last executing test programs: 7.284027531s ago: executing program 3 (id=127): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) r3 = syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r1, &(0x7f0000000200)={r1, r0, 0x4}) 7.103889018s ago: executing program 3 (id=131): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000010000000940000400000d22ec6"]) 6.908003042s ago: executing program 3 (id=133): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x4}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0xfffd, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 6.779544294s ago: executing program 3 (id=136): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') chroot(&(0x7f0000000d00)='./file0/../file0\x00') umount2(&(0x7f0000000100)='./file0\x00', 0x9) 6.499762474s ago: executing program 3 (id=141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x7ffffffe, r0, &(0x7f00000000c0)={0x1000000d}) 6.118698592s ago: executing program 3 (id=143): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x100000, 0xeeef0000, 0x3, 0xaf, 0x3, 0xd2, 0x81, 0x7, 0x0, 0x2b, 0x9}, {0x4000, 0x8080000, 0x3, 0xfd, 0x40, 0x9, 0x7f, 0x1, 0x1, 0x0, 0x3}, {0x3000, 0x1000, 0x8, 0x5, 0x1, 0x2, 0x0, 0x9, 0x0, 0xa7, 0xb, 0x81}, {0xdddd1000, 0x100000, 0xc, 0xe7, 0x3, 0x2, 0x1, 0xfb, 0x8, 0x7, 0xe, 0xf1}, {0xdddd0000, 0x2000, 0xd, 0xf7, 0x5, 0x86, 0xa, 0x7f, 0x2, 0x0, 0xf7, 0x43}, {0x1000, 0x8080000, 0x3, 0x80, 0xb1, 0x8, 0x4, 0x80, 0x80, 0xf, 0x1, 0x80}, {0xdddd0000, 0x11d004, 0xc, 0x7, 0x0, 0x5, 0x4, 0x3, 0x5, 0x80, 0x3, 0x4}, {0x100000, 0x1, 0xb, 0x5, 0x5, 0x7, 0x1, 0x37, 0x2, 0x8, 0xf0, 0x1}, {0xeeef0000, 0x70}, {0xdddd0000, 0x7}, 0x80000037, 0x0, 0xeeee0000, 0x2004, 0xf, 0x0, 0x3000, [0x8000000000000000, 0xfffffffffffffffc, 0x15e, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000003f000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0xc, 0x0, 0x0) 5.517593602s ago: executing program 32 (id=143): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x100000, 0xeeef0000, 0x3, 0xaf, 0x3, 0xd2, 0x81, 0x7, 0x0, 0x2b, 0x9}, {0x4000, 0x8080000, 0x3, 0xfd, 0x40, 0x9, 0x7f, 0x1, 0x1, 0x0, 0x3}, {0x3000, 0x1000, 0x8, 0x5, 0x1, 0x2, 0x0, 0x9, 0x0, 0xa7, 0xb, 0x81}, {0xdddd1000, 0x100000, 0xc, 0xe7, 0x3, 0x2, 0x1, 0xfb, 0x8, 0x7, 0xe, 0xf1}, {0xdddd0000, 0x2000, 0xd, 0xf7, 0x5, 0x86, 0xa, 0x7f, 0x2, 0x0, 0xf7, 0x43}, {0x1000, 0x8080000, 0x3, 0x80, 0xb1, 0x8, 0x4, 0x80, 0x80, 0xf, 0x1, 0x80}, {0xdddd0000, 0x11d004, 0xc, 0x7, 0x0, 0x5, 0x4, 0x3, 0x5, 0x80, 0x3, 0x4}, {0x100000, 0x1, 0xb, 0x5, 0x5, 0x7, 0x1, 0x37, 0x2, 0x8, 0xf0, 0x1}, {0xeeef0000, 0x70}, {0xdddd0000, 0x7}, 0x80000037, 0x0, 0xeeee0000, 0x2004, 0xf, 0x0, 0x3000, [0x8000000000000000, 0xfffffffffffffffc, 0x15e, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000003f000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0xc, 0x0, 0x0) 2.165163272s ago: executing program 1 (id=164): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.02595787s ago: executing program 1 (id=165): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x200, 0xc2, 0x4f, 0x19, 0x7, 0xc0, 0x1, 0xff, 0x6, 0xc, 0x0, 0x9}, {0xb, 0xa6f3, 0x6, 0x8, 0x9, 0xff, 0x8, 0x1, 0xa, 0x13, 0x1, 0x6, 0x10005}, {0x1fb, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x1, 0x3}], 0xd}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0xfff, 0x10, 0x0, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.791250866s ago: executing program 2 (id=168): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x1800c, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 935.309092ms ago: executing program 0 (id=171): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0xa, &(0x7f00000001c0)=[@cr4={0x1, 0x40200}], 0x1) 843.055555ms ago: executing program 1 (id=172): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xb}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x4}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0xfffd, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 791.790055ms ago: executing program 2 (id=173): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="930457492e166f1a7d2c3fe588eab58f3ea3a6af43512f4cf84010250a83d2550482a408c3728ee2ca373c12fe5295a49bac68aa778d8cfb3835e499d3a076b9c07566fd133de5ddbf7e05deafcc17fdd87c731956", 0x55}, {&(0x7f0000000200)="9e8b8f2dc80cac0ee907fd59549d08940196897e58c2ccedb8ccf4a5194c58c07ff07d81747565b9aecdfdce9740278ca53b0872fb0f", 0x36}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001380)="52348bf9812fc081678b5760a4c4967393fd8939aaf12a894c5424df616c4eea14fbac2dad114a75c405d89fafa5715b56abba4bbceca456d8225e3f6eb57a03287e74c7bd74e40e3fda3150f92d181e7c82cb2f8ea0416fc4c0f111161cdb9a52911925644e25f871d02f403c83214f830f93b30b874e75cab53f1ed7871f21c0d654a47fab0637868517d7e8d9915e99b4dc2dcafdcb2ef2a012ec95418a544c32181fb969e01318e00a12fd1b2a0eb57bcf7de086e320f2d4be4e1453010be849e4d7dba41558329699aacd3d1c7d97b9bf74caf8b7946647309d209558b1965ef7ea4576ec0e289b73c2089310271d0a67d88a312f4cb0194c4f28ec3c2fe269311d0cec1fe0efef17d376d183b08e392b6cb58e930e1f959dd4528ec95350fc86e5297e6d59af036b132df17833881238ba8692842a8da4d5b4a37c94915331143d9128a197495433c2f550b4455a9ae03b937305e192e861ca3a60f9b3a14288e3daeb6936593485388a4aaab39b3843ee2960d9c8728eafb904333e7b78a270480e8dd89b93fe5a37ca9c85a0e6e82bd603efb596c4cf0b791013cff43bf314e11a44d5f9c4fdad8a2fcdb04f76de29a50a0