last executing test programs: 14m0.713712812s ago: executing program 3 (id=1658): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x22060, 0x0) clock_adjtime(0x1, &(0x7f0000000540)={0x6, 0x9, 0xfffffffffffffffb, 0x7fff, 0xfffffffffffffffd, 0x10001, 0xffffffffba8372f8, 0xfc84, 0x100000000, 0x1, 0x6, 0x4e3, 0x1ff, 0x2, 0x7, 0x80000000, 0x7, 0x4, 0x7, 0x5, 0x80000000, 0x0, 0x5, 0xffff, 0x0, 0xfffffffffffffffb}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='0', 0x1) 14m0.372845662s ago: executing program 5 (id=1661): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0xfffffffd, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='1', 0x1) 13m59.109979577s ago: executing program 3 (id=1663): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) 13m59.012650022s ago: executing program 5 (id=1664): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) openat(0xffffffffffffffff, 0x0, 0x8000, 0x16d) syz_emit_ethernet(0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xb8ab4000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x131e000, 0x800, 0x0, 0x6}, 0x20) r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x20, 0x7800, 0x0, 0x3) 13m58.562073467s ago: executing program 3 (id=1666): socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a84821, 0x0) getdents(r5, 0x0, 0x0) 13m57.085857868s ago: executing program 2 (id=1668): openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003d40)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x3, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 13m56.818056978s ago: executing program 3 (id=1669): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x6843, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x5420, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) 13m55.17549266s ago: executing program 3 (id=1670): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) fanotify_mark(0xffffffffffffffff, 0x698, 0x8, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 13m55.088202543s ago: executing program 2 (id=1671): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/ttyUSB0\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)="3c5c0f2397b4d84500b5f812365f0000", 0x10) 13m54.578723496s ago: executing program 5 (id=1674): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x41555856, 0x3, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_rr_get_interval(r0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000) listen(0xffffffffffffffff, 0x3) r4 = syz_open_dev$media(&(0x7f0000000040), 0x1058, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r5, 0x0, 0x0, 0x2090) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 13m53.050868784s ago: executing program 2 (id=1676): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x65, 0x0) 13m52.909916195s ago: executing program 5 (id=1677): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0xfffffffd, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='1', 0x1) 13m52.414163975s ago: executing program 2 (id=1679): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x41555856, 0x3, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_rr_get_interval(r0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000) listen(0xffffffffffffffff, 0x3) r4 = syz_open_dev$media(&(0x7f0000000040), 0x1058, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r6, 0x0, 0x0, 0x2090) sendto$inet(r6, &(0x7f00000000c0)="f43945ca864918caf53758", 0xb, 0x340080d1, 0x0, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205648, &(0x7f00000000c0)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) 13m52.381912342s ago: executing program 5 (id=1680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000240)='rd_p', 0x4) 13m49.989705999s ago: executing program 2 (id=1682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x6843, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x5420, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) 13m49.987752321s ago: executing program 5 (id=1683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000240)='rd_p', 0x4) 13m48.078887396s ago: executing program 2 (id=1686): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xb8ab4000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x131e000, 0x800, 0x0, 0x6}, 0x20) r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x20, 0x7800, 0x0, 0x3) 13m42.199943345s ago: executing program 3 (id=1695): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x41555856, 0x3, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_rr_get_interval(r0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000) listen(0xffffffffffffffff, 0x3) r4 = syz_open_dev$media(&(0x7f0000000040), 0x1058, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r6, &(0x7f00000000c0)="f43945ca864918caf53758", 0xb, 0x340080d1, 0x0, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205648, &(0x7f00000000c0)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) 13m34.034417221s ago: executing program 32 (id=1683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000240)='rd_p', 0x4) 13m32.662041447s ago: executing program 33 (id=1686): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xb8ab4000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x131e000, 0x800, 0x0, 0x6}, 0x20) r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x20, 0x7800, 0x0, 0x3) 13m26.638872873s ago: executing program 34 (id=1695): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x41555856, 0x3, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_rr_get_interval(r0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000) listen(0xffffffffffffffff, 0x3) r4 = syz_open_dev$media(&(0x7f0000000040), 0x1058, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r6, &(0x7f00000000c0)="f43945ca864918caf53758", 0xb, 0x340080d1, 0x0, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205648, &(0x7f00000000c0)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) 6m45.31135261s ago: executing program 4 (id=2252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(0xffffffffffffffff) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7ff, 0x73c0, 0xfffffffb, 0xe795, 0x5, 0x5, 0x1, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x3, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4015}, 0x40488d0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0xfdef}], 0x1}, 0x4005) 6m35.178211204s ago: executing program 4 (id=2265): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x8000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0xe}}, {0x2, 0x4e23, @broadcast}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 6m34.591562965s ago: executing program 4 (id=2266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x4c, 0x3, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0xf}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x5}}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x4}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x9}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c4}, 0x8000) flock(r1, 0x5) 6m34.028672176s ago: executing program 4 (id=2269): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) epoll_create1(0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, &(0x7f0000000040)={0x24, @short={0x2, 0x3}}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0x1}, &(0x7f0000000540), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) setns(0xc9, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x400, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6c733d63703934392c747970653d98acdea62c706172743d3078303030303030303030303030303030392c706172743d3078303030303030303030303030303030392c006aab960ff871157ad9829d78441dcbd74703f7f4f183f37a71d1e3a5b29b97b292de7757e5d96bbd95b8305d44fb13c3420e95005c4f0367d7ab52950985d1ef83269831a9ea85ca252cd0e597f438bc31b28b17847cb2d5d946a9c21f2a33033aa7e6d4a817af24af2b8104650892379f1d6cb67d4e95612b4cfe4451478fd67df42bfb7598445cddbd373bed54add16a23caecd95604d90bb5247a814b6648217199817126"], 0x1, 0x5f1, &(0x7f0000000680)="$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") flock(0xffffffffffffffff, 0x5) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000050801"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x3b88c2bc99199f68) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) 6m30.994457411s ago: executing program 4 (id=2271): io_getevents(0x0, 0x5, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) futex$unlock_wake_list32(0x0, 0x681, 0x0, 0x0, &(0x7f00000003c0)=0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r1, &(0x7f0000000100)=""/9, 0xfffffd87) write$tun(r1, &(0x7f00000001c0)=ANY=[], 0xffe) 6m30.386230269s ago: executing program 4 (id=2275): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x8000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0xe}}, {0x2, 0x4e23, @broadcast}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 6m27.982311984s ago: executing program 35 (id=2275): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x8000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0xe}}, {0x2, 0x4e23, @broadcast}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 43.461958645s ago: executing program 1 (id=2719): socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r0 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, 0x0}, 0x24008004) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r1, &(0x7f0000000000)='\x00', &(0x7f0000000600)=@udp=r2, 0x2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f0000000280)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5}, 0x14) syz_emit_ethernet(0x5ef, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x5b9, 0x2b, 0x0, @private2, @local, {[], {0x2100, 0x0, 0x5b9, 0x0, @gue={{0x2, 0x1, 0x3, 0x6, 0x100, @val=0x80}, "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"}}}}}}}, 0x0) 42.89146689s ago: executing program 1 (id=2722): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x8, 0x5, 0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000a80)={{0x0, 0x3938700}}, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) 42.335408434s ago: executing program 1 (id=2725): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000240)='rd_p', 0x4) 40.630742873s ago: executing program 1 (id=2726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0xfdc8565f2c9dc94c) 32.497203502s ago: executing program 1 (id=2744): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r4, &(0x7f0000001100)='-', 0x1) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file0'}, 0xb) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$9p(r1, &(0x7f00000018c0)="4ac472c746b712c0580122b2a6188745cfb2fe6e797d1da468bece1d05d1748ed6d3c33e1da84d63f416047e5855d916b527b2a27f7c71daff9c06bfa31c6062a12b94410b0d73051b99d3d7196ca55363dffb0f354e4e99c2e60d00e73539c3c509a611fdce7c52b06f6a98fb847ce8f3d98687fba018ee1302b4fbc1ffa376ac2198e4fe4cc4ff73c3571cee23cca91f8393c6ddac5d2159a87e097e395fe2484d19ced7fd86914852eb39ca7ec84e781d0263935f5124617dd72cf2e329326ba1a3636076f4299fdbe325c101c3d74ee0efe9476871ef17f5ba1907c8b0fea747ec8f4af0e83395233e585aff746397a56a17988d889389b62acc01856e89cb5c976a6561b344e6c318f6ffd9da3bd7dc8619096732d19e41e346a9b3252f22803c034b42ff3f9c5c4eff35459654c19726f7a619e255936efcaf1955e4e21f6d3bb90ae9b1d3b1f7e330cdbdf2e93c1568668696083155ac262ae0008341a4b7902d40f4216f9897b95fa9dcd713d653a711dc5c5d0c4057aa053f80dbdf7381bf6b6efb411de4d32cedd89eafb0eea437c338e284e4cea0f59eeb341b1e98bf242fded94d90e62ebb5e2fb19cb15ba587b34a19fa47cf2d21ccf0335860b9f8b704119b714a127ea52f3f93a864f19918b76feaf8320cb04bc83fdf68226d1d3b7d8d27d9d5d9da83f7754d8476466b26ddf83e5bbf19395760a6925e80fa0fba502c1d23ce4682ea55ec29697b63b5cd9ba3b5a23b7de0ff9f93e1f24ba4a31c1008211d413796328447d81cff8f2c1d8946eee9f3c617f6662f943da95bc2321dfc4c50437ea1a1216fedabd2c0a0b5fe17238225fc4153599bac7b3daeafddaf1d98566033785fcc43684653f3a32609aa5d998a2e67b5be311d6bade79992c5ba2abf512245d6025b1897910726233fe8e0d541b9eb92cf0a390151db83e542d0abe79f7da2780f0a91877efe93ce5a7d2c730f77f42ea294697561bb02b78581c76baab73ac61c516c1c4c3a3f7fb2a52a8a844cc67a672fe20a5486897d160333ea6bf664cc39eb0b8887a600e41829eb48327d57e40231d52fcdc3603afdda7fd0a312057322df6ee0d79efd724daf7e41844b1dafdc38165bd51c07192e1197df41176005c1a057b9412b948c637879113437f1af394df7d6c3477bbc67792f217e16056f5166a4f7d54fc6dacaab85e0d9f9a96ea3a6dd77762f570a1a60cb6868e81537523276e7531934c8e616506af5a216be0880699768d330a6714caa9c35e77c67eb03c7722c450e9038de9d8052c01ff5f0573ffbb6fe43df2d2899b486389d1b5f8cfc233e6644ea6bd8d8dc3d4ca3cc58108ed22c358ec00e4f9f9b0ca73053d77f6c7d4bb5631494e1ded4ac02613f059d2c4c8fcdf9abeeade7476f5878b45206de93f9f8bd4db5f98817b90bec02b76e062a2146cb2fc2f2777c2f6139b614b4cd868b73", 0x411) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x40f) 31.654716629s ago: executing program 1 (id=2745): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) 19.062579544s ago: executing program 9 (id=2763): pipe2(&(0x7f00000000c0), 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f00000001c0), 0xff, 0x2100) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) userfaultfd(0x80001) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) userfaultfd(0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 18.570898549s ago: executing program 7 (id=2766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7ff, 0x73c0, 0xfffffffb, 0xe795, 0x5, 0x5, 0x1, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4015}, 0x40488d0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0xfdef}], 0x1}, 0x4005) 16.153529301s ago: executing program 9 (id=2767): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = socket$inet(0x2, 0x3, 0x33) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) mkdirat(0xffffffffffffff9c, 0x0, 0x117) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0xc004) 13.510138604s ago: executing program 7 (id=2775): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x804) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/12], 0x0, 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 12.264090448s ago: executing program 7 (id=2777): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x50) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r3, 0xffffe000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r6, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000001"], 0x30}, 0x4004000) connect$vsock_stream(r5, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000040)) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 11.152588729s ago: executing program 0 (id=2781): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000", 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1']) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 8.113021433s ago: executing program 8 (id=2783): socket$nl_route(0x10, 0x3, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000280)={'8255\x00', [0x2000, 0x0, 0x4, 0x8000, 0x9a86, 0x2, 0xc6b9, 0x6, 0x54c6cff3, 0xfa, 0xffffffff, 0x9, 0xfbfffff7, 0x400001, 0x10000006, 0x400, 0x0, 0x7f, 0x0, 0x40000003, 0x20408d, 0x9, 0x80000000, 0x20001e5b, 0x80003, 0xe69, 0xfff7ffff, 0x7, 0x4003, 0x8a, 0x5]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3fd, &(0x7f0000000500)=0x0) io_pgetevents(r2, 0x1, 0x1, &(0x7f0000000100)=[{}], 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0), 0x0, 0x400000000000000}]) 8.035900658s ago: executing program 9 (id=2784): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 8.001950957s ago: executing program 0 (id=2785): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) 7.85412959s ago: executing program 6 (id=2786): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7ff, 0x73c0, 0xfffffffb, 0xe795, 0x5, 0x5, 0x1, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4015}, 0x40488d0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0xfdef}], 0x1}, 0x4005) 7.555806224s ago: executing program 7 (id=2787): sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/timer_list\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 7.335164275s ago: executing program 0 (id=2788): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x804) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/12], 0x0, 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 7.328331108s ago: executing program 9 (id=2789): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4c881, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 7.052484376s ago: executing program 8 (id=2790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000022c0)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x9, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) 5.384574493s ago: executing program 9 (id=2791): pipe2(&(0x7f00000000c0), 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f00000001c0), 0xff, 0x2100) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) userfaultfd(0x80001) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) userfaultfd(0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 5.136777971s ago: executing program 6 (id=2792): syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000}, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@new_dev={0x1, 0xb38, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x14}}}, &(0x7f0000000140)=0x0) syz_ublk_setup_queues(r1, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1bee, 0x80000, 0x1000002, 0x141, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x100, 0x0, 0x8004146, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e8b, 0x1000, 0xffffffff, 0x2fd, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2, 0x2, 0xc5, 0x0, r1}}], 0x1, 0x0, 0x0) 5.082364653s ago: executing program 0 (id=2793): r0 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r0, 0x110, 0x2, 0x0, 0x0) pipe(&(0x7f00000002c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0c010310040000000040"], 0xf) 4.913795801s ago: executing program 8 (id=2794): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) write(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r5, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r7, 0x0, 0x36, 0x0, &(0x7f0000000680)="52540012345652540012345786dd6000000000003b4000000000000000000000000000000001004e0000000000000000000000000001", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001280)={0xffffffffffffffff, 0x0, {0x2a12, 0x80010000, 0x0, 0xffff, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xde, 