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.918072][T11383] bridge_slave_0: left allmulticast mode [ 1228.918098][T11383] bridge_slave_0: left promiscuous mode [ 1228.918270][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.265999][T11383] bridge_slave_1: left allmulticast mode [ 1229.266027][T11383] bridge_slave_1: left promiscuous mode [ 1229.266199][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.192698][T11383] bridge_slave_0: left allmulticast mode [ 1230.192725][T11383] bridge_slave_0: left promiscuous mode [ 1230.192878][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.656884][ T9958] Process accounting resumed [ 1230.844443][T11383] bridge_slave_1: left allmulticast mode [ 1230.844575][T11383] bridge_slave_1: left promiscuous mode [ 1230.851563][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.050155][T11383] bridge_slave_0: left allmulticast mode [ 1231.050278][T11383] bridge_slave_0: left promiscuous mode [ 1231.083945][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.467553][T11383] bridge_slave_1: left allmulticast mode [ 1231.467673][T11383] bridge_slave_1: left promiscuous mode [ 1231.468539][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.692426][T11383] bridge_slave_0: left allmulticast mode [ 1231.692524][T11383] bridge_slave_0: left promiscuous mode [ 1231.693473][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.616603][T11383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1233.696798][T11383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1233.757420][T11383] bond0 (unregistering): Released all slaves [ 1234.056517][T11383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1234.137799][T11383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1234.198387][T11383] bond0 (unregistering): Released all slaves [ 1234.507138][T11383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1234.600085][T11383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1234.665342][T11383] bond0 (unregistering): Released all slaves [ 1234.936270][T11383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1234.997129][T11383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1235.057243][T11383] bond0 (unregistering): Released all slaves [ 1235.087025][T12679] hsr_slave_0: entered promiscuous mode [ 1235.088393][T12679] hsr_slave_1: entered promiscuous mode [ 1235.089379][T12679] debugfs: 'hsr0' already exists in 'hsr' [ 1235.089403][T12679] Cannot create hsr debugfs directory [ 1236.925823][T11383] hsr_slave_0: left promiscuous mode [ 1236.977322][T11383] hsr_slave_1: left promiscuous mode [ 1236.996242][T11383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1237.016875][T11383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1237.368619][T11383] hsr_slave_0: left promiscuous mode [ 1238.163507][T11383] hsr_slave_1: left promiscuous mode [ 1238.166872][T11383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1238.196353][T11383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1238.435778][T11383] hsr_slave_0: left promiscuous mode [ 1238.455847][T11383] hsr_slave_1: left promiscuous mode [ 1238.456604][T11383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1238.506690][T11383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1238.686146][T11383] hsr_slave_0: left promiscuous mode [ 1238.725846][T11383] hsr_slave_1: left promiscuous mode [ 1238.726940][T11383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1238.757773][T11383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1239.286734][T11383] team0 (unregistering): Port device team_slave_1 removed [ 1239.337126][T11383] team0 (unregistering): Port device team_slave_0 removed [ 1240.055675][T11383] team0 (unregistering): Port device team_slave_1 removed [ 1240.096639][T11383] team0 (unregistering): Port device team_slave_0 removed [ 1240.516059][T11383] team0 (unregistering): Port device team_slave_1 removed [ 1240.566176][T11383] team0 (unregistering): Port device team_slave_0 removed [ 1241.010805][T11383] team0 (unregistering): Port device team_slave_1 removed [ 1241.061399][T11383] team0 (unregistering): Port device team_slave_0 removed [ 1241.233586][T12552] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1241.279021][T12552] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1241.321738][T12552] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1241.356196][T12552] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1241.633084][T12552] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1241.678799][T12552] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1241.824091][T12552] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1241.889565][T12552] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1242.149272][T12591] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1242.292975][T12591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1242.308818][T12591] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1242.371464][T12591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1242.392564][T12591] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1242.454377][T12591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1242.730457][ T42] Process accounting resumed [ 1243.199497][T12591] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1243.701946][T12591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1245.711831][ T5598] Process accounting resumed [ 1246.194921][T12527] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1246.640655][T12527] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1246.818104][T12527] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1247.565453][T12527] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1247.679193][T12527] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1248.151466][T12527] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1248.222779][T12527] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1248.307664][T12527] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1249.005845][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.007494][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.128156][T12679] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1249.203857][T12679] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1249.221826][T12679] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1249.277403][T12679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1249.287734][T12679] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1249.361550][T12679] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1249.377794][T12552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1249.412324][T12679] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1249.450012][T12679] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1250.123718][T12552] 8021q: adding VLAN 0 to HW filter on device team0 [ 1250.213203][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.226300][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1250.267597][T12591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1250.303174][ T3180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.303301][ T3180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1250.393759][T12591] 8021q: adding VLAN 0 to HW filter on device team0 [ 1250.439458][T11366] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.441727][T11366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1250.482082][ T3180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.482214][ T3180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1250.733840][T12679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1250.805236][T12679] 8021q: adding VLAN 0 to HW filter on device team0 [ 1250.830640][ T3180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.831456][ T3180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1250.859580][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.863557][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1252.310582][ T5603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1252.350593][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1252.724858][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1253.379460][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1253.380261][ T5603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1253.810573][ T5603] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1253.841060][ T5603] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1253.843799][ T5603] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1253.844803][ T5603] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1253.845508][ T5603] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1255.545750][ T5603] Bluetooth: hci0: command tx timeout [ 1256.015724][ T5603] Bluetooth: hci1: command tx timeout [ 1257.058497][T11515] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1257.102779][T11515] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1257.104069][T11515] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1257.124576][T11515] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1257.171487][T11515] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1258.025449][T11515] Bluetooth: hci0: command tx timeout [ 1258.105645][ T5603] Bluetooth: hci1: command tx timeout [ 1258.445916][T12679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1259.738788][ T9889] Process accounting resumed [ 1260.096734][ T5603] Bluetooth: hci4: command tx timeout [ 1260.096986][ T5603] Bluetooth: hci0: command tx timeout [ 1260.177968][T11515] Bluetooth: hci1: command tx timeout [ 1261.990222][ T9889] Process accounting resumed [ 1262.178493][T11515] Bluetooth: hci0: command tx timeout [ 1262.178529][T11515] Bluetooth: hci4: command tx timeout [ 1262.255984][ T5603] Bluetooth: hci1: command tx timeout [ 1264.257392][ T5603] Bluetooth: hci4: command tx timeout [ 1265.015456][ T199] Process accounting resumed [ 1266.340251][ T5603] Bluetooth: hci4: command tx timeout [ 1268.163422][T11515] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1268.173420][T11515] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1268.178486][T11515] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1268.184971][T11515] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1268.185713][T11515] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1269.675861][T11383] bridge_slave_1: left allmulticast mode [ 1269.675898][T11383] bridge_slave_1: left promiscuous mode [ 1269.676152][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.732885][ T5603] Bluetooth: hci5: command tx timeout [ 1270.867314][T11383] bridge_slave_0: left allmulticast mode [ 1270.867350][T11383] bridge_slave_0: left promiscuous mode [ 1270.867605][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.497914][T11383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1271.576345][T11383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1271.659956][T11383] bond0 (unregistering): Released all slaves [ 1272.194790][T12932] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.194910][T12932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.195066][T12932] bridge_slave_0: entered allmulticast mode [ 1272.204980][T12932] bridge_slave_0: entered promiscuous mode [ 1272.291547][T12932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.291668][T12932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.291839][T12932] bridge_slave_1: entered allmulticast mode [ 1272.294639][T12932] bridge_slave_1: entered promiscuous mode [ 1272.416740][T11383] hsr_slave_0: left promiscuous mode [ 1272.463748][T11383] hsr_slave_1: left promiscuous mode [ 1272.464946][T11383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1272.627139][T11383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1272.784232][ T5603] Bluetooth: hci5: command tx timeout [ 1275.095663][ T5603] Bluetooth: hci5: command tx timeout [ 1275.186295][T11383] team0 (unregistering): Port device team_slave_1 removed [ 1275.316769][T11383] team0 (unregistering): Port device team_slave_0 removed [ 1275.461431][ T9889] Process accounting resumed [ 1277.136204][ T5603] Bluetooth: hci5: command tx timeout [ 1277.566526][T12932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1277.608287][T12932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1277.908936][T12944] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.909006][T12944] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.909137][T12944] bridge_slave_0: entered allmulticast mode [ 1277.910597][T12944] bridge_slave_0: entered promiscuous mode [ 1277.936261][T12932] team0: Port device team_slave_0 added [ 1277.977177][T12944] bridge0: port 2(bridge_slave_1) entered blocking state [ 1277.977382][T12944] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.977576][T12944] bridge_slave_1: entered allmulticast mode [ 1278.008204][T12944] bridge_slave_1: entered promiscuous mode [ 1278.056668][T12932] team0: Port device team_slave_1 added [ 1278.245501][T12944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1278.270167][T12932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1278.270186][T12932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1278.270212][T12932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1278.283748][T12944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1278.890982][T12932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1278.891001][T12932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1278.891016][T12932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1279.102425][T12944] team0: Port device team_slave_0 added [ 1279.109071][T12982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.109244][T12982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.109405][T12982] bridge_slave_0: entered allmulticast mode [ 1279.141096][T12982] bridge_slave_0: entered promiscuous mode [ 1279.160573][T12944] team0: Port device team_slave_1 added [ 1279.168393][T12982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.168508][T12982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.168668][T12982] bridge_slave_1: entered allmulticast mode [ 1279.200117][T12982] bridge_slave_1: entered promiscuous mode [ 1279.645891][T12944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1279.645910][T12944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1279.645938][T12944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1279.663928][T12932] hsr_slave_0: entered promiscuous mode [ 1279.665200][T12932] hsr_slave_1: entered