428148f4bc3eff1e84d25ea95dabddfba6162860a3c3389ee366450b6bcf1409f920caf1be5702af0402e2cef4896d9544a26ebfab694d7a47eca55bd2f62e7d7eb1f6061f7e441df5ab31344f02179764822036ef706133ea1a6380e042f074b2b0ddcc578cb8a668a846b9d5792f8d434f8ec7b562594587c49e8e6b3450e545fc070644bd06a36106cdb63f9e8ad7ae50b5b44e47f377961f5e29392330fb40d63c911ffd13e094f0452cc5c77b0731b56211b2d8a7554f6077ae593626a54f56d6dea49058fd1d48db02a7b33d50474b58a7e14e6a4d935bfaf4865f00074d59ece4b2d5f5e768e952733ee2c34b3e4b0be230f792f8b16f872afbbd155fe5314d4f54ea7b747eb2cd2410db7464c73ecd4815cda0bcc839fb603bb3f0c04b2d233b54a78b7aa3db9745b69c8788e155cc2ef39bcf8491101058093c842df8cd0ac03d29e6d6902187f31eaf960b306debf734d8d26cc34a7e62c64a98b5a8a6102142af724db839aa7f63f7e0d81f5213d4d5722088be5b5ea6b1ee19b148d1f8b7172cd507533360d2d668e85252463b1d61302a75a7e3dc5e8c607a1026c66c2e8a6cbd34e3e5e99890da6cf07ed1247a07f004a6b1d643e00be7c156127bd7b39326e84ea6963d0530a4538eea35cf8048440a65148f1fe6314020bbe9c9358242589360fa5b1425d24b9f59141d81c0dbdd2e802eb82849e6342a4ffd0dcf307e2c73c707f54d54a2d04f2e504cae3d1719253ea4f455ae0e5fd35c08808b1fb8c6f5a25e7a3b082cd2159b9e624b67f1ed7faf2e5a0e6cd2560e26e4eabf626b65ce42c7855512ad92bcd6849d0c73e4cf41962ae0d17d850cd598e016b1db978f7a8d7f5fd88c7952982633e7673f11f3dc1ea4363ecbd106b3f410be357a29d0ddff9cb8448f71b39c60c3e7d5fba9e6115e64e88813418e1332ef79c6100e77eebba1ad28f9046a2a2d53df47a4a17c1054e1e816704fd7ef5e23ce5b52ab96b3cf339fb0fcb6c0a2f220afa49e95cd5433acea1296531c44f1e0d7e0ccc284f1cf7f902df89a742afdc764d214c8be39f841ee0", 0x4b0}], 0x1}}], 0x2, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 699.779835ms ago: executing program 2 (id=174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 681.36195ms ago: executing program 0 (id=175): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00001ffc002000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={0x0, 0xb}, 0x8) 622.911149ms ago: executing program 1 (id=176): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f00000000c0)='THAWED\x00', 0x7) 515.849276ms ago: executing program 0 (id=177): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @loopback, 0xffffcd0b}, 0x1c) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4004896) 472.497929ms ago: executing program 1 (id=178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 452.091097ms ago: executing program 0 (id=179): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x200, 0xc2, 0x4f, 0x19, 0x7, 0xc0, 0x1, 0xff, 0x6, 0xc, 0x0, 0x9}, {0xb, 0xa6f3, 0x6, 0x8, 0x9, 0xff, 0x8, 0x1, 0xa, 0x13, 0x1, 0x6, 0x10005}, {0x1fb, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x1, 0x3}], 0xd}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0xfff, 0x10, 0x0, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 432.088496ms ago: executing program 2 (id=180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, 0x0) 312.109899ms ago: executing program 2 (id=181): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000097000040"]) 211.086269ms ago: executing program 0 (id=182): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="930457492e166f1a7d2c3fe588eab58f3ea3a6af43512f4cf84010250a83d2550482a408c3728ee2ca373c12fe5295a49bac68aa778d8cfb3835e499d3a076b9c07566fd133de5ddbf7e05deafcc17fdd87c731956", 0x55}, {&(0x7f0000000200)="9e8b8f2dc80cac0ee907fd59549d08940196897e58c2ccedb8ccf4a5194c58c07ff07d81747565b9aecdfdce9740278ca53b0872fb0f", 0x36}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001380)="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", 0x4b0}], 0x1}}], 0x2, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 132.87994ms ago: executing program 1 (id=183): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d7c81fcd371943f18f118107da91cf43c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e935ad8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb97136d7cb400c1d0ed4ed9b83090abb113aa4e92606957", 0xa6}, {&(0x7f0000000980)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39811b58bc", 0x1f}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="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", 0x639}], 0x1}}], 0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 88.181553ms ago: executing program 0 (id=184): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00001ffc002000", 0x8) sendto$inet6(r0, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={0x0, 0xb}, 0x8) 0s ago: executing program 2 (id=185): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f00000000c0)='THAWED\x00', 0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. [ 81.551744][ T5834] cgroup: Unknown subsys name 'net' [ 81.751123][ T5834] cgroup: Unknown subsys name 'cpuset' [ 