0x8000]}}) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r9, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000022c0)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x9, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) 4.745525931s ago: executing program 7 (id=2795): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = socket$inet(0x2, 0x3, 0x33) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) mkdirat(0xffffffffffffff9c, 0x0, 0x117) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0xc004) 4.726549949s ago: executing program 9 (id=2796): pipe2(0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r0, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 2.142285276s ago: executing program 0 (id=2797): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000", 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1']) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 1.841628244s ago: executing program 7 (id=2798): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x50) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r3, 0xffffe000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r6, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000001"], 0x30}, 0x4004000) connect$vsock_stream(r5, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000040)) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 1.827868055s ago: executing program 8 (id=2799): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="05", 0x1}], 0x1}}], 0x1, 0x4000080) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) 1.732146177s ago: executing program 6 (id=2800): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.403304959s ago: executing program 8 (id=2801): socket$nl_route(0x10, 0x3, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000280)={'8255\x00', [0x2000, 0x0, 0x4, 0x8000, 0x9a86, 0x2, 0xc6b9, 0x6, 0x54c6cff3, 0xfa, 0xffffffff, 0x9, 0xfbfffff7, 0x400001, 0x10000006, 0x400, 0x0, 0x7f, 0x0, 0x40000003, 0x20408d, 0x9, 0x80000000, 0x20001e5b, 0x80003, 0xe69, 0xfff7ffff, 0x7, 0x4003, 0x8a, 0x5]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3fd, &(0x7f0000000500)=0x0) io_pgetevents(r2, 0x1, 0x1, &(0x7f0000000100)=[{}], 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0), 0x0, 0x400000000000000}]) 1.303618262s ago: executing program 6 (id=2802): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000180)="3300000008000102030405060101", 0xe) 1.146122262s ago: executing program 0 (id=2803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7ff, 0x73c0, 0xfffffffb, 0xe795, 0x5, 0x5, 0x1, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4015}, 0x40488d0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0xfdef}], 0x1}, 0x4005) 725.333528ms ago: executing program 6 (id=2804): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x804) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/12], 0x0, 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x1a, 0x0, 0x8, 0x4}, 0x28) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 494.458536ms ago: executing program 8 (id=2805): openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil) syz_open_procfs(0x0, 0x0) socket$inet6(0xa, 0x2, 0xfffffffd) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) syz_open_procfs(r0, &(0x7f0000000280)='net/rt_acct\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) creat(0x0, 0x4) unlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = open(0x0, 0x143142, 0x80) sendfile(r3, r3, 0x0, 0x1000000201005) 0s ago: executing program 6 (id=2806): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) kernel console output (not intermixed with test programs): kB active_file:0kB inactive_file:428kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1093.214296][T15533] lowmem_reserve[]: 0 0 0 0 0 [ 1093.214346][T15533] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1093.214517][T15533] Node 0 DMA32: 3*4kB (ME) 3*8kB (UE) 1*16kB (M) 11*32kB (UME) 5*64kB (E) 157*128kB (UME) 73*256kB (UME) 33*512kB (UME) 18*1024kB (UME) 2*2048kB (UM) 108*4096kB (UM) = 521300kB [ 1093.214753][T15533] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1093.214900][T15533] Node 1 Normal: 7*4kB (UM) 7*8kB (UM) 7*16kB (U) 4*32kB (U) 14*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 816*4096kB (M) = 3355588kB [ 1093.215135][T15533] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1093.215161][T15533] Node 0 hugepages_total=288 hugepages_free=288 hugepages_surp=0 hugepages_size=2048kB [ 1093.215185][T15533] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1093.215208][T15533] Node 1 hugepages_total=287 hugepages_free=287 hugepages_surp=0 hugepages_size=2048kB [ 1093.215232][T15533] 83169 total pagecache pages [ 1093.215242][T15533] 0 pages in swap cache [ 1093.215252][T15533] Free swap = 124996kB [ 1093.215262][T15533] Total swap = 124996kB [ 1093.215273][T15533] 2097051 pages RAM [ 1093.215283][T15533] 0 pages HighMem/MovableOnly [ 1093.215293][T15533] 432801 pages reserved [ 1093.215303][T15533] 0 pages cma reserved [ 1094.363797][ T4927] Bluetooth: hci5: command tx timeout [ 1094.363899][ T4927] Bluetooth: hci4: unexpected event for opcode 0x202d [ 1095.434350][T15382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1095.888509][T15382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1096.086559][T15540] mmap: syz.1.2360 (15540) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1096.117309][T15403] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.120552][T15403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.120684][T15403] bridge_slave_0: entered allmulticast mode [ 1096.156766][T15403] bridge_slave_0: entered promiscuous mode [ 1096.403122][T15403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.403220][T15403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.403346][T15403] bridge_slave_1: entered allmulticast mode [ 1096.408162][T15403] bridge_slave_1: entered promiscuous mode [ 1096.584035][T15382] team0: Port device team_slave_0 added [ 1096.591373][T15382] team0: Port device team_slave_1 added [ 1096.910782][T15420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.910874][T15420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.910997][T15420] bridge_slave_0: entered allmulticast mode [ 1096.942778][T15420] bridge_slave_0: entered promiscuous mode [ 1096.963279][T15420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.963372][T15420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.963498][T15420] bridge_slave_1: entered allmulticast mode [ 1096.969822][T15420] bridge_slave_1: entered promiscuous mode [ 1097.013681][T15403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1097.105421][T15382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1097.105443][T15382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.105479][T15382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1097.286525][T15403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1097.328009][T15382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1097.328030][T15382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.328066][T15382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1097.848665][T15420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1098.128466][T15420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1098.265539][T15403] team0: Port device team_slave_0 added [ 1098.287898][T15403] team0: Port device team_slave_1 added [ 1098.288133][T15578] tipc: Enabling of bearer rejected, failed to enable media [ 1098.694254][T15420] team0: Port device team_slave_0 added [ 1098.914596][T15403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1098.914617][T15403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.914653][T15403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1098.920184][T15420] team0: Port device team_slave_1 added [ 1099.036723][T15382] hsr_slave_0: entered promiscuous mode [ 1099.040701][T15382] hsr_slave_1: entered promiscuous mode [ 1099.078623][T15403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1099.078641][T15403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1099.078676][T15403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1099.395083][T15420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1099.395103][T15420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1099.395140][T15420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1099.557748][T15403] hsr_slave_0: entered promiscuous mode [ 1099.560155][T15403] hsr_slave_1: entered promiscuous mode [ 1099.576064][T15403] debugfs: 'hsr0' already exists in 'hsr' [ 1099.576086][T15403] Cannot create hsr debugfs directory [ 1099.580403][T15420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1099.580420][T15420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1099.580454][T15420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.249618][T15420] hsr_slave_0: entered promiscuous mode [ 1100.261107][T15420] hsr_slave_1: entered promiscuous mode [ 1100.269358][T15420] debugfs: 'hsr0' already exists in 'hsr' [ 1100.269381][T15420] Cannot create hsr debugfs directory [ 1100.346124][T15477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.346223][T15477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.346345][T15477] bridge_slave_0: entered allmulticast mode [ 1100.351171][T15477] bridge_slave_0: entered promiscuous mode [ 1100.499175][T15477] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.499323][T15477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.499509][T15477] bridge_slave_1: entered allmulticast mode [ 1100.528717][T15477] bridge_slave_1: entered promiscuous mode [ 1104.604989][T15477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.835916][T15477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1105.471391][T15630] tipc: Enabling of bearer rejected, failed to enable media [ 1105.567582][T15477] team0: Port device team_slave_0 added [ 1105.869551][T15477] team0: Port device team_slave_1 added [ 1106.152334][T15477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.152355][T15477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1106.152392][T15477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.288144][T15477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.288173][T15477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1106.288207][T15477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.627886][T15477] hsr_slave_0: entered promiscuous mode [ 1106.628869][T15477] hsr_slave_1: entered promiscuous mode [ 1106.649659][T15477] debugfs: 'hsr0' already exists in 'hsr' [ 1106.649684][T15477] Cannot create hsr debugfs directory [ 1109.291182][ T6720] bridge_slave_1: left allmulticast mode [ 1109.291211][ T6720] bridge_slave_1: left promiscuous mode [ 1109.291410][ T6720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.319929][ T6720] bridge_slave_0: left allmulticast mode [ 1109.319955][ T6720] bridge_slave_0: left promiscuous mode [ 1109.320132][ T6720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.389782][ T6720] bridge_slave_1: left allmulticast mode [ 1109.389812][ T6720] bridge_slave_1: left promiscuous mode [ 1109.389989][ T6720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.419025][ T6720] bridge_slave_0: left allmulticast mode [ 1109.419053][ T6720] bridge_slave_0: left promiscuous mode [ 1109.419225][ T6720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.485171][ T6720] bridge_slave_1: left allmulticast mode [ 1109.485202][ T6720] bridge_slave_1: left promiscuous mode [ 1109.485385][ T6720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.491627][ T6720] bridge_slave_0: left allmulticast mode [ 1109.491651][ T6720] bridge_slave_0: left promiscuous mode [ 1109.529229][ T6720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.234683][ T6720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1112.241119][ T6720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1112.265640][ T6720] bond0 (unregistering): Released all slaves [ 1112.301851][ T5832] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1112.456326][ T5832] usb 1-1: Using ep0 maxpacket: 8 [ 1112.457070][ T5832] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1112.458185][ T5832] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1112.458215][ T5832] usb 1-1: config 0 has no interface number 0 [ 1112.458254][ T5832] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1112.458284][ T5832] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1112.458318][ T5832] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1112.458352][ T5832] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1112.458400][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.567367][ T5832] usb 1-1: config 0 descriptor?? [ 1112.602935][ T5832] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1112.824222][ T6720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1112.843549][ T6720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1112.851099][ T6720] bond0 (unregistering): Released all slaves [ 1113.449249][ T6720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1113.466649][ T6720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1113.469858][ T6720] bond0 (unregistering): Released all slaves [ 1114.275320][ T6720] hsr_slave_0: left promiscuous mode [ 1114.280947][ T6720] hsr_slave_1: left promiscuous mode [ 1114.294571][ T6720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1114.774775][T15681] 9p: Bad value for 'rfdno' [ 1114.987990][ T9] usb 1-1: USB disconnect, device number 27 [ 1115.017379][ T6720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1115.059258][ T9] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1115.110040][ T6720] hsr_slave_0: left promiscuous mode [ 1115.122067][ T6720] hsr_slave_1: left promiscuous mode [ 1115.122774][ T6720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1115.151885][ T6720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1115.193847][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.196961][ T6720] hsr_slave_0: left promiscuous mode [ 1115.199799][ T6720] hsr_slave_1: left promiscuous mode [ 1115.200511][ T6720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1115.228881][ T6720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1116.026546][ T6720] team0 (unregistering): Port device team_slave_1 removed [ 1116.103614][ T6720] team0 (unregistering): Port device team_slave_0 removed [ 1116.909816][ T6720] team0 (unregistering): Port device team_slave_1 removed [ 1116.920545][ T5740] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1116.958181][ T6720] team0 (unregistering): Port device team_slave_0 removed [ 1117.065033][ T5740] usb 1-1: Using ep0 maxpacket: 32 [ 1117.065848][ T5740] usb 1-1: New USB device found, idVendor=056a, idProduct=010d, bcdDevice= 0.00 [ 1117.067022][ T5740] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1117.067072][ T5740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.120837][ T5740] usb 1-1: config 0 descriptor?? [ 1117.578819][ T5740] wacom 0003:056A:010D.0002: item fetching failed at offset 5/6 [ 1117.579354][ T5740] wacom 0003:056A:010D.0002: parse failed [ 1117.579444][ T5740] wacom 0003:056A:010D.0002: probe with driver wacom failed with error -22 [ 1117.768476][ T5740] usb 1-1: USB disconnect, device number 28 [ 1117.817763][ T6720] team0 (unregistering): Port device team_slave_1 removed [ 1117.864584][ T6720] team0 (unregistering): Port device team_slave_0 removed [ 1118.177106][T15705] tipc: Enabling of bearer rejected, failed to enable media [ 1118.964252][T15403] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1118.995963][T15403] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1119.000073][T15403] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1119.041269][T15403] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1119.052371][T15403] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1119.086364][T15403] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1119.104010][T15403] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1119.135403][T15403] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1119.186297][ T1009] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1119.190526][ T315] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1119.210813][ T315] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1119.211434][ T315] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1119.228087][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1119.244413][ T1009] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1119.247850][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1119.250145][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1119.289392][ T1009] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1119.290203][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1119.290727][ T1009] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1119.291256][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1119.327104][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1119.327625][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1119.330492][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1119.357166][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1119.358049][ T1009] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1119.369992][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1119.977677][T15403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.209340][T15403] 8021q: adding VLAN 0 to HW filter on device team0 [ 1120.307876][ T6720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.307971][ T6720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1120.354762][ T6720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.354875][ T6720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1120.556125][T15382] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1120.590045][T15382] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1120.613582][T15382] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1120.638372][T15382] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1120.640839][T15382] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1120.853982][T15382] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1121.213894][T15763] 9p: Bad value for 'rfdno' [ 