promiscuous mode [ 1279.777757][T12982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1279.787086][T12944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1279.787102][T12944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1279.787129][T12944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1281.267960][T12982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1281.270698][ T5250] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1283.356760][T12982] team0: Port device team_slave_0 added [ 1283.477602][ T199] Process accounting resumed [ 1284.265311][T12982] team0: Port device team_slave_1 added [ 1284.294584][T12944] hsr_slave_0: entered promiscuous mode [ 1284.301944][T12944] hsr_slave_1: entered promiscuous mode [ 1284.302886][T12944] debugfs: 'hsr0' already exists in 'hsr' [ 1284.302911][T12944] Cannot create hsr debugfs directory [ 1287.685243][T12982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.685262][T12982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.685288][T12982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1287.779986][T12982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1287.780002][T12982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.780018][T12982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1288.623520][T12982] hsr_slave_0: entered promiscuous mode [ 1288.624261][T12982] hsr_slave_1: entered promiscuous mode [ 1288.624758][T12982] debugfs: 'hsr0' already exists in 'hsr' [ 1288.624777][T12982] Cannot create hsr debugfs directory [ 1288.695359][T13032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.695489][T13032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.713658][T13032] bridge_slave_0: entered allmulticast mode [ 1288.721907][T13032] bridge_slave_0: entered promiscuous mode [ 1289.021007][T13032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.021130][T13032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.021324][T13032] bridge_slave_1: entered allmulticast mode [ 1289.045840][ T1248] Process accounting resumed [ 1289.051799][T13032] bridge_slave_1: entered promiscuous mode [ 1289.615131][T13032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1289.749587][T13032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.594483][T13032] team0: Port device team_slave_0 added [ 1291.673904][T13032] team0: Port device team_slave_1 added [ 1291.963040][T13032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1291.963060][T13032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1291.963079][T13032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1292.002605][T13032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1292.002622][T13032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1292.002650][T13032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.719470][T13032] hsr_slave_0: entered promiscuous mode [ 1293.721772][T13032] hsr_slave_1: entered promiscuous mode [ 1293.722271][T13032] debugfs: 'hsr0' already exists in 'hsr' [ 1293.722291][T13032] Cannot create hsr debugfs directory [ 1293.971033][ T199] Process accounting resumed [ 1301.221762][ T5250] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1302.498770][ T5250] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1304.455944][T11383] bridge_slave_1: left allmulticast mode [ 1304.455982][T11383] bridge_slave_1: left promiscuous mode [ 1304.456260][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.676609][T11383] bridge_slave_0: left allmulticast mode [ 1304.676635][T11383] bridge_slave_0: left promiscuous mode [ 1304.676810][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.735835][T11383] bridge_slave_1: left allmulticast mode [ 1305.735872][T11383] bridge_slave_1: left promiscuous mode [ 1305.736111][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.900758][T11383] bridge_slave_0: left allmulticast mode [ 1305.900795][T11383] bridge_slave_0: left promiscuous mode [ 1305.901049][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.165861][T11383] bridge_slave_1: left allmulticast mode [ 1306.165898][T11383] bridge_slave_1: left promiscuous mode [ 1306.166139][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.337033][T11383] bridge_slave_0: left allmulticast mode [ 1306.337069][T11383] bridge_slave_0: left promiscuous mode [ 1306.337232][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.578305][T11383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1307.656207][T11383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1307.678559][T11383] bond0 (unregistering): Released all slaves [ 1308.166168][T11383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1308.246164][T11383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1308.267348][T11383] bond0 (unregistering): Released all slaves [ 1308.787777][T11383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1308.866208][T11383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1308.887416][T11383] bond0 (unregistering): Released all slaves [ 1310.135728][T11383] hsr_slave_0: left promiscuous mode [ 1310.177103][T11383] hsr_slave_1: left promiscuous mode [ 1310.180269][T11383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1310.217964][T11383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1310.417269][T11383] hsr_slave_0: left promiscuous mode [ 1310.417382][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.417444][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.445123][T11383] hsr_slave_1: left promiscuous mode [ 1310.448019][T11383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1310.476411][T11383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1310.636445][T11383] hsr_slave_0: left promiscuous mode [ 1310.656405][T11383] hsr_slave_1: left promiscuous mode [ 1310.657173][T11383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1310.708274][T11383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.326657][T11383] team0 (unregistering): Port device team_slave_1 removed [ 1311.378871][T11383] team0 (unregistering): Port device team_slave_0 removed [ 1311.776912][T11383] team0 (unregistering): Port device team_slave_1 removed [ 1311.837784][T11383] team0 (unregistering): Port device team_slave_0 removed [ 1312.246470][T11383] team0 (unregistering): Port device team_slave_1 removed [ 1312.289310][T11383] team0 (unregistering): Port device team_slave_0 removed [ 1312.472163][T13280] batman_adv: batadv0: Adding interface: syzkaller0 [ 1312.472184][T13280] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.472214][T13280] batman_adv: batadv0: Interface activated: syzkaller0 [ 1312.519025][T13279] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1312.658328][T13279] batman_adv: batadv0: Removing interface: syzkaller0 [ 1313.339311][ T5250] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1314.845147][T11515] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1314.864507][T11515] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1314.872477][T11515] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1314.874740][T11515] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1314.875455][T11515] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1316.982780][ T5603] Bluetooth: hci0: command tx timeout [ 1317.698481][T13373] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1317.764479][T13373] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1317.797906][T13373] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1317.832224][T13373] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1317.875792][T13373] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1318.311141][T13326] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.311347][T13326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.311506][T13326] bridge_slave_0: entered allmulticast mode [ 1318.314159][T13326] bridge_slave_0: entered promiscuous mode [ 1318.344963][T13326] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.345244][T13326] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.345432][T13326] bridge_slave_1: entered allmulticast mode [ 1318.362073][T13326] bridge_slave_1: entered promiscuous mode [ 1318.529671][T13326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1318.533310][T13326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1318.638100][T13326] team0: Port device team_slave_0 added [ 1318.641595][T13326] team0: Port device team_slave_1 added [ 1318.878789][T13326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1318.878808][T13326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.878833][T13326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1318.881102][T13326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1318.881117][T13326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.881142][T13326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1319.065552][ T5603] Bluetooth: hci0: command tx timeout [ 1319.664620][T13373] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1319.699769][T13373] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1319.701034][T13373] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1319.724685][T13373] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1319.725407][T13373] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1320.713971][ T5603] Bluetooth: hci2: command tx timeout [ 1321.355608][T13373] Bluetooth: hci0: command tx timeout [ 1321.442834][T13326] hsr_slave_0: entered promiscuous mode [ 1321.443611][T13326] hsr_slave_1: entered promiscuous mode [ 1321.444107][T13326] debugfs: 'hsr0' already exists in 'hsr' [ 1321.444121][T13326] Cannot create hsr debugfs directory [ 1321.970272][ T31] Process accounting resumed [ 1322.659770][T13373] Bluetooth: hci1: command tx timeout [ 1322.748175][T13373] Bluetooth: hci2: command tx timeout [ 1323.375590][T13373] Bluetooth: hci0: command tx timeout [ 1324.745677][T13373] Bluetooth: hci1: command tx timeout [ 1324.816097][T13373] Bluetooth: hci2: command tx timeout [ 1325.789720][T13032] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1325.819653][T13032] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1325.907397][T13032] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1325.959877][T13032] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1326.023564][T13032] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1326.080514][T13032] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1326.126232][T13032] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1326.191423][T13032] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1326.825620][T13373] Bluetooth: hci1: command tx timeout [ 1326.906245][T13373] Bluetooth: hci2: command tx timeout [ 1327.419556][T11383] bridge_slave_1: left allmulticast mode [ 1327.419592][T11383] bridge_slave_1: left promiscuous mode [ 1327.419923][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.607638][T11383] bridge_slave_0: left allmulticast mode [ 1327.607676][T11383] bridge_slave_0: left promiscuous mode [ 1327.607948][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.997648][ T5727] Process accounting resumed [ 1328.694283][ T5603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1328.786722][ T5603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1328.818325][ T5603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1328.896131][ T5594] Bluetooth: hci1: command tx timeout [ 1328.949508][ T5603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1329.011852][ T5603] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1331.375659][T13373] Bluetooth: hci4: command tx timeout [ 1332.150639][T11383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1332.356622][ T1248] Process accounting resumed [ 1333.455571][T13373] Bluetooth: hci4: command tx timeout [ 1333.876256][T11383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1334.434468][T11383] bond0 (unregistering): Released all slaves [ 1334.562902][T13371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.563402][T13371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.564406][T13371] bridge_slave_0: entered allmulticast mode [ 1334.681040][T13371] bridge_slave_0: entered promiscuous mode [ 1335.564725][T13373] Bluetooth: hci4: command tx timeout [ 1336.466040][T13371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.466178][T13371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.466375][T13371] bridge_slave_1: entered allmulticast mode [ 1336.470791][T13371] bridge_slave_1: entered promiscuous mode [ 1336.985637][T11383] hsr_slave_0: left promiscuous mode [ 1337.025672][T11383] hsr_slave_1: left promiscuous mode [ 1337.026972][T11383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1337.076629][T11383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1337.277589][T13507] netlink: 72 bytes leftover after parsing attributes in process `syz.3.983'. [ 1337.310009][T13507] syz.3.983 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1337.310040][T13507] CPU: 0 UID: 0 PID: 13507 Comm: syz.3.983 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1337.310054][T13507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1337.310062][T13507] Call Trace: [ 1337.310067][T13507] [ 1337.310073][T13507] dump_stack_lvl+0xe8/0x150 [ 1337.310095][T13507] dump_header+0xd3/0x4b0 [ 1337.310113][T13507] oom_kill_process+0x3ab/0x9e0 [ 1337.310129][T13507] out_of_memory+0x1064/0x1480 [ 1337.310149][T13507] ? __pfx_out_of_memory+0x10/0x10 [ 1337.310161][T13507] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1337.310177][T13507] ? _mutex_lock_killable+0x152/0x1d0 [ 1337.310189][T13507] ? try_charge_memcg+0xcc3/0x16f0 [ 1337.310203][T13507] try_charge_memcg+0xd82/0x16f0 [ 1337.310225][T13507] ? __pfx_try_charge_memcg+0x10/0x10 [ 1337.310240][T13507] ? percpu_ref_tryget+0x15/0x180 [ 1337.310258][T13507] ? __obj_cgroup_charge+0x36/0x2c0 [ 1337.310277][T13507] __obj_cgroup_charge+0x1fd/0x2c0 [ 1337.310293][T13507] ? __obj_cgroup_charge+0x36/0x2c0 [ 1337.310310][T13507] __memcg_slab_post_alloc_hook+0x7a2/0xde0 [ 1337.310337][T13507] __kmalloc_cache_noprof+0x42e/0x680 [ 1337.310354][T13507] ? kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1337.310369][T13507] ? kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1337.310391][T13507] kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1337.310410][T13507] kvm_vm_ioctl+0xb1b/0xd30 [ 1337.310428][T13507] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1337.310454][T13507] ? kasan_quarantine_put+0xbb/0x1f0 [ 