last executing test programs: 21m48.879765433s ago: executing program 3 (id=4): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_RMID(r0, 0x0) 21m47.336634691s ago: executing program 3 (id=9): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r3, 0xe0d, 0x4, 0x7, 0x2, 0x8001}, 0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r3, 0x2}, 0x8) 21m47.137190114s ago: executing program 3 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x30, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}]}, 0x41}}, 0x2) 21m45.686108171s ago: executing program 3 (id=11): r0 = socket(0x2a, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) unshare(0x8000600) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x281, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) sendmsg$nl_netfilter(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c, 0x2, 0x2, 0x101, 0x70bd29, 0x25dfdbfd, {0x1, 0x0, 0xa}, [@typed={0x8, 0x4b, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) connect$llc(r6, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) dup3(r6, r7, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 21m44.211541949s ago: executing program 3 (id=14): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902120001"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_FUNCS(r1, 0x705, &(0x7f0000000040)=0x2) 21m39.947126785s ago: executing program 3 (id=21): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r2) 21m24.375712602s ago: executing program 32 (id=21): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r2) 21m8.264205365s ago: executing program 2 (id=75): socket$inet(0x2, 0x1, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x20000) ioctl$EVIOCGLED(r5, 0x80404519, 0x0) 21m4.57633969s ago: executing program 2 (id=82): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) unshare(0x22020600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xd, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0xffffffff, 0x8, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x7b, 0x0, 0x0, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0x8000, 0x1, 0x6, 0x9, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x0, 0x48c93690, 0x42, 0x400002], [0x6, 0x6, 0x80000001, 0x5, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x1000, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1ef, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x6, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x56, 0x1003, 0x1101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0xffffffff, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0x1ff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 21m3.170988994s ago: executing program 2 (id=85): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000880) io_setup(0x9, &(0x7f0000000140)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x4002) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)="ea9cd332d77c17f134f19fb7627bb029ccca57cb320fe1ec28ff3d14371e2e2d4ea73f4139e4d79e1fce7dc482889899c1d6bcc147255b8beb64e29c469c", 0x3e, 0x7, 0x0, 0x2}]) 20m59.463275973s ago: executing program 2 (id=90): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000380)={0x0, 0x9, 0xd1c}) 20m57.087010667s ago: executing program 2 (id=97): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) unshare(0x22020600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xd, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0xffffffff, 0x8, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x7b, 0x0, 0x0, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0x8000, 0x1, 0x6, 0x9, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x0, 0x48c93690, 0x42, 0x400002], [0x6, 0x6, 0x80000001, 0x5, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x1000, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1ef, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x6, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x56, 0x1003, 0x1101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0xffffffff, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0x1ff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 20m55.819362212s ago: executing program 2 (id=99): socket$inet_mptcp(0x2, 0x1, 0x106) syz_80211_inject_frame(0x0, 0x0, 0xb5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) write$cgroup_devices(r0, 0x0, 0xffdd) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, &(0x7f0000000040)=0x29) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_netdev_private(r3, 0x8924, &(0x7f0000000000)) 20m38.541173105s ago: executing program 33 (id=99): socket$inet_mptcp(0x2, 0x1, 0x106) syz_80211_inject_frame(0x0, 0x0, 0xb5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) write$cgroup_devices(r0, 0x0, 0xffdd) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, &(0x7f0000000040)=0x29) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_netdev_private(r3, 0x8924, &(0x7f0000000000)) 20m29.125344919s ago: executing program 1 (id=142): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$dri(0x0, 0x8, 0x200000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) mkdir(0x0, 0x12) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x803, 0x0) 20m28.199891493s ago: executing program 1 (id=145): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) r1 = getpid() syz_pidfd_open(r1, 0x0) syz_usb_connect(0x6, 0x75, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x9, 0x2, 0xf4, 0xff, 0x93}, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r2, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008"], 0x6c}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0xffff, 0x100}}) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x18, 0x7, 0x73, 0x0}) syz_emit_ethernet(0x1a4, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0) 20m23.199810674s ago: executing program 1 (id=151): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000880) io_setup(0x9, &(0x7f0000000140)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x4002) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)="ea9cd332d77c17f134f19fb7627bb029ccca57cb320fe1ec28ff3d14371e2e2d4ea73f4139e4d79e1fce7dc482889899c1d6bcc147255b8beb64e29c469c", 0x3e, 0x7, 0x0, 0x2}]) 20m16.717742627s ago: executing program 1 (id=160): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x800046f3, 0x4, 0x40, 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x2, 0x0) r2 = fanotify_init(0x10, 0x101000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x455, 