last executing test programs: 10.813779825s ago: executing program 3 (id=173): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000002c0)=0x5) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) rt_sigtimedwait(&(0x7f0000000080)={[0x1]}, &(0x7f00000000c0), 0x0, 0x8) 9.477741423s ago: executing program 3 (id=170): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000019080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') pread64(r1, 0x0, 0x0, 0xe377) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, &(0x7f0000019140)='./file0/../file0\x00', &(0x7f00000190c0), 0x0, &(0x7f0000019280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=r4, @ANYRES8=r0, @ANYRESDEC=r0]) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000100)={0x20, 0x0, r5, {0x800, 0x0, 0x4, 0x3}}, 0x20) r6 = semget(0x1, 0x2, 0x8d30a0a8790dd845) semctl$GETPID(r6, 0x0, 0xb, &(0x7f00000000c0)=""/40) r7 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r7, &(0x7f0000002240)=""/237, 0xed, 0x4eb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0, 0x43, 0x0, 0x1}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f0000000000), 0x7fffffff, 0xad6b1583e509be0a) 7.896439203s ago: executing program 2 (id=172): socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x3, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0xb}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xffffffd2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 6.893187869s ago: executing program 2 (id=174): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) setpgid(0x0, 0x0) setpgid(0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x2c, 0xa7f084dd5657bbbf, 0x14}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c8c0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 6.442560051s ago: executing program 3 (id=175): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/57, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) 6.258691353s ago: executing program 3 (id=177): r0 = inotify_init() r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r5, 0x0, 0x0, 0x804, 0x0) select(0x40, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x700, 0x0, 0x5, 0x4c5b}, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4}, &(0x7f0000000140)={0x77359400}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000007911c00000000000850000008f0000009500000002000000f38c04bfedba"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r7, 0x101, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040880}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 6.221985223s ago: executing program 2 (id=178): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.161452923s ago: executing program 1 (id=180): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, 0x10, 0xb, 0x70bd2c, 0x4000, {0x3}, [@typed={0xe, 0x2, 0x0, 0x0, @str='syzkaller\x00'}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x129}]}]}, 0x2c}}, 0x4040080) syz_read_part_table(0x1042, &(0x7f0000002080)="$eJzsz9EJwjAYBOBLfyvWJycQl3IjXcYlI9VadAAR4fuewuXIkfBTQ3LIJpWpP9UjnZbr3pPs125L0uZWjuNSOY2X2s2HWt9s09vA9nMsw7VeUcv59s2/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC/uAcAAP//8c8Ptw==") ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x193042, 0x41) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x429, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x1, 0x0, 0xfffffffffffffffd, 0x50b, 0x0, 0x0, 0xbd4c, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x2080000000000000, 0x0, 0x4, 0x3, 0x0, 0x40, 0xfffffffffffffffc, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x5, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x2000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0xfffffffffffffffc, 0xffffffff, 0x3, 0x6, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x200, 0x9, 0x3, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x400, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) 5.449965098s ago: executing program 2 (id=181): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="1700000021002551241c0165ff00fc0202000000db73", 0x16) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x2b) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238"], 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x2, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x800b, 0x6, 0x200000000, 0x0, 0x5, 0x0, 0x6b, 0x7ff], 0xeeee8000, 0x2019c0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.250679669s ago: executing program 3 (id=182): capset(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r3) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, r4, 0x301, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x2404c800) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) r5 = socket(0x10, 0x803, 0x0) sendto(r5, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x16, 0x0, 0x0, 0x0) 3.520375849s ago: executing program 3 (id=183): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000019080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') pread64(r1, 0x0, 0x0, 0xe377) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000001c0)={0x0, 'team0\x00', {0x3}, 0x6f}) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, &(0x7f0000019140)='./file0/../file0\x00', &(0x7f00000190c0), 0x0, &(0x7f0000019280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=r4, @ANYRES8=r0, @ANYRESDEC=r0]) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000100)={0x20, 0x0, r5, {0x800, 0x0, 0x4, 0x3}}, 0x20) r6 = semget(0x1, 0x2, 0x8d30a0a8790dd845) semctl$GETPID(r6, 0x0, 0xb, &(0x7f00000000c0)=""/40) r7 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r7, &(0x7f0000002240)=""/237, 0xed, 0x4eb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000010000000000000e0300000000000000010000000000001200000000000000000000000202000000002e008e8cdcef8d257d3918e7ef1647336b495abca12e4f87d628edf55d1d99cc9e0b633fc6bf9aa1dd33df6256a27e97769a0d79f56178cc9c8dce6b7871701d5a9590c8a9a106dd940c1fc0a376df45cb2791536539476d2498ac321b7ac503db4cf51e3c570036adcecd5ba6c3872fd4a3330645f542abd5daa5c1dbed2e3a8cb862b850fa9bec0226434ec82dd25fa033f2869edc94d8b5439e1fa454106e78cc8e432aea8ce163342366b47750592a2a89f0d26ec54759d6fdc0138ecacba66d1c7ed6a43a3602b9dd756d2e3c2825b138d25498c87cf2b760877a297011beae4f575e85afaf0cab4d05db06"], 0x0, 0x43, 0x0, 0x1}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f0000000000), 0x7fffffff, 0xad6b1583e509be0a) 3.237197831s ago: executing program 1 (id=184): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20400) socket$inet6(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x128, 