81.760209][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.293961][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.219636][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.246630][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.259007][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.266486][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.273884][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.281238][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.290122][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.297541][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.305136][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.312871][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.323461][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.331599][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.340388][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.386003][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.397338][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.406396][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.424988][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.433541][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.442085][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.457857][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.918871][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 88.024029][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 88.103458][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 88.157438][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.164822][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.172449][ T5857] bridge_slave_0: entered allmulticast mode [ 88.179613][ T5857] bridge_slave_0: entered promiscuous mode [ 88.206571][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 88.222607][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.229829][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.237050][ T5857] bridge_slave_1: entered allmulticast mode [ 88.244213][ T5857] bridge_slave_1: entered promiscuous mode [ 88.342058][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.382453][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.448880][ T5857] team0: Port device team_slave_0 added [ 88.454953][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.462479][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.470283][ T5850] bridge_slave_0: entered allmulticast mode [ 88.478424][ T5850] bridge_slave_0: entered promiscuous mode [ 88.491871][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.499092][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.506290][ T5850] bridge_slave_1: entered allmulticast mode [ 88.513351][ T5850] bridge_slave_1: entered promiscuous mode [ 88.520094][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.527923][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.535123][ T5849] bridge_slave_0: entered allmulticast mode [ 88.542565][ T5849] bridge_slave_0: entered promiscuous mode [ 88.551406][ T5857] team0: Port device team_slave_1 added [ 88.592847][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.600632][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.607877][ T5849] bridge_slave_1: entered allmulticast mode [ 88.614854][ T5849] bridge_slave_1: entered promiscuous mode [ 88.672219][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.679465][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.706777][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.718568][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.725990][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.733121][ T5862] bridge_slave_0: entered allmulticast mode [ 88.740768][ T5862] bridge_slave_0: entered promiscuous mode [ 88.750731][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.773450][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.780500][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.806702][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.818037][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.825188][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.832430][ T5862] bridge_slave_1: entered allmulticast mode [ 88.841072][ T5862] bridge_slave_1: entered promiscuous mode [ 88.849867][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.873129][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.916628][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.941099][ T5850] team0: Port device team_slave_0 added [ 88.978387][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.989599][ T5850] team0: Port device team_slave_1 added [ 89.023877][ T5849] team0: Port device team_slave_0 added [ 89.032189][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.067070][ T5849] team0: Port device team_slave_1 added [ 89.079074][ T5857] hsr_slave_0: entered promiscuous mode [ 89.085703][ T5857] hsr_slave_1: entered promiscuous mode [ 89.104283][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.111602][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.137872][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.186318][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.193273][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.219602][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.240921][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.248055][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.274027][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.287570][ T5862] team0: Port device team_slave_0 added [ 89.294872][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.301968][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.327886][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.365376][ T5862] team0: Port device team_slave_1 added [ 89.396507][ T5851] Bluetooth: hci0: command tx timeout [ 89.405721][ T5851] Bluetooth: hci1: command tx timeout [ 89.447470][ T5850] hsr_slave_0: entered