0x40000008, r3, 0x0) fanotify_mark(r2, 0x7e, 0x8000008, r3, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x20000) 20m10.922777531s ago: executing program 1 (id=168): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000001140)="5986", 0x2) recvfrom$l2tp(r0, 0x0, 0x0, 0x10100, 0x0, 0x0) 20m10.399417436s ago: executing program 1 (id=170): close(0x4) unshare(0x6a040000) socket(0x2, 0x3, 0xff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 19m55.1429893s ago: executing program 34 (id=170): close(0x4) unshare(0x6a040000) socket(0x2, 0x3, 0xff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 5m22.776118741s ago: executing program 6 (id=2223): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) 5m21.228624917s ago: executing program 6 (id=2227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000002060102000000000000000001000000050004000000000009000200"], 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000240)={{@host, 0xfffffff8}, 0x1, 0x2, 0x7}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb9", 0x8) recvmmsg$unix(r3, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) 5m21.033464847s ago: executing program 6 (id=2231): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f000000a000)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2000, 0x0) 5m20.622386822s ago: executing program 6 (id=2234): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe59, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0100000006000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32], 0x50) 5m20.30745525s ago: executing program 6 (id=2237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) 5m13.59533175s ago: executing program 6 (id=2258): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7bd}}, './file0\x00'}) ptrace(0x10, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r5, 0x0, 0x201f00) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) 4m58.458155711s ago: executing program 35 (id=2258): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7bd}}, './file0\x00'}) ptrace(0x10, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r5, 0x0, 0x201f00) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) 14.410280461s ago: executing program 5 (id=3403): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 11.915285302s ago: executing program 5 (id=3412): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x100, 0x100006, 0x3e5}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 11.473252016s ago: executing program 5 (id=3419): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) get_robust_list(0x0, 0x0, &(0x7f0000000580)) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) fcntl$addseals(r3, 0x409, 0xb) r5 = socket(0x1, 0x803, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442300003b0007010100000000000000017c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="48e8e1b4e5a6221900000010000104000000000400000000000000aba4e12878068ec962d4a9c16f1de1ad41a6eb67e13693eabb9ebc0d29078aee5d93b97177309d4e931755be3a090000001a6c85fdb56d655329fb32b9f0d9ec059ef7193bef17668dc510726db6255aa9c08cf7050f52ad4df2af0fad85284d6d3af14e54acf8119af5365789a45c61441c23f0a507d2b6482a87117600cfd26acd678292e0552bf08560f2c40b4709c1f08b193cf2894d657e735e877942bd", @ANYRES32=r10, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r10, @ANYBLOB="0000000043030000"], 0x48}}, 0x0) 9.475636313s ago: executing program 0 (id=3430): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004ac79e3d41ec3b9a26b4eba427a199b9982ac9cb65807401db7b23bff646aa418fc81759e301eb990c7001e4c467458ebf50edbf05788f556309e973727aec74329bb03a410e781f51f01021d95b7509994021e336ca3268b41eddf73fa8aafccd", @ANYRES32=0x0, @ANYRES8=r5, @ANYRES32, @ANYRES64=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) socket$unix(0x1, 0x5, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 9.279579078s ago: executing program 5 (id=3433): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) 8.808824886s ago: executing program 5 (id=3440): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 8.441772728s ago: executing program 5 (id=3444): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x0, 0x1, 0x0, 0x2, {0xa, 0x4e21, 0x4, @mcast2, 0x2}}}, 0x32) syz_genetlink_get_family_id$nl80211(0x0, r5) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r6, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x80000) close_range(r1, 0xffffffffffffffff, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x4000800) 7.827978813s ago: executing program 7 (id=3447): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x1, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 7.524003522s ago: executing program 9 (id=3450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x100, 0x100006, 0x3e5}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 5.351094672s ago: executing program 9 (id=3453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}]}, 0xac}}, 0x0) 5.009099241s ago: executing program 4 (id=3454): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004004}, 0x8010) unshare(0x22020600) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xd1, 0x4, 0x1, 0x3, 0x5, 0x100, 0x4, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x8, 0x100000, 0x762, 0x7, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x3, 0xbed4, 0x8, 0x8000100, 0x3, 0xa, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0x11, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0xd6f, 0x4007, 0x8c, 0x5, 0x2af, 0xf7, 0x5, 0x8, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x100, 0x4, 0x100002, 0x8, 0x2000752, 0xfffffffd, 0x3, 0x0, 0x10001, 0x4e7b3717, 0xf7ffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x5b, 0x80081, 0x33b, 0x5, 0x20006, 0x5, 0x2, 0x6, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0xa, 0x9, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 4.687260372s ago: executing program 9 (id=3456): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x2, 0x6) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 4.435481951s ago: executing program 8 (id=3457): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) getitimer(0x2, &(0x7f0000000200)) 4.431599813s ago: executing program 4 (id=3458): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00'}, 0x10) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 4.202819026s ago: executing program 7 (id=3459): syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000340)=0xfffffffc, 