0x65, 0x2, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0xe0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_ACT={0xcc, 0x1, [@m_nat={0x98, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x6, 0x10000000, 0x1}, @broadcast, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x6, 0x6, 0x6979, 0x28}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffffff, 0x1}}]}, {0x1d, 0x6, "525dfeac86ce84c0651b02d8cfcfb2e8ebe4fa883a2e859325"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x30, 0x13, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x8002, '\x00', '\x00', '\x00', 0x4, 0xfffffffe, 0x100, 0x0, "abd206a1ebd7cedfd17ebd65400ed41b"}) 3.106137852s ago: executing program 1 (id=185): socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x3, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0xb}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xffffffd2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 3.022714832s ago: executing program 0 (id=186): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/57, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) 2.949552443s ago: executing program 0 (id=187): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x2c, 0xa7f084dd5657bbbf, 0x14}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c8c0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.851884823s ago: executing program 1 (id=188): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) 2.714790944s ago: executing program 0 (id=189): socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.704021564s ago: executing program 1 (id=190): r0 = inotify_init() r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000480), 0x0, 0x804, 0x0) select(0x40, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x700, 0x0, 0x5, 0x4c5b}, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4}, &(0x7f0000000140)={0x77359400}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000007911c00000000000850000008f0000009500000002000000f38c04bfedba"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r7, 0x101, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040880}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2.487244805s ago: executing program 0 (id=191): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'dummy0\x00', 0x800}) 1.7093615s ago: executing program 0 (id=192): capset(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r2) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, r3, 0x301, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x2404c800) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) r4 = socket(0x10, 0x803, 0x0) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x16, 0x0, 0x0, 0x0) 1.70815942s ago: executing program 2 (id=193): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20400) socket$inet6(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x128, 0x65, 0x2, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0xe0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_ACT={0xcc, 0x1, [@m_nat={0x98, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x6, 0x10000000, 0x1}, @broadcast, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x6, 0x6, 0x6979, 0x28}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffffff, 0x1}}]}, {0x1d, 0x6, "525dfeac86ce84c0651b02d8cfcfb2e8ebe4fa883a2e859325"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x30, 0x13, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x8002, '\x00', '\x00', '\x00', 0x4, 0xfffffffe, 0x100, 0x0, "abd206a1ebd7cedfd17ebd65400ed41b"}) 1.630635191s ago: executing program 1 (id=194): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$evdev(&(0x7f0000000140), 0x3, 0x2800) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000002c0)=0x5) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) rt_sigtimedwait(&(0x7f0000000080)={[0x1]}, &(0x7f00000000c0), 0x0, 0x8) 1.431055312s ago: executing program 2 (id=195): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/57, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) 0s ago: executing program 0 (id=196): socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x3, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0xb}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xffffffd2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.45' (ED25519) to the list of known hosts. [ 66.830901][ T5777] cgroup: Unknown subsys name 'net' [ 66.970415][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.444258][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.504779][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.513033][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.521635][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.529327][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.537329][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.545916][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.554203][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.561445][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.564364][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.573597][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.580432][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.584491][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.590898][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.597008][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.604209][ T5804] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.610902][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.617791][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.625233][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.640099][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.647463][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.655881][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.663945][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.684252][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.692817][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.065661][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 71.219077][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 71.238535][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 71.318183][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.325391][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.330409][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 