1121.243523][T15382] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1121.266321][T15382] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1122.133029][T15382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1122.466471][T15382] 8021q: adding VLAN 0 to HW filter on device team0 [ 1122.515733][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.515824][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1122.608678][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.608768][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1122.697514][T15420] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1122.722726][T15420] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1123.733801][T15420] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1124.038235][T15420] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1124.063666][T15420] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1124.096597][T15420] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1124.241990][T15420] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1124.283115][T15420] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1125.027796][T15477] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1125.059696][T15477] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1125.076372][T15477] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1125.108978][T15477] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1125.143231][T15477] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1125.169343][T15477] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1125.195120][T15477] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1125.236746][T15477] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1125.745040][T15420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.919612][T15403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.950099][T15420] 8021q: adding VLAN 0 to HW filter on device team0 [ 1126.036964][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.037057][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1126.106835][T15477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1126.131790][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.131881][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1126.287969][T15477] 8021q: adding VLAN 0 to HW filter on device team0 [ 1126.366323][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.366422][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1126.413432][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.413524][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1128.500783][T15850] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5610] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[15850] [ 1128.503104][T12388] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1128.976852][T15403] veth0_vlan: entered promiscuous mode [ 1129.009766][T15403] veth1_vlan: entered promiscuous mode [ 1129.374091][T15403] veth0_macvtap: entered promiscuous mode [ 1129.412236][T15403] veth1_macvtap: entered promiscuous mode [ 1129.479391][T15382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1129.548402][T15403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1129.620154][T15403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1129.673368][ T5898] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.674471][ T137] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.674532][ T137] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.674576][ T137] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.739164][T15875] 9p: Bad value for 'rfdno' [ 1132.919214][ T7284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.089293][ T7284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.317077][ T5898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.317103][ T5898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.482304][T15730] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1133.633388][T15730] usb 1-1: Using ep0 maxpacket: 8 [ 1133.637189][T15730] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1133.641286][T15730] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1133.641317][T15730] usb 1-1: config 0 has no interface number 0 [ 1133.641356][T15730] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1133.641386][T15730] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1133.641420][T15730] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1133.641454][T15730] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1133.641503][T15730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.759516][T15730] usb 1-1: config 0 descriptor?? [ 1133.826432][T15730] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1133.916155][T15420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1134.538138][T15477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1134.786153][ T4927] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1134.799639][ T4927] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1134.801054][ T4927] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1134.835638][ T4927] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1134.838804][ T4927] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1136.126443][ T1214] usb 1-1: USB disconnect, device number 29 [ 1136.211967][ T1214] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1136.954357][ T4927] Bluetooth: hci6: command tx timeout [ 1137.580836][T15420] veth0_vlan: entered promiscuous mode [ 1138.091332][T15420] veth1_vlan: entered promiscuous mode [ 1138.345460][T15477] veth0_vlan: entered promiscuous mode [ 1138.519600][T15477] veth1_vlan: entered promiscuous mode [ 1138.918021][T15477] veth0_macvtap: entered promiscuous mode [ 1139.033104][ T4927] Bluetooth: hci6: command tx timeout [ 1139.057915][T15477] veth1_macvtap: entered promiscuous mode [ 1139.618798][T15730] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1139.671196][ T1009] bridge_slave_1: left allmulticast mode [ 1139.671225][ T1009] bridge_slave_1: left promiscuous mode [ 1139.671416][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.722855][ T1009] bridge_slave_0: left allmulticast mode [ 1139.722882][ T1009] bridge_slave_0: left promiscuous mode [ 1139.723057][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.785051][T15730] usb 7-1: Using ep0 maxpacket: 32 [ 1139.790254][T15730] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1139.798510][T15730] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 1139.798550][T15730] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1139.798592][T15730] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1139.798627][T15730] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1139.798664][T15730] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1139.881975][T15730] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1139.882008][T15730] usb 7-1: Product: syz [ 1139.882028][T15730] usb 7-1: Manufacturer: syz [ 1139.882048][T15730] usb 7-1: SerialNumber: syz [ 1139.916592][T15730] usb 7-1: config 0 descriptor?? [ 1139.947282][T15730] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1139.983618][T15730] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1141.111823][ T4927] Bluetooth: hci6: command tx timeout [ 1142.314098][T12388] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1142.374848][T12388] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1142.381174][T12388] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1142.406623][T12388] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1142.407367][T12388] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1142.457155][T15966] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1142.509429][ T5740] usb 7-1: USB disconnect, device number 2 [ 1142.509527][ C0] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 1142.542442][ T5740] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 1143.048198][ T1009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1143.067192][ T1009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1143.082083][ T1009] bond0 (unregistering): Released all slaves [ 1143.198349][T12388] Bluetooth: hci6: command tx timeout [ 1143.349654][ T1009] hsr_slave_0: left promiscuous mode [ 1143.368350][ T1009] hsr_slave_1: left promiscuous mode [ 1143.369217][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1143.396424][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1144.514476][T12388] Bluetooth: hci1: command tx timeout [ 1144.773134][T15995] overlayfs: failed to clone lowerpath [ 1145.652100][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1145.688394][ T4927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1145.702283][ T4927] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1145.703038][ T4927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1145.705832][ T4927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1145.707230][ T4927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1145.813858][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1145.814802][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1145.839759][ T9] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1145.839793][ T9] usb 1-1: config 0 has no interface number 0 [ 1145.839834][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1145.839865][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1145.839898][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1145.839933][ T9] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1145.839981][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.953878][ T9] usb 1-1: config 0 descriptor?? [ 1146.105313][ T9] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1146.183526][ T1009] team0 (unregistering): Port device team_slave_1 removed [ 1146.316431][ T1009] team0 (unregistering): Port device team_slave_0 removed [ 1146.553098][ T4927] Bluetooth: hci1: command tx timeout [ 1148.572999][ T4927] Bluetooth: hci3: command tx timeout [ 1148.604299][T15730] usb 1-1: USB disconnect, device number 30 [ 1149.576855][T12388] Bluetooth: hci1: command tx timeout [ 1149.597516][T15730] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1150.633536][T12388] Bluetooth: hci3: command tx timeout [ 1151.592173][T12388] Bluetooth: hci1: command tx timeout [ 1152.712138][T12388] Bluetooth: hci3: command tx timeout [ 1154.357205][T15905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.357297][T15905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.357435][T15905] bridge_slave_0: entered allmulticast mode [ 1154.416665][T15905] bridge_slave_0: entered promiscuous mode [ 1154.439925][T15905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.440019][T15905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.440135][T15905] bridge_slave_1: entered allmulticast mode [ 1154.484507][T15905] bridge_slave_1: entered promiscuous mode [ 1154.791860][T12388] Bluetooth: hci3: command tx timeout [ 1154.836903][T15905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1154.893171][T15905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.330279][T15730] libceph: connect (1)[c::]:6789 error -101 [ 1155.330429][T15730] libceph: mon0 (1)[c::]:6789 connect error [ 1155.366264][T16060] ceph: No mds server is up or the cluster is laggy [ 1155.628761][T15905] team0: Port device team_slave_0 added [ 1155.859480][T15905] team0: Port device team_slave_1 added [ 1156.094940][T15905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.094960][T15905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1156.094996][T15905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1156.247801][T16072] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2423'. [ 1156.338350][T15905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.338369][T15905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1156.338405][T15905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.030262][T15905] hsr_slave_0: entered promiscuous mode [ 1157.047120][T15905] hsr_slave_1: entered promiscuous mode [ 1160.993532][ T1009] bridge_slave_1: left allmulticast mode [ 1160.993575][ T1009] bridge_slave_1: left promiscuous mode [ 1160.993762][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.028429][ T1009] bridge_slave_0: left allmulticast mode [ 1161.028455][ T1009] bridge_slave_0: left promiscuous mode [ 1161.028653][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.988834][ T1009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1162.007079][ T1009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1162.010046][ T1009] bond0 (unregistering): Released all slaves [ 1164.392688][ T1009] hsr_slave_0: left promiscuous mode [ 1164.396416][ T1009] hsr_slave_1: left promiscuous mode [ 1164.397152][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1164.425211][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1164.478461][ T1009] veth1_vlan: left promiscuous mode [ 1164.478540][ T1009] veth0_vlan: left promiscuous mode [ 1165.537897][ T1009] team0 (unregistering): Port device team_slave_1 removed [ 1165.600357][ T1009] team0 (unregistering): Port device team_slave_0 removed [ 1166.272249][T16162] 9p: Bad value for 'rfdno' [ 1168.128166][T16172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2438'. [ 1171.340742][T15975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.340834][T15975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.340966][T15975] bridge_slave_0: entered allmulticast mode [ 1171.381404][T15975] bridge_slave_0: entered promiscuous mode [ 1171.441584][T15975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.441674][T15975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.456425][T15975] bridge_slave_1: entered allmulticast mode [ 1171.473577][T15975] bridge_slave_1: entered promiscuous mode [ 1171.737302][T16011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.746765][T16011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.746900][T16011] bridge_slave_0: entered allmulticast mode [ 1171.783184][T16011] bridge_slave_0: entered promiscuous mode [ 1171.980758][T16011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.980850][T16011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.980986][T16011] bridge_slave_1: entered allmulticast mode [ 1172.024334][T16011] bridge_slave_1: entered promiscuous mode [ 1172.526564][ T38] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.527160][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.527802][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.528421][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.529046][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.547836][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.555974][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.556574][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.624114][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.626301][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.628014][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.656176][ T38] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.656870][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.657524][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.660037][ T38] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.660600][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.692725][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.722929][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.723525][ T38] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.725858][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.727788][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.730800][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.731468][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.782089][ T6720] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.782729][ T6720] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.783551][ T38] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.786296][ T6720] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.786888][ T6720] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.837575][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.839212][T15975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1172.866802][ T38] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.867555][ T38] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.888091][ T38] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.888734][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.889375][ T6720] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.891096][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.929338][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.929914][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.930531][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.968262][ T38] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.968839][ T38] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.969469][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1172.999520][ T38] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.000118][ T38] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.000719][ T38] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.029154][ T1418] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.029768][ T1418] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.030482][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.057733][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.071068][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.071626][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.088504][ T1418] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.091052][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.110538][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.111151][ T38] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.112410][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.143003][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.144128][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.148602][ T38] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.149229][ T38] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.159927][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.196897][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.202753][ T5898] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.221974][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.224312][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.257612][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.259915][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.261011][ T5898] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.290531][T15975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1173.302187][ T5898] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1173.387349][T16011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1173.657601][T16011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1173.760962][T15975] team0: Port device team_slave_0 added [ 1173.777719][T15975] team0: Port device team_slave_1 added [ 1174.138955][T16226] 9p: Bad value for 'rfdno' [ 1174.455759][T16011] team0: Port device team_slave_0 added [ 1174.456725][T15975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.456742][T15975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.456778][T15975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.561666][T16011] team0: Port device team_slave_1 added [ 1174.571569][T15975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.571586][T15975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.571622][T15975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1174.718866][T16011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.718887][T16011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.718923][T16011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.839886][T16011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.839906][T16011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.839941][T16011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1174.975574][T15975] hsr_slave_0: entered promiscuous mode [ 1174.978769][T15975] hsr_slave_1: entered promiscuous mode [ 1174.980754][T15975] debugfs: 'hsr0' already exists in 'hsr' [ 1174.980777][T15975] Cannot create hsr debugfs directory [ 1175.018945][T15905] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1175.038904][T15905] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1175.055559][T15905] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1175.061279][T15905] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1175.148823][T15905] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1175.170235][T15905] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1175.343238][T15905] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1175.378023][T15905] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1175.455715][T16011] hsr_slave_0: entered promiscuous mode [ 1175.458949][T16011] hsr_slave_1: entered promiscuous mode [ 1175.484694][T16011] debugfs: 'hsr0' already exists in 'hsr' [ 1175.487427][T16011] Cannot create hsr debugfs directory [ 1176.108574][ T1009] bridge_slave_1: left allmulticast mode [ 1176.108604][ T1009] bridge_slave_1: left promiscuous mode [ 1176.108815][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.142635][ T1009] bridge_slave_0: left allmulticast mode [ 1176.142663][ T1009] bridge_slave_0: left promiscuous mode [ 1176.142846][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.474107][ T4927] Bluetooth: hci5: command 0x1003 tx timeout [ 1176.474201][T12388] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1176.634763][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.983354][ T1009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1177.004574][ T1009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1177.006644][ T1009] bond0 (unregistering): Released all slaves [ 1179.173973][ T1009] hsr_slave_0: left promiscuous mode [ 1179.179281][ T1009] hsr_slave_1: left promiscuous mode [ 1179.179992][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1179.206953][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1179.238944][ T1009] veth1_macvtap: left promiscuous mode [ 1179.238981][ T1009] veth0_macvtap: left promiscuous mode [ 1179.239073][ T1009] veth1_vlan: left promiscuous mode [ 1179.239138][ T1009] veth0_vlan: left promiscuous mode [ 1180.270548][ T1009] team0 (unregistering): Port device team_slave_1 removed [ 1180.330032][ T1009] team0 (unregistering): Port device team_slave_0 removed [ 1180.631670][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.632610][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.650718][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.651462][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.667505][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.671222][ T6720] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.688909][ T6720] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.690051][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.712923][ T5898] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.716585][ T7380] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.720232][ T6720] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.738317][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.770466][ T6720] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.771123][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.794139][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.794841][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.799798][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.800991][ T6720] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.831421][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.866723][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.891678][ T5898] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.893918][ T5898] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.896460][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.930270][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.931326][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.950649][ T5898] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.951328][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.971281][ T5898] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.982848][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.984482][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.985830][ T5898] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1180.989699][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.008552][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.039189][ T5898] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.039865][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.049978][ T5898] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.070296][ T5898] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.070854][ T5898] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.090435][ T6720] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.138377][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.139310][ T7380] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.142477][ T5898] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.168029][ T6720] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.181216][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.191081][ T7380] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.204054][ T6720] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.207395][ T7380] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.230018][ T7380] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.242137][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.248277][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.248898][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.250743][ T6720] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.314907][ T6720] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.318092][ T6720] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.321849][ T6720] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.349912][ T6720] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.369031][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.369692][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.370275][ T5898] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1181.379713][ T7380] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1182.851381][T16280] 9p: Bad value for 'rfdno' [ 1183.346695][T16285] loop6: detected capacity change from 0 to 512 [ 1183.401024][T16285] EXT4-fs error (device loop6): ext4_iget_extra_inode:5209: inode #15: comm syz.6.2457: corrupted in-inode xattr: invalid ea_ino [ 1183.401064][T16285] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1183.401762][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1183.401787][ C0] EXT4-fs (loop6): initial error at time 1790914117: ext4_iget_extra_inode:5209: inode 15 [ 1183.401824][ C0] EXT4-fs (loop6): last error at time 1790914117: ext4_iget_extra_inode:5209: inode 15 [ 1183.459917][T16285] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.2457: couldn't read orphan inode 15 (err -117) [ 1183.460110][T16285] loop6: lost filesystem error report for type 5 error -117 [ 1183.495969][T16285] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1184.438835][T15403] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1184.681216][T15905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.925956][T15905] 8021q: adding VLAN 0 to HW filter on device team0 [ 1184.965860][ T5898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.965957][ T5898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1185.007333][ T1418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.007426][ T1418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1187.027442][T16011] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1187.066080][T16011] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1187.082933][T16011] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1187.326527][T16011] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1187.348113][T16011] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1187.401555][T16011] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1187.418822][T16011] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1187.451445][T16011] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1188.311632][T15975] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1188.349164][T15975] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1188.364834][T15975] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1188.400416][T15975] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1188.429594][T15975] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1188.450831][T15975] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1188.473950][T15975] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1188.519595][T15975] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1188.701588][T16011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1189.409925][T16011] 8021q: adding VLAN 0 to HW filter on device team0 [ 1189.563407][T16357] syzkaller0: entered promiscuous mode [ 1189.563434][T16357] syzkaller0: entered allmulticast mode [ 1190.812403][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.812498][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1191.030193][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.030314][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1191.113813][T15905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1191.505324][T15975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1191.668213][T15975] 8021q: adding VLAN 0 to HW filter on device team0 [ 1191.726692][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.726786][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1191.989490][T16371] 9p: Bad value for 'rfdno' [ 1192.001147][T13600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.001243][T13600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1193.689070][T15905] veth0_vlan: entered promiscuous mode [ 1193.814612][T15905] veth1_vlan: entered promiscuous mode [ 1197.167953][ T4927] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1197.184480][ T4927] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1197.185128][ T4927] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1197.189050][ T4927] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1197.218839][ T4927] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1197.780294][T16011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1199.001561][T15975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1199.272505][T12388] Bluetooth: hci5: command tx timeout [ 1201.353225][T12388] Bluetooth: hci5: command tx timeout [ 1203.431990][T12388] Bluetooth: hci5: command tx timeout [ 1203.755870][T16479] db_root: cannot be changed because it's in use [ 1204.028924][T16011] veth0_vlan: entered promiscuous mode [ 1204.064477][T16489] 9p: Bad value for 'rfdno' [ 1204.317804][T12388] Bluetooth: hci2: command 0x0406 tx timeout [ 1204.666451][T12388] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1204.671409][T12388] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1204.687054][T12388] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1204.697343][T12388] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1204.698973][T12388] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1205.515154][T12388] Bluetooth: hci5: command tx timeout [ 1205.613292][ T13] bridge_slave_1: left allmulticast mode [ 1205.613324][ T13] bridge_slave_1: left promiscuous mode [ 1205.613537][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.654281][ T13] bridge_slave_0: left allmulticast mode [ 1205.654309][ T13] bridge_slave_0: left promiscuous mode [ 1205.654489][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.740728][ T4927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1206.753835][ T4927] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1206.755085][ T4927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1206.756131][ T4927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1206.756753][ T4927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1206.795232][ T4927] Bluetooth: hci1: command tx timeout [ 1206.920566][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1206.966799][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1206.987196][ T13] bond0 (unregistering): Released all slaves [ 1207.608121][ T13] hsr_slave_0: left promiscuous mode [ 1207.619274][ T13] hsr_slave_1: left promiscuous mode [ 1207.620027][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1207.647399][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1207.705869][ T13] veth1_vlan: left promiscuous mode [ 1207.705943][ T13] veth0_vlan: left promiscuous mode [ 1208.871935][T12388] Bluetooth: hci3: command tx timeout [ 1208.872928][T12388] Bluetooth: hci1: command tx timeout [ 1210.933718][T16558] db_root: cannot be changed because it's in use [ 1210.952188][ T4927] Bluetooth: hci1: command tx timeout [ 1210.952228][ T4927] Bluetooth: hci3: command tx timeout [ 1211.097960][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1211.171283][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1211.625765][T16570] 9p: Bad value for 'rfdno' [ 1213.032362][T12388] Bluetooth: hci3: command tx timeout [ 1213.032399][T12388] Bluetooth: hci1: command tx timeout [ 1215.113173][ T4927] Bluetooth: hci3: command tx timeout [ 1216.894853][T16421] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.894945][T16421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.895088][T16421] bridge_slave_0: entered allmulticast mode [ 1217.900732][T16421] bridge_slave_0: entered promiscuous mode [ 1217.930472][T16421] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.930564][T16421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.930683][T16421] bridge_slave_1: entered allmulticast mode [ 1218.913827][T16421] bridge_slave_1: entered promiscuous mode [ 1223.435709][ T31] kauditd_printk_skb: 34 callbacks suppressed [ 1223.435733][ T31] audit: type=1800 audit(1790914157.852:94): pid=16644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2498" name=08 dev="sda1" ino=2092 res=0 errno=0 [ 1223.997128][T16421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1224.002574][T16649] 9p: Bad value for 'rfdno' [ 1224.033043][T16421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1224.071096][T16653] loop6: detected capacity change from 0 to 64 [ 1224.415184][T16651] syzkaller0: entered promiscuous mode [ 1224.415212][T16651] syzkaller0: entered allmulticast mode [ 1224.439011][T16421] team0: Port device team_slave_0 added [ 1224.686036][T16421] team0: Port device team_slave_1 added [ 1224.939411][T16421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1224.939433][T16421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.939469][T16421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1225.319076][T16421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1225.319098][T16421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.319135][T16421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1228.406798][T16421] hsr_slave_0: entered promiscuous mode [ 1228.424856][T16421] hsr_slave_1: entered promiscuous mode [ 1229.047880][T16494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.047971][T16494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.048100][T16494] bridge_slave_0: entered allmulticast mode [ 1229.082755][T16494] bridge_slave_0: entered promiscuous mode [ 1231.375039][T16494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.375218][T16494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.375375][T16494] bridge_slave_1: entered allmulticast mode [ 1231.406308][T16494] bridge_slave_1: entered promiscuous mode [ 1231.732501][T16494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1232.357699][T16721] 9p: Bad value for 'rfdno' [ 1232.700622][T16732] loop6: detected capacity change from 0 to 512 [ 1232.722233][T16732] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1232.722349][T16732] ext4: Unknown parameter 'context' [ 1232.868719][T16494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1233.450959][T16745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2516'. [ 1233.599220][T16494] team0: Port device team_slave_0 added [ 1233.626024][T16494] team0: Port device team_slave_1 added [ 1233.908235][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1233.911253][ T7380] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1233.940431][ T7380] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1233.941067][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1235.615823][T16525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.615915][T16525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.616046][T16525] bridge_slave_0: entered allmulticast mode [ 1235.647722][T16525] bridge_slave_0: entered promiscuous mode [ 1235.747733][T16494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1235.747755][T16494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.747791][T16494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1235.835915][T16525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.836007][T16525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.836135][T16525] bridge_slave_1: entered allmulticast mode [ 1235.867643][T16525] bridge_slave_1: entered promiscuous mode [ 1237.086855][T16494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1237.086877][T16494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.086914][T16494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1238.045338][T16525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1238.075789][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.110457][T16525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1239.075161][T16771] 9p: Bad value for 'rfdno' [ 1239.548230][T16494] hsr_slave_0: entered promiscuous mode [ 1239.560173][T16494] hsr_slave_1: entered promiscuous mode [ 1239.560810][T16494] debugfs: 'hsr0' already exists in 'hsr' [ 1239.560833][T16494] Cannot create hsr debugfs directory [ 1239.726441][T16525] team0: Port device team_slave_0 added [ 1239.752558][T16525] team0: Port device team_slave_1 added [ 1240.252413][T16525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.252435][T16525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.252471][T16525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.471658][T16525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.475306][T16525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.475345][T16525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1240.749909][ T13] bridge_slave_1: left allmulticast mode [ 1240.749940][ T13] bridge_slave_1: left promiscuous mode [ 1240.750134][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.824660][ T13] bridge_slave_0: left allmulticast mode [ 1240.828912][ T13] bridge_slave_0: left promiscuous mode [ 1240.829095][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.955086][ T13] bridge_slave_1: left allmulticast mode [ 1240.955117][ T13] bridge_slave_1: left promiscuous mode [ 1240.955294][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.010906][ T13] bridge_slave_0: left allmulticast mode [ 1241.010939][ T13] bridge_slave_0: left promiscuous mode [ 1241.011119][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.539510][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.540107][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.540657][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.565148][ T38] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.565748][ T38] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.566332][ T38] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.566901][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.568308][ T38] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.614065][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.615478][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.616126][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.621085][ T38] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.657849][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.659376][ T1009] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.660013][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.663267][ T1009] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.700144][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.700798][ T1418] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.721033][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.721656][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.740149][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.753588][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.754161][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.755775][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.757188][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.799047][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.810216][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.821525][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.833868][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.838166][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.839445][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.868702][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.869393][ T1418] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.871494][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.903431][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.904026][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.906443][ T1418] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.909854][ T1418] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.949478][ T1418] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.950066][ T1418] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.960783][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.968785][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.988482][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1243.991535][ T1009] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1244.011864][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1244.013395][ T1009] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1244.013998][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1244.016207][ T1418] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1244.019659][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1244.030710][ T1418] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1244.076579][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1244.103118][ T1418] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1244.104503][ T1418] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1244.107146][ T1009] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1244.139659][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1244.141522][ T1009] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1244.149903][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1244.169852][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1244.179871][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1244.202137][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1244.205496][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1244.206119][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1244.207516][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1244.209161][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1244.211063][T13600] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1244.247443][ T1418] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1244.780742][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1244.794255][T16813] ip_tables: iptables: counters copy to user failed while replacing table [ 1245.274389][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1245.297549][ T13] bond0 (unregistering): Released all slaves [ 1245.467541][T16813] ip_tables: iptables: counters copy to user failed while replacing table [ 1246.087773][T16827] 9p: Bad value for 'rfdno' [ 1246.725953][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1247.713984][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1247.718411][ T13] bond0 (unregistering): Released all slaves [ 1249.226654][ T13] hsr_slave_0: left promiscuous mode [ 1249.231485][ T13] hsr_slave_1: left promiscuous mode [ 1249.232901][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1249.257602][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1251.327341][ T13] hsr_slave_0: left promiscuous mode [ 1251.345564][ T13] hsr_slave_1: left promiscuous mode [ 1251.346325][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1251.370782][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1251.440731][T16853] db_root: cannot be changed because it's in use [ 1251.503087][ T13] veth0_vlan: left promiscuous mode [ 1252.906701][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1253.095999][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1256.064821][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1256.121602][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1256.196870][T12388] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1256.212537][T12388] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1256.220056][T12388] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1256.221036][T12388] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1256.238082][T12388] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1258.311901][T12388] Bluetooth: hci6: command tx timeout [ 1258.906767][T16896] db_root: cannot be changed because it's in use [ 1259.005386][T16525] hsr_slave_0: entered promiscuous mode [ 1259.009124][T16525] hsr_slave_1: entered promiscuous mode [ 1259.011070][T16525] debugfs: 'hsr0' already exists in 'hsr' [ 1259.011093][T16525] Cannot create hsr debugfs directory [ 1259.394453][T16902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2552'. [ 1260.391855][T12388] Bluetooth: hci6: command tx timeout [ 1261.210946][ T13] bridge_slave_1: left allmulticast mode [ 1261.210976][ T13] bridge_slave_1: left promiscuous mode [ 1261.211149][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.242806][ T13] bridge_slave_0: left allmulticast mode [ 1261.242834][ T13] bridge_slave_0: left promiscuous mode [ 1261.243020][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.661232][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1261.683799][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1261.689003][ T13] bond0 (unregistering): Released all slaves [ 1261.891906][ T13] hsr_slave_0: left promiscuous mode [ 1261.919261][ T13] hsr_slave_1: left promiscuous mode [ 1261.919959][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1261.946963][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.472297][T12388] Bluetooth: hci6: command tx timeout [ 1262.508034][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1262.541651][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1264.444597][T16947] tipc: Started in network mode [ 1264.444633][T16947] tipc: Node identity 76ecdc596e62, cluster identity 4711 [ 1264.444768][T16947] tipc: Enabled bearer , priority 0 [ 1264.476246][T16942] syzkaller0: entered promiscuous mode [ 1264.476269][T16942] syzkaller0: entered allmulticast mode [ 1264.553122][T12388] Bluetooth: hci6: command tx timeout [ 1264.861317][ T4927] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1264.877723][ T4927] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1264.879220][ T4927] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1264.881635][ T4927] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1264.910453][ T4927] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1267.029896][T16939] tipc: Resetting bearer [ 1267.032743][ T4927] Bluetooth: hci5: command tx timeout [ 1268.912965][T16939] tipc: Disabling bearer [ 1269.076904][ T5740] tipc: Node number set to 412015705 [ 1269.113249][ T4927] Bluetooth: hci5: command tx timeout [ 1269.544755][ T6720] bridge_slave_1: left allmulticast mode [ 1269.544785][ T6720] bridge_slave_1: left promiscuous mode [ 1269.545041][ T6720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.586812][ T6720] bridge_slave_0: left allmulticast mode [ 1269.586838][ T6720] bridge_slave_0: left promiscuous mode [ 1269.591039][ T6720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.844734][T12388] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1269.850433][T12388] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1269.851612][T12388] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1269.868736][T12388] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1269.887948][T12388] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1270.567492][ T6720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1270.590017][ T6720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1270.605850][ T6720] bond0 (unregistering): Released all slaves [ 1271.013759][T16991] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2564'. [ 1271.254968][T12388] Bluetooth: hci5: command tx timeout [ 1271.362573][ T6720] hsr_slave_0: left promiscuous mode [ 1271.370394][ T6720] hsr_slave_1: left promiscuous mode [ 1271.371110][ T6720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1271.405654][ T6720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1271.994618][T12388] Bluetooth: hci1: command tx timeout [ 1273.057868][ T6720] team0 (unregistering): Port device team_slave_1 removed [ 1273.125347][ T6720] team0 (unregistering): Port device team_slave_0 removed [ 1273.272041][T12388] Bluetooth: hci5: command tx timeout [ 1273.619609][T17010] FAULT_INJECTION: forcing a failure. [ 1273.619609][T17010] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.619652][T17010] CPU: 0 UID: 0 PID: 17010 Comm: syz.0.2567 Tainted: G L syzkaller #0 PREEMPT(full) [ 1273.619694][T17010] Tainted: [L]=SOFTLOCKUP [ 1273.619706][T17010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1273.619724][T17010] Call Trace: [ 1273.619734][T17010] [ 1273.619746][T17010] dump_stack_lvl+0x100/0x190 [ 1273.619792][T17010] should_fail_ex.cold+0x5/0xa [ 1273.619826][T17010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.619868][T17010] should_failslab+0xc2/0x120 [ 1273.619903][T17010] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1273.619952][T17010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.619988][T17010] ? kernel_text_address+0x8d/0x100 [ 1273.620034][T17010] ? kstrdup_const+0x63/0x80 [ 1273.620086][T17010] kstrdup+0x51/0xe0 [ 1273.620129][T17010] kstrdup_const+0x63/0x80 [ 1273.620170][T17010] __kernfs_new_node+0x9b/0xa10 [ 1273.620213][T17010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.620257][T17010] ? __pfx___kernfs_new_node+0x10/0x10 [ 1273.620302][T17010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.620338][T17010] ? lock_acquire+0x1d1/0x380 [ 1273.620368][T17010] ? kernfs_root+0x23/0x2a0 [ 1273.620405][T17010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.620440][T17010] ? find_held_lock+0x2b/0x80 [ 1273.620482][T17010] ? kernfs_root+0xee/0x2a0 [ 1273.620517][T17010] ? kernfs_root+0xee/0x2a0 [ 1273.620551][T17010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.620597][T17010] kernfs_create_dir_ns+0xa6/0x2b0 [ 1273.620648][T17010] sysfs_create_dir_ns+0x13a/0x2b0 [ 1273.620685][T17010] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1273.620719][T17010] ? find_held_lock+0x2b/0x80 [ 1273.620761][T17010] ? kobject_add_internal+0x25f/0x930 [ 1273.620808][T17010] ? kobject_add_internal+0x25f/0x930 [ 1273.620855][T17010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.620890][T17010] ? net_namespace+0x12/0x50 [ 1273.620928][T17010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.620963][T17010] ? device_namespace+0x76/0xa0 [ 1273.620998][T17010] kobject_add_internal+0x2c8/0x930 [ 1273.621051][T17010] kobject_add+0x16a/0x1e0 [ 1273.621097][T17010] ? __pfx_kobject_add+0x10/0x10 [ 1273.621147][T17010] ? get_device_parent+0x1b3/0x4c0 [ 1273.621192][T17010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.621235][T17010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.621270][T17010] ? kobject_put+0xb9/0x640 [ 1273.621323][T17010] device_add+0x294/0x1970 [ 1273.621355][T17010] ? __pfx_dev_set_name+0x10/0x10 [ 1273.621390][T17010] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1273.621425][T17010] ? __pfx_device_add+0x10/0x10 [ 1273.621455][T17010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.621490][T17010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.621526][T17010] ? lockdep_init_map_type+0x5c/0x250 [ 1273.621561][T17010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.621597][T17010] ? __init_waitqueue_head+0xca/0x150 [ 1273.621633][T17010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.621676][T17010] netdev_register_kobject+0x1df/0x410 [ 1273.621722][T17010] register_netdevice+0x15b6/0x25a0 [ 1273.621763][T17010] ? __pfx_register_netdevice+0x10/0x10 [ 1273.621794][T17010] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1273.621837][T17010] ? register_vlan_dev+0x5f8/0x910 [ 1273.621886][T17010] register_vlan_dev+0x36c/0x910 [ 1273.621936][T17010] vlan_ioctl_handler+0x8e9/0xa70 [ 1273.621980][T17010] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1273.622030][T17010] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1273.622084][T17010] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1273.622127][T17010] sock_ioctl+0x5e9/0x6b0 [ 1273.622167][T17010] ? __pfx_sock_ioctl+0x10/0x10 [ 1273.622212][T17010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.622252][T17010] ? __fget_files+0x21f/0x3d0 [ 1273.622293][T17010] ? __pfx_sock_ioctl+0x10/0x10 [ 1273.622333][T17010] __x64_sys_ioctl+0x18e/0x210 [ 1273.622382][T17010] do_syscall_64+0x123/0x790 [ 1273.622424][T17010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.622454][T17010] RIP: 0033:0x7f121ef9e159 [ 1273.622479][T17010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1273.622508][T17010] RSP: 002b:00007f121fdff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1273.622537][T17010] RAX: ffffffffffffffda RBX: 00007f121f225fa0 RCX: 00007f121ef9e159 [ 1273.622557][T17010] RDX: 0000200000000040 RSI: 0000000000008983 RDI: 0000000000000004 [ 1273.622577][T17010] RBP: 00007f121f03506b R08: 0000000000000000 R09: 0000000000000000 [ 1273.622596][T17010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1273.622615][T17010] R13: 00007f121f226038 R14: 00007f121f225fa0 R15: 00007fff509a89a8 [ 