0x0, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x4, 0x34a, &(0x7f0000000900)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) 4.20180048s ago: executing program 9 (id=3460): socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, 0x0, &(0x7f0000000040)=""/73}, 0x20) 4.162634796s ago: executing program 8 (id=3461): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x4000010, &(0x7f0000000800)={0xa, 0x4e23, 0xffffbffc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 4.099714439s ago: executing program 0 (id=3462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x70bd27, 0x4, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 4.01157126s ago: executing program 4 (id=3463): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0, 0x0, 0x8040}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x0) 3.946138233s ago: executing program 9 (id=3464): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0x201, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000014) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r6, &(0x7f00000145c0)={0x2020}, 0x2020) 3.920869599s ago: executing program 8 (id=3465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000804}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000180), 0x80) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='xprtrdma_post_linv_err\x00', 0xffffffffffffffff, 0x0, 0x7fffffff}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000a000000000000000100000d000000000100000003000000020000000000000e0300000000000000000000000000000500000000005f612e302e30"], 0x0, 0x52}, 0x28) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@chandef_params, @NL80211_ATTR_DURATION={0x8}]}, 0x24}}, 0x0) 3.916053224s ago: executing program 7 (id=3466): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0x8}], 0x1}, 0x4840) 3.719470007s ago: executing program 0 (id=3467): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) 3.557458798s ago: executing program 4 (id=3468): syz_pidfd_open(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) setpriority(0x2, 0xff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff70) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x20000000000000f8, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) 1.601727319s ago: executing program 8 (id=3469): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setattr(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup2(r0, r1) bind$l2tp6(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r4, &(0x7f0000001280), 0x6) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x45]}}]}) statfs(&(0x7f0000000000)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) rt_sigaction(0x19, &(0x7f0000000400)={&(0x7f0000000000)="676466f087bc76ded361b62e26c07fff00c4a3a1cea37b07f38af90000d3a41039000000f344aa643e3ef08504dc8319b4fe00c4011d1da1956ce08f080895dd638f4818ee16e6c442e13ae4470f69a342cb0000", 0x9c000002, 0x0}, 0x0, 0x8, &(0x7f0000000440)) prlimit64(0x0, 0xa, 0x0, &(0x7f0000000180)) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="040600000000041b00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.552804302s ago: executing program 7 (id=3470): r0 = io_uring_setup(0x4326, &(0x7f0000000440)={0x0, 0x18e4, 0x10, 0x3, 0x340}) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 1.461541062s ago: executing program 0 (id=3471): write$proc_mixer(0xffffffffffffffff, 0x0, 0xe4) socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0x222ac00}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x800) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) close(r2) 1.351552911s ago: executing program 9 (id=3472): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(0x0, 0x60142, 0xea) 1.295603136s ago: executing program 4 (id=3473): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xb}, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000006, 0x9132, 0xffffffffffffffff, 0x9aa9b000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000072000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68) read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020) 1.19480246s ago: executing program 8 (id=3474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r5, 0x2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) 1.194356334s ago: executing program 7 (id=3475): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_io_uring_setup(0x5add, &(0x7f0000000040)={0x0, 0xc19d, 0x1, 0x5, 0x61}, &(0x7f00000000c0), &(0x7f0000000280)) r4 = dup2(r0, r1) bind$l2tp6(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000140)=[0xffffffffffffffff], 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000140)=""/4, 0x4}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) prlimit64(r5, 0xa, &(0x7f0000000000)={0xffffffff, 0x7fffffff}, &(0x7f0000000180)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000007c0)="c1188e99b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.160911835s ago: executing program 0 (id=3476): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pread64(r0, 0x0, 0x0, 0x2) 63.615289ms ago: executing program 8 (id=3477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r4, 0x26, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="020400020a0000000000000000000000020001000000000000100500000000a0030006000000000002000000ac766fb03600000000000000030007000000000002"], 0x50}, 0x1, 0x7}, 0x0) 58.739905ms ago: executing program 4 (id=3478): socket(0x1e, 0x4, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0xffffffffffffff96, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) 17.956561ms ago: executing program 0 (id=3479): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) socket$xdp(0x2c, 0x3, 0x0) 0s ago: executing program 7 (id=3480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) kernel console output (not intermixed with test programs): 5.306959][T14554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1155.327662][T14554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1155.422396][T14554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1156.007350][T14554] hsr_slave_0: entered promiscuous mode [ 1156.618085][T14554] hsr_slave_1: entered promiscuous mode [ 1156.643125][T14554] debugfs: 'hsr0' already exists in 'hsr' [ 1156.648870][T14554] Cannot create hsr debugfs directory [ 