promiscuous mode [ 89.453814][ T5850] hsr_slave_1: entered promiscuous mode [ 89.460483][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 89.466328][ T5850] Cannot create hsr debugfs directory [ 89.475480][ T5851] Bluetooth: hci2: command tx timeout [ 89.508260][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.515226][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.541312][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.555565][ T5851] Bluetooth: hci3: command tx timeout [ 89.561623][ T5849] hsr_slave_0: entered promiscuous mode [ 89.568043][ T5849] hsr_slave_1: entered promiscuous mode [ 89.574069][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 89.580847][ T5849] Cannot create hsr debugfs directory [ 89.599143][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.606124][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.632254][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.758063][ T5862] hsr_slave_0: entered promiscuous mode [ 89.764499][ T5862] hsr_slave_1: entered promiscuous mode [ 89.771272][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 89.777071][ T5862] Cannot create hsr debugfs directory [ 90.121777][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.157296][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.168793][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.179405][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.235152][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.248567][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.258863][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.286363][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.358976][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.369662][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.380965][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.391423][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.486624][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.506883][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.529605][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.554239][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.581134][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.649609][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.672119][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.682421][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.689670][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.731669][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.738858][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.750689][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.769739][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.776908][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.792675][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.804764][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.811995][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.887230][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.912571][ T5857] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.923779][ T5857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.960622][ T5850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.974069][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.999655][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.006840][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.020037][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.027228][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.069188][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.134844][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.201502][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.208812][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.252921][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.260127][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.358635][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.403127][ T5862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.482291][ T5855] Bluetooth: hci0: command tx timeout [ 91.491621][ T5851] Bluetooth: hci1: command tx timeout [ 91.531316][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.557536][ T5851] Bluetooth: hci2: command tx timeout [ 91.600804][ T5857] veth0_vlan: entered promiscuous mode [ 91.631401][ T5857] veth1_vlan: entered promiscuous mode [ 91.637389][ T5851] Bluetooth: hci3: command tx timeout [ 91.685039][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.717250][ T5850] veth0_vlan: entered promiscuous mode [ 91.765294][ T5850] veth1_vlan: entered promiscuous mode [ 91.772871][ T5857] veth0_macvtap: entered promiscuous mode [ 91.788349][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.807575][ T5857] veth1_macvtap: entered promiscuous mode [ 91.845130][ T5850] veth0_macvtap: entered promiscuous mode [ 91.861007][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.872821][ T5850] veth1_macvtap: entered promiscuous mode [ 91.886898][ T3096] cfg80211: failed to load regulatory.db [ 91.920126][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.942794][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.957020][ T5849] veth0_vlan: entered promiscuous mode [ 