71.352181][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.359397][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.367356][ T5786] bridge_slave_0: entered allmulticast mode [ 71.374286][ T5786] bridge_slave_0: entered promiscuous mode [ 71.415938][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.423066][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.430902][ T5786] bridge_slave_1: entered allmulticast mode [ 71.437872][ T5786] bridge_slave_1: entered promiscuous mode [ 71.503155][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.515586][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.525633][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.532751][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.540420][ T5787] bridge_slave_0: entered allmulticast mode [ 71.547385][ T5787] bridge_slave_0: entered promiscuous mode [ 71.555490][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.562602][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.569784][ T5787] bridge_slave_1: entered allmulticast mode [ 71.576703][ T5787] bridge_slave_1: entered promiscuous mode [ 71.627829][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.635031][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.642329][ T5791] bridge_slave_0: entered allmulticast mode [ 71.650548][ T5791] bridge_slave_0: entered promiscuous mode [ 71.664337][ T5786] team0: Port device team_slave_0 added [ 71.680320][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.687703][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.695088][ T5791] bridge_slave_1: entered allmulticast mode [ 71.701872][ T5791] bridge_slave_1: entered promiscuous mode [ 71.713749][ T5786] team0: Port device team_slave_1 added [ 71.732189][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.775351][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.807848][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.827905][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.835150][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.842261][ T5795] bridge_slave_0: entered allmulticast mode [ 71.849707][ T5795] bridge_slave_0: entered promiscuous mode [ 71.868247][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.888825][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.895976][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.921873][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.934512][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.941470][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.968055][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.979216][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.986405][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.994051][ T5795] bridge_slave_1: entered allmulticast mode [ 72.001218][ T5795] bridge_slave_1: entered promiscuous mode [ 72.010366][ T5787] team0: Port device team_slave_0 added [ 72.019094][ T5787] team0: Port device team_slave_1 added [ 72.037638][ T5791] team0: Port device team_slave_0 added [ 72.076382][ T5791] team0: Port device team_slave_1 added [ 72.150223][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.160293][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.167747][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.193695][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.207638][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.214628][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.240614][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.252440][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.259453][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.285774][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.298383][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.305609][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.331584][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.346970][ T5786] hsr_slave_0: entered promiscuous mode [ 72.354056][ T5786] hsr_slave_1: entered promiscuous mode [ 72.362624][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.406881][ T5787] hsr_slave_0: entered promiscuous mode [ 72.413105][ T5787] hsr_slave_1: entered promiscuous mode [ 72.419364][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.427319][ T5787] Cannot create hsr debugfs directory [ 72.480671][ T5791] hsr_slave_0: entered promiscuous mode [ 72.488324][ T5791] hsr_slave_1: entered promiscuous mode [ 72.494810][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.502376][ T5791] Cannot create hsr debugfs directory [ 72.521731][ T5795] team0: Port device team_slave_0 added [ 72.530210][ T5795] team0: Port device team_slave_1 added [ 72.635289][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.642236][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.668531][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.674021][ T5798] Bluetooth: hci0: command tx timeout [ 72.679630][ T5792] Bluetooth: hci1: command tx timeout [ 72.692812][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.699843][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.725850][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.753556][ T5792] Bluetooth: hci2: command tx timeout [ 72.753880][ T5798] Bluetooth: hci3: command tx timeout [ 72.849076][ T5795] hsr_slave_0: entered promiscuous mode [ 72.855441][ T5795] hsr_slave_1: entered promiscuous mode [ 72.861527][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.869692][ T5795] Cannot create hsr debugfs directory [ 73.044293][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.055935][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.065626][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.099086][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.162160][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.178994][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.191009][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.222019][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.270236][ T5791] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.289284][ T5791] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.299569][ T5791] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.309225][ T5791] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.407880][ T5795] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.417904][ T5795] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.435992][ T5795] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.453857][ T5795] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.500829][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.547614][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.579223][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.600882][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.608161][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.619997][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.627157][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.657073][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.686849][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.693984][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.706802][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.713961][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.754529][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.818982][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.839600][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.846762][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.871419][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.878549][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.905910][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.931829][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.972288][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.979434][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.019460][ T1076] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.026586][ T1076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.238468][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.342540][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.406045][ T5787] veth0_vlan: entered promiscuous mode [ 74.432102][ T5786] veth0_vlan: entered promiscuous mode [ 74.475810][ T5786] veth1_vlan: entered promiscuous mode [ 74.485416][ T5787] veth1_vlan: entered promiscuous mode [ 74.502053][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.569447][ T5786] veth0_macvtap: entered promiscuous mode [ 74.580618][ T5786] veth1_macvtap: entered promiscuous mode [ 74.597675][ T5787] veth0_macvtap: entered promiscuous mode [ 74.624399][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.632977][ T5787] veth1_macvtap: entered promiscuous mode [ 74.672566][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.682396][ T5795] veth0_vlan: entered promiscuous mode [ 74.697786][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.708537][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.721534][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.740219][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.748000][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.755193][ T5798] Bluetooth: hci0: command tx timeout [ 74.759222][ T5792] Bluetooth: hci1: command tx timeout [ 74.770268][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.781280][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.796473][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.805651][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.814499][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.823191][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.834922][ T5792] Bluetooth: hci2: command tx timeout [ 74.834931][ T5798] Bluetooth: hci3: command tx timeout [ 74.838360][ T5795] veth1_vlan: entered promiscuous mode [ 74.854340][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.863053][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.871937][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.881600][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.002848][ T5791] veth0_vlan: entered promiscuous mode [ 75.016916][ T5795] veth0_macvtap: entered promiscuous mode [ 75.049515][ T5795] veth1_macvtap: entered promiscuous mode [ 75.071050][ T5791] veth1_vlan: entered promiscuous mode [ 75.079670][ T3496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.102873][ T3496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.119431][ T1076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.142268][ T1076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.149067][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.162453][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.177178][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.187769][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.199968][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.216826][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.227759][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.238230][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.248732][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.259751][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.273911][ T5795] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.282611][ T5795] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.291613][ T5795] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.302114][ T5795] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.322107][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.332395][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.356122][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.364437][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.437860][ T5791] veth0_macvtap: entered promiscuous mode [ 75.448848][ T5791] veth1_macvtap: entered promiscuous mode [ 75.509621][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.530613][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.574086][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.615577][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.630141][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.641498][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.651752][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.662459][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.682802][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.705816][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.717772][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.728323][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.740602][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.753008][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.763626][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.775200][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.789723][ T3531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.794261][ T5791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.807073][ T3531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.817656][ T5791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.826783][ T5791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.835675][ T5791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.848860][ T5883] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5'. [ 76.168322][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.188456][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.284597][ T5891] syzkaller0: entered promiscuous mode [ 76.290107][ T5891] syzkaller0: entered allmulticast mode [ 76.336585][ T1076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.363877][ T1076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.390714][ T5894] pim6reg: entered allmulticast mode [ 76.644881][ T5897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.676917][ T5897] bond0: (slave rose0): Enslaving as an active interface with an up link [ 76.833418][ T5792] Bluetooth: hci1: command tx timeout [ 76.833751][ T5798] Bluetooth: hci0: command tx timeout [ 76.913988][ T5798] Bluetooth: hci2: command tx timeout [ 76.914124][ T5792] Bluetooth: hci3: command tx timeout [ 77.336035][ T5916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'. [ 78.127293][ T5933] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.914312][ T5792] Bluetooth: hci0: command tx timeout [ 78.917285][ T5798] Bluetooth: hci1: command tx timeout [ 78.998858][ T5798] Bluetooth: hci2: command tx timeout [ 79.004494][ T5798] Bluetooth: hci3: command tx timeout [ 79.171376][ T5968] syz.1.22 uses obsolete (PF_INET,SOCK_PACKET) [ 79.211019][ T5968] warning: `syz.1.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.638309][ T5986] syz.0.25[5986]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 79.721466][ T5986] loop0: detected capacity change from 0 to 256 [ 79.741412][ T5986] ======================================================= [ 79.741412][ T5986] WARNING: The mand mount option has been deprecated and [ 79.741412][ T5986] and is ignored by this kernel. Remove the mand [ 79.741412][ T5986] option from the mount to silence this warning. [ 79.741412][ T5986] ======================================================= [ 79.807255][ T5986] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.835170][ T5986] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 79.867055][ T5986] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 80.022280][ T5992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.104827][ T5996] bond_slave_0: entered promiscuous mode [ 80.110703][ T5996] bond_slave_1: entered promiscuous mode [ 80.207214][ T5996] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 80.229478][ T5996] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 80.318478][ T5992] bridge_slave_0: left allmulticast mode [ 80.419018][ T5992] bridge_slave_0: left promiscuous mode [ 80.434068][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.469671][ T5992] bridge_slave_1: left allmulticast mode [ 80.493311][ T5992] bridge_slave_1: left promiscuous mode [ 80.519557][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.559440][ T5992] bond0: (slave bond_slave_0): Releasing backup interface [ 80.568417][ T5992] bond_slave_0: left promiscuous mode [ 80.611705][ T5992] bond0: (slave bond_slave_1): Releasing backup interface [ 80.636566][ T5992] bond_slave_1: left promiscuous mode [ 80.690503][ T5992] team0: Port device team_slave_0 removed [ 80.734431][ T5992] team0: Port device team_slave_1 removed [ 80.741014][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.793868][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.807772][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.815529][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.840724][ T5992] bond1: (slave macvlan2): Removing an active aggregator [ 80.859228][ T5992] bond1: (slave macvlan2): Releasing backup interface [ 80.912550][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'. [ 81.073448][ T5798] Bluetooth: hci3: command tx timeout [ 81.176441][ T6024] Bluetooth: MGMT ver 1.22 [ 82.228946][ T27] cfg80211: failed to load regulatory.db [ 82.258645][ T6037] netlink: 16 bytes leftover after parsing attributes in process `syz.3.37'. [ 82.374412][ T6039] netlink: 'syz.3.37': attribute type 10 has an invalid length. [ 82.465141][ T6039] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 82.487796][ T28] audit: type=1800 audit(1762486484.702:2): pid=6040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.37" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 82.514052][ T6040] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 82.537144][ T6040] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 82.558081][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39'. [ 82.567746][ T6040] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 82.578198][ T6051] IPv6: Can't replace route, no match found [ 82.663584][ T6040] syz.3.37 (6040) used greatest stack depth: 20688 bytes left [ 82.728127][ T6050] netlink: 'syz.2.41': attribute type 12 has an invalid length. [ 83.003871][ T6064] netlink: 'syz.2.45': attribute type 3 has an invalid length. [ 83.233962][ T5798] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 83.243293][ T5798] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.486207][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.494448][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.085293][ T6055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.140108][ T6055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.567855][ T6055] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.581673][ T6085] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 84.593246][ T6055] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.608451][ T6055] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.617659][ T6055] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.836405][ T6075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.883876][ T6085] tipc: Started in network mode [ 84.903480][ T6085] tipc: Node identity 0a674444084e, cluster identity 4711 [ 84.952461][ T6085] tipc: Enabled bearer , priority 0 [ 85.029206][ T6088] syzkaller0: entered promiscuous mode [ 85.048703][ T6088] syzkaller0: entered allmulticast mode [ 85.106086][ T6082] tipc: Resetting bearer [ 85.158276][ T6081] tipc: Resetting bearer [ 85.184957][ T6081] tipc: Disabling bearer [ 85.554553][ T6117] netlink: 48 bytes leftover after parsing attributes