1157.859595][T14554] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1157.926718][T14554] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1158.027711][T14554] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1158.100375][T14554] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1158.358660][T14775] fuse: Unknown parameter 'group_i00000000000000000000' [ 1158.485483][T14777] overlayfs: failed to clone upperpath [ 1158.748674][T14554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1158.838015][T14554] 8021q: adding VLAN 0 to HW filter on device team0 [ 1158.896975][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.904195][ T6808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.967653][ T6808] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.974836][ T6808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1159.378437][T14796] overlayfs: failed to clone upperpath [ 1161.238017][T14554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1161.598851][T14816] fuse: Unknown parameter 'group_i00000000000000000000' [ 1163.183070][T14830] overlayfs: failed to clone upperpath [ 1163.727443][T14554] veth0_vlan: entered promiscuous mode [ 1163.799880][T14554] veth1_vlan: entered promiscuous mode [ 1163.919462][T14554] veth0_macvtap: entered promiscuous mode [ 1163.960450][T14554] veth1_macvtap: entered promiscuous mode [ 1164.033616][T14554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1164.096736][T14554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1164.188683][T12454] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.268436][T12454] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.382551][T12454] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.391346][T12454] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.751995][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.823499][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.975834][ T6808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1165.031289][ T6808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.194397][T14864] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2392'. [ 1166.440818][T14867] overlayfs: failed to clone upperpath [ 1166.869387][T14873] overlayfs: failed to clone upperpath [ 1167.885795][T13234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1167.901470][T13234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1167.910208][T13234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1167.919706][T13234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1167.927436][T13234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1168.159121][T12458] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.896541][T12458] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.114068][T12458] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.625472][T12458] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.032665][T10243] Bluetooth: hci0: command tx timeout [ 1170.544688][T14903] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2403'. [ 1170.931226][T12458] batadv1: left allmulticast mode [ 1170.962455][T12458] batadv1: left promiscuous mode [ 1170.967637][T12458] bridge0: port 4(batadv1) entered disabled state [ 1171.196894][T12458] gretap0: left allmulticast mode [ 1171.537714][T12458] gretap0: left promiscuous mode [ 1172.112524][T10243] Bluetooth: hci0: command tx timeout [ 1172.314245][T12458] bridge0: port 3(gretap0) entered disabled state [ 1172.423957][T12458] bridge_slave_1: left allmulticast mode [ 1172.449155][T12458] bridge_slave_1: left promiscuous mode [ 1172.474536][T14922] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2406'. [ 1172.488634][T12458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.538932][ T30] audit: type=1326 audit(1755213798.676:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14923 comm="syz.5.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c958ebe9 code=0x7ffc0000 [ 1172.598842][T12458] bridge_slave_0: left allmulticast mode [ 1172.604063][ T30] audit: type=1326 audit(1755213798.676:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14923 comm="syz.5.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c958ebe9 code=0x7ffc0000 [ 1172.632382][T12458] bridge_slave_0: left promiscuous mode [ 1172.662838][T12458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.668610][ T30] audit: type=1326 audit(1755213798.676:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14923 comm="syz.5.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38c958ebe9 code=0x7ffc0000 [ 1172.792666][ T30] audit: type=1326 audit(1755213798.766:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14923 comm="syz.5.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c958ebe9 code=0x7ffc0000 [ 1172.968978][ T30] audit: type=1326 audit(1755213798.786:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14923 comm="syz.5.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f38c9585ba7 code=0x7ffc0000 [ 1172.993788][ T30] audit: type=1326 audit(1755213798.786:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14923 comm="syz.5.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f38c952add9 code=0x7ffc0000 [ 1173.016133][ T30] audit: type=1326 audit(1755213798.786:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14923 comm="syz.5.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f38c9585ba7 code=0x7ffc0000 [ 1173.092236][ T30] audit: type=1326 audit(1755213798.786:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14923 comm="syz.5.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f38c952add9 code=0x7ffc0000 [ 1173.202265][ T30] audit: type=1326 audit(1755213798.786:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14923 comm="syz.5.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f38c9585ba7 code=0x7ffc0000 [ 1173.260126][ T30] audit: type=1326 audit(1755213798.786:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14923 comm="syz.5.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f38c952add9 code=0x7ffc0000 [ 1174.192991][T10243] Bluetooth: hci0: command tx timeout [ 1174.365008][T12458] dvmrp17 (unregistering): left allmulticast mode [ 1174.573553][T12458] team0: Port device bridge1 removed [ 1174.650988][T12458] team0: Port device bridge2 removed [ 1174.954393][T12458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1174.984783][T12458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1175.013365][T12458] bond0 (unregistering): Released all slaves [ 1175.682122][T14936] tipc: Enabling of bearer rejected, failed to enable media [ 1175.775262][T14885] chnl_net:caif_netlink_parms(): no params data found [ 1176.066501][T14961] overlayfs: failed to clone upperpath [ 1176.272448][T10243] Bluetooth: hci0: command tx timeout [ 1178.000791][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1178.000815][ T30] audit: type=1326 audit(1755213804.136:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.9.