91.969538][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.983794][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.995830][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.004646][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.024230][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.055107][ T5849] veth1_vlan: entered promiscuous mode [ 92.063125][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.072214][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.082877][ T5862] veth0_vlan: entered promiscuous mode [ 92.095345][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.105742][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.136376][ T5862] veth1_vlan: entered promiscuous mode [ 92.234625][ T5849] veth0_macvtap: entered promiscuous mode [ 92.263031][ T5849] veth1_macvtap: entered promiscuous mode [ 92.272919][ T5862] veth0_macvtap: entered promiscuous mode [ 92.285855][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.293753][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.316632][ T5862] veth1_macvtap: entered promiscuous mode [ 92.344228][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.356127][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.364225][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.384138][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.406296][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.418724][ T3524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.422590][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.428699][ T3524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.464142][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.473224][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.497149][ T3524] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.510005][ T3524] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.533455][ T3524] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.548267][ T3524] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.558488][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.580753][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.591343][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.593369][ T3524] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.607791][ T3524] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.839797][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.879459][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.908815][ T3524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.937720][ T3524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.020191][ T3524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.042332][ T3524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.114955][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.154295][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.556169][ T5855] Bluetooth: hci0: command tx timeout [ 93.561704][ T5851] Bluetooth: hci1: command tx timeout [ 93.635754][ T5851] Bluetooth: hci2: command tx timeout [ 93.717082][ T5851] Bluetooth: hci3: command tx timeout [ 93.919261][ T5955] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.636969][ T5855] Bluetooth: hci0: command tx timeout [ 95.642794][ T5851] Bluetooth: hci1: command tx timeout [ 95.715604][ T5851] Bluetooth: hci2: command tx timeout [ 95.797395][ T5851] Bluetooth: hci3: command tx timeout [ 96.916735][ T6041] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.135044][ T6134] macvlan1: entered promiscuous mode [ 101.145194][ T6134] macvlan1: entered allmulticast mode [ 101.160905][ T6134] veth1_vlan: entered allmulticast mode [ 102.402690][ T30] audit: type=1326 audit(1752706596.287:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59a78e929 code=0x7ffc0000 [ 102.432211][ T30] audit: type=1326 audit(1752706596.307:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59a78e929 code=0x7ffc0000 [ 102.465041][ T30] audit: type=1326 audit(1752706596.317:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7ff59a78e929 code=0x7ffc0000 [ 102.488289][ T30] audit: type=1326 audit(1752706596.317:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59a78e929 code=0x7ffc0000 [ 102.518950][ T30] audit: type=1326 audit(1752706596.317:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59a78e929 code=0x7ffc0000 [ 102.541638][ T30] audit: type=1326 audit(1752706596.347:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7ff59a78e929 code=0x7ffc0000 [ 102.570658][ T30] audit: type=1326 audit(1752706596.347:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59a78e929 code=0x7ffc0000 [ 102.618478][ T30] audit: type=1326 audit(1752706596.347:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59a78e929 code=0x7ffc0000 [ 102.643662][ T30] audit: type=1326 audit(1752706596.347:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7ff59a78e929 code=0x7ffc0000 [ 102.668744][ T30] audit: type=1326 audit(1752706596.347:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59a78e929 code=0x7ffc0000 [ 102.781950][ T6192] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.273893][ T6209] netlink: 'syz.1.120': attribute type 3 has an invalid length. [ 103.294046][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.120'. [ 104.046450][ T6227] infiniband syz1: set active [ 104.055574][ T6227] infiniband syz1: added syz_tun [ 104.219639][ T6256] syz.2.139 uses obsolete (PF_INET,SOCK_PACKET) [ 