in process `syz.0.58'. [ 85.570484][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.59'. [ 85.725797][ T6121] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 86.117920][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60'. [ 86.197174][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60'. [ 86.220504][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60'. [ 86.237312][ T6128] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 86.257972][ T6128] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 86.289710][ T6130] netlink: 64 bytes leftover after parsing attributes in process `syz.1.62'. [ 86.908436][ T6139] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.924897][ T6139] IPVS: set_ctl: invalid protocol: 11146 0.0.0.0:20000 [ 86.972771][ T6139] netlink: 'syz.3.64': attribute type 4 has an invalid length. [ 87.191300][ T5798] Bluetooth: hci3: command 0x0405 tx timeout [ 87.347718][ T6150] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.553615][ T788] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.683527][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.742169][ T6154] netlink: 'syz.1.68': attribute type 4 has an invalid length. [ 87.769927][ T788] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 87.779784][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.788618][ T788] usb 1-1: Product: syz [ 87.793001][ T788] usb 1-1: Manufacturer: syz [ 87.798030][ T788] usb 1-1: SerialNumber: syz [ 87.819530][ T788] usb 1-1: config 0 descriptor?? [ 87.832932][ T788] ch341 1-1:0.0: ch341-uart converter detected [ 87.873609][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 87.888019][ T27] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.916816][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 87.926314][ T27] usb 4-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 87.937780][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.953142][ T27] usb 4-1: config 0 descriptor?? [ 88.448495][ T788] usb 1-1: failed to send control message: -71 [ 88.475654][ T788] ch341-uart: probe of ttyUSB0 failed with error -71 [ 88.507404][ T788] usb 1-1: USB disconnect, device number 2 [ 88.534613][ T788] ch341 1-1:0.0: device disconnected [ 88.705313][ T27] usbhid 4-1:0.0: can't add hid device: -71 [ 88.711409][ T27] usbhid: probe of 4-1:0.0 failed with error -71 [ 88.727828][ T27] usb 4-1: USB disconnect, device number 2 [ 89.013314][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.203326][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 89.220080][ T43] usb 2-1: config index 0 descriptor too short (expected 29496, got 56) [ 89.244840][ T28] audit: type=1326 audit(1762486491.462:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.0.70" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa71378f6c9 code=0x0 [ 89.245048][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.284808][ T43] usb 2-1: config 0 has no interfaces? [ 89.291776][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 89.335610][ T43] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 89.347862][ T43] usb 2-1: Manufacturer: syz [ 89.367695][ T43] usb 2-1: config 0 descriptor?? [ 89.652460][ T43] usb 2-1: USB disconnect, device number 2 [ 90.297441][ T788] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.508034][ T788] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 90.523255][ T788] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 90.539947][ T788] usb 4-1: config 220 has no interface number 2 [ 90.546679][ T788] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 90.574306][ T788] usb 4-1: config 220 interface 0 has no altsetting 0 [ 90.581174][ T788] usb 4-1: config 220 interface 76 has no altsetting 0 [ 90.588786][ T788] usb 4-1: config 220 interface 1 has no altsetting 0 [ 90.612398][ T788] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 90.626496][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.643499][ T788] usb 4-1: Product: syz [ 90.647786][ T788] usb 4-1: Manufacturer: syz [ 90.652696][ T788] usb 4-1: SerialNumber: syz [ 90.734211][ T6190] netlink: 'syz.0.81': attribute type 1 has an invalid length. [ 90.858526][ T6190] veth3: entered promiscuous mode [ 90.889004][ T788] usb 4-1: selecting invalid altsetting 0 [ 90.914152][ T788] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 90.922289][ T3463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.922380][ T788] usb 4-1: No valid video chain found. [ 90.943300][ T3463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.959949][ T788] usb 4-1: selecting invalid altsetting 0 [ 90.973433][ T788] usbtest: probe of 4-1:220.1 failed with error -22 [ 90.995495][ T788] usb 4-1: USB disconnect, device number 3 [ 92.528363][ T6211] netlink: 6 bytes leftover after parsing attributes in process `syz.0.85'. [ 92.581150][ T6211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.915595][ T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.960426][ T6232] loop3: detected capacity change from 0 to 2048 [ 94.041259][ T6232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.125608][ T6240] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 94.163668][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.170260][ T6232] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 1 with error 28 [ 94.183398][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.200829][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.207053][ T6232] EXT4-fs (loop3): This should not happen!! Data will be lost [ 94.207053][ T6232] [ 94.230158][ T43] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.240281][ T6232] EXT4-fs (loop3): Total free blocks count 0 [ 94.246689][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.253181][ T6232] EXT4-fs (loop3): Free/Dirty block details [ 94.267043][ T6232] EXT4-fs (loop3): free_blocks=2415919104 [ 94.272433][ T6243] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 94.276048][ T43] usb 2-1: config 0 descriptor?? [ 94.301644][ T6243] EXT4-fs (loop3): This should not happen!! Data will be lost [ 94.301644][ T6243] [ 94.302508][ T6232] EXT4-fs (loop3): dirty_blocks=32 [ 94.328195][ T6232] EXT4-fs (loop3): Block reservation details [ 94.753064][ T43] plantronics 0003:047F:FFFF.0001: unbalanced collection at end of report description [ 94.763354][ T43] plantronics 0003:047F:FFFF.0001: parse failed [ 94.769680][ T43] plantronics: probe of 0003:047F:FFFF.0001 failed with error -22 [ 94.974090][ T27] usb 2-1: USB disconnect, device number 