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1178.050003][ T30] audit: type=1326 audit(1755213804.136:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.9.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1178.172433][ T30] audit: type=1326 audit(1755213804.176:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.9.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1178.272258][ T30] audit: type=1326 audit(1755213804.176:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.9.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1178.372379][ T30] audit: type=1326 audit(1755213804.176:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.9.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1178.601688][T14885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.609120][T14885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.617704][T14885] bridge_slave_0: entered allmulticast mode [ 1178.629843][T14885] bridge_slave_0: entered promiscuous mode [ 1178.639679][T14885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.682415][T14885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.684711][ T30] audit: type=1326 audit(1755213804.216:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.9.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1178.689700][T14885] bridge_slave_1: entered allmulticast mode [ 1178.822876][ T30] audit: type=1326 audit(1755213804.216:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.9.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1179.202296][ T30] audit: type=1326 audit(1755213804.216:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.9.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31f4b85ba7 code=0x7ffc0000 [ 1179.233562][ T30] audit: type=1326 audit(1755213804.216:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.9.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31f4b2add9 code=0x7ffc0000 [ 1179.286143][T14885] bridge_slave_1: entered promiscuous mode [ 1179.302770][ T30] audit: type=1326 audit(1755213804.216:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.9.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1179.738996][T12458] hsr_slave_0: left promiscuous mode [ 1179.792541][T12458] hsr_slave_1: left promiscuous mode [ 1179.879082][T12458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1179.922206][T12458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1179.953699][T12458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1179.961094][T12458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1180.105851][T12458] veth1_macvtap: left promiscuous mode [ 1180.111471][T12458] veth0_macvtap: left promiscuous mode [ 1180.149300][T12458] veth1_vlan: left promiscuous mode [ 1180.162499][T12458] veth0_vlan: left promiscuous mode [ 1180.505483][T14999] overlayfs: failed to clone upperpath [ 1184.127188][T15024] overlayfs: failed to clone upperpath [ 1185.548650][T12458] team0 (unregistering): Port device team_slave_1 removed [ 1186.034028][T12458] team0 (unregistering): Port device team_slave_0 removed [ 1186.929441][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1186.935910][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.759623][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1187.759650][ T30] audit: type=1326 audit(1755213813.896:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.9.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1187.842530][ T30] audit: type=1326 audit(1755213813.946:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.9.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1187.892280][ T30] audit: type=1326 audit(1755213813.946:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.9.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1187.948615][ T30] audit: type=1326 audit(1755213813.946:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.9.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1188.035974][T15047] misc userio: No port type given on /dev/userio [ 1188.075358][T14885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1188.085701][ T30] audit: type=1326 audit(1755213813.946:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.9.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1188.124973][T14997] tipc: Started in network mode [ 1188.129917][T14997] tipc: Node identity ac14140f, cluster identity 4711 [ 1188.163205][T14997] tipc: New replicast peer: 255.255.255.255 [ 1188.163595][ T30] audit: type=1326 audit(1755213813.946:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.9.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1188.204787][T14997] tipc: Enabled bearer , priority 10 [ 1188.246313][T14885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1188.260365][ T30] audit: type=1326 audit(1755213813.946:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.9.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1188.342529][ T30] audit: type=1326 audit(1755213813.946:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.9.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1188.456006][ T30] audit: type=1326 audit(1755213813.946:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.9.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1188.479106][ T30] audit: type=1326 audit(1755213813.946:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz.9.