104.273113][ T6227] RDS/IB: syz1: added [ 104.299242][ T6227] smc: adding ib device syz1 with port count 1 [ 104.317998][ T6227] smc: ib device syz1 port 1 has pnetid [ 104.756580][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.960391][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.120994][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.333017][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.645594][ T12] bridge_slave_1: left allmulticast mode [ 105.651473][ T12] bridge_slave_1: left promiscuous mode [ 105.674315][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.760137][ T12] bridge_slave_0: left allmulticast mode [ 105.775539][ T12] bridge_slave_0: left promiscuous mode [ 105.781318][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.061322][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.073464][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.088626][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.100555][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.112229][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.464157][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.478322][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.489554][ T12] bond0 (unregistering): Released all slaves [ 108.215572][ T5851] Bluetooth: hci0: command tx timeout [ 108.769234][ T6272] chnl_net:caif_netlink_parms(): no params data found [ 109.551996][ T12] hsr_slave_0: left promiscuous mode [ 109.723601][ T12] hsr_slave_1: left promiscuous mode [ 109.733734][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.743116][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.763313][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.779883][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.804181][ T12] veth1_macvtap: left promiscuous mode [ 109.809917][ T12] veth0_macvtap: left promiscuous mode [ 109.816320][ T12] veth1_vlan: left promiscuous mode [ 109.822032][ T12] veth0_vlan: left promiscuous mode [ 110.275500][ T5851] Bluetooth: hci0: command tx timeout [ 110.796217][ T6404] ================================================================== [ 110.804330][ T6404] BUG: KASAN: slab-use-after-free in tcp_prune_ofo_queue+0x37e/0x6e0 [ 110.812435][ T6404] Read of size 4 at addr ffff888075be0e50 by task syz.1.183/6404 [ 110.820147][ T6404] [ 110.822479][ T6404] CPU: 1 UID: 0 PID: 6404 Comm: syz.1.183 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 110.822497][ T6404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.822512][ T6404] Call Trace: [ 110.822517][ T6404] [ 110.822523][ T6404] dump_stack_lvl+0x189/0x250 [ 110.822547][ T6404] ? __virt_addr_valid+0x1c8/0x5c0 [ 110.822569][ T6404] ? rcu_is_watching+0x15/0xb0 [ 110.822605][ T6404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.822626][ T6404] ? rcu_is_watching+0x15/0xb0 [ 110.822645][ T6404] ? lock_release+0x4b/0x3e0 [ 110.822661][ T6404] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 110.822685][ T6404] ? __virt_addr_valid+0x1c8/0x5c0 [ 110.822706][ T6404] ? __virt_addr_valid+0x4a5/0x5c0 [ 110.822729][ T6404] print_report+0xca/0x230 [ 110.822743][ T6404] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 110.822767][ T6404] kasan_report+0x118/0x150 [ 110.822781][ T6404] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 110.822807][ T6404] tcp_prune_ofo_queue+0x37e/0x6e0 [ 110.822836][ T6404] tcp_try_rmem_schedule+0xb6b/0x1830 [ 110.822864][ T6404] tcp_data_queue+0x4e3/0x6380 [ 110.822895][ T6404] ? __pfx_tcp_data_queue+0x10/0x10 [ 110.822916][ T6404] ? __pfx_tcp_urg+0x10/0x10 [ 110.822937][ T6404] ? read_tsc+0x9/0x20 [ 110.822955][ T6404] tcp_rcv_established+0xf9e/0x1eb0 [ 110.822978][ T6404] ? rt_is_expired+0x1c/0x2d0 [ 110.822998][ T6404] ? __pfx_tcp_rcv_established+0x10/0x10 [ 110.823018][ T6404] ? rt_is_expired+0x1c/0x2d0 [ 110.823034][ T6404] ? rt_is_expired+0x1c/0x2d0 [ 110.823051][ T6404] ? rt_is_expired+0x250/0x2d0 [ 110.823068][ T6404] ? __pfx_ipv4_dst_check+0x10/0x10 [ 110.823085][ T6404] ? __pfx_ipv4_dst_check+0x10/0x10 [ 110.823102][ T6404] tcp_v4_do_rcv+0xa23/0xce0 [ 110.823124][ T6404] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 110.823138][ T6404] __release_sock+0x21c/0x350 [ 110.823161][ T6404] release_sock+0x5f/0x1f0 [ 110.823176][ T6404] sk_stream_wait_memory+0x724/0xf70 [ 110.823207][ T6404] ? __pfx_sk_stream_wait_memory+0x10/0x10 [ 110.823228][ T6404] ? __pfx_woken_wake_function+0x10/0x10 [ 110.823246][ T6404] ? __tcp_push_pending_frames+0xd2/0x360 [ 110.823264][ T6404] ? tcp_push+0x40f/0x660 [ 110.823285][ T6404] tcp_sendmsg_locked+0x1c62/0x56d0 [ 110.823327][ T6404] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 110.823348][ T6404] ? __local_bh_enable_ip+0x12d/0x1c0 [ 110.823368][ T6404] ? __local_bh_enable_ip+0x12d/0x1c0 [ 110.823390][ T6404] tcp_sendmsg+0x2f/0x50 [ 110.823411][ T6404] __sock_sendmsg+0x19c/0x270 [ 110.823434][ T6404] __sys_sendto+0x3bd/0x520 [ 110.823451][ T6404] ? __pfx___sys_sendto+0x10/0x10 [ 110.823466][ T6404] ? do_futex+0x395/0x420 [ 110.823500][ T6404] ? rcu_is_watching+0x15/0xb0 [ 110.823520][ T6404] __x64_sys_sendto+0xde/0x100 [ 110.823537][ T6404] do_syscall_64+0xfa/0x3b0 [ 110.823552][ T6404] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.823565][ T6404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.823580][ T6404] ? clear_bhb_loop+0x60/0xb0 [ 110.823596][ T6404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.823611][ T6404] RIP: 0033:0x7ff59a78e929 [ 110.823627][ T6404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.823640][ T6404] RSP: 002b:00007ff59b553038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 110.823657][ T6404] RAX: ffffffffffffffda RBX: 00007ff59a9b5fa0 RCX: 00007ff59a78e929 [ 110.823668][ T6404] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 110.823678][ T6404] RBP: 00007ff59a810ca1 R08: 0000000000000000 R09: 0000000000000000 [ 110.823688][ T6404] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000000 [ 110.823697][ T6404] R13: 0000000000000000 R14: 00007ff59a9b5fa0 R15: 00007ffd11ce5ea8 [ 110.823714][ T6404] [ 110.823719][ T6404] [ 111.187225][ T6404] Allocated by task 6404: [ 111.191573][ T6404] kasan_save_track+0x3e/0x80 [ 111.196295][ T6404] __kasan_slab_alloc+0x6c/0x80 [ 111.201153][ T6404] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 111.207057][ T6404] __alloc_skb+0x112/0x2d0 [ 111.211481][ T6404] tcp_stream_alloc_skb+0x3d/0x340 [ 111.216598][ T6404] tcp_write_xmit+0xeec/0x67f0 [ 111.221364][ T6404] __tcp_push_pending_frames+0x97/0x360 [ 111.226936][ T6404] tcp_rcv_established+0x1012/0x1eb0 [ 111.232229][ T6404] tcp_v4_do_rcv+0xa23/0xce0 [ 111.236814][ T6404] __release_sock+0x21c/0x350 [ 111.241501][ T6404] release_sock+0x5f/0x1f0 [ 111.245930][ T6404] tcp_sendmsg+0x39/0x50 [ 111.250176][ T6404] __sock_sendmsg+0x19c/0x270 [ 111.254882][ T6404] ____sys_sendmsg+0x52d/0x830 [ 111.259647][ T6404] ___sys_sendmsg+0x21f/0x2a0 [ 111.264315][ T6404] __sys_sendmmsg+0x227/0x430 [ 111.268985][ T6404] __x64_sys_sendmmsg+0xa0/0xc0 [ 111.273847][ T6404] do_syscall_64+0xfa/0x3b0 [ 111.278370][ T6404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.284276][ T6404] [ 111.286604][ T6404] Freed by task 6404: [ 111.290582][ T6404] kasan_save_track+0x3e/0x80 [ 111.295269][ T6404] kasan_save_free_info+0x46/0x50 [ 111.300300][ T6404] __kasan_slab_free+0x62/0x70 [ 111.305098][ T6404] kmem_cache_free+0x18f/0x400 [ 111.309875][ T6404] tcp_prune_ofo_queue+0x198/0x6e0 [ 111.314998][ T6404] tcp_try_rmem_schedule+0xb6b/0x1830 [ 111.320393][ T6404] tcp_data_queue+0x4e3/0x6380 [ 111.325184][ T6404] tcp_rcv_established+0xf9e/0x1eb0 [ 111.330406][ T6404] tcp_v4_do_rcv+0xa23/0xce0 [ 111.335000][ T6404] __release_sock+0x21c/0x350 [ 111.339754][ T6404] release_sock+0x5f/0x1f0 [ 111.344181][ T6404] sk_stream_wait_memory+0x724/0xf70 [ 111.349475][ T6404] tcp_sendmsg_locked+0x1c62/0x56d0 [ 111.354704][ T6404] tcp_sendmsg+0x2f/0x50 [ 111.358960][ T6404] __sock_sendmsg+0x19c/0x270 [ 111.363639][ T6404] __sys_sendto+0x3bd/0x520 [ 111.368140][ T6404] __x64_sys_sendto+0xde/0x100 [ 111.372911][ T6404] do_syscall_64+0xfa/0x3b0 [ 111.377424][ T6404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.383337][ T6404] [ 111.385681][ T6404] The buggy address belongs to the object at ffff888075be0c80 [ 111.385681][ T6404] which belongs to the cache skbuff_fclone_cache of size 488 [ 111.400422][ T6404] The buggy address is located 464 bytes inside of [ 111.400422][ T6404] freed 488-byte region [ffff888075be0c80, ffff888075be0e68) [ 111.414222][ T6404] [ 111.416549][ T6404] The buggy address belongs to the physical page: [ 111.422973][ T6404] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75be0 [ 111.431723][ T6404] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 111.440212][ T6404] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 111.448191][ T6404] page_type: f5(slab) [ 111.452163][ T6404] raw: 00fff00000000040 ffff88801e6f1a00 0000000000000000 0000000000000001 [ 111.460746][ T6404] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 111.469339][ T6404] head: 00fff00000000040 ffff88801e6f1a00 0000000000000000 0000000000000001 [ 111.478013][ T6404] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 111.486680][ T6404] head: 00fff00000000001 ffffea0001d6f801 00000000ffffffff 00000000ffffffff [ 111.495348][ T6404] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 111.504014][ T6404] page dumped because: kasan: bad access detected [ 111.510434][ T6404] page_owner tracks the page as allocated [ 111.516151][ T6404] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5834, tgid 5834 (syz-executor), ts 83901736861, free_ts 28503434588 [ 111.537505][ T6404] post_alloc_hook+0x240/0x2a0 [ 111.542271][ T6404] get_page_from_freelist+0x21e4/0x22c0 [ 111.547822][ T6404] __alloc_frozen_pages_noprof+0x181/0x370 [ 111.553634][ T6404] alloc_pages_mpol+0x232/0x4a0 [ 111.558497][ T6404] allocate_slab+0x8a/0x370 [ 111.563017][ T6404] ___slab_alloc+0xbeb/0x1410 [ 111.567690][ T6404] kmem_cache_alloc_node_noprof+0x280/0x3c0 [ 111.573593][ T6404] __alloc_skb+0x112/0x2d0 [ 111.578007][ T6404] tcp_stream_alloc_skb+0x3d/0x340 [ 111.583120][ T6404] tcp_sendmsg_locked+0xefc/0x56d0 [ 111.588240][ T6404] tcp_sendmsg+0x2f/0x50 [ 111.592490][ T6404] __sock_sendmsg+0x19c/0x270 [ 111.597177][ T6404] sock_write_iter+0x258/0x330 [ 111.601938][ T6404] vfs_write+0x54b/0xa90 [ 111.606173][ T6404] ksys_write+0x145/0x250 [ 111.610495][ T6404] do_syscall_64+0xfa/0x3b0 [ 111.614997][ T6404] page last free pid 1 tgid 1 stack trace: [ 111.620813][ T6404] __free_frozen_pages+0xbc4/0xd30 [ 111.625922][ T6404] free_contig_range+0x1bd/0x4a0 [ 