3 [ 94.991984][ T6259] netlink: 136 bytes leftover after parsing attributes in process `syz.0.97'. [ 95.119622][ T6264] syzkaller0: entered promiscuous mode [ 95.127806][ T6264] syzkaller0: entered allmulticast mode [ 95.391007][ T6266] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.505174][ T6266] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.659194][ T6266] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.840218][ T6266] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.990454][ T6266] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.022950][ T6266] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.052193][ T6266] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.103154][ T6266] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.389373][ T6287] fuse: Bad value for 'fd' [ 99.057128][ T6319] Zero length message leads to an empty skb [ 100.213208][ C1] sched: RT throttling activated [ 105.124257][ T6344] fuse: Bad value for 'fd' [ 105.133584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.063594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.143690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.362906][ T6394] fuse: Bad value for 'fd' [ 117.723671][ T6447] fuse: Bad value for 'fd' [ 117.997055][ T6456] netlink: 'syz.1.148': attribute type 1 has an invalid length. [ 118.383557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.763612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.772525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.912293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.185862][ T6458] loop1: detected capacity change from 0 to 8192 [ 120.243477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 120.713633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 125.081216][ T6497] netlink: 'syz.2.168': attribute type 1 has an invalid length. [ 125.271093][ T6500] loop2: detected capacity change from 0 to 8192 [ 125.318226][ T6500] loop2: p1 < > p3 p4 < > [ 125.333521][ T788] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.342167][ T6500] loop2: p3 size 33554432 extends beyond EOD, truncated [ 125.465100][ T6507] fuse: Bad value for 'fd' [ 125.523290][ T788] usb 1-1: Using ep0 maxpacket: 32 [ 125.544142][ T788] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.581491][ T788] usb 1-1: config 0 interface 0 has no altsetting 0 [ 125.604174][ T788] usb 1-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 125.628980][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.652202][ T788] usb 1-1: config 0 descriptor?? [ 125.671362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 127.711933][ T6513] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 127.909360][ T788] usbhid 1-1:0.0: can't add hid device: -71 [ 127.949857][ T788] usbhid: probe of 1-1:0.0 failed with error -71 [ 127.976716][ T788] usb 1-1: USB disconnect, device number 3 [ 129.336940][ T6529] netlink: 'syz.1.180': attribute type 1 has an invalid length. [ 129.931988][ T6532] loop1: detected capacity change from 0 to 8192 [ 131.282346][ T6532] loop1: p1 < > p3 p4 < > [ 131.311702][ T6532] loop1: p3 size 33554432 extends beyond EOD, truncated [ 131.354027][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 131.567886][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 131.575839][ T8] usb 3-1: config index 0 descriptor too short (expected 29496, got 56) [ 131.591106][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.611679][ T8] usb 3-1: config 0 has no interfaces? [ 131.630313][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 131.649259][ T8] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 131.668994][ T8] usb 3-1: Manufacturer: syz [ 131.686112][ T8] usb 3-1: config 0 descriptor?? [ 131.775473][ T6550] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 131.847485][ T5797] udevd[5797]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 131.867188][ T5789] udevd[5789]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 131.876916][ T5805] udevd[5805]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 131.925036][ T788] usb 3-1: USB disconnect, device number 2 [ 132.758723][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.767302][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.185526][ T6574] fuse: Bad value for 'fd' [ 196.274790][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 196.353245][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 201.473370][ T5802] Bluetooth: hci3: command 0x0405 tx timeout [ 239.893130][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 239.900171][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5787/1:b..l [ 239.908484][ C1] rcu: (detected by 1, t=10502 jiffies, g=14465, q=288 ncpus=2) [ 239.916232][ C1] task:syz-executor state:R running task stack:20648 pid:5787 ppid:5782 flags:0x00004002 [ 239.927692][ C1] Call Trace: [ 239.930985][ C1] [ 239.933940][ C1] __schedule+0x14d2/0x44d0 [ 239.938490][ C1] ? verify_lock_unused+0x140/0x140 [ 239.943718][ C1] ? is_bpf_text_address+0x28f/0x2a0 [ 239.949028][ C1] ? asan.module_dtor+0x20/0x20 [ 239.953906][ C1] ? mark_lock+0x94/0x320 [ 239.958264][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 239.964275][ C1] ? preempt_schedule_irq+0xaa/0x140 [ 239.969591][ C1] preempt_schedule_irq+0xb5/0x140 [ 239.974729][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 239.980488][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 239.986326][ C1] irqentry_exit+0x67/0x70 [ 239.990760][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 239.996780][ C1] RIP: 0010:unwind_get_return_address+0x28/0xc0 [ 240.003055][ C1] Code: 40 00 f3 0f 1e fa 55 41 57 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 d4 ed 4a 00 48 89 d8 48 c1 e8 03 42 0f b6 04 30 <84> c0 75 6e 8b 2b 31 ff 89 ee e8 69 f1 4a 00 85 ed 74 4a 48 83 c3 [ 240.022684][ C1] RSP: 0018:ffffc90003c173c0 EFLAGS: 00000a06 [ 240.028769][ C1] RAX: 0000000000000000 RBX: ffffc90003c173e8 RCX: ffff888028139e00 [ 240.036752][ C1] RDX: 0000000000000000 RSI: 0000000080000000 RDI: ffffc90003c173e8 [ 240.044739][ C1] RBP: ffffc90003c17470 R08: ffff888028139e00 R09: 0000000000000003 [ 240.052729][ C1] R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff81b8d2b0 [ 240.060716][ C1] R13: 1ffff92000782ea8 R14: dffffc0000000000 R15: ffffc90003c173e8 [ 240.068706][ C1] ? release_pages+0x1fa0/0x2220 [ 240.073678][ C1] ? stack_trace_save+0xe0/0xe0 [ 240.078551][ C1] arch_stack_walk+0x11d/0x190 [ 240.083340][ C1] ? __folio_batch_release+0x71/0xe0 [ 240.088646][ C1] stack_trace_save+0x9c/0xe0 [ 240.093346][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 240.098490][ C1] save_stack+0xf7/0x1f0 [ 240.102758][ C1] ? __reset_page_owner+0x190/0x190 [ 240.107981][ C1] ? free_unref_page_prepare+0x7ce/0x8e0 [ 240.113635][ C1] ? free_unref_page_list+0xbe/0x860 [ 240.118944][ C1] ? release_pages+0x1fa0/0x2220 [ 240.123905][ C1] ? page_ext_get+0x22/0x2b0 [ 240.128515][ C1] ? page_ext_get+0x1e2/0x2b0 [ 240.133211][ C1] __reset_page_owner+0x4e/0x190 [ 240.138172][ C1] ? rcu_is_watching+0x15/0xb0 [ 240.142964][ C1] free_unref_page_prepare+0x7ce/0x8e0 [ 240.148464][ C1] free_unref_page_list+0xbe/0x860 [ 240.153609][ C1] ? __folio_memcg+0x63/0x160 [ 240.158309][ C1] ? folio_memcg+0x127/0x480 [ 240.162925][ C1] release_pages+0x1fa0/0x2220 [ 240.167717][ C1] ? lru_cache_disable+0x30/0x30 [ 240.172672][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 240.177901][ C1] __folio_batch_release+0x71/0xe0 [ 240.183033][ C1] shmem_undo_range+0x5d0/0x1a40 [ 240.187998][ C1] ? __lock_acquire+0x1334/0x7c80 [ 240.193053][ C1] ? shmem_truncate_range+0xa0/0xa0 [ 240.198296][ C1] ? inode_wait_for_writeback+0x1b4/0x200 [ 240.204037][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 240.209085][ C1] ? do_raw_spin_lock+0x121/0x2c0 [ 240.214152][ C1] shmem_evict_inode+0x273/0xa70 [ 240.219209][ C1] ? inode_wait_for_writeback+0x1b4/0x200 [ 240.224951][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 240.230521][ C1] ? sb_clear_inode_writeback+0x360/0x360 [ 240.236257][ C1] ? do_raw_spin_lock+0x121/0x2c0 [ 240.241303][ C1] ? bit_waitqueue+0x30/0x30 [ 240.245912][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 240.251131][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 240.256702][ C1] evict+0x486/0x870 [ 240.260618][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 240.265668][ C1] ? proc_nr_inodes+0x230/0x230 [ 240.270540][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 240.275770][ C1] ? _raw_spin_unlock+0x28/0x40 [ 240.280635][ C1] ? iput+0x70a/0x920 [ 240.284643][ C1] do_unlinkat+0x37b/0x570 [ 240.289081][ C1] ? fsnotify_link_count+0xf0/0xf0 [ 240.294223][ C1] ? getname_flags+0x20a/0x500 [ 240.299018][ C1] __x64_sys_unlink+0x49/0x50 [ 240.303713][ C1] do_syscall_64+0x55/0xb0 [ 240.308158][ C1] ? clear_bhb_loop+0x40/0x90 [ 240.312849][ C1] ? clear_bhb_loop+0x40/0x90 [ 240.317549][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.323457][ C1] RIP: 0033:0x7fa71378ec77 [ 240.327895][ C1] RSP: 002b:00007ffd4476c688 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 240.336327][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa71378ec77 [ 240.344324][ C1] RDX: 00007ffd4476c6b0 RSI: 00007ffd4476c740 RDI: 00007ffd4476c740 [ 240.352312][ C1] RBP: 00007ffd4476c740 R08: 0000000000000000 R09: 0000000000000000 [ 240.360298][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd4476d7d0 [ 240.368282][ C1] R13: 00007fa713811d7d R14: 0000000000020e2c R15: 00007ffd4476d810 [ 240.376287][ C1] [ 240.379329][ C1] rcu: rcu_preempt kthread starved for 10276 jiffies! g14465 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 240.390546][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 240.400609][ C1] rcu: RCU grace-period kthread stack dump: [ 240.406509][ C1] task:rcu_preempt state:R running task stack:26728 pid:17 ppid:2 flags:0x00004000 [ 240.417304][ C1] Call Trace: [ 240.420598][ C1] [ 240.423548][ C1] __schedule+0x14d2/0x44d0 [ 240.428098][ C1] ? asan.module_dtor+0x20/0x20 [ 240.432976][ C1] ? enqueue_timer+0x225/0x530 [ 240.437761][ C1] ? __mod_timer+0x984/0xdb0 [ 240.442387][ C1] schedule+0xbd/0x170 [ 240.446482][ C1] schedule_timeout+0x160/0x280 [ 240.451347][ C1] ? console_conditional_schedule+0x40/0x40 [ 240.457262][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 240.463180][ C1] ? update_process_times+0x1b0/0x1b0 [ 240.468588][ C1] ? prepare_to_swait_event+0x339/0x360 [ 240.474157][ C1] rcu_gp_fqs_loop+0x302/0x1560 [ 240.479039][ C1] ? rcu_gp_init+0x110e/0x1510 [ 240.483837][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 240.490022][ C1] ? rcu_gp_init+0x1510/0x1510 [ 240.494807][ C1] ? rcu_gp_cleanup+0xb4c/0xca0 [ 240.499690][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 240.504905][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 240.510125][ C1] rcu_gp_kthread+0x99/0x380 [ 240.514746][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 240.519885][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 240.524850][ C1] ? __kthread_parkme+0x162/0x1c0 [ 240.529907][ C1] kthread+0x2fa/0x390 [ 240.533992][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 240.539131][ C1] ? kthread_blkcg+0xd0/0xd0 [ 240.543740][ C1] ret_from_fork+0x48/0x80 [ 240.548173][ C1] ? kthread_blkcg+0xd0/0xd0 [ 240.552776][ C1] ret_from_fork_asm+0x11/0x20 [ 240.557579][ C1] [ 240.560622][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 240.566975][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 240.574009][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 240.584073][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 240.589824][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d c3 64 39 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 240.609445][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2 [ 240.615535][ C1] RAX: 9414d51cc6119c00 RBX: ffffffff816187ab RCX: 9414d51cc6119c00 [ 240.623530][ C1] RDX: 0000000000000001 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6b00 [ 240.631516][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 240.639503][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: ffffffff8e4a8d68 [ 240.647489][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100364e780 [ 240.655478][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 240.664423][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.671023][ C1] CR2: 00007f94bb096c3e CR3: 000000007fade000 CR4: 00000000003506e0 [ 240.679011][ C1] Call Trace: [ 240.682305][ C1] [ 240.685253][ C1] default_idle+0x13/0x20 [ 240.689602][ C1] default_idle_call+0x6c/0xa0 [ 240.694390][ C1] do_idle+0x1eb/0x510 [ 240.698489][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 240.703711][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 240.708931][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 240.714597][ C1] cpu_startup_entry+0x43/0x60 [ 240.719387][ C1] start_secondary+0xee/0xf0 [ 240.724003][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 240.730111][ C1]