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1188.719014][T14885] team0: Port device team_slave_0 added [ 1188.793593][T15056] loop9: detected capacity change from 0 to 512 [ 1188.810940][T14885] team0: Port device team_slave_1 added [ 1189.125488][T15056] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.2447: iget: bad extended attribute block 1 [ 1189.320056][ T5963] tipc: Node number set to 2886997007 [ 1189.955888][T15056] EXT4-fs error (device loop9): ext4_orphan_get:1395: comm syz.9.2447: couldn't read orphan inode 15 (err -117) [ 1190.215264][T15056] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1190.370532][T15056] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 1190.491281][T14885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1190.544668][T14885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1190.689620][T14885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1191.040278][T14885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1191.291394][T14885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.321756][T14885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1192.674198][T15082] overlayfs: failed to clone upperpath [ 1192.813965][T14885] hsr_slave_0: entered promiscuous mode [ 1192.877059][T14885] hsr_slave_1: entered promiscuous mode [ 1192.918254][T14885] debugfs: 'hsr0' already exists in 'hsr' [ 1192.924837][T14885] Cannot create hsr debugfs directory [ 1193.653741][ T30] audit: type=1326 audit(1755213819.776:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.8.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1193.788979][ T30] audit: type=1326 audit(1755213819.776:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.8.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1193.876251][ T30] audit: type=1326 audit(1755213819.826:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.8.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1193.959716][ T30] audit: type=1326 audit(1755213819.826:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.8.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1194.082939][ T30] audit: type=1326 audit(1755213819.826:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.8.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1194.231347][ T30] audit: type=1326 audit(1755213819.826:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.8.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1194.371927][ T30] audit: type=1326 audit(1755213819.826:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.8.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1194.588747][ T30] audit: type=1326 audit(1755213819.826:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.8.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1194.696236][T15104] overlayfs: failed to clone upperpath [ 1194.776156][ T30] audit: type=1326 audit(1755213819.826:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.8.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1195.821470][ T30] audit: type=1326 audit(1755213819.826:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.8.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1195.932144][T14885] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1195.951269][T15110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2465'. [ 1196.205980][T14885] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1196.400944][T14885] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1196.492808][T14885] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1196.857395][T14554] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1197.413101][T14885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1198.099971][T14885] 8021q: adding VLAN 0 to HW filter on device team0 [ 1198.309273][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.316462][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1198.424694][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.431845][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1198.950421][T14885] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1198.960848][T14885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1199.986483][T15165] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2480'. [ 1200.276177][T15174] tipc: Enabling of bearer rejected, failed to enable media [ 1200.798849][T14885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1203.524021][T15218] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2497'. [ 1203.853212][T14885] veth0_vlan: entered promiscuous mode [ 1203.927257][T14885] veth1_vlan: entered promiscuous mode [ 1204.082777][T14885] veth0_macvtap: entered promiscuous mode [ 1204.118514][T14885] veth1_macvtap: entered promiscuous mode [ 1204.235607][T14885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1204.333181][T14885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1206.547189][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.722308][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.799545][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.844744][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.951788][T12458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.872433][T12458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.359750][T11634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.412234][T11634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.935250][T15294] fuse: Unknown parameter 'group_i00000000000000000000' [ 1210.225425][T15303] No control pipe specified [ 1210.615186][T15314] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2522'. [ 1210.658852][T15314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2522'. [ 1210.679860][T15314] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2522'. [ 1210.731988][T15314] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2522'. [ 1210.765925][T15322] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2513'. [ 1211.461161][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1211.461187][ T30] audit: type=1326 audit(1755213837.596:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15291 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c958ebe9 code=0x7ffc0000 [ 1211.685574][ T30] audit: type=1326 audit(1755213837.646:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15291 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f38c958ebe9 code=0x7ffc0000 [ 1211.782643][ T30] audit: type=1326 audit(1755213837.646:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15291 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c958ebe9 code=0x7ffc0000 [ 1211.897464][ T30] audit: type=1326 audit(1755213837.656:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15291 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c958ebe9 code=0x7ffc0000 [ 1212.022466][ T30] audit: type=1326 audit(1755213837.656:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15291 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f38c958ebe9 code=0x7ffc0000 [ 1212.109499][ T30] audit: type=1326 audit(1755213837.656:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15291 