111.630856][ T6404] destroy_args+0x7e/0x5d0 [ 111.635268][ T6404] debug_vm_pgtable+0x404/0x420 [ 111.640119][ T6404] do_one_initcall+0x233/0x820 [ 111.644884][ T6404] do_initcall_level+0x137/0x1f0 [ 111.649818][ T6404] do_initcalls+0x69/0xd0 [ 111.654139][ T6404] kernel_init_freeable+0x3d9/0x590 [ 111.659335][ T6404] kernel_init+0x1d/0x1d0 [ 111.663663][ T6404] ret_from_fork+0x3f9/0x770 [ 111.668253][ T6404] ret_from_fork_asm+0x1a/0x30 [ 111.673045][ T6404] [ 111.675369][ T6404] Memory state around the buggy address: [ 111.680997][ T6404] ffff888075be0d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.689058][ T6404] ffff888075be0d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.697115][ T6404] >ffff888075be0e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 111.705164][ T6404] ^ [ 111.711827][ T6404] ffff888075be0e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 111.719883][ T6404] ffff888075be0f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 111.727944][ T6404] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 111.821074][ T6404] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 111.828324][ T6404] CPU: 0 UID: 0 PID: 6404 Comm: syz.1.183 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 111.839716][ T6404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 111.849789][ T6404] Call Trace: [ 111.853084][ T6404] [ 111.856033][ T6404] dump_stack_lvl+0x99/0x250 [ 111.860664][ T6404] ? __asan_memcpy+0x40/0x70 [ 111.865288][ T6404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.870518][ T6404] ? __pfx__printk+0x10/0x10 [ 111.875170][ T6404] vpanic+0x281/0x750 [ 111.879198][ T6404] ? preempt_schedule+0xae/0xc0 [ 111.884095][ T6404] ? __pfx_vpanic+0x10/0x10 [ 111.888627][ T6404] ? preempt_schedule_common+0x83/0xd0 [ 111.894114][ T6404] ? preempt_schedule+0xae/0xc0 [ 111.898983][ T6404] ? __pfx_preempt_schedule+0x10/0x10 [ 111.904393][ T6404] panic+0xb9/0xc0 [ 111.908155][ T6404] ? __pfx_panic+0x10/0x10 [ 111.912598][ T6404] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 111.918523][ T6404] ? is_module_address+0x17/0xf0 [ 111.923491][ T6404] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 111.928809][ T6404] check_panic_on_warn+0x89/0xb0 [ 111.933767][ T6404] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 111.939101][ T6404] end_report+0x78/0x160 [ 111.943356][ T6404] kasan_report+0x129/0x150 [ 111.947882][ T6404] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 111.953188][ T6404] tcp_prune_ofo_queue+0x37e/0x6e0 [ 111.958314][ T6404] tcp_try_rmem_schedule+0xb6b/0x1830 [ 111.963694][ T6404] tcp_data_queue+0x4e3/0x6380 [ 111.968467][ T6404] ? __pfx_tcp_data_queue+0x10/0x10 [ 111.973670][ T6404] ? __pfx_tcp_urg+0x10/0x10 [ 111.978273][ T6404] ? read_tsc+0x9/0x20 [ 111.982363][ T6404] tcp_rcv_established+0xf9e/0x1eb0 [ 111.987581][ T6404] ? rt_is_expired+0x1c/0x2d0 [ 111.992273][ T6404] ? __pfx_tcp_rcv_established+0x10/0x10 [ 111.997911][ T6404] ? rt_is_expired+0x1c/0x2d0 [ 112.002584][ T6404] ? rt_is_expired+0x1c/0x2d0 [ 112.007264][ T6404] ? rt_is_expired+0x250/0x2d0 [ 112.012032][ T6404] ? __pfx_ipv4_dst_check+0x10/0x10 [ 112.017252][ T6404] ? __pfx_ipv4_dst_check+0x10/0x10 [ 112.022453][ T6404] tcp_v4_do_rcv+0xa23/0xce0 [ 112.027050][ T6404] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 112.032173][ T6404] __release_sock+0x21c/0x350 [ 112.036857][ T6404] release_sock+0x5f/0x1f0 [ 112.041279][ T6404] sk_stream_wait_memory+0x724/0xf70 [ 112.046589][ T6404] ? __pfx_sk_stream_wait_memory+0x10/0x10 [ 112.052408][ T6404] ? __pfx_woken_wake_function+0x10/0x10 [ 112.058043][ T6404] ? __tcp_push_pending_frames+0xd2/0x360 [ 112.063793][ T6404] ? tcp_push+0x40f/0x660 [ 112.068145][ T6404] tcp_sendmsg_locked+0x1c62/0x56d0 [ 112.073384][ T6404] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 112.078943][ T6404] ? __local_bh_enable_ip+0x12d/0x1c0 [ 112.084345][ T6404] ? __local_bh_enable_ip+0x12d/0x1c0 [ 112.089729][ T6404] tcp_sendmsg+0x2f/0x50 [ 112.093984][ T6404] __sock_sendmsg+0x19c/0x270 [ 112.098673][ T6404] __sys_sendto+0x3bd/0x520 [ 112.103184][ T6404] ? __pfx___sys_sendto+0x10/0x10 [ 112.108207][ T6404] ? do_futex+0x395/0x420 [ 112.112558][ T6404] ? rcu_is_watching+0x15/0xb0 [ 112.117326][ T6404] __x64_sys_sendto+0xde/0x100 [ 112.122092][ T6404] do_syscall_64+0xfa/0x3b0 [ 112.126596][ T6404] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.131794][ T6404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.137859][ T6404] ? clear_bhb_loop+0x60/0xb0 [ 112.142535][ T6404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.148428][ T6404] RIP: 0033:0x7ff59a78e929 [ 112.152848][ T6404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.172453][ T6404] RSP: 002b:00007ff59b553038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 112.180867][ T6404] RAX: ffffffffffffffda RBX: 00007ff59a9b5fa0 RCX: 00007ff59a78e929 [ 112.188843][ T6404] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 112.196807][ T6404] RBP: 00007ff59a810ca1 R08: 0000000000000000 R09: 0000000000000000 [ 112.204793][ T6404] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000000 [ 112.212784][ T6404] R13: 0000000000000000 R14: 00007ff59a9b5fa0 R15: 00007ffd11ce5ea8 [ 112.220788][ T6404] [ 112.224140][ T6404] Kernel Offset: disabled [ 112.228460][ T6404] Rebooting in 86400 seconds..