1337.310475][T13507] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1337.310491][T13507] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1337.310508][T13507] ? do_vfs_ioctl+0x1184/0x1550 [ 1337.310525][T13507] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1337.310548][T13507] ? hook_file_ioctl+0x1f5/0x610 [ 1337.310563][T13507] ? __asan_memset+0x22/0x50 [ 1337.310578][T13507] ? smack_file_ioctl+0x335/0x370 [ 1337.310594][T13507] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1337.310613][T13507] ? __fget_files+0x2a/0x420 [ 1337.310625][T13507] ? __fget_files+0x3a8/0x420 [ 1337.310637][T13507] ? __fget_files+0x2a/0x420 [ 1337.310652][T13507] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1337.310666][T13507] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1337.310682][T13507] __se_sys_ioctl+0xff/0x170 [ 1337.310699][T13507] do_syscall_64+0x166/0x520 [ 1337.310713][T13507] ? trace_irq_disable+0x3b/0x140 [ 1337.310727][T13507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.310738][T13507] ? clear_bhb_loop+0x70/0xc0 [ 1337.310752][T13507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.310762][T13507] RIP: 0033:0x7f152c13e1d9 [ 1337.310775][T13507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1337.310784][T13507] RSP: 002b:00007f152a375028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1337.310797][T13507] RAX: ffffffffffffffda RBX: 00007f152c3c6090 RCX: 00007f152c13e1d9 [ 1337.310805][T13507] RDX: 00002000000000c0 RSI: 000000004010ae67 RDI: 000000000000000a [ 1337.310813][T13507] RBP: 00007f152c1d5888 R08: 0000000000000000 R09: 0000000000000000 [ 1337.310820][T13507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1337.310826][T13507] R13: 00007f152c3c6128 R14: 00007f152c3c6090 R15: 00007fffffd1ed68 [ 1337.310844][T13507] [ 1337.310858][T13507] memory: usage 0kB, limit 0kB, failcnt 235 [ 1337.310866][T13507] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1337.310874][T13507] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1337.310880][T13507] Memory cgroup stats for /syz3/test: [ 1337.310947][T13507] cache 0 [ 1337.310958][T13507] rss 0 [ 1337.310962][T13507] shmem 0 [ 1337.310966][T13507] mapped_file 0 [ 1337.310970][T13507] dirty 0 [ 1337.310974][T13507] writeback 0 [ 1337.310978][T13507] workingset_refault_anon 0 [ 1337.310982][T13507] workingset_refault_file 0 [ 1337.310986][T13507] swap 0 [ 1337.310990][T13507] swapcached 0 [ 1337.310994][T13507] pgpgin 0 [ 1337.310997][T13507] pgpgout 0 [ 1337.311001][T13507] pgfault 5 [ 1337.311005][T13507] pgmajfault 0 [ 1337.311009][T13507] inactive_anon 0 [ 1337.311013][T13507] active_anon 0 [ 1337.311017][T13507] inactive_file 0 [ 1337.311021][T13507] active_file 0 [ 1337.311024][T13507] unevictable 0 [ 1337.311028][T13507] hierarchical_memory_limit 0 [ 1337.311033][T13507] hierarchical_memsw_limit 9223372036854771712 [ 1337.311038][T13507] total_cache 0 [ 1337.311041][T13507] total_rss 0 [ 1337.311045][T13507] total_shmem 0 [ 1337.311049][T13507] total_mapped_file 0 [ 1337.311053][T13507] total_dirty 0 [ 1337.311057][T13507] total_writeback 0 [ 1337.311061][T13507] total_workingset_refault_anon 0 [ 1337.311065][T13507] total_workingset_refault_file 0 [ 1337.311070][T13507] total_swap 0 [ 1337.311073][T13507] total_swapcached 0 [ 1337.311078][T13507] total_pgpgin 0 [ 1337.311081][T13507] total_pgpgout 0 [ 1337.311086][T13507] total_pgfault 5 [ 1337.311089][T13507] total_pgmajfault 0 [ 1337.311093][T13507] total_inactive_anon 0 [ 1337.311097][T13507] total_active_anon 0 [ 1337.311101][T13507] total_inactive_file 0 [ 1337.311105][T13507] total_active_file 0 [ 1337.311108][T13507] total_unevictable 0 [ 1337.311113][T13507] anon_cost 0 [ 1337.311116][T13507] file_cost 0 [ 1337.311121][T13507] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.983,pid=13505,uid=0 [ 1337.311223][T13507] Memory cgroup out of memory: Killed process 13505 (syz.3.983) total-vm:102392kB, anon-rss:1456kB, file-rss:23188kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1337.615722][T13373] Bluetooth: hci4: command tx timeout [ 1337.820659][T11383] team0 (unregistering): Port device team_slave_1 removed [ 1337.876152][T11383] team0 (unregistering): Port device team_slave_0 removed [ 1338.075068][T13506] netlink: 830 bytes leftover after parsing attributes in process `syz.3.983'. [ 1338.094504][T13371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1338.119528][T13371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1338.371953][T13371] team0: Port device team_slave_0 added [ 1338.416933][T13371] team0: Port device team_slave_1 added [ 1338.588394][T13405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.590040][T13405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.590178][T13405] bridge_slave_0: entered allmulticast mode [ 1338.591566][T13405] bridge_slave_0: entered promiscuous mode [ 1338.649429][T13405] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.649515][T13405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.649618][T13405] bridge_slave_1: entered allmulticast mode [ 1338.651057][T13405] bridge_slave_1: entered promiscuous mode [ 1338.654105][T13371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1338.654115][T13371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1338.654129][T13371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1338.759979][T13371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1338.759992][T13371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1338.760007][T13371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1338.897540][T13405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.001006][T13405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1339.344897][T13405] team0: Port device team_slave_0 added [ 1339.361977][T13371] hsr_slave_0: entered promiscuous mode [ 1339.364279][T13371] hsr_slave_1: entered promiscuous mode [ 1339.399811][T13405] team0: Port device team_slave_1 added [ 1339.546773][T13405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1339.546788][T13405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1339.546808][T13405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1339.655426][T13405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.655446][T13405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1339.655830][T13405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1341.076063][T13405] hsr_slave_0: entered promiscuous mode [ 1341.077509][T13405] hsr_slave_1: entered promiscuous mode [ 1341.079519][T13405] debugfs: 'hsr0' already exists in 'hsr' [ 1341.079679][T13405] Cannot create hsr debugfs directory [ 1343.968960][T13326] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1344.000719][T13326] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1344.341336][T13326] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1344.401257][T13326] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1344.486645][T13326] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1344.522067][T13326] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1344.886530][T13326] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1345.805309][T13326] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1347.054631][T13483] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.054804][T13483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.054926][T13483] bridge_slave_0: entered allmulticast mode [ 1347.078500][T13483] bridge_slave_0: entered promiscuous mode [ 1347.093078][T13553] netlink: 830 bytes leftover after parsing attributes in process `syz.3.990'. [ 1347.134051][T13483] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.134244][T13483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.134412][T13483] bridge_slave_1: entered allmulticast mode [ 1347.158956][T13483] bridge_slave_1: entered promiscuous mode [ 1347.187541][T13554] netlink: 72 bytes leftover after parsing attributes in process `syz.3.990'. [ 1347.277186][T13553] syz.3.990 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1347.277222][T13553] CPU: 0 UID: 0 PID: 13553 Comm: syz.3.990 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1347.277235][T13553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1347.277243][T13553] Call Trace: [ 1347.277248][T13553] [ 1347.277253][T13553] dump_stack_lvl+0xe8/0x150 [ 1347.277275][T13553] dump_header+0xd3/0x4b0 [ 1347.277292][T13553] oom_kill_process+0x3ab/0x9e0 [ 1347.277308][T13553] out_of_memory+0x1064/0x1480 [ 1347.277328][T13553] ? __pfx_out_of_memory+0x10/0x10 [ 1347.277342][T13553] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1347.277358][T13553] ? _mutex_lock_killable+0x152/0x1d0 [ 1347.277369][T13553] ? try_charge_memcg+0xcc3/0x16f0 [ 1347.277384][T13553] try_charge_memcg+0xd82/0x16f0 [ 1347.277405][T13553] ? __pfx_try_charge_memcg+0x10/0x10 [ 1347.277420][T13553] ? percpu_ref_tryget+0x15/0x180 [ 1347.277439][T13553] ? __obj_cgroup_charge+0x36/0x2c0 [ 1347.277458][T13553] __obj_cgroup_charge+0x1fd/0x2c0 [ 1347.277473][T13553] ? __obj_cgroup_charge+0x36/0x2c0 [ 1347.277490][T13553] __memcg_slab_post_alloc_hook+0x7a2/0xde0 [ 1347.277517][T13553] __kmalloc_cache_noprof+0x42e/0x680 [ 1347.277534][T13553] ? kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1347.277550][T13553] ? kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1347.277569][T13553] kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1347.277588][T13553] kvm_vm_ioctl+0xb1b/0xd30 [ 1347.277606][T13553] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1347.277632][T13553] ? kasan_quarantine_put+0xbb/0x1f0 [ 1347.277653][T13553] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1347.277669][T13553] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1347.277686][T13553] ? do_vfs_ioctl+0x1184/0x1550 [ 1347.277703][T13553] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1347.277726][T13553] ? hook_file_ioctl+0x1f5/0x610 [ 1347.277741][T13553] ? __asan_memset+0x22/0x50 [ 1347.277756][T13553] ? smack_file_ioctl+0x335/0x370 [ 1347.277773][T13553] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1347.277792][T13553] ? __fget_files+0x2a/0x420 [ 1347.277805][T13553] ? __fget_files+0x3a8/0x420 [ 1347.277817][T13553] ? __fget_files+0x2a/0x420 [ 1347.277831][T13553] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1347.277845][T13553] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1347.277861][T13553] __se_sys_ioctl+0xff/0x170 [ 1347.277878][T13553] do_syscall_64+0x166/0x520 [ 1347.277892][T13553] ? trace_irq_disable+0x3b/0x140 [ 1347.277906][T13553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.277918][T13553] ? clear_bhb_loop+0x70/0xc0 [ 1347.277931][T13553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.277942][T13553] RIP: 0033:0x7f152c13e1d9 [ 1347.277954][T13553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1347.277963][T13553] RSP: 002b:00007f152a396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1347.277976][T13553] RAX: ffffffffffffffda RBX: 00007f152c3c5fa0 RCX: 00007f152c13e1d9 [ 1347.277984][T13553] RDX: 00002000000000c0 RSI: 000000004010ae67 RDI: 000000000000000a [ 1347.277991][T13553] RBP: 00007f152c1d5888 R08: 0000000000000000 R09: 0000000000000000 [ 1347.277998][T13553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1347.278012][T13553] R13: 00007f152c3c6038 R14: 00007f152c3c5fa0 R15: 00007fffffd1ed68 [ 1347.278031][T13553] [ 1347.278036][T13553] memory: usage 0kB, limit 0kB, failcnt 271 [ 1347.278043][T13553] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1347.278051][T13553] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1347.278058][T13553] Memory cgroup stats for /syz3/test: [ 1347.278131][T13553] cache 0 [ 1347.278137][T13553] rss 0 [ 1347.278145][T13553] shmem 0 [ 1347.278149][T13553] mapped_file 0 [ 1347.278152][T13553] dirty 0 [ 1347.278156][T13553] writeback 0 [ 1347.278160][T13553] workingset_refault_anon 0 [ 1347.278164][T13553] workingset_refault_file 0 [ 1347.278168][T13553] swap 0 [ 1347.278172][T13553] swapcached 0 [ 1347.278175][T13553] pgpgin 0 [ 1347.278179][T13553] pgpgout 0 [ 1347.278182][T13553] pgfault 5 [ 1347.278186][T13553] pgmajfault 0 [ 1347.278189][T13553] inactive_anon 0 [ 1347.278193][T13553] active_anon 0 [ 1347.278196][T13553] inactive_file 0 [ 1347.278200][T13553] active_file 0 [ 1347.278204][T13553] unevictable 0 [ 1347.278207][T13553] hierarchical_memory_limit 0 [ 1347.278211][T13553] hierarchical_memsw_limit 9223372036854771712 [ 1347.278216][T13553] total_cache 0 [ 1347.278219][T13553] total_rss 0 [ 1347.278223][T13553] total_shmem 0 [ 1347.278226][T13553] total_mapped_file 0 [ 1347.278230][T13553] total_dirty 0 [ 1347.278233][T13553] total_writeback 0 [ 1347.278249][T13553] total_workingset_refault_anon 0 [ 1347.278253][T13553] total_workingset_refault_file 0 [ 1347.279871][T13553] total_swap 0 [ 1347.279877][T13553] total_swapcached 0 [ 1347.279881][T13553] total_pgpgin 0 [ 1347.279884][T13553] total_pgpgout 0 [ 1347.279888][T13553] total_pgfault 5 [ 1347.279892][T13553] total_pgmajfault 0 [ 1347.279896][T13553] total_inactive_anon 0 [ 1347.279901][T13553] total_active_anon 0 [ 1347.279905][T13553] total_inactive_file 0 [ 1347.279909][T13553] total_active_file 0 [ 1347.279913][T13553] total_unevictable 0 [ 1347.279916][T13553] anon_cost 0 [ 1347.279920][T13553] file_cost 0 [ 1347.279925][T13553] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.990,pid=13552,uid=0 [ 1347.280017][T13553] Memory cgroup out of memory: Killed process 13552 (syz.3.990) total-vm:102392kB, anon-rss:1456kB, file-rss:23188kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1348.007663][T13483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1348.089793][T13483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1348.722924][T13483] team0: Port device team_slave_0 added [ 1348.870714][T13483] team0: Port device team_slave_1 added [ 1349.245758][T13483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1349.245778][T13483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.245806][T13483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1349.260388][T13483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1349.260405][T13483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.260431][T13483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1349.629487][T13483] hsr_slave_0: entered promiscuous mode [ 1349.654015][T13483] hsr_slave_1: entered promiscuous mode [ 1349.681405][T13483] debugfs: 'hsr0' already exists in 'hsr' [ 1349.681433][T13483] Cannot create hsr debugfs directory [ 