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c958ebe9 code=0x7ffc0000 [ 1212.172776][ T30] audit: type=1326 audit(1755213837.656:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15291 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c958ebe9 code=0x7ffc0000 [ 1212.206246][T15341] fuse: Unknown parameter 'group_id00000000000000000000' [ 1212.267845][ T30] audit: type=1326 audit(1755213837.666:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15291 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f38c958ebe9 code=0x7ffc0000 [ 1212.399724][ T30] audit: type=1326 audit(1755213837.666:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15291 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c958ebe9 code=0x7ffc0000 [ 1212.522737][ T30] audit: type=1326 audit(1755213837.666:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15291 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c958ebe9 code=0x7ffc0000 [ 1213.069418][T15353] No control pipe specified [ 1215.071269][T15361] tipc: Enabling of bearer rejected, failed to enable media [ 1215.980872][T15380] fuse: Unknown parameter 'group_id00000000000000000000' [ 1216.993379][T15389] overlayfs: failed to clone upperpath [ 1219.917205][T15419] tipc: Enabling of bearer rejected, failed to enable media [ 1220.216665][T15422] fuse: Unknown parameter 'group_id00000000000000000000' [ 1221.700085][T15440] Bluetooth: MGMT ver 1.23 [ 1223.784428][T15469] fuse: Bad value for 'user_id' [ 1223.789347][T15469] fuse: Bad value for 'user_id' [ 1224.221991][T15475] tipc: Enabling of bearer rejected, failed to enable media [ 1227.878657][T15510] fuse: Bad value for 'user_id' [ 1227.982543][T15510] fuse: Bad value for 'user_id' [ 1242.458948][T15666] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2630'. [ 1246.358309][T15688] loop9: detected capacity change from 0 to 1024 [ 1246.853158][T15688] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1247.620096][T14554] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1247.983737][T13234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1248.001206][T13234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1248.021374][T13234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1248.043989][T13234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1248.053410][T13234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1248.382954][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.389382][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.743622][T15714] overlayfs: failed to clone upperpath [ 1249.953475][ T6524] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.192406][T13234] Bluetooth: hci2: command tx timeout [ 1250.717649][T15748] autofs: Unknown parameter '0x0000000000000000' [ 1252.277811][T13234] Bluetooth: hci2: command tx timeout [ 1252.294414][ T6524] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.253093][T15765] fuse: Bad value for 'fd' [ 1254.402981][T10243] Bluetooth: hci2: command tx timeout [ 1254.603763][T15756] tipc: Started in network mode [ 1254.630083][T15756] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1254.662479][T15756] tipc: Enabled bearer , priority 0 [ 1255.913583][ T2150] tipc: Node number set to 11578026 [ 1255.919324][T10243] Bluetooth: hci5: command 0x0406 tx timeout [ 1256.922373][T13234] Bluetooth: hci2: command tx timeout [ 1257.859873][ T6524] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.013561][T15797] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2667'. [ 1258.970950][T15804] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1258.980552][T15804] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1258.993019][T15804] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1259.021170][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1259.021196][ T30] audit: type=1800 audit(1755213885.106:380): pid=15804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2666" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1259.639231][ T6524] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.152631][T15817] fuse: Bad value for 'fd' [ 1261.013359][T15851] autofs: Unknown parameter '0x0000000000000000' [ 1261.316320][T15856] overlayfs: failed to clone upperpath [ 1262.390888][T15869] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2681'. [ 1262.415725][ T30] audit: type=1326 audit(1755213888.556:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15868 comm="syz.9.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1262.433646][T15703] chnl_net:caif_netlink_parms(): no params data found [ 1262.478893][ T6524] bridge_slave_1: left allmulticast mode [ 1262.479940][ T30] audit: type=1326 audit(1755213888.556:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15868 comm="syz.9.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1262.502108][ T6524] bridge_slave_1: left promiscuous mode [ 1262.507897][ T30] audit: type=1326 audit(1755213888.606:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15868 comm="syz.9.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1262.539863][ T30] audit: type=1326 audit(1755213888.606:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15868 comm="syz.9.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1262.552451][ T6524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.584169][ T30] audit: type=1326 audit(1755213888.606:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15868 comm="syz.9.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1262.607875][ T30] audit: type=1326 audit(1755213888.616:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15868 comm="syz.9.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1262.633896][ T6524] bridge_slave_0: left allmulticast mode [ 1262.639549][ T6524] bridge_slave_0: left promiscuous mode [ 1262.662857][ T6524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.680515][ T30] audit: type=1326 audit(1755213888.616:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15868 comm="syz.9.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1262.742856][ T30] audit: type=1326 audit(1755213888.616:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15868 comm="syz.9.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1262.801866][ T30] audit: type=1326 audit(1755213888.626:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15868 comm="syz.9.