1273.622653][T17010] [ 1273.965683][T17010] kobject: kobject_add_internal failed for geneve0.1 (error: -12 parent: net) [ 1274.086782][T12388] Bluetooth: hci1: command tx timeout [ 1276.151917][T12388] Bluetooth: hci1: command tx timeout [ 1277.037571][T16890] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.037663][T16890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.037791][T16890] bridge_slave_0: entered allmulticast mode [ 1277.076651][T16890] bridge_slave_0: entered promiscuous mode [ 1277.159713][T16890] bridge0: port 2(bridge_slave_1) entered blocking state [ 1277.159804][T16890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.159962][T16890] bridge_slave_1: entered allmulticast mode [ 1277.212800][T16890] bridge_slave_1: entered promiscuous mode [ 1277.394266][ T6720] bridge_slave_1: left allmulticast mode [ 1277.394296][ T6720] bridge_slave_1: left promiscuous mode [ 1277.394467][ T6720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.440049][ T6720] bridge_slave_0: left allmulticast mode [ 1277.440076][ T6720] bridge_slave_0: left promiscuous mode [ 1277.440248][ T6720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.231829][T12388] Bluetooth: hci1: command tx timeout [ 1279.589024][T17049] db_root: cannot be changed because it's in use [ 1281.006683][ T6720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1281.132776][ T6720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1281.167870][ T6720] bond0 (unregistering): Released all slaves [ 1281.284090][T16890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1281.536017][ T6720] hsr_slave_0: left promiscuous mode [ 1281.570775][ T6720] hsr_slave_1: left promiscuous mode [ 1281.578373][ T6720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1281.598915][ T6720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1282.198974][T17077] loop6: detected capacity change from 0 to 256 [ 1282.475918][T17077] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 1282.997535][ T6720] team0 (unregistering): Port device team_slave_1 removed [ 1283.087337][ T6720] team0 (unregistering): Port device team_slave_0 removed [ 1283.456653][T16890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1284.056357][T16890] team0: Port device team_slave_0 added [ 1284.069387][T16890] team0: Port device team_slave_1 added [ 1285.986027][T16890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1285.986049][T16890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1285.986085][T16890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1286.070318][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.070964][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.072168][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.131588][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.139680][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.156647][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.157247][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.157836][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.190015][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.190800][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.229517][ T7284] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.230197][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.230847][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.231463][ T7284] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.266288][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.281515][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.290295][ T7284] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.291060][ T7284] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.314622][T16890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1286.314643][T16890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1286.314680][T16890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1286.381252][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.390954][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.400170][ T7284] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.413343][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.413941][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.414738][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.418091][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.418697][ T7284] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.419371][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.421519][ T7284] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.486983][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.488306][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.500612][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.519198][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.529842][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.538978][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.549493][ T7284] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.551498][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.570812][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.583553][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.605229][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.608063][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.609528][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.621518][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.647672][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.649254][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.649891][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.652291][ T1418] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.689953][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.703790][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.707415][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.707996][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.708616][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.711418][ T1418] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.753929][ T137] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.754640][ T7284] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.755511][ T59] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.756273][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1286.757217][ T7284] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1288.560708][T16890] hsr_slave_0: entered promiscuous mode [ 1288.577379][T16890] hsr_slave_1: entered promiscuous mode [ 1288.908552][T17115] loop6: detected capacity change from 0 to 164 [ 1290.428597][T16960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.428694][T16960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.428839][T16960] bridge_slave_0: entered allmulticast mode [ 1290.463472][T16960] bridge_slave_0: entered promiscuous mode [ 1290.481173][T16960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.488294][T16960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.488421][T16960] bridge_slave_1: entered allmulticast mode [ 1290.517317][T16960] bridge_slave_1: entered promiscuous mode [ 1290.934422][T16960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1291.005825][T16960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.138346][T17142] evm: overlay not supported [ 1291.186662][T17145] overlay: filesystem on ./file0 not supported as upperdir [ 1291.458415][T16960] team0: Port device team_slave_0 added [ 1291.520269][T16993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.520362][T16993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.520497][T16993] bridge_slave_0: entered allmulticast mode [ 1291.547893][T16993] bridge_slave_0: entered promiscuous mode [ 1291.563763][T16993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.565971][T16993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.569159][T16993] bridge_slave_1: entered allmulticast mode [ 1291.601921][T16993] bridge_slave_1: entered promiscuous mode [ 1291.614554][T16960] team0: Port device team_slave_1 added [ 1292.008523][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2586'. [ 1292.129387][T16890] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1292.144360][T16890] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1292.169014][T16993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.171229][T16960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1292.171253][T16960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1292.171289][T16960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1292.264404][T16890] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1292.287145][T16890] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1292.303292][T16890] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1292.337157][T16890] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1292.357589][T16993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1292.436307][T16960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1292.436328][T16960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1292.436365][T16960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1292.526376][T16890] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1292.543124][T16890] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1292.654516][T16993] team0: Port device team_slave_0 added [ 1292.772675][T16993] team0: Port device team_slave_1 added [ 1292.940818][T16960] hsr_slave_0: entered promiscuous mode [ 1292.953934][T16960] hsr_slave_1: entered promiscuous mode [ 1292.954532][T16960] debugfs: 'hsr0' already exists in 'hsr' [ 1292.954554][T16960] Cannot create hsr debugfs directory [ 1292.987241][T16993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1292.987262][T16993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1292.987298][T16993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.061206][T16993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.061227][T16993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.061263][T16993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1294.417094][T16993] hsr_slave_0: entered promiscuous mode [ 1294.419460][T16993] hsr_slave_1: entered promiscuous mode [ 1294.420068][T16993] debugfs: 'hsr0' already exists in 'hsr' [ 1294.420090][T16993] Cannot create hsr debugfs directory [ 1296.768120][T16890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1296.810178][T16960] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1296.839472][T16960] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1296.856693][T16960] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1296.881517][T16960] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1296.903287][T16960] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1296.931185][T16960] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1296.964828][T16960] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1296.991255][T16960] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1297.057877][T16890] 8021q: adding VLAN 0 to HW filter on device team0 [ 1297.131263][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.131360][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1297.340215][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.340309][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1299.231421][T16993] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1299.248938][T16993] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1299.261828][T16993] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1299.293542][T16993] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1299.331223][T16993] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1299.349895][T16993] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1299.363313][T16993] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1299.396580][T16993] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1299.522269][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.085844][T16960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1300.288386][T16960] 8021q: adding VLAN 0 to HW filter on device team0 [ 1300.449249][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.449375][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1300.530704][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.530824][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1301.010410][T16993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1301.160215][T16993] 8021q: adding VLAN 0 to HW filter on device team0 [ 1301.233447][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.233543][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1301.289347][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.289443][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1303.964048][ T31] audit: type=1800 audit(1790914238.382:95): pid=17261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2620" name=08 dev="sda1" ino=2092 res=0 errno=0 [ 1305.171610][T16890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1306.209698][T16960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1306.763992][T16993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1307.320976][T16890] veth0_vlan: entered promiscuous mode [ 1307.386465][T16890] veth1_vlan: entered promiscuous mode [ 1307.765269][T16890] veth0_macvtap: entered promiscuous mode [ 1307.807693][T16890] veth1_macvtap: entered promiscuous mode [ 1307.934283][T16890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1307.990776][T16890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1308.082273][ T59] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.084098][ T1021] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.084148][ T1021] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.084192][ T1021] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.768421][ T6720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.768447][ T6720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1309.027814][ T1021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1309.027840][ T1021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1309.078587][T16960] veth0_vlan: entered promiscuous mode [ 1309.159738][T16960] veth1_vlan: entered promiscuous mode [ 1309.385776][T16993] veth0_vlan: entered promiscuous mode [ 1309.435573][T16960] veth0_macvtap: entered promiscuous mode [ 1309.494112][T16993] veth1_vlan: entered promiscuous mode [ 1309.501428][T16960] veth1_macvtap: entered promiscuous mode [ 1309.668792][T16960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1309.751610][T16960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1309.790126][T16993] veth0_macvtap: entered promiscuous mode [ 1309.846762][T16993] veth1_macvtap: entered promiscuous mode [ 1309.859192][ T6720] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.860231][ T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.860287][ T59] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.860334][ T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.865599][T16993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1313.074684][T16993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1313.288945][ T7284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.288971][ T7284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.318286][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.324953][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.325005][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.436819][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.630333][ T6720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.630360][ T6720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.057932][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.057958][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.019119][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.019146][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.734823][T17374] loop9: detected capacity change from 0 to 256 [ 1316.932087][T17374] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1317.661486][T17387] loop9: detected capacity change from 0 to 64 [ 1318.309304][T17392] loop7: detected capacity change from 0 to 1024 [ 1318.781067][ T4927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1318.796544][ T4927] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1318.797211][ T4927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1318.822340][ T4927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1318.825849][ T4927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1321.163379][ T4927] Bluetooth: hci3: command tx timeout [ 1321.787590][ T5610] syz_tun (unregistering): left allmulticast mode [ 1322.025217][T17421] loop8: detected capacity change from 0 to 256 [ 1322.173100][T17421] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1323.192969][ T4927] Bluetooth: hci3: command tx timeout [ 1324.532758][ T5832] libceph: connect (1)[c::]:6789 error -101 [ 1324.532922][ T5832] libceph: mon0 (1)[c::]:6789 connect error [ 1324.568309][T17431] ceph: No mds server is up or the cluster is laggy [ 1325.274654][ T4927] Bluetooth: hci3: command tx timeout [ 1325.345575][ T137] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.351957][ T4927] Bluetooth: hci3: command tx timeout [ 1328.128919][ T137] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.730169][T17468] 9pnet_virtio: no channels available for device syz [ 1330.780894][ T137] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.903941][T17472] bridge0: port 3(syz_tun) entered blocking state [ 1330.904054][T17472] bridge0: port 3(syz_tun) entered disabled state [ 1330.904202][T17472] syz_tun: entered allmulticast mode [ 1330.948122][T17472] syz_tun: entered promiscuous mode [ 1330.950624][T17472] bridge0: port 3(syz_tun) entered blocking state [ 1330.950727][T17472] bridge0: port 3(syz_tun) entered forwarding state [ 1331.023669][T17475] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1331.158605][ T4927] Bluetooth: unknown link type 128 [ 1331.506189][ T137] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.645034][T17472] bridge0: port 3(syz_tun) entered disabled state [ 1333.010738][T17472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.071360][T17472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.192164][ T4927] Bluetooth: hci4: command 0x0406 tx timeout [ 1333.470700][T17501] loop8: detected capacity change from 0 to 256 [ 1333.616098][T17501] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1335.141204][T17529] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2673'. [ 1335.160061][T17530] syz.1.2672: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1335.160149][T17530] CPU: 0 UID: 0 PID: 17530 Comm: syz.1.2672 Tainted: G L syzkaller #0 PREEMPT(full) [ 1335.160190][T17530] Tainted: [L]=SOFTLOCKUP [ 1335.160202][T17530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1335.160221][T17530] Call Trace: [ 1335.160231][T17530] [ 1335.160243][T17530] dump_stack_lvl+0x100/0x190 [ 1335.160296][T17530] warn_alloc.cold+0x9e/0xb2 [ 1335.160331][T17530] ? __pfx_warn_alloc+0x10/0x10 [ 1335.160373][T17530] ? __kasan_kmalloc+0xaa/0xb0 [ 1335.160403][T17530] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1335.160444][T17530] ? xskq_create+0x52/0x290 [ 1335.160475][T17530] ? do_sock_setsockopt+0xf3/0x1d0 [ 1335.160509][T17530] ? do_syscall_64+0x123/0x790 [ 1335.160546][T17530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.160595][T17530] ? xsk_setsockopt+0x743/0xab0 [ 1335.160625][T17530] __vmalloc_node_range_noprof+0x123b/0x1420 [ 1335.160677][T17530] ? xsk_setsockopt+0x743/0xab0 [ 1335.160714][T17530] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1335.160750][T17530] ? kasan_save_track+0x14/0x30 [ 1335.160779][T17530] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1335.160815][T17530] ? __kasan_kmalloc+0xaa/0xb0 [ 1335.160844][T17530] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1335.160881][T17530] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1335.160924][T17530] ? xskq_create+0x52/0x290 [ 1335.160956][T17530] ? xsk_setsockopt+0x743/0xab0 [ 1335.160985][T17530] xskq_create+0x18f/0x290 [ 1335.161016][T17530] ? xsk_setsockopt+0x743/0xab0 [ 1335.161048][T17530] xsk_setsockopt+0x743/0xab0 [ 1335.161076][T17530] ? __pfx_aa_sk_perm+0x10/0x10 [ 1335.161109][T17530] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1335.161139][T17530] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1335.161178][T17530] ? find_held_lock+0x2b/0x80 [ 1335.161225][T17530] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1335.161266][T17530] ? aa_sock_opt_perm+0x114/0x1e0 [ 1335.161311][T17530] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1335.161343][T17530] do_sock_setsockopt+0xf3/0x1d0 [ 1335.161383][T17530] __sys_setsockopt+0x195/0x220 [ 1335.161439][T17530] __x64_sys_setsockopt+0xbd/0x160 [ 1335.161485][T17530] ? do_syscall_64+0xae/0x790 [ 1335.161522][T17530] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1335.161559][T17530] ? lockdep_hardirqs_on+0x7d/0x110 [ 1335.161596][T17530] do_syscall_64+0x123/0x790 [ 1335.161638][T17530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.161669][T17530] RIP: 0033:0x7ff9ecd9e159 [ 1335.161693][T17530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1335.161723][T17530] RSP: 002b:00007ff9edd02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1335.161752][T17530] RAX: ffffffffffffffda RBX: 00007ff9ed026180 RCX: 00007ff9ecd9e159 [ 1335.161772][T17530] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1335.161792][T17530] RBP: 00007ff9ece3506b R08: 0000000000000004 R09: 0000000000000000 [ 1335.161811][T17530] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1335.161831][T17530] R13: 00007ff9ed026218 R14: 00007ff9ed026180 R15: 00007ffc9c5641a8 [ 1335.161871][T17530] [ 1335.547220][T17530] Mem-Info: [ 1335.547237][T17530] active_anon:11772 inactive_anon:0 isolated_anon:0 [ 1335.547237][T17530] active_file:9 inactive_file:64675 isolated_file:0 [ 1335.547237][T17530] unevictable:0 dirty:183 writeback:0 [ 1335.547237][T17530] slab_reclaimable:11150 slab_unreclaimable:104065 [ 1335.547237][T17530] mapped:39079 shmem:4248 pagetables:1710 [ 1335.547237][T17530] sec_pagetables:0 bounce:0 [ 1335.547237][T17530] kernel_misc_reclaimable:0 [ 1335.547237][T17530] free:986482 free_pcp:7304 free_cma:0 [ 1335.547316][T17530] Node 0 active_anon:47088kB inactive_anon:0kB active_file:36kB inactive_file:258272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:156096kB dirty:716kB writeback:0kB shmem:16992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13536kB pagetables:6664kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1335.547395][T17530] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:428kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:220kB dirty:16kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1335.547471][T17530] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1335.547555][T17530] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 1335.547609][T17530] Node 0 DMA32 free:574980kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:47088kB inactive_anon:0kB active_file:36kB inactive_file:258272kB unevictable:0kB writepending:716kB zspages:0kB present:3129332kB managed:2530464kB mlocked:0kB bounce:0kB free_pcp:29216kB local_pcp:29216kB free_cma:0kB [ 1335.547696][T17530] lowmem_reserve[]: 0 0 0 0 0 [ 1335.547747][T17530] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1335.547828][T17530] lowmem_reserve[]: 0 0 0 0 0 [ 1335.547879][T17530] Node 1 Normal free:3355588kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:428kB unevictable:0kB writepending:16kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1335.547964][T17530] lowmem_reserve[]: 0 0 0 0 0 [ 1335.548014][T17530] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1335.548186][T17530] Node 0 DMA32: 2365*4kB (UME) 1520*8kB (UME) 419*16kB (UM) 563*32kB (UME) 224*64kB (M) 186*128kB (UME) 78*256kB (UME) 27*512kB (ME) 18*1024kB (UME) 2*2048kB (UM) 106*4096kB (UM) = 574980kB [ 1335.548429][T17530] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1335.548582][T17530] Node 1 Normal: 7*4kB (UM) 7*8kB (UM) 7*16kB (U) 4*32kB (U) 14*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 816*4096kB (M) = 3355588kB [ 1335.905256][T17530] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1335.905285][T17530] Node 0 hugepages_total=288 hugepages_free=288 hugepages_surp=0 hugepages_size=2048kB [ 1335.905309][T17530] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1335.905333][T17530] Node 1 hugepages_total=287 hugepages_free=287 hugepages_surp=0 hugepages_size=2048kB [ 1335.905358][T17530] 69096 total pagecache pages [ 1335.905369][T17530] 0 pages in swap cache [ 1335.905380][T17530] Free swap = 124996kB [ 1335.905391][T17530] Total swap = 124996kB [ 1335.905404][T17530] 2097051 pages RAM [ 1335.905415][T17530] 0 pages HighMem/MovableOnly [ 1335.905426][T17530] 432801 pages reserved [ 1335.905436][T17530] 0 pages cma reserved [ 1336.009055][ T137] bridge_slave_1: left allmulticast mode [ 1336.009084][ T137] bridge_slave_1: left promiscuous mode [ 1336.009265][ T137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.089464][ T137] bridge_slave_0: left allmulticast mode [ 1336.089495][ T137] bridge_slave_0: left promiscuous mode [ 1336.089671][ T137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.207508][ T4927] Bluetooth: hci4: unexpected event for opcode 0x202d [ 1337.234534][ T137] bond0 (unregistering): (slave veth3): Releasing active interface [ 1337.234569][ T137] batadv1: entered promiscuous mode [ 1337.279862][ T137] bond0 (unregistering): (slave batadv1): Releasing active interface [ 1337.279898][ T137] batadv1: left promiscuous mode [ 1337.370025][ T137] bond0 (unregistering): Released all slaves [ 1337.941620][ T137] IPVS: stopping master sync thread 10481 ... [ 1338.940498][T17560] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 1339.531574][ T137] hsr_slave_0: left promiscuous mode [ 1339.550929][ T137] hsr_slave_1: left promiscuous mode [ 1339.558502][ T137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1339.558527][ T137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1339.586830][ T137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1339.586857][ T137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1339.771762][ T137] veth1_macvtap: left promiscuous mode [ 1339.771803][ T137] veth0_macvtap: left promiscuous mode [ 1339.771898][ T137] veth1_vlan: left promiscuous mode [ 1339.771963][ T137] veth0_vlan: left promiscuous mode [ 1342.069819][T17597] overlay: filesystem on ./file0 not supported as upperdir [ 1342.106232][T17596] loop9: detected capacity change from 0 to 512 [ 1342.233277][T17596] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1342.233374][T17596] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1342.279501][ T7284] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1342.296972][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1342.316866][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1342.461264][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 1343.111224][ T137] team0 (unregistering): Port device team_slave_1 removed [ 1343.251437][ T137] team0 (unregistering): Port device team_slave_0 removed [ 1345.081353][ T5273] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1346.024684][T17402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.034203][T17402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.034343][T17402] bridge_slave_0: entered allmulticast mode [ 1346.040313][T17402] bridge_slave_0: entered promiscuous mode [ 1346.098052][T17402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.098145][T17402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.098287][T17402] bridge_slave_1: entered allmulticast mode [ 1346.126698][T17402] bridge_slave_1: entered promiscuous mode [ 1346.238096][T16890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1346.438787][T17402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1346.470033][ T137] IPVS: stop unused estimator thread 0... [ 1346.489138][T17402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1346.764724][T17402] team0: Port device team_slave_0 added [ 1346.794475][T17402] team0: Port device team_slave_1 added [ 1347.031563][T17402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1347.031584][T17402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1347.066038][T17402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1347.088361][T17402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1347.088381][T17402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1347.088417][T17402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1347.472968][T17402] hsr_slave_0: entered promiscuous mode [ 1347.478760][T17402] hsr_slave_1: entered promiscuous mode [ 1347.481087][T17671] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1347.518712][T17402] debugfs: 'hsr0' already exists in 'hsr' [ 1347.518738][T17402] Cannot create hsr debugfs directory [ 1347.894805][T17677] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2705'. [ 1350.976870][T17696] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2709'. [ 1351.064541][T17703] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2709'. [ 1353.496672][T17696] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2709'. [ 1353.699536][T17696] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2709'. [ 1353.700166][T17703] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2709'. [ 1353.700629][T17703] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2709'. [ 1353.812264][ T7284] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1353.812358][ T7284] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1353.812406][ T7284] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1353.812453][ T7284] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1354.037594][ T5273] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1355.276670][T17730] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1355.488046][T17746] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2721'. [ 1355.925724][T17402] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1355.960378][T17402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1355.976822][T17402] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1355.999024][T17402] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1356.019162][T17402] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1356.056252][T17402] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1356.069910][T17402] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1356.098471][T17402] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1358.060916][T17402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1358.155597][T17402] 8021q: adding VLAN 0 to HW filter on device team0 [ 1358.207619][ T6840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.207732][ T6840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1358.252804][ T7284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.252911][ T7284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1358.437856][T17771] loop9: detected capacity change from 0 to 4096 [ 1358.970716][T17777] syzkaller0: entered promiscuous mode [ 1358.970742][T17777] syzkaller0: entered allmulticast mode [ 1359.126109][T17771] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1359.321549][T17771] ntfs3(loop9): Failed to load $Extend (-22). [ 1359.321578][T17771] ntfs3(loop9): Failed to initialize $Extend. [ 1360.572001][T17802] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1361.800582][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.489960][T17402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1364.787473][T17402] veth0_vlan: entered promiscuous mode [ 1364.873072][T17402] veth1_vlan: entered promiscuous mode [ 1364.943337][T17831] syzkaller0: entered promiscuous mode [ 1364.943362][T17831] syzkaller0: entered allmulticast mode [ 1365.350770][T17402] veth0_macvtap: entered promiscuous mode [ 1365.405875][T17402] veth1_macvtap: entered promiscuous mode [ 1365.566114][T17402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1365.647680][T17402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1365.712094][ T6840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.732933][ T6840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.734633][ T137] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.734685][ T137] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.410116][ T1021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1366.410141][ T1021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.751561][ T1021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1366.751586][ T1021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1368.315790][T12388] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1368.320144][T12388] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1368.337596][T12388] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1368.364724][T12388] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1368.366106][T12388] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1369.098611][ T5621] syz_tun (unregistering): left allmulticast mode [ 1370.674875][T12388] Bluetooth: hci0: command tx timeout [ 1371.309733][T17881] syzkaller0: entered promiscuous mode [ 1371.309759][T17881] syzkaller0: entered allmulticast mode [ 1372.711932][T12388] Bluetooth: hci0: command tx timeout [ 1374.791912][T12388] Bluetooth: hci0: command tx timeout [ 1376.812075][T17859] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.812295][T17859] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.812429][T17859] bridge_slave_0: entered allmulticast mode [ 1376.837202][T17859] bridge_slave_0: entered promiscuous mode [ 1376.872308][T12388] Bluetooth: hci0: command tx timeout [ 1377.072422][T17859] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.072527][T17859] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.072888][T17859] bridge_slave_1: entered allmulticast mode [ 1377.598265][T17859] bridge_slave_1: entered promiscuous mode [ 1378.385021][T17926] overlayfs: conflicting lowerdir path [ 1378.394983][T12388] Bluetooth: hci6: command 0x0406 tx timeout [ 1379.184086][T17859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1379.212391][T17859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1379.288131][T17920] loop7: detected capacity change from 0 to 4096 [ 1379.375739][T17929] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1379.579390][T17859] team0: Port device team_slave_0 added [ 1379.605348][T17859] team0: Port device team_slave_1 added [ 1381.540052][T17859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1381.540074][T17859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1381.540111][T17859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1381.765717][T17859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1381.765740][T17859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1381.765778][T17859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1381.902075][T17932] Bluetooth: MGMT ver 1.23 [ 1382.288341][T17859] hsr_slave_0: entered promiscuous mode [ 1382.304715][T17859] hsr_slave_1: entered promiscuous mode [ 1382.305328][T17859] debugfs: 'hsr0' already exists in 'hsr' [ 1382.305351][T17859] Cannot create hsr debugfs directory [ 1382.797278][T17949] loop8: detected capacity change from 0 to 256 [ 1382.899855][T17949] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1382.995734][T17946] syzkaller0: entered promiscuous mode [ 1382.995762][T17946] syzkaller0: entered allmulticast mode [ 1388.635765][T12388] Bluetooth: hci5: command 0x0406 tx timeout [ 1390.569509][T17859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1390.610871][T17859] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1390.625837][T17859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1390.644197][T17998] loop8: detected capacity change from 0 to 256 [ 1390.678406][T17859] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1390.707525][T18001] overlayfs: failed to resolve './bus': -2 [ 1390.728462][T17859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1390.729476][T18001] overlayfs: failed to resolve './bus': -2 [ 1390.734890][T17998] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1390.779752][T17859] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1390.807209][T17859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1390.860337][T17859] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1393.010775][T17859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1393.130396][T17859] 