1351.130226][T13326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1351.262515][T13326] 8021q: adding VLAN 0 to HW filter on device team0 [ 1351.283054][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.283199][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1351.315328][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.321666][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1354.993969][T11383] bridge_slave_1: left allmulticast mode [ 1354.994005][T11383] bridge_slave_1: left promiscuous mode [ 1354.994260][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.169865][T11383] bridge_slave_0: left allmulticast mode [ 1355.169903][T11383] bridge_slave_0: left promiscuous mode [ 1355.170182][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.437338][T11383] bridge_slave_1: left allmulticast mode [ 1355.437366][T11383] bridge_slave_1: left promiscuous mode [ 1355.437523][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.636553][T11383] bridge_slave_0: left allmulticast mode [ 1355.636581][T11383] bridge_slave_0: left promiscuous mode [ 1355.636737][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.876231][T13636] netlink: 72 bytes leftover after parsing attributes in process `syz.3.997'. [ 1355.935825][T11383] bridge_slave_1: left allmulticast mode [ 1355.935862][T11383] bridge_slave_1: left promiscuous mode [ 1355.936164][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.976860][T13636] syz.3.997 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1355.976893][T13636] CPU: 1 UID: 0 PID: 13636 Comm: syz.3.997 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1355.976906][T13636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1355.976913][T13636] Call Trace: [ 1355.976919][T13636] [ 1355.976924][T13636] dump_stack_lvl+0xe8/0x150 [ 1355.976945][T13636] dump_header+0xd3/0x4b0 [ 1355.976963][T13636] oom_kill_process+0x3ab/0x9e0 [ 1355.976978][T13636] out_of_memory+0x1064/0x1480 [ 1355.976997][T13636] ? __pfx_out_of_memory+0x10/0x10 [ 1355.977009][T13636] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1355.977025][T13636] ? _mutex_lock_killable+0x152/0x1d0 [ 1355.977036][T13636] ? try_charge_memcg+0xcc3/0x16f0 [ 1355.977049][T13636] try_charge_memcg+0xd82/0x16f0 [ 1355.977071][T13636] ? __pfx_try_charge_memcg+0x10/0x10 [ 1355.977086][T13636] ? percpu_ref_tryget+0x15/0x180 [ 1355.977104][T13636] ? __obj_cgroup_charge+0x36/0x2c0 [ 1355.977123][T13636] __obj_cgroup_charge+0x1fd/0x2c0 [ 1355.977139][T13636] ? __obj_cgroup_charge+0x36/0x2c0 [ 1355.977157][T13636] __memcg_slab_post_alloc_hook+0x7a2/0xde0 [ 1355.977184][T13636] __kmalloc_cache_noprof+0x42e/0x680 [ 1355.977201][T13636] ? kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1355.977216][T13636] ? kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1355.977235][T13636] kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1355.977254][T13636] kvm_vm_ioctl+0xb1b/0xd30 [ 1355.977271][T13636] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1355.977297][T13636] ? kasan_quarantine_put+0xbb/0x1f0 [ 1355.977318][T13636] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1355.977334][T13636] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1355.977351][T13636] ? do_vfs_ioctl+0x1184/0x1550 [ 1355.977368][T13636] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1355.977394][T13636] ? hook_file_ioctl+0x1f5/0x610 [ 1355.977410][T13636] ? __asan_memset+0x22/0x50 [ 1355.977424][T13636] ? smack_file_ioctl+0x335/0x370 [ 1355.977440][T13636] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1355.977460][T13636] ? __fget_files+0x2a/0x420 [ 1355.977472][T13636] ? __fget_files+0x3a8/0x420 [ 1355.977484][T13636] ? __fget_files+0x2a/0x420 [ 1355.977498][T13636] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1355.977512][T13636] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1355.977528][T13636] __se_sys_ioctl+0xff/0x170 [ 1355.977545][T13636] do_syscall_64+0x166/0x520 [ 1355.977559][T13636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.977570][T13636] ? clear_bhb_loop+0x70/0xc0 [ 1355.977583][T13636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.977594][T13636] RIP: 0033:0x7f152c13e1d9 [ 1355.977606][T13636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1355.977615][T13636] RSP: 002b:00007f152a375028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1355.977628][T13636] RAX: ffffffffffffffda RBX: 00007f152c3c6090 RCX: 00007f152c13e1d9 [ 1355.977636][T13636] RDX: 00002000000000c0 RSI: 000000004010ae67 RDI: 000000000000000a [ 1355.977644][T13636] RBP: 00007f152c1d5888 R08: 0000000000000000 R09: 0000000000000000 [ 1355.977651][T13636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1355.977657][T13636] R13: 00007f152c3c6128 R14: 00007f152c3c6090 R15: 00007fffffd1ed68 [ 1355.977675][T13636] [ 1355.977680][T13636] memory: usage 0kB, limit 0kB, failcnt 307 [ 1355.977687][T13636] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1355.977694][T13636] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1355.977701][T13636] Memory cgroup stats for /syz3/test: [ 1355.979078][T13636] cache 0 [ 1355.979087][T13636] rss 0 [ 1355.979091][T13636] shmem 0 [ 1355.979094][T13636] mapped_file 0 [ 1355.979099][T13636] dirty 0 [ 1355.979102][T13636] writeback 0 [ 1355.979106][T13636] workingset_refault_anon 0 [ 1355.979110][T13636] workingset_refault_file 0 [ 1355.979115][T13636] swap 0 [ 1355.979118][T13636] swapcached 0 [ 1355.979122][T13636] pgpgin 0 [ 1355.979125][T13636] pgpgout 0 [ 1355.979129][T13636] pgfault 7 [ 1355.979133][T13636] pgmajfault 0 [ 1355.979137][T13636] inactive_anon 0 [ 1355.979141][T13636] active_anon 0 [ 1355.979145][T13636] inactive_file 0 [ 1355.979149][T13636] active_file 0 [ 1355.979153][T13636] unevictable 0 [ 1355.979157][T13636] hierarchical_memory_limit 0 [ 1355.979161][T13636] hierarchical_memsw_limit 9223372036854771712 [ 1355.979165][T13636] total_cache 0 [ 1355.979169][T13636] total_rss 0 [ 1355.979173][T13636] total_shmem 0 [ 1355.979176][T13636] total_mapped_file 0 [ 1355.979180][T13636] total_dirty 0 [ 1355.979184][T13636] total_writeback 0 [ 1355.979187][T13636] total_workingset_refault_anon 0 [ 1355.979192][T13636] total_workingset_refault_file 0 [ 1355.979196][T13636] total_swap 0 [ 1355.979200][T13636] total_swapcached 0 [ 1355.979203][T13636] total_pgpgin 0 [ 1355.979207][T13636] total_pgpgout 0 [ 1355.979211][T13636] total_pgfault 7 [ 1355.979215][T13636] total_pgmajfault 0 [ 1355.979220][T13636] total_inactive_anon 0 [ 1355.979223][T13636] total_active_anon 0 [ 1355.979227][T13636] total_inactive_file 0 [ 1355.979231][T13636] total_active_file 0 [ 1355.979235][T13636] total_unevictable 0 [ 1355.979239][T13636] anon_cost 0 [ 1355.979243][T13636] file_cost 0 [ 1355.979250][T13636] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.997,pid=13634,uid=0 [ 1356.235622][T13636] Memory cgroup out of memory: Killed process 13634 (syz.3.997) total-vm:102392kB, anon-rss:1456kB, file-rss:23252kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1356.707287][T11383] bridge_slave_0: left allmulticast mode [ 1356.707357][T11383] bridge_slave_0: left promiscuous mode [ 1356.707512][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.117404][T11383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.196173][T11383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1357.257425][T11383] bond0 (unregistering): Released all slaves [ 1357.516130][T11383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.596446][T11383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1357.677138][T11383] bond0 (unregistering): Released all slaves [ 1357.966306][T11383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1358.067905][T11383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1358.127019][T11383] bond0 (unregistering): Released all slaves [ 1358.154211][ T5250] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1358.162627][T13635] netlink: 830 bytes leftover after parsing attributes in process `syz.3.997'. [ 1358.824002][T13326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1359.495853][T11383] hsr_slave_0: left promiscuous mode [ 1359.556472][T11383] hsr_slave_1: left promiscuous mode [ 1359.557942][T11383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.578842][T11383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1359.737067][T11383] hsr_slave_0: left promiscuous mode [ 1359.786264][T11383] hsr_slave_1: left promiscuous mode [ 1359.786980][T11383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.906573][T11383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.186726][T11383] hsr_slave_0: left promiscuous mode [ 1360.205674][T11383] hsr_slave_1: left promiscuous mode [ 1360.207285][T11383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1360.246198][T11383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.867763][T11383] team0 (unregistering): Port device team_slave_1 removed [ 1360.916080][T11383] team0 (unregistering): Port device team_slave_0 removed [ 1361.446378][T11383] team0 (unregistering): Port device team_slave_1 removed [ 1361.636564][T11383] team0 (unregistering): Port device team_slave_0 removed [ 1361.681646][T12205] Process accounting resumed [ 1365.029715][T11383] team0 (unregistering): Port device team_slave_1 removed [ 1365.867365][T11383] team0 (unregistering): Port device team_slave_0 removed [ 1367.279437][ T5250] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1367.831116][T13326] veth0_vlan: entered promiscuous mode [ 1367.859451][T13326] veth1_vlan: entered promiscuous mode [ 1367.989571][T13326] veth0_macvtap: entered promiscuous mode [ 1368.003470][T13326] veth1_macvtap: entered promiscuous mode [ 1368.087284][T13326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1368.147739][T13326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1368.346217][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.355735][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.355781][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.355815][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.528612][ T5250] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1369.848036][ T1021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1369.848065][ T1021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1369.920965][T13701] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1004'. [ 1369.934868][T13700] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1004'. [ 1370.110781][T13371] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1370.148688][T13371] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1370.192937][T13371] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1370.218732][T13371] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1370.228404][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.228423][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.860960][T13371] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1370.900412][T13371] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1370.903176][T13371] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1370.953178][T13371] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1371.857337][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.857402][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1372.161353][T13371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1372.546374][ T199] Process accounting resumed [ 1375.571503][T13371] 8021q: adding VLAN 0 to HW filter on device team0 [ 1375.648078][ T3180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.648156][ T3180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1375.678541][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.678686][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1380.284966][ T5706] Process accounting resumed [ 1381.316323][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1381.350561][ T5603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1381.353767][ T5603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1381.376299][ T5603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1381.380876][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1383.621419][ T5603] Bluetooth: hci2: command tx timeout [ 1384.058441][T13373] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1384.096697][T13373] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1384.114263][T13373] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1384.127167][T13373] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1384.129694][T13373] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1384.580383][T13843] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1011'. [ 1384.686599][T13840] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1011'. [ 1385.714397][ T5603] Bluetooth: hci2: command tx timeout [ 1385.725846][ T31] Process accounting resumed [ 1386.265655][ T5603] Bluetooth: hci5: command tx timeout [ 1387.775617][ T5603] Bluetooth: hci2: command tx timeout [ 1388.335567][ T5603] Bluetooth: hci5: command tx timeout [ 1390.121304][ T5603] Bluetooth: hci2: command tx timeout [ 1390.170727][T13373] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1390.234736][T13373] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1390.243312][T13373] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1390.245890][T13373] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1390.246719][T13373] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1390.463691][ T5603] Bluetooth: hci5: command tx timeout [ 1390.911092][T12205] Process accounting resumed [ 1392.495548][T13373] Bluetooth: hci5: command tx timeout [ 1392.635600][T13373] Bluetooth: hci1: command tx timeout [ 1394.636158][T13900] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1021'. [ 1394.654906][T13898] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1021'. [ 1394.655856][T13373] Bluetooth: hci1: command tx timeout [ 1395.669084][T11383] bridge_slave_1: left allmulticast mode [ 1395.669110][T11383] bridge_slave_1: left promiscuous mode [ 1395.669274][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.976358][ T5706] Process accounting resumed [ 1396.175578][T11383] bridge_slave_0: left allmulticast mode [ 1396.175615][T11383] bridge_slave_0: left promiscuous mode [ 1396.175843][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.735815][T13373] Bluetooth: hci1: command tx timeout [ 1398.815757][T13373] Bluetooth: hci1: command tx timeout [ 1400.346325][T11383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1400.427333][T11383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1400.467958][T11383] bond0 (unregistering): Released all slaves [ 1402.123223][T13814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.123311][T13814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.123417][T13814] bridge_slave_0: entered allmulticast mode [ 1402.124901][T13814] bridge_slave_0: entered promiscuous mode [ 1402.150675][T13814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.150853][T13814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.151008][T13814] bridge_slave_1: entered allmulticast mode [ 1402.156126][T13814] bridge_slave_1: entered promiscuous mode [ 1402.246437][T11383] hsr_slave_0: left promiscuous mode [ 1402.266911][T11383] hsr_slave_1: left promiscuous mode [ 1402.268251][T11383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1402.307861][T11383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1405.311961][T13941] Process accounting resumed [ 1406.349302][T11383] team0 (unregistering): Port device team_slave_1 removed [ 1406.375907][T12205] Process accounting resumed [ 1406.408303][T11383] team0 (unregistering): Port device team_slave_0 removed [ 1406.792029][T13944] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1029'. [ 1406.902136][T13814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1407.086175][T13814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1407.978194][T13814] team0: Port device team_slave_0 added [ 1408.036678][T13814] team0: Port device team_slave_1 added [ 1409.190649][T13814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1409.190669][T13814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1409.190693][T13814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1409.193693][T13814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1409.193710][T13814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1409.193734][T13814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1409.441434][T13834] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.441558][T13834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.441758][T13834] bridge_slave_0: entered allmulticast mode [ 1409.444523][T13834] bridge_slave_0: entered promiscuous mode [ 1409.465808][T13834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.466007][T13834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.466171][T13834] bridge_slave_1: entered allmulticast mode [ 1409.469401][T13834] bridge_slave_1: entered promiscuous mode [ 1409.661897][T13814] hsr_slave_0: entered promiscuous mode [ 1409.663087][T13814] hsr_slave_1: entered promiscuous mode [ 1409.681117][T13834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1409.742078][T13834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.032499][T13834] team0: Port device team_slave_0 added [ 1410.244511][T13834] team0: Port device team_slave_1 added [ 1412.219123][ T5250] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1412.265120][T13834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1412.265134][T13834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1412.265148][T13834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1413.279016][T13834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1413.279029][T13834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1413.279044][T13834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1414.045635][T14023] syz.3.1040 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1414.045678][T14023] CPU: 0 UID: 0 PID: 14023 Comm: syz.3.1040 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1414.045703][T14023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1414.045715][T14023] Call Trace: [ 1414.045725][T14023] [ 1414.045734][T14023] dump_stack_lvl+0xe8/0x150 [ 1414.045763][T14023] dump_header+0xd3/0x4b0 [ 1414.045780][T14023] oom_kill_process+0x3ab/0x9e0 [ 1414.045796][T14023] out_of_memory+0x1064/0x1480 [ 1414.045815][T14023] ? __pfx_out_of_memory+0x10/0x10 [ 1414.045827][T14023] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1414.045843][T14023] ? _mutex_lock_killable+0x152/0x1d0 [ 1414.045855][T14023] ? try_charge_memcg+0xcc3/0x16f0 [ 1414.045870][T14023] try_charge_memcg+0xd82/0x16f0 [ 1414.045892][T14023] ? __pfx_try_charge_memcg+0x10/0x10 [ 1414.045908][T14023] ? percpu_ref_tryget+0x15/0x180 [ 1414.045934][T14023] ? __obj_cgroup_charge+0x36/0x2c0 [ 1414.045954][T14023] __obj_cgroup_charge+0x1fd/0x2c0 [ 1414.045970][T14023] ? __obj_cgroup_charge+0x36/0x2c0 [ 1414.045988][T14023] __memcg_slab_post_alloc_hook+0x7a2/0xde0 [ 1414.046015][T14023] __kmalloc_cache_noprof+0x42e/0x680 [ 1414.046033][T14023] ? kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1414.046049][T14023] ? kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1414.046068][T14023] kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1414.046086][T14023] kvm_vm_ioctl+0xb1b/0xd30 [ 1414.046104][T14023] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1414.046131][T14023] ? kasan_quarantine_put+0xbb/0x1f0 [ 1414.046152][T14023] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1414.046168][T14023] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1414.046185][T14023] ? do_vfs_ioctl+0x1184/0x1550 [ 1414.046202][T14023] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1414.046227][T14023] ? hook_file_ioctl+0x1f5/0x610 [ 1414.046242][T14023] ? __asan_memset+0x22/0x50 [ 1414.046257][T14023] ? smack_file_ioctl+0x335/0x370 [ 1414.046274][T14023] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1414.046294][T14023] ? __fget_files+0x2a/0x420 [ 1414.046306][T14023] ? __fget_files+0x3a8/0x420 [ 1414.046319][T14023] ? __fget_files+0x2a/0x420 [ 1414.046333][T14023] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1414.046347][T14023] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1414.046363][T14023] __se_sys_ioctl+0xff/0x170 [ 1414.046380][T14023] do_syscall_64+0x166/0x520 [ 1414.046394][T14023] ? trace_irq_disable+0x3b/0x140 [ 1414.046409][T14023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.046420][T14023] ? clear_bhb_loop+0x70/0xc0 [ 1414.046437][T14023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.046448][T14023] RIP: 0033:0x7f152c13e1d9 [ 1414.046460][T14023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1414.046469][T14023] RSP: 002b:00007f152a375028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1414.046482][T14023] RAX: ffffffffffffffda RBX: 00007f152c3c6090 RCX: 00007f152c13e1d9 [ 1414.046491][T14023] RDX: 00002000000000c0 RSI: 000000004010ae67 RDI: 000000000000000a [ 1414.046498][T14023] RBP: 00007f152c1d5888 R08: 0000000000000000 R09: 0000000000000000 [ 1414.046505][T14023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1414.046512][T14023] R13: 00007f152c3c6128 R14: 00007f152c3c6090 R15: 00007fffffd1ed68 [ 1414.046531][T14023] [ 1414.050287][T14023] memory: usage 0kB, limit 0kB, failcnt 343 [ 1414.050308][T14023] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1414.050320][T14023] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1414.050327][T14023] Memory cgroup stats for /syz3/test: [ 1414.050393][T14023] cache 0 [ 1414.051380][T14023] rss 0 [ 1414.051390][T14023] shmem 0 [ 1414.051397][T14023] mapped_file 0 [ 1414.051404][T14023] dirty 0 [ 1414.051411][T14023] writeback 0 [ 1414.051416][T14023] workingset_refault_anon 0 [ 1414.051420][T14023] workingset_refault_file 0 [ 1414.051424][T14023] swap 0 [ 1414.051429][T14023] swapcached 0 [ 1414.051435][T14023] pgpgin 0 [ 1414.051439][T14023] pgpgout 0 [ 1414.051442][T14023] pgfault 9 [ 1414.051446][T14023] pgmajfault 0 [ 1414.051449][T14023] inactive_anon 0 [ 1414.051453][T14023] active_anon 0 [ 1414.051457][T14023] inactive_file 0 [ 1414.051461][T14023] active_file 0 [ 1414.051465][T14023] unevictable 0 [ 1414.051469][T14023] hierarchical_memory_limit 0 [ 1414.051474][T14023] hierarchical_memsw_limit 9223372036854771712 [ 1414.051479][T14023] total_cache 0 [ 1414.051483][T14023] total_rss 0 [ 1414.051486][T14023] total_shmem 0 [ 1414.051490][T14023] total_mapped_file 0 [ 1414.051494][T14023] total_dirty 0 [ 1414.051498][T14023] total_writeback 0 [ 1414.051502][T14023] total_workingset_refault_anon 0 [ 1414.051506][T14023] total_workingset_refault_file 0 [ 1414.051510][T14023] total_swap 0 [ 1414.051514][T14023] total_swapcached 0 [ 1414.051518][T14023] total_pgpgin 0 [ 1414.051522][T14023] total_pgpgout 0 [ 1414.051526][T14023] total_pgfault 9 [ 1414.051530][T14023] total_pgmajfault 0 [ 1414.051534][T14023] total_inactive_anon 0 [ 1414.051538][T14023] total_active_anon 0 [ 1414.051542][T14023] total_inactive_file 0 [ 1414.051546][T14023] total_active_file 0 [ 1414.051550][T14023] total_unevictable 0 [ 1414.051554][T14023] anon_cost 0 [ 1414.051558][T14023] file_cost 0 [ 1414.051562][T14023] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.1040,pid=14021,uid=0 [ 1414.422826][T14023] Memory cgroup out of memory: Killed process 14021 (syz.3.1040) total-vm:102524kB, anon-rss:1460kB, file-rss:23188kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1414.620337][T14022] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1040'. [ 1414.692037][T13834] hsr_slave_0: entered promiscuous mode [ 1414.694818][T13834] hsr_slave_1: entered promiscuous mode [ 1414.695310][T13834] debugfs: 'hsr0' already exists in 'hsr' [ 1414.695325][T13834] Cannot create hsr debugfs directory [ 1414.774823][T13871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1414.782999][T13871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.783137][T13871] bridge_slave_0: entered allmulticast mode [ 1414.805087][T13871] bridge_slave_0: entered promiscuous mode [ 1415.030821][T13871] bridge0: port 2(bridge_slave_1) entered blocking state [ 1415.030942][T13871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.031166][T13871] bridge_slave_1: entered allmulticast mode [ 1415.033893][T13871] bridge_slave_1: entered promiscuous mode [ 1415.306411][T13871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1415.630196][T13871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1415.815796][ T1248] Process accounting resumed [ 1420.754391][ T5250] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1420.767056][T13871] team0: Port device team_slave_0 added [ 1420.784038][T13871] team0: Port device team_slave_1 added [ 1423.517090][T13871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1423.517104][T13871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1423.517118][T13871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1423.599198][T13871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1423.599215][T13871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1423.599229][T13871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1425.094294][T14079] syz.3.1049 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1425.094322][T14079] CPU: 1 UID: 0 PID: 14079 Comm: syz.3.1049 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1425.094336][T14079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1425.094343][T14079] Call Trace: [ 1425.094348][T14079] [ 1425.094354][T14079] dump_stack_lvl+0xe8/0x150 [ 1425.094375][T14079] dump_header+0xd3/0x4b0 [ 1425.094392][T14079] oom_kill_process+0x3ab/0x9e0 [ 1425.094408][T14079] out_of_memory+0x1064/0x1480 [ 1425.094426][T14079] ? __pfx_out_of_memory+0x10/0x10 [ 1425.094438][T14079] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1425.094454][T14079] ? _mutex_lock_killable+0x152/0x1d0 [ 1425.094465][T14079] ? try_charge_memcg+0xcc3/0x16f0 [ 1425.094480][T14079] try_charge_memcg+0xd82/0x16f0 [ 1425.094508][T14079] ? __pfx_try_charge_memcg+0x10/0x10 [ 1425.094523][T14079] ? percpu_ref_tryget+0x15/0x180 [ 1425.094543][T14079] ? __obj_cgroup_charge+0x36/0x2c0 [ 1425.094562][T14079] __obj_cgroup_charge+0x1fd/0x2c0 [ 1425.094578][T14079] ? __obj_cgroup_charge+0x36/0x2c0 [ 1425.094595][T14079] __memcg_slab_post_alloc_hook+0x7a2/0xde0 [ 1425.094627][T14079] __kmalloc_cache_noprof+0x42e/0x680 [ 1425.094658][T14079] ? kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1425.094684][T14079] ? kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1425.094719][T14079] kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1425.094744][T14079] kvm_vm_ioctl+0xb1b/0xd30 [ 1425.094778][T14079] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1425.094807][T14079] ? kasan_quarantine_put+0xbb/0x1f0 [ 1425.094829][T14079] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1425.094846][T14079] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1425.094867][T14079] ? do_vfs_ioctl+0x1184/0x1550 [ 1425.094885][T14079] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1425.094908][T14079] ? hook_file_ioctl+0x1f5/0x610 [ 1425.094923][T14079] ? __asan_memset+0x22/0x50 [ 1425.094938][T14079] ? smack_file_ioctl+0x335/0x370 [ 1425.094955][T14079] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1425.094974][T14079] ? __fget_files+0x2a/0x420 [ 1425.094990][T14079] ? __fget_files+0x3a8/0x420 [ 1425.095001][T14079] ? __fget_files+0x2a/0x420 [ 1425.095016][T14079] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1425.095029][T14079] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1425.095045][T14079] __se_sys_ioctl+0xff/0x170 [ 1425.095062][T14079] do_syscall_64+0x166/0x520 [ 1425.095077][T14079] ? trace_irq_disable+0x3b/0x140 [ 1425.095092][T14079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.095103][T14079] ? clear_bhb_loop+0x70/0xc0 [ 1425.095117][T14079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.095128][T14079] RIP: 0033:0x7f152c13e1d9 [ 1425.095140][T14079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1425.095149][T14079] RSP: 002b:00007f152a375028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1425.095163][T14079] RAX: ffffffffffffffda RBX: 00007f152c3c6090 RCX: 00007f152c13e1d9 [ 1425.095171][T14079] RDX: 00002000000000c0 RSI: 000000004010ae67 RDI: 000000000000000a [ 1425.095178][T14079] RBP: 00007f152c1d5888 R08: 0000000000000000 R09: 0000000000000000 [ 1425.095185][T14079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1425.095192][T14079] R13: 00007f152c3c6128 R14: 00007f152c3c6090 R15: 00007fffffd1ed68 [ 1425.095209][T14079] [ 1425.300743][T14079] memory: usage 0kB, limit 0kB, failcnt 379 [ 1425.300762][T14079] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1425.300777][T14079] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1425.300790][T14079] Memory cgroup stats for /syz3/test: [ 1425.300912][T14079] cache 0 [ 1425.300922][T14079] rss 0 [ 1425.300928][T14079] shmem 0 [ 1425.300935][T14079] mapped_file 0 [ 1425.300942][T14079] dirty 0 [ 1425.300948][T14079] writeback 0 [ 1425.300955][T14079] workingset_refault_anon 0 [ 1425.300962][T14079] workingset_refault_file 0 [ 1425.300970][T14079] swap 0 [ 1425.300977][T14079] swapcached 0 [ 1425.300983][T14079] pgpgin 0 [ 1425.300990][T14079] pgpgout 0 [ 1425.300996][T14079] pgfault 16 [ 1425.301003][T14079] pgmajfault 0 [ 1425.301010][T14079] inactive_anon 0 [ 1425.301017][T14079] active_anon 0 [ 1425.301024][T14079] inactive_file 0 [ 1425.301031][T14079] active_file 0 [ 1425.301038][T14079] unevictable 0 [ 1425.301045][T14079] hierarchical_memory_limit 0 [ 1425.301052][T14079] hierarchical_memsw_limit 9223372036854771712 [ 1425.301060][T14079] total_cache 0 [ 1425.301067][T14079] total_rss 0 [ 1425.301073][T14079] total_shmem 0 [ 1425.301080][T14079] total_mapped_file 0 [ 1425.301087][T14079] total_dirty 0 [ 1425.301094][T14079] total_writeback 0 [ 1425.301101][T14079] total_workingset_refault_anon 0 [ 1425.301108][T14079] total_workingset_refault_file 0 [ 1425.301116][T14079] total_swap 0 [ 1425.301123][T14079] total_swapcached 0 [ 1425.301130][T14079] total_pgpgin 0 [ 1425.301137][T14079] total_pgpgout 0 [ 1425.301144][T14079] total_pgfault 16 [ 1425.301151][T14079] total_pgmajfault 0 [ 1425.301158][T14079] total_inactive_anon 0 [ 1425.301165][T14079] total_active_anon 0 [ 1425.301172][T14079] total_inactive_file 0 [ 1425.301180][T14079] total_active_file 0 [ 1425.301187][T14079] total_unevictable 0 [ 1425.301194][T14079] anon_cost 0 [ 1425.301201][T14079] file_cost 0 [ 1425.301208][T14079] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.1049,pid=14077,uid=0 [ 1425.560316][T14079] Memory cgroup out of memory: Killed process 14077 (syz.3.1049) total-vm:102524kB, anon-rss:1460kB, file-rss:23188kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1426.026398][T14078] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1049'. [ 1430.829335][T13871] hsr_slave_0: entered promiscuous mode [ 1430.856349][T13871] hsr_slave_1: entered promiscuous mode [ 1430.856843][T13871] debugfs: 'hsr0' already exists in 'hsr' [ 1430.896514][T13871] Cannot create hsr debugfs directory [ 1433.309255][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.309298][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1435.307172][ T5250] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1438.906089][ T5250] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1439.595832][T11383] bridge_slave_1: left allmulticast mode [ 1439.595871][T11383] bridge_slave_1: left promiscuous mode [ 1439.596165][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.798538][T11383] bridge_slave_0: left allmulticast mode [ 1439.798564][T11383] bridge_slave_0: left promiscuous mode [ 1439.798734][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.229421][T11383] bridge_slave_1: left allmulticast mode [ 1440.229460][T11383] bridge_slave_1: left promiscuous mode [ 1440.229709][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.456906][T11383] bridge_slave_0: left allmulticast mode [ 1440.456932][T11383] bridge_slave_0: left promiscuous mode [ 1440.457107][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.655689][T13373] Bluetooth: hci0: command 0x0406 tx timeout [ 1441.342267][ T5603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1441.390873][ T5603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1441.414456][ T5603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1441.426377][ T5603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1441.427119][ T5603] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1441.879545][T11383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1442.024369][T11383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1442.098191][T11383] bond0 (unregistering): Released all slaves [ 1442.696441][T11383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1442.816903][T11383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1442.901231][T11383] bond0 (unregistering): Released all slaves [ 1442.959535][T14174] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1060'. [ 1443.566031][ T5603] Bluetooth: hci4: command tx timeout [ 1444.736137][ T31] Process accounting resumed [ 1445.618156][ T5603] Bluetooth: hci4: command tx timeout [ 1446.379714][T13373] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1446.446981][T13373] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1446.451390][T13373] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1446.487239][T13373] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1446.488268][T13373] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1447.473704][T11383] hsr_slave_0: left promiscuous mode [ 1447.511387][T11383] hsr_slave_1: left promiscuous mode [ 1447.512498][T11383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1448.924062][ T5603] Bluetooth: hci4: command tx timeout [ 1448.924139][ T5603] Bluetooth: hci6: command tx timeout [ 1448.996658][T11383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1450.403158][T11383] hsr_slave_0: left promiscuous mode [ 1450.467089][T11383] hsr_slave_1: left promiscuous mode [ 1450.468451][T11383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1450.513239][T11383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1450.752082][ T5603] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1450.794412][ T5603] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1450.795856][ T5603] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1450.811973][ T5603] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1450.812574][ T5603] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1450.986797][T13373] Bluetooth: hci6: command tx timeout [ 1450.986832][T13373] Bluetooth: hci4: command tx timeout [ 1451.793179][T11383] team0 (unregistering): Port device team_slave_1 removed [ 1452.717544][T11383] team0 (unregistering): Port device team_slave_0 removed [ 1452.896201][T13373] Bluetooth: hci7: command tx timeout [ 1453.056105][T13373] Bluetooth: hci6: command tx timeout [ 1453.999407][T11383] team0 (unregistering): Port device team_slave_1 removed [ 1454.089584][T11383] team0 (unregistering): Port device team_slave_0 removed [ 1454.106084][T14309] syz.5.1071 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1454.106110][T14309] CPU: 0 UID: 0 PID: 14309 Comm: syz.5.1071 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1454.106123][T14309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1454.106130][T14309] Call Trace: [ 1454.106135][T14309] [ 1454.106141][T14309] dump_stack_lvl+0xe8/0x150 [ 1454.106162][T14309] dump_header+0xd3/0x4b0 [ 1454.106186][T14309] oom_kill_process+0x3ab/0x9e0 [ 1454.106203][T14309] out_of_memory+0x1064/0x1480 [ 1454.106223][T14309] ? __pfx_out_of_memory+0x10/0x10 [ 1454.106235][T14309] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1454.106251][T14309] ? _mutex_lock_killable+0x152/0x1d0 [ 1454.106263][T14309] ? try_charge_memcg+0xcc3/0x16f0 [ 1454.106277][T14309] try_charge_memcg+0xd82/0x16f0 [ 1454.106298][T14309] ? __pfx_try_charge_memcg+0x10/0x10 [ 1454.106313][T14309] ? percpu_ref_tryget+0x15/0x180 [ 1454.106332][T14309] ? __obj_cgroup_charge+0x36/0x2c0 [ 1454.106350][T14309] __obj_cgroup_charge+0x1fd/0x2c0 [ 1454.106366][T14309] ? __obj_cgroup_charge+0x36/0x2c0 [ 1454.106383][T14309] __memcg_slab_post_alloc_hook+0x7a2/0xde0 [ 1454.106410][T14309] __kmalloc_cache_noprof+0x42e/0x680 [ 1454.106427][T14309] ? kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1454.106442][T14309] ? kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1454.106461][T14309] kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1454.106483][T14309] kvm_vm_ioctl+0xb1b/0xd30 [ 1454.106521][T14309] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1454.106549][T14309] ? kasan_quarantine_put+0xbb/0x1f0 [ 1454.106572][T14309] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1454.106588][T14309] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1454.106608][T14309] ? do_vfs_ioctl+0x1184/0x1550 [ 1454.106625][T14309] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1454.106648][T14309] ? hook_file_ioctl+0x1f5/0x610 [ 1454.106663][T14309] ? __asan_memset+0x22/0x50 [ 1454.106678][T14309] ? smack_file_ioctl+0x335/0x370 [ 1454.106694][T14309] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1454.106713][T14309] ? __fget_files+0x2a/0x420 [ 1454.106726][T14309] ? __fget_files+0x3a8/0x420 [ 1454.106738][T14309] ? __fget_files+0x2a/0x420 [ 1454.106752][T14309] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1454.106766][T14309] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1454.106781][T14309] __se_sys_ioctl+0xff/0x170 [ 1454.106798][T14309] do_syscall_64+0x166/0x520 [ 1454.106813][T14309] ? trace_irq_disable+0x3b/0x140 [ 1454.106827][T14309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.106838][T14309] ? clear_bhb_loop+0x70/0xc0 [ 1454.106852][T14309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.106862][T14309] RIP: 0033:0x7fda7616e1d9 [ 1454.106874][T14309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1454.106883][T14309] RSP: 002b:00007fda743a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1454.106895][T14309] RAX: ffffffffffffffda RBX: 00007fda763f6090 RCX: 00007fda7616e1d9 [ 1454.106904][T14309] RDX: 00002000000000c0 RSI: 000000004010ae67 RDI: 000000000000000a [ 1454.106911][T14309] RBP: 00007fda76205888 R08: 0000000000000000 R09: 0000000000000000 [ 1454.106918][T14309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1454.106925][T14309] R13: 00007fda763f6128 R14: 00007fda763f6090 R15: 00007fff6acf91f8 [ 1454.106942][T14309] [ 1454.185262][T14309] memory: usage 0kB, limit 0kB, failcnt 19 [ 1454.185281][T14309] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1454.185295][T14309] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1454.185311][T14309] Memory cgroup stats for /syz5/test: [ 1454.268505][T14309] cache 0 [ 1454.268517][T14309] rss 0 [ 1454.268524][T14309] shmem 0 [ 1454.268530][T14309] mapped_file 0 [ 1454.268537][T14309] dirty 0 [ 1454.268543][T14309] writeback 0 [ 1454.268550][T14309] workingset_refault_anon 0 [ 1454.268558][T14309] workingset_refault_file 0 [ 1454.268565][T14309] swap 0 [ 1454.268572][T14309] swapcached 0 [ 1454.268578][T14309] pgpgin 0 [ 1454.268585][T14309] pgpgout 0 [ 1454.268591][T14309] pgfault 2 [ 1454.268598][T14309] pgmajfault 0 [ 1454.268605][T14309] inactive_anon 0 [ 1454.268612][T14309] active_anon 0 [ 1454.268619][T14309] inactive_file 0 [ 1454.268626][T14309] active_file 0 [ 1454.268633][T14309] unevictable 0 [ 1454.268640][T14309] hierarchical_memory_limit 0 [ 1454.268647][T14309] hierarchical_memsw_limit 9223372036854771712 [ 1454.268655][T14309] total_cache 0 [ 1454.268662][T14309] total_rss 0 [ 1454.268668][T14309] total_shmem 0 [ 1454.268676][T14309] total_mapped_file 0 [ 1454.268683][T14309] total_dirty 0 [ 1454.268690][T14309] total_writeback 0 [ 1454.268697][T14309] total_workingset_refault_anon 0 [ 1454.268705][T14309] total_workingset_refault_file 0 [ 1454.268712][T14309] total_swap 0 [ 1454.268719][T14309] total_swapcached 0 [ 1454.268726][T14309] total_pgpgin 0 [ 1454.268733][T14309] total_pgpgout 0 [ 1454.268740][T14309] total_pgfault 2 [ 1454.268747][T14309] total_pgmajfault 0 [ 1454.268754][T14309] total_inactive_anon 0 [ 1454.268761][T14309] total_active_anon 0 [ 1454.268768][T14309] total_inactive_file 0 [ 1454.268775][T14309] total_active_file 0 [ 1454.268782][T14309] total_unevictable 0 [ 1454.268790][T14309] anon_cost 0 [ 1454.268796][T14309] file_cost 0 [ 1454.268804][T14309] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.1071,pid=14307,uid=0 [ 1454.268956][T14309] Memory cgroup out of memory: Killed process 14307 (syz.5.1071) total-vm:102452kB, anon-rss:1444kB, file-rss:23188kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1454.977969][T13373] Bluetooth: hci7: command tx timeout [ 1455.099353][T14308] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1071'. [ 1455.135681][T13373] Bluetooth: hci6: command tx timeout [ 1457.057802][T13373] Bluetooth: hci7: command tx timeout [ 1459.306884][T13373] Bluetooth: hci7: command tx timeout [ 1461.869667][T14372] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1077'. [ 1462.634143][ T5250] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1462.816781][T13814] netdevsim netdevsim6: probe with driver netdevsim failed with error -12 [ 1464.794287][T14384] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1080'. [ 1467.964473][ T31] Process accounting resumed [ 1467.984489][ T31] Process accounting resumed [ 1475.730857][ T9] Process accounting resumed [ 1477.991105][ T9] Process accounting resumed [ 1479.096796][T14447] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1089'. [ 1479.097793][T14189] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.097909][T14189] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.098048][T14189] bridge_slave_0: entered allmulticast mode [ 1479.101009][T14189] bridge_slave_0: entered promiscuous mode [ 1479.188765][T14189] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.188858][T14189] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.188978][T14189] bridge_slave_1: entered allmulticast mode [ 1479.198175][T14189] bridge_slave_1: entered promiscuous mode [ 1479.202575][T14447] syz.5.1089 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1479.202610][T14447] CPU: 1 UID: 0 PID: 14447 Comm: syz.5.1089 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1479.202635][T14447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1479.202648][T14447] Call Trace: [ 1479.202657][T14447] [ 1479.202665][T14447] dump_stack_lvl+0xe8/0x150 [ 1479.202700][T14447] dump_header+0xd3/0x4b0 [ 1479.202732][T14447] oom_kill_process+0x3ab/0x9e0 [ 1479.202760][T14447] out_of_memory+0x1064/0x1480 [ 1479.202796][T14447] ? __pfx_out_of_memory+0x10/0x10 [ 1479.202819][T14447] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1479.202851][T14447] ? _mutex_lock_killable+0x152/0x1d0 [ 1479.202872][T14447] ? try_charge_memcg+0xcc3/0x16f0 [ 1479.202898][T14447] try_charge_memcg+0xd82/0x16f0 [ 1479.202939][T14447] ? __pfx_try_charge_memcg+0x10/0x10 [ 1479.202966][T14447] ? percpu_ref_tryget+0x15/0x180 [ 1479.203000][T14447] ? __obj_cgroup_charge+0x36/0x2c0 [ 1479.203034][T14447] __obj_cgroup_charge+0x1fd/0x2c0 [ 1479.203063][T14447] ? __obj_cgroup_charge+0x36/0x2c0 [ 1479.203094][T14447] __memcg_slab_post_alloc_hook+0x7a2/0xde0 [ 1479.203145][T14447] __kmalloc_cache_noprof+0x42e/0x680 [ 1479.203176][T14447] ? kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1479.203204][T14447] ? kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1479.203240][T14447] kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1479.203275][T14447] kvm_vm_ioctl+0xb1b/0xd30 [ 1479.203307][T14447] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1479.203357][T14447] ? kasan_quarantine_put+0xbb/0x1f0 [ 1479.203395][T14447] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1479.203434][T14447] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1479.203466][T14447] ? do_vfs_ioctl+0x1184/0x1550 [ 1479.203504][T14447] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1479.203546][T14447] ? hook_file_ioctl+0x1f5/0x610 [ 1479.203574][T14447] ? __asan_memset+0x22/0x50 [ 1479.203601][T14447] ? smack_file_ioctl+0x335/0x370 [ 1479.203631][T14447] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1479.203667][T14447] ? __fget_files+0x2a/0x420 [ 1479.203690][T14447] ? __fget_files+0x3a8/0x420 [ 1479.203712][T14447] ? __fget_files+0x2a/0x420 [ 1479.203739][T14447] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1479.203764][T14447] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1479.203794][T14447] __se_sys_ioctl+0xff/0x170 [ 1479.203825][T14447] do_syscall_64+0x166/0x520 [ 1479.203852][T14447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.203872][T14447] ? clear_bhb_loop+0x70/0xc0 [ 1479.203896][T14447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.203916][T14447] RIP: 0033:0x7fda7616e1d9 [ 1479.203935][T14447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1479.203952][T14447] RSP: 002b:00007fda743c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1479.203974][T14447] RAX: ffffffffffffffda RBX: 00007fda763f5fa0 RCX: 00007fda7616e1d9 [ 1479.203990][T14447] RDX: 00002000000000c0 RSI: 000000004010ae67 RDI: 000000000000000a [ 1479.204003][T14447] RBP: 00007fda76205888 R08: 0000000000000000 R09: 0000000000000000 [ 1479.204016][T14447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1479.204029][T14447] R13: 00007fda763f6038 R14: 00007fda763f5fa0 R15: 00007fff6acf91f8 [ 1479.204063][T14447] [ 1479.551306][T14447] memory: usage 0kB, limit 0kB, failcnt 55 [ 1479.551320][T14447] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1479.551327][T14447] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1479.551334][T14447] Memory cgroup stats for /syz5/test: [ 1479.551415][T14447] cache 0 [ 1479.551420][T14447] rss 0 [ 1479.551423][T14447] shmem 0 [ 1479.551427][T14447] mapped_file 0 [ 1479.551431][T14447] dirty 0 [ 1479.551434][T14447] writeback 0 [ 1479.551438][T14447] workingset_refault_anon 0 [ 1479.551441][T14447] workingset_refault_file 0 [ 1479.551445][T14447] swap 0 [ 1479.551449][T14447] swapcached 0 [ 1479.551452][T14447] pgpgin 0 [ 1479.551456][T14447] pgpgout 0 [ 1479.551459][T14447] pgfault 9 [ 1479.551463][T14447] pgmajfault 0 [ 1479.551466][T14447] inactive_anon 0 [ 1479.551470][T14447] active_anon 0 [ 1479.551473][T14447] inactive_file 0 [ 1479.551477][T14447] active_file 0 [ 1479.551480][T14447] unevictable 0 [ 1479.551484][T14447] hierarchical_memory_limit 0 [ 1479.551488][T14447] hierarchical_memsw_limit 9223372036854771712 [ 1479.551492][T14447] total_cache 0 [ 1479.551496][T14447] total_rss 0 [ 1479.551499][T14447] total_shmem 0 [ 1479.551503][T14447] total_mapped_file 0 [ 1479.551507][T14447] total_dirty 0 [ 1479.551510][T14447] total_writeback 0 [ 1479.551514][T14447] total_workingset_refault_anon 0 [ 1479.551518][T14447] total_workingset_refault_file 0 [ 1479.551522][T14447] total_swap 0 [ 1479.551526][T14447] total_swapcached 0 [ 1479.551530][T14447] total_pgpgin 0 [ 1479.551533][T14447] total_pgpgout 0 [ 1479.551537][T14447] total_pgfault 9 [ 1479.551541][T14447] total_pgmajfault 0 [ 1479.551545][T14447] total_inactive_anon 0 [ 1479.551549][T14447] total_active_anon 0 [ 1479.551552][T14447] total_inactive_file 0 [ 1479.551557][T14447] total_active_file 0 [ 1479.551560][T14447] total_unevictable 0 [ 1479.551564][T14447] anon_cost 0 [ 1479.551568][T14447] file_cost 0 [ 1479.551572][T14447] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.1089,pid=14443,uid=0 [ 1479.755804][T14447] Memory cgroup out of memory: Killed process 14443 (syz.5.1089) total-vm:102452kB, anon-rss:1444kB, file-rss:23252kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1482.750686][ T9] Process accounting resumed [ 1483.247535][ T9] Process accounting resumed [ 1483.915888][T11383] bridge_slave_1: left allmulticast mode [ 1483.915926][T11383] bridge_slave_1: left promiscuous mode [ 1483.916196][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.039159][T11383] bridge_slave_0: left allmulticast mode [ 1484.039195][T11383] bridge_slave_0: left promiscuous mode [ 1484.039443][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.885662][T11383] bridge_slave_1: left allmulticast mode [ 1486.885701][T11383] bridge_slave_1: left promiscuous mode [ 1486.885931][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.027348][T11383] bridge_slave_0: left allmulticast mode [ 1488.027392][T11383] bridge_slave_0: left promiscuous mode [ 1488.027637][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.547855][ T31] Process accounting resumed [ 1491.456685][T14502] syz.5.1099 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1491.456716][T14502] CPU: 1 UID: 0 PID: 14502 Comm: syz.5.1099 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1491.456729][T14502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1491.456736][T14502] Call Trace: [ 1491.456741][T14502] [ 1491.456747][T14502] dump_stack_lvl+0xe8/0x150 [ 1491.456769][T14502] dump_header+0xd3/0x4b0 [ 1491.456786][T14502] oom_kill_process+0x3ab/0x9e0 [ 1491.456802][T14502] out_of_memory+0x1064/0x1480 [ 1491.456821][T14502] ? __pfx_out_of_memory+0x10/0x10 [ 1491.456833][T14502] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1491.456864][T14502] ? _mutex_lock_killable+0x152/0x1d0 [ 1491.456877][T14502] ? try_charge_memcg+0xcc3/0x16f0 [ 1491.456892][T14502] try_charge_memcg+0xd82/0x16f0 [ 1491.456916][T14502] ? __pfx_try_charge_memcg+0x10/0x10 [ 1491.456931][T14502] ? percpu_ref_tryget+0x15/0x180 [ 1491.456949][T14502] ? __obj_cgroup_charge+0x36/0x2c0 [ 1491.456968][T14502] __obj_cgroup_charge+0x1fd/0x2c0 [ 1491.456983][T14502] ? __obj_cgroup_charge+0x36/0x2c0 [ 1491.457000][T14502] __memcg_slab_post_alloc_hook+0x7a2/0xde0 [ 1491.457027][T14502] __kmalloc_cache_noprof+0x42e/0x680 [ 1491.457044][T14502] ? kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1491.457060][T14502] ? kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1491.457079][T14502] kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1491.457098][T14502] kvm_vm_ioctl+0xb1b/0xd30 [ 1491.457116][T14502] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1491.457142][T14502] ? kasan_quarantine_put+0xbb/0x1f0 [ 1491.457163][T14502] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1491.457179][T14502] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1491.457196][T14502] ? do_vfs_ioctl+0x1184/0x1550 [ 1491.457214][T14502] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1491.457236][T14502] ? hook_file_ioctl+0x1f5/0x610 [ 1491.457251][T14502] ? __asan_memset+0x22/0x50 [ 1491.457266][T14502] ? smack_file_ioctl+0x335/0x370 [ 1491.457282][T14502] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1491.457302][T14502] ? __fget_files+0x2a/0x420 [ 1491.457314][T14502] ? __fget_files+0x3a8/0x420 [ 1491.457326][T14502] ? __fget_files+0x2a/0x420 [ 1491.457340][T14502] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1491.457355][T14502] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1491.457370][T14502] __se_sys_ioctl+0xff/0x170 [ 1491.457388][T14502] do_syscall_64+0x166/0x520 [ 1491.457408][T14502] ? trace_irq_disable+0x3b/0x140 [ 1491.457423][T14502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.457435][T14502] ? clear_bhb_loop+0x70/0xc0 [ 1491.457451][T14502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.457462][T14502] RIP: 0033:0x7fda7616e1d9 [ 1491.457474][T14502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1491.457484][T14502] RSP: 002b:00007fda743a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1491.457497][T14502] RAX: ffffffffffffffda RBX: 00007fda763f6090 RCX: 00007fda7616e1d9 [ 1491.457506][T14502] RDX: 00002000000000c0 RSI: 000000004010ae67 RDI: 000000000000000a [ 1491.457513][T14502] RBP: 00007fda76205888 R08: 0000000000000000 R09: 0000000000000000 [ 1491.457520][T14502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1491.457527][T14502] R13: 00007fda763f6128 R14: 00007fda763f6090 R15: 00007fff6acf91f8 [ 1491.457545][T14502] [ 1491.457549][T14502] memory: usage 0kB, limit 0kB, failcnt 91 [ 1491.457557][T14502] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1491.457565][T14502] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1491.457571][T14502] Memory cgroup stats for /syz5/test: [ 1491.457636][T14502] cache 0 [ 1491.457642][T14502] rss 0 [ 1491.457645][T14502] shmem 0 [ 1491.457649][T14502] mapped_file 0 [ 1491.457653][T14502] dirty 0 [ 1491.457657][T14502] writeback 0 [ 1491.457661][T14502] workingset_refault_anon 0 [ 1491.457665][T14502] workingset_refault_file 0 [ 1491.457669][T14502] swap 0 [ 1491.457672][T14502] swapcached 0 [ 1491.457676][T14502] pgpgin 0 [ 1491.457679][T14502] pgpgout 0 [ 1491.457683][T14502] pgfault 10 [ 1491.457686][T14502] pgmajfault 0 [ 1491.457690][T14502] inactive_anon 0 [ 1491.457693][T14502] active_anon 0 [ 1491.457697][T14502] inactive_file 0 [ 1491.457701][T14502] active_file 0 [ 1491.457704][T14502] unevictable 0 [ 1491.457708][T14502] hierarchical_memory_limit 0 [ 1491.457712][T14502] hierarchical_memsw_limit 9223372036854771712 [ 1491.457716][T14502] total_cache 0 [ 1491.457720][T14502] total_rss 0 [ 1491.457723][T14502] total_shmem 0 [ 1491.457727][T14502] total_mapped_file 0 [ 1491.457731][T14502] total_dirty 0 [ 1491.457734][T14502] total_writeback 0 [ 1491.457738][T14502] total_workingset_refault_anon 0 [ 1491.457742][T14502] total_workingset_refault_file 0 [ 1491.457746][T14502] total_swap 0 [ 1491.457750][T14502] total_swapcached 0 [ 1491.457754][T14502] total_pgpgin 0 [ 1491.457757][T14502] total_pgpgout 0 [ 1491.457761][T14502] total_pgfault 10 [ 1491.457764][T14502] total_pgmajfault 0 [ 1491.457780][T14502] total_inactive_anon 0 [ 1491.457785][T14502] total_active_anon 0 [ 1491.457789][T14502] total_inactive_file 0 [ 1491.457844][T14502] total_active_file 0 [ 1491.457850][T14502] total_unevictable 0 [ 1491.457853][T14502] anon_cost 0 [ 1491.457857][T14502] file_cost 0 [ 1491.457861][T14502] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.1099,pid=14500,uid=0 [ 1491.457960][T14502] Memory cgroup out of memory: Killed process 14500 (syz.5.1099) total-vm:102320kB, anon-rss:1436kB, file-rss:23124kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1491.516148][T11383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1491.849777][T11383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1491.910759][T11383] bond0 (unregistering): Released all slaves [ 1492.177898][T11383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1492.255950][T11383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1492.319120][T11383] bond0 (unregistering): Released all slaves [ 1492.361020][T14501] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1099'. [ 1492.529067][T14189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1493.018981][T14189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1493.244309][T14283] bridge0: port 1(bridge_slave_0) entered blocking state [ 1493.247615][T14283] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.247734][T14283] bridge_slave_0: entered allmulticast mode [ 1493.250749][T14283] bridge_slave_0: entered promiscuous mode [ 1493.357392][T14189] team0: Port device team_slave_0 added [ 1493.358493][T14283] bridge0: port 2(bridge_slave_1) entered blocking state [ 1493.362868][T14283] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.363013][T14283] bridge_slave_1: entered allmulticast mode [ 1493.370125][T12205] Process accounting resumed [ 1493.545469][T14283] bridge_slave_1: entered promiscuous mode [ 1494.053379][T12205] Process accounting resumed [ 1494.333327][T14189] team0: Port device team_slave_1 added [ 1494.749066][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.749143][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.897882][ T1248] Process accounting resumed [ 1495.291888][T11383] hsr_slave_0: left promiscuous mode [ 1496.084460][T11383] hsr_slave_1: left promiscuous mode [ 1496.087634][T11383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1497.059821][T11383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1497.454023][T11383] hsr_slave_0: left promiscuous mode [ 1497.498513][T11383] hsr_slave_1: left promiscuous mode [ 1497.499757][T11383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1497.555145][T11383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1499.156883][T11383] team0 (unregistering): Port device team_slave_1 removed [ 1499.247437][T11383] team0 (unregistering): Port device team_slave_0 removed [ 1500.478941][T12205] Process accounting resumed [ 1502.413835][T11383] team0 (unregistering): Port device team_slave_1 removed [ 1502.666958][T11383] team0 (unregistering): Port device team_slave_0 removed [ 1503.555042][T14283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1503.568211][T14547] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1107'. [ 1503.568848][T14255] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.569016][T14255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.569189][T14255] bridge_slave_0: entered allmulticast mode [ 1503.589821][T14255] bridge_slave_0: entered promiscuous mode [ 1503.628362][ T5603] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1503.661978][ T5603] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1503.667246][ T5603] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1503.692859][ T5603] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1503.694883][ T5603] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1503.710490][T14283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1503.854885][T14255] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.854965][T14255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.855102][T14255] bridge_slave_1: entered