8021q: adding VLAN 0 to HW filter on device team0 [ 1393.190949][T13600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.191072][T13600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1393.244951][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.245061][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1394.640977][ T4927] Bluetooth: hci1: command 0x0406 tx timeout [ 1396.772504][T18059] overlayfs: failed to resolve './bus': -2 [ 1396.781103][T18059] overlayfs: failed to resolve './bus': -2 [ 1396.894745][T18047] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1396.894775][T18047] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1396.939797][T18049] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1396.939900][T18049] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1397.242422][T18049] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1397.242488][T18049] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1397.247697][T18063] loop8: detected capacity change from 0 to 256 [ 1397.359515][T18063] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1397.823500][T18049] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1397.823566][T18049] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1398.082653][T18049] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1398.082719][T18049] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1398.098556][T18047] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1398.098580][T18047] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1398.145401][T18047] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1398.145425][T18047] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1398.177235][T18049] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1398.271562][T18049] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1398.319149][T18049] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1398.356307][T18049] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1399.271724][ C0] ------------[ cut here ]------------ [ 1399.271741][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci5 [ 1399.271788][ C0] WARNING: kernel/workqueue.c:2352 at __queue_work+0xdb7/0x1370, CPU#0: syz.8.2805/18081 [ 1399.294019][ C0] Modules linked in: [ 1399.297922][ C0] CPU: 0 UID: 0 PID: 18081 Comm: syz.8.2805 Tainted: G L syzkaller #0 PREEMPT(full) [ 1399.308863][ C0] Tainted: [L]=SOFTLOCKUP [ 1399.313174][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1399.323222][ C0] RIP: 0010:__queue_work+0xdbb/0x1370 [ 1399.328621][ C0] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 84 05 00 00 48 8d 3d 09 d9 77 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 1399.348258][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010046 [ 1399.354342][ C0] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11005a1414e [ 1399.362309][ C0] RDX: ffff88802a7b6970 RSI: ffffffff8ac39bc0 RDI: ffffffff914873a0 [ 1399.370277][ C0] RBP: ffff88802d0a0a58 R08: 0000000000000007 R09: 0000000000000000 [ 1399.378244][ C0] R10: 0000000000000100 R11: 0000000000000001 R12: ffff88802a7b6800 [ 1399.386243][ C0] R13: 1ffff92000000f77 R14: 0000000000000000 R15: ffffffff81d0a060 [ 1399.394219][ C0] FS: 00007f3079c0c6c0(0000) GS:ffff888123b4c000(0000) knlGS:0000000000000000 [ 1399.403149][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1399.409732][ C0] CR2: 00002000001e7030 CR3: 000000005aab3000 CR4: 0000000000350ef0 [ 1399.417705][ C0] Call Trace: [ 1399.420974][ C0] [ 1399.423810][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.429457][ C0] ? lock_acquire+0x1d1/0x380 [ 1399.434136][ C0] ? call_timer_fn+0x11d/0x5f0 [ 1399.438899][ C0] ? __pfx___queue_work+0x10/0x10 [ 1399.443937][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.449603][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1399.455423][ C0] call_timer_fn+0x198/0x5f0 [ 1399.460018][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1399.465126][ C0] ? lock_acquire+0x1d1/0x380 [ 1399.469809][ C0] ? __run_timers+0x560/0xb00 [ 1399.474495][ C0] ? __run_timers+0x560/0xb00 [ 1399.479192][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.484840][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1399.490694][ C0] __run_timers+0x570/0xb00 [ 1399.495214][ C0] ? __pfx___run_timers+0x10/0x10 [ 1399.500242][ C0] ? clockevents_program_event+0x23e/0x820 [ 1399.506072][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.511712][ C0] ? lock_acquire+0x1d1/0x380 [ 1399.516397][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.522055][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 1399.527088][ C0] run_timer_base+0x114/0x190 [ 1399.531770][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1399.536970][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.542620][ C0] run_timer_softirq+0x1a/0x50 [ 1399.547414][ C0] handle_softirqs+0x1e6/0x9d0 [ 1399.552186][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1399.557472][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.563113][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1399.567967][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.573608][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1399.579266][ C0] __irq_exit_rcu+0x16a/0x210 [ 1399.583948][ C0] irq_exit_rcu+0x9/0x30 [ 1399.588190][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1399.593830][ C0] [ 1399.596770][ C0] [ 1399.599692][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1399.605677][ C0] RIP: 0010:finish_task_switch.isra.0+0x2ca/0x10d0 [ 1399.612187][ C0] Code: b6 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 e3 8b fd 09 e8 4e 3f 3d 00 fb 48 8d bb 18 17 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 1399.631818][ C0] RSP: 0018:ffffc90003c0f4d8 EFLAGS: 00000206 [ 1399.637923][ C0] RAX: 000000000001f639 RBX: ffff88802c5d0000 RCX: 0000000000000000 [ 1399.645894][ C0] RDX: 0000000000000001 RSI: ffffffff8e393e58 RDI: ffff88802c5d1718 [ 1399.653860][ C0] RBP: ffffc90003c0f530 R08: 0000000000000001 R09: 0000000000000000 [ 1399.661824][ C0] R10: 0000000000000001 R11: ffffffff81d73d19 R12: ffff88801ef89f40 [ 1399.669786][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880b843c040 [ 1399.677761][ C0] ? finish_task_switch.isra.0+0x149/0x10d0 [ 1399.683679][ C0] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1399.689587][ C0] __schedule+0x1261/0x6920 [ 1399.694090][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.699731][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1399.704691][ C0] ? __pfx___schedule+0x10/0x10 [ 1399.709547][ C0] ? find_held_lock+0x2b/0x80 [ 1399.714239][ C0] ? schedule+0x225/0x2c0 [ 1399.718573][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.724221][ C0] schedule+0xdd/0x2c0 [ 1399.728302][ C0] schedule_timeout+0x1b2/0x280 [ 1399.733170][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1399.738576][ C0] ? unix_wait_for_peer+0x260/0x2a0 [ 1399.743787][ C0] ? unix_wait_for_peer+0x260/0x2a0 [ 1399.748996][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.754644][ C0] ? prepare_to_wait_exclusive+0xdc/0x2c0 [ 1399.760393][ C0] unix_wait_for_peer+0x268/0x2a0 [ 1399.765439][ C0] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 1399.771008][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1399.777106][ C0] unix_dgram_sendmsg+0x1696/0x1810 [ 1399.782335][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.787982][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1399.793546][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.799193][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.804835][ C0] ? apparmor_socket_sendmsg+0x165/0x280 [ 1399.810490][ C0] ____sys_sendmsg+0xa4d/0xbe0 [ 1399.815285][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1399.820882][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1399.826182][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.831821][ C0] ? rcu_is_watching+0x13/0xc0 [ 1399.836598][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.842266][ C0] ? kfree+0x1e5/0x6d0 [ 1399.846347][ C0] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1399.852788][ C0] ___sys_sendmsg+0x190/0x1e0 [ 1399.857478][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1399.862682][ C0] ? do_user_addr_fault+0x7d7/0x12f0 [ 1399.867989][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 1399.873212][ C0] ? __pfx___might_resched+0x10/0x10 [ 1399.878524][ C0] __sys_sendmmsg+0x20c/0x440 [ 1399.883209][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1399.888416][ C0] ? __pfx_do_futex+0x10/0x10 [ 1399.893104][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.898783][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.904426][ C0] ? xfd_validate_state+0x129/0x190 [ 1399.909665][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 1399.914604][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1399.920250][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 1399.925462][ C0] do_syscall_64+0x123/0x790 [ 1399.930068][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.935965][ C0] RIP: 0033:0x7f3078d9e159 [ 1399.940376][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1399.959986][ C0] RSP: 002b:00007f3079c0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1399.968404][ C0] RAX: ffffffffffffffda RBX: 00007f3079025fa0 RCX: 00007f3078d9e159 [ 1399.976371][ C0] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004 [ 1399.984337][ C0] RBP: 00007f3078e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1399.992304][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1400.000271][ C0] R13: 00007f3079026038 R14: 00007f3079025fa0 R15: 00007ffd91f6f558 [ 1400.008263][ C0] [ 1400.011276][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1400.018557][ C0] CPU: 0 UID: 0 PID: 18081 Comm: syz.8.2805 Tainted: G L syzkaller #0 PREEMPT(full) [ 1400.029499][ C0] Tainted: [L]=SOFTLOCKUP [ 1400.033814][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1400.043864][ C0] Call Trace: [ 1400.047141][ C0] [ 1400.049973][ C0] dump_stack_lvl+0x100/0x190 [ 1400.054690][ C0] vpanic+0x553/0x970 [ 1400.058677][ C0] ? __pfx_vpanic+0x10/0x10 [ 1400.063193][ C0] panic+0xd1/0xe0 [ 1400.066940][ C0] ? __pfx_panic+0x10/0x10 [ 1400.071377][ C0] check_panic_on_warn.cold+0x19/0x34 [ 1400.076754][ C0] ? __queue_work+0xdb7/0x1370 [ 1400.081553][ C0] __warn.cold+0x191/0x318 [ 1400.085981][ C0] __report_bug+0x30f/0x440 [ 1400.090512][ C0] ? __queue_work+0xdb7/0x1370 [ 1400.095295][ C0] ? __pfx___report_bug+0x10/0x10 [ 1400.100325][ C0] ? schedule_timeout+0x1b2/0x280 [ 1400.105368][ C0] ? unix_wait_for_peer+0x268/0x2a0 [ 1400.110581][ C0] ? unix_dgram_sendmsg+0x1696/0x1810 [ 1400.115973][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1400.121297][ C0] report_bug_entry+0xe2/0x290 [ 1400.126071][ C0] ? __queue_work+0xdbb/0x1370 [ 1400.130848][ C0] handle_bug+0x1cd/0x2a0 [ 1400.135193][ C0] exc_invalid_op+0x17/0x50 [ 1400.139710][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1400.144560][ C0] RIP: 0010:__queue_work+0xdbb/0x1370 [ 1400.149944][ C0] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 84 05 00 00 48 8d 3d 09 d9 77 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 1400.169557][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010046 [ 1400.175630][ C0] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11005a1414e [ 1400.183595][ C0] RDX: ffff88802a7b6970 RSI: ffffffff8ac39bc0 RDI: ffffffff914873a0 [ 1400.191566][ C0] RBP: ffff88802d0a0a58 R08: 0000000000000007 R09: 0000000000000000 [ 1400.199537][ C0] R10: 0000000000000100 R11: 0000000000000001 R12: ffff88802a7b6800 [ 1400.207505][ C0] R13: 1ffff92000000f77 R14: 0000000000000000 R15: ffffffff81d0a060 [ 1400.215474][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1400.221316][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1400.226627][ C0] ? __queue_work+0xd89/0x1370 [ 1400.231409][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.237080][ C0] ? lock_acquire+0x1d1/0x380 [ 1400.241762][ C0] ? call_timer_fn+0x11d/0x5f0 [ 1400.246555][ C0] ? __pfx___queue_work+0x10/0x10 [ 1400.251593][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.257238][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1400.263060][ C0] call_timer_fn+0x198/0x5f0 [ 1400.267682][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1400.272794][ C0] ? lock_acquire+0x1d1/0x380 [ 1400.277480][ C0] ? __run_timers+0x560/0xb00 [ 1400.282159][ C0] ? __run_timers+0x560/0xb00 [ 1400.286834][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.292485][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1400.298307][ C0] __run_timers+0x570/0xb00 [ 1400.302842][ C0] ? __pfx___run_timers+0x10/0x10 [ 1400.307867][ C0] ? clockevents_program_event+0x23e/0x820 [ 1400.313693][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.319329][ C0] ? lock_acquire+0x1d1/0x380 [ 1400.324016][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.329660][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 1400.334694][ C0] run_timer_base+0x114/0x190 [ 1400.339374][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1400.344570][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.350214][ C0] run_timer_softirq+0x1a/0x50 [ 1400.354978][ C0] handle_softirqs+0x1e6/0x9d0 [ 1400.359750][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1400.365034][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.370670][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1400.375519][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.381155][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1400.386809][ C0] __irq_exit_rcu+0x16a/0x210 [ 1400.391490][ C0] irq_exit_rcu+0x9/0x30 [ 1400.395730][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1400.401368][ C0] [ 1400.404294][ C0] [ 1400.407215][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1400.413217][ C0] RIP: 0010:finish_task_switch.isra.0+0x2ca/0x10d0 [ 1400.419724][ C0] Code: b6 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 e3 8b fd 09 e8 4e 3f 3d 00 fb 48 8d bb 18 17 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 1400.439357][ C0] RSP: 0018:ffffc90003c0f4d8 EFLAGS: 00000206 [ 1400.445428][ C0] RAX: 000000000001f639 RBX: ffff88802c5d0000 RCX: 0000000000000000 [ 1400.453395][ C0] RDX: 0000000000000001 RSI: ffffffff8e393e58 RDI: ffff88802c5d1718 [ 1400.461363][ C0] RBP: ffffc90003c0f530 R08: 0000000000000001 R09: 0000000000000000 [ 1400.469332][ C0] R10: 0000000000000001 R11: ffffffff81d73d19 R12: ffff88801ef89f40 [ 1400.477301][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880b843c040 [ 1400.485277][ C0] ? finish_task_switch.isra.0+0x149/0x10d0 [ 1400.491197][ C0] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1400.497107][ C0] __schedule+0x1261/0x6920 [ 1400.501615][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.507283][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1400.512245][ C0] ? __pfx___schedule+0x10/0x10 [ 1400.517100][ C0] ? find_held_lock+0x2b/0x80 [ 1400.521811][ C0] ? schedule+0x225/0x2c0 [ 1400.526141][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.531785][ C0] schedule+0xdd/0x2c0 [ 1400.535877][ C0] schedule_timeout+0x1b2/0x280 [ 1400.540749][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1400.546148][ C0] ? unix_wait_for_peer+0x260/0x2a0 [ 1400.551358][ C0] ? unix_wait_for_peer+0x260/0x2a0 [ 1400.556571][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.562209][ C0] ? prepare_to_wait_exclusive+0xdc/0x2c0 [ 1400.567958][ C0] unix_wait_for_peer+0x268/0x2a0 [ 1400.572998][ C0] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 1400.578561][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1400.584660][ C0] unix_dgram_sendmsg+0x1696/0x1810 [ 1400.589886][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.595527][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1400.601093][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.606756][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.612391][ C0] ? apparmor_socket_sendmsg+0x165/0x280 [ 1400.618046][ C0] ____sys_sendmsg+0xa4d/0xbe0 [ 1400.622816][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1400.628385][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1400.633682][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.639324][ C0] ? rcu_is_watching+0x13/0xc0 [ 1400.644104][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.649741][ C0] ? kfree+0x1e5/0x6d0 [ 1400.653820][ C0] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1400.660268][ C0] ___sys_sendmsg+0x190/0x1e0 [ 1400.664968][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1400.670172][ C0] ? do_user_addr_fault+0x7d7/0x12f0 [ 1400.675478][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 1400.680718][ C0] ? __pfx___might_resched+0x10/0x10 [ 1400.686033][ C0] __sys_sendmmsg+0x20c/0x440 [ 1400.690716][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1400.695922][ C0] ? __pfx_do_futex+0x10/0x10 [ 1400.700608][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.706262][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.711901][ C0] ? xfd_validate_state+0x129/0x190 [ 1400.717109][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 1400.722044][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1400.727682][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 1400.732886][ C0] do_syscall_64+0x123/0x790 [ 1400.737488][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1400.743383][ C0] RIP: 0033:0x7f3078d9e159 [ 1400.747793][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1400.767399][ C0] RSP: 002b:00007f3079c0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1400.775812][ C0] RAX: ffffffffffffffda RBX: 00007f3079025fa0 RCX: 00007f3078d9e159 [ 1400.783777][ C0] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004 [ 1400.791741][ C0] RBP: 00007f3078e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1400.799703][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1400.807665][ C0] R13: 00007f3079026038 R14: 00007f3079025fa0 R15: 00007ffd91f6f558 [ 1400.815652][ C0] [ 1400.818703][ C0] Kernel Offset: disabled [ 1400.823034][ C0] Rebooting in 86400 seconds..