allmulticast mode [ 1503.863016][T14255] bridge_slave_1: entered promiscuous mode [ 1504.697437][T14283] team0: Port device team_slave_0 added [ 1505.657932][T14283] team0: Port device team_slave_1 added [ 1505.775617][T14283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1505.775648][T14283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1505.775666][T14283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1505.813916][T14283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1505.813935][T14283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1505.813962][T14283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1505.867493][ T5603] Bluetooth: hci1: command tx timeout [ 1506.083709][T14283] hsr_slave_0: entered promiscuous mode [ 1506.092603][T14283] hsr_slave_1: entered promiscuous mode [ 1507.935490][ T5603] Bluetooth: hci1: command tx timeout [ 1508.064523][ T199] Process accounting resumed [ 1508.779672][T13373] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1508.815257][T13373] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1508.817889][T13373] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1508.832622][T13373] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1508.837641][T13373] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1509.516969][T12205] Process accounting resumed [ 1510.025390][T13373] Bluetooth: hci1: command tx timeout [ 1510.805833][T12205] Process accounting resumed [ 1510.975403][T13373] Bluetooth: hci2: command tx timeout [ 1512.095514][T13373] Bluetooth: hci1: command tx timeout [ 1513.055448][T13373] Bluetooth: hci2: command tx timeout [ 1513.474773][ T5603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1513.530514][ T5603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1513.546956][ T5603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1513.551761][ T5603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1513.572358][ T5603] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1515.135408][T13373] Bluetooth: hci2: command tx timeout [ 1515.695399][T13373] Bluetooth: hci4: command tx timeout [ 1515.722926][T14550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.723061][T14550] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.723205][T14550] bridge_slave_0: entered allmulticast mode [ 1515.754446][T14550] bridge_slave_0: entered promiscuous mode [ 1515.776613][T14550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.776743][T14550] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.776874][T14550] bridge_slave_1: entered allmulticast mode [ 1515.784467][T14550] bridge_slave_1: entered promiscuous mode [ 1516.023085][T11383] bridge_slave_1: left allmulticast mode [ 1516.023124][T11383] bridge_slave_1: left promiscuous mode [ 1516.023364][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.188741][T11383] bridge_slave_0: left allmulticast mode [ 1516.188778][T11383] bridge_slave_0: left promiscuous mode [ 1516.189048][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.420915][T14652] syz.3.1116 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1516.420957][T14652] CPU: 0 UID: 0 PID: 14652 Comm: syz.3.1116 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1516.420982][T14652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1516.420994][T14652] Call Trace: [ 1516.421005][T14652] [ 1516.421014][T14652] dump_stack_lvl+0xe8/0x150 [ 1516.421050][T14652] dump_header+0xd3/0x4b0 [ 1516.421082][T14652] oom_kill_process+0x3ab/0x9e0 [ 1516.421110][T14652] out_of_memory+0x1064/0x1480 [ 1516.421146][T14652] ? __pfx_out_of_memory+0x10/0x10 [ 1516.421169][T14652] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1516.421197][T14652] ? _mutex_lock_killable+0x152/0x1d0 [ 1516.421219][T14652] ? try_charge_memcg+0xcc3/0x16f0 [ 1516.421244][T14652] try_charge_memcg+0xd82/0x16f0 [ 1516.421285][T14652] ? __pfx_try_charge_memcg+0x10/0x10 [ 1516.421310][T14652] ? percpu_ref_tryget+0x15/0x180 [ 1516.421341][T14652] ? __obj_cgroup_charge+0x36/0x2c0 [ 1516.421372][T14652] __obj_cgroup_charge+0x1fd/0x2c0 [ 1516.421399][T14652] ? __obj_cgroup_charge+0x36/0x2c0 [ 1516.421430][T14652] __memcg_slab_post_alloc_hook+0x7a2/0xde0 [ 1516.421479][T14652] __kmalloc_cache_noprof+0x42e/0x680 [ 1516.421508][T14652] ? kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1516.421535][T14652] ? kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1516.421568][T14652] kvm_vm_ioctl_register_coalesced_mmio+0x8e/0x330 [ 1516.421602][T14652] kvm_vm_ioctl+0xb1b/0xd30 [ 1516.421631][T14652] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1516.421678][T14652] ? kasan_quarantine_put+0xbb/0x1f0 [ 1516.421714][T14652] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1516.421745][T14652] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1516.421787][T14652] ? do_vfs_ioctl+0x1184/0x1550 [ 1516.421822][T14652] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1516.421864][T14652] ? hook_file_ioctl+0x1f5/0x610 [ 1516.421891][T14652] ? __asan_memset+0x22/0x50 [ 1516.421919][T14652] ? smack_file_ioctl+0x335/0x370 [ 1516.421948][T14652] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1516.421984][T14652] ? __fget_files+0x2a/0x420 [ 1516.422007][T14652] ? __fget_files+0x3a8/0x420 [ 1516.422029][T14652] ? __fget_files+0x2a/0x420 [ 1516.422053][T14652] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1516.422078][T14652] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1516.422107][T14652] __se_sys_ioctl+0xff/0x170 [ 1516.422138][T14652] do_syscall_64+0x166/0x520 [ 1516.422164][T14652] ? trace_irq_disable+0x3b/0x140 [ 1516.422190][T14652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.422212][T14652] ? clear_bhb_loop+0x70/0xc0 [ 1516.422237][T14652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.422257][T14652] RIP: 0033:0x7f152c13e1d9 [ 1516.422278][T14652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1516.422297][T14652] RSP: 002b:00007f152a375028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1516.422320][T14652] RAX: ffffffffffffffda RBX: 00007f152c3c6090 RCX: 00007f152c13e1d9 [ 1516.422336][T14652] RDX: 00002000000000c0 RSI: 000000004010ae67 RDI: 000000000000000a [ 1516.422350][T14652] RBP: 00007f152c1d5888 R08: 0000000000000000 R09: 0000000000000000 [ 1516.422363][T14652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1516.422376][T14652] R13: 00007f152c3c6128 R14: 00007f152c3c6090 R15: 00007fffffd1ed68 [ 1516.422410][T14652] [ 1516.512912][T14652] memory: usage 0kB, limit 0kB, failcnt 415 [ 1516.512933][T14652] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1516.512947][T14652] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1516.512960][T14652] Memory cgroup stats for /syz3/test: [ 1516.513082][T14652] cache 0 [ 1516.513091][T14652] rss 0 [ 1516.513098][T14652] shmem 0 [ 1516.513104][T14652] mapped_file 0 [ 1516.513111][T14652] dirty 0 [ 1516.513117][T14652] writeback 0 [ 1516.513124][T14652] workingset_refault_anon 0 [ 1516.513131][T14652] workingset_refault_file 0 [ 1516.513140][T14652] swap 0 [ 1516.513146][T14652] swapcached 0 [ 1516.513153][T14652] pgpgin 0 [ 1516.513159][T14652] pgpgout 0 [ 1516.513166][T14652] pgfault 17 [ 1516.513173][T14652] pgmajfault 0 [ 1516.513180][T14652] inactive_anon 0 [ 1516.513188][T14652] active_anon 0 [ 1516.513195][T14652] inactive_file 0 [ 1516.513202][T14652] active_file 0 [ 1516.513209][T14652] unevictable 0 [ 1516.513216][T14652] hierarchical_memory_limit 0 [ 1516.513224][T14652] hierarchical_memsw_limit 9223372036854771712 [ 1516.513233][T14652] total_cache 0 [ 1516.513240][T14652] total_rss 0 [ 1516.513246][T14652] total_shmem 0 [ 1516.513252][T14652] total_mapped_file 0 [ 1516.513259][T14652] total_dirty 0 [ 1516.513266][T14652] total_writeback 0 [ 1516.513272][T14652] total_workingset_refault_anon 0 [ 1516.513280][T14652] total_workingset_refault_file 0 [ 1516.513287][T14652] total_swap 0 [ 1516.513294][T14652] total_swapcached 0 [ 1516.513301][T14652] total_pgpgin 0 [ 1516.513307][T14652] total_pgpgout 0 [ 1516.513314][T14652] total_pgfault 17 [ 1516.513321][T14652] total_pgmajfault 0 [ 1516.513328][T14652] total_inactive_anon 0 [ 1516.513336][T14652] total_active_anon 0 [ 1516.513343][T14652] total_inactive_file 0 [ 1516.513350][T14652] total_active_file 0 [ 1516.513357][T14652] total_unevictable 0 [ 1516.513364][T14652] anon_cost 0 [ 1516.513370][T14652] file_cost 0 [ 1516.513377][T14652] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.1116,pid=14646,uid=0 [ 1516.513519][T14652] Memory cgroup out of memory: Killed process 14646 (syz.3.1116) total-vm:102392kB, anon-rss:1452kB, file-rss:23252kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1516.799448][T11383] bridge_slave_1: left allmulticast mode [ 1516.799482][T11383] bridge_slave_1: left promiscuous mode [ 1516.799715][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.100019][T11383] bridge_slave_0: left allmulticast mode [ 1517.100043][T11383] bridge_slave_0: left promiscuous mode [ 1517.100195][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.217194][T13373] Bluetooth: hci2: command tx timeout [ 1517.455620][T11383] bridge_slave_1: left allmulticast mode [ 1517.455749][T11383] bridge_slave_1: left promiscuous mode [ 1517.456002][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.684540][ T199] Process accounting resumed [ 1517.785890][T13373] Bluetooth: hci4: command tx timeout [ 1518.601900][ T38] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 1518.652957][ T38] in_atomic(): 0, irqs_disabled(): 0, non_block: 1, pid: 38, name: oom_reaper [ 1518.653000][ T38] preempt_count: 0, expected: 0 [ 1518.653011][ T38] RCU nest depth: 0, expected: 0 [ 1518.675197][ T38] locks held by oom_reaper/38: 4, last CPU#0: [ 1518.675221][ T38] #0: ffff88802b079db8 (&mm->mmap_lock){++++}-{4:4}, at: oom_reaper+0x2b4/0xc10 [ 1518.675564][ T38] #1: ffffffff8f30b180 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: zap_vma_for_reaping+0x193/0x380 [ 1518.675663][ T38] #2: ffffffff8f30b1d8 (srcu){.+.+}-{0:0}, at: __mmu_notifier_invalidate_range_start+0x5c6/0xb80 [ 1518.675736][ T38] #3: ffff88806095d360 (&kvm->mn_invalidate_lock){+.+.}-{3:3}, at: kvm_mmu_notifier_invalidate_range_start+0x1b6/0xc10 [ 1518.675883][ T38] CPU: 0 UID: 0 PID: 38 Comm: oom_reaper Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1518.675906][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1518.675921][ T38] Call Trace: [ 1518.675932][ T38] [ 1518.675942][ T38] dump_stack_lvl+0xe8/0x150 [ 1518.675972][ T38] __might_resched+0x31b/0x470 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1518.676001][ T38] ? preempt_schedule_irq+0x3b/0x90 [ 1518.676030][ T38] rt_spin_lock+0xc2/0x400 [ 1518.676049][ T38] ? trace_irq_disable+0x3b/0x140 [ 1518.676079][ T38] ? __pfx_rt_spin_lock+0x10/0x10 [ 1518.676111][ T38] kvm_mmu_notifier_invalidate_range_start+0x1b6/0xc10 [ 1518.676144][ T38] ? irqentry_exit+0x218/0x920 [ 1518.676179][ T38] ? __pfx_kvm_mmu_notifier_invalidate_range_start+0x10/0x10 [ 1518.676204][ T38] ? __pfx_hlock_conflict+0x10/0x10 [ 1518.676229][ T38] ? lock_acquire+0x232/0x350 [ 1518.676261][ T38] __mmu_notifier_invalidate_range_start+0x709/0xb80 [ 1518.676300][ T38] ? __mmu_notifier_invalidate_range_start+0x5c6/0xb80 [ 1518.676330][ T38] ? __pfx___mmu_notifier_invalidate_range_start+0x10/0x10 [ 1518.676367][ T38] ? zap_vma_for_reaping+0x193/0x380 [ 1518.676391][ T38] zap_vma_for_reaping+0x1f7/0x380 [ 1518.676417][ T38] ? __pfx_zap_vma_for_reaping+0x10/0x10 [ 1518.676474][ T38] oom_reaper+0x519/0xc10 [ 1518.676497][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1518.676537][ T38] ? __pfx_oom_reaper+0x10/0x10 [ 1518.676581][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1518.676606][ T38] ? __kthread_parkme+0x71/0x1f0 [ 1518.676636][ T38] ? __kthread_parkme+0x199/0x1f0 [ 1518.676670][ T38] kthread+0x38b/0x470 [ 1518.676692][ T38] ? __pfx_oom_reaper+0x10/0x10 [ 1518.676712][ T38] ? __pfx_kthread+0x10/0x10 [ 1518.676735][ T38] ret_from_fork+0x514/0xb70 [ 1518.676760][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1518.676781][ T38] ? __switch_to+0xc89/0x1420 [ 1518.676812][ T38] ? __pfx_kthread+0x10/0x10 [ 1518.676835][ T38] ret_from_fork_asm+0x1a/0x30 [ 1518.676873][ T38] [ 1518.845922][ T38] oom_reaper: reaped process 14646 (syz.3.1116), now anon-rss:0kB, file-rss:22088kB, shmem-rss:0kB [ 1519.163106][T11383] bridge_slave_0: left allmulticast mode [ 1519.163131][T11383] bridge_slave_0: left promiscuous mode [ 1519.163306][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1519.730673][T11383] bond0 (unregistering): Released all slaves [ 1519.865499][T13373] Bluetooth: hci4: command tx timeout [ 1519.925920][T11383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1520.017155][T11383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1520.098546][T11383] bond0 (unregistering): Released all slaves [ 1520.336117][T11383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1520.418572][T11383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1520.476710][T11383] bond0 (unregistering): Released all slaves [ 1520.513886][T14649] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1116'. [ 1521.925431][T11383] hsr_slave_0: left promiscuous mode [ 1521.965473][T11383] hsr_slave_1: left promiscuous mode [ 1521.966225][T11383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1522.017086][T11383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.366230][T11383] team0 (unregistering): Port device team_slave_1 removed [ 1522.405874][T11383] team0 (unregistering): Port device team_slave_0 removed [ 1522.816646][T11383] team0 (unregistering): Port device team_slave_1 removed [ 1522.835859][T11383] team0 (unregistering): Port device team_slave_0 removed [ 1525.671503][T11383] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.901449][T11383] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.139026][T11383] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.359106][T11383] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.964818][T11383] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.318932][T11383] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.357001][ T5250] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1527.651850][T11383] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.779124][ T5250] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1528.034094][T11383] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.226980][ T5250] 8021q: adding VLAN 0 to HW filter on device eth8