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1264.789313][ T6524] dvmrp17 (unregistering): left allmulticast mode [ 1265.238361][ T6524] team0: Port device bridge1 removed [ 1265.356199][ T6524] team0: Port device bridge2 removed [ 1266.061844][ T6524] team0: Port device bridge3 removed [ 1266.192611][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1266.192642][ T30] audit: type=1326 audit(1755213892.326:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15933 comm="syz.8.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1266.222582][ T30] audit: type=1326 audit(1755213892.326:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15933 comm="syz.8.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1266.280193][ T30] audit: type=1326 audit(1755213892.416:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15933 comm="syz.8.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1266.369710][ T30] audit: type=1326 audit(1755213892.416:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15933 comm="syz.8.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1266.412307][ T30] audit: type=1326 audit(1755213892.416:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15933 comm="syz.8.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1266.446543][ T30] audit: type=1326 audit(1755213892.416:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15933 comm="syz.8.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1266.471721][ T30] audit: type=1326 audit(1755213892.416:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15933 comm="syz.8.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1266.497780][ T30] audit: type=1326 audit(1755213892.416:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15933 comm="syz.8.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1266.520228][ T6524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1266.535537][ T30] audit: type=1326 audit(1755213892.416:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15933 comm="syz.8.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1266.538732][ T6524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1266.595497][ T6524] bond0 (unregistering): Released all slaves [ 1266.617383][ T30] audit: type=1326 audit(1755213892.416:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15933 comm="syz.8.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1266.660489][T15878] tipc: Enabling of bearer rejected, failed to enable media [ 1267.123193][ T6524] tipc: Disabling bearer [ 1267.163670][ T6524] tipc: Left network mode [ 1269.029894][T15990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2706'. [ 1270.441652][T15703] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.463690][T15703] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.512661][T15703] bridge_slave_0: entered allmulticast mode [ 1270.556876][T15703] bridge_slave_0: entered promiscuous mode [ 1270.587771][T16007] tipc: Enabling of bearer rejected, failed to enable media [ 1270.600339][T16012] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2716'. [ 1270.670897][T15703] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.693899][T15703] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.732129][T15703] bridge_slave_1: entered allmulticast mode [ 1270.753771][T15703] bridge_slave_1: entered promiscuous mode [ 1270.879858][T12548] IPVS: starting estimator thread 0... [ 1270.893608][T16016] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1271.002574][T16023] IPVS: using max 21 ests per chain, 50400 per kthread [ 1271.046687][T15703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1271.837503][T15703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1272.038080][T15703] team0: Port device team_slave_0 added [ 1272.144529][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1272.144554][ T30] audit: type=1326 audit(1755213898.286:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.8.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1272.317076][ T30] audit: type=1326 audit(1755213898.316:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.8.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1273.032313][ T30] audit: type=1326 audit(1755213898.316:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.8.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1273.056406][ T30] audit: type=1326 audit(1755213898.316:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.8.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1273.209822][ T30] audit: type=1326 audit(1755213898.316:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.8.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1273.319991][ T6524] hsr_slave_0: left promiscuous mode [ 1273.481854][ T6524] hsr_slave_1: left promiscuous mode [ 1273.488447][ T30] audit: type=1326 audit(1755213898.316:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.8.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1273.511048][ T6524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1273.511081][ T6524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1273.633800][ T6524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1274.254469][ T6524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1274.329218][ T30] audit: type=1326 audit(1755213898.316:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.8.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1274.490816][ T30] audit: type=1326 audit(1755213898.426:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.8.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1274.621805][ T30] audit: type=1326 audit(1755213898.426:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.8.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1274.668195][ T30] audit: type=1326 audit(1755213898.426:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.8.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1274.706486][ T6524] veth1_macvtap: left promiscuous mode [ 1274.712072][ T6524] veth0_macvtap: left promiscuous mode [ 1274.783112][ T6524] veth1_vlan: left promiscuous mode [ 1274.788509][ T6524] veth0_vlan: left promiscuous mode [ 1275.223111][T16088] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2734'. [ 1276.841795][ T6524] team0 (unregistering): Port device team_slave_1 removed [ 1276.909461][ T6524] team0 (unregistering): Port device team_slave_0 removed [ 1278.689058][T15703] team0: Port device team_slave_1 added [ 1278.720754][T16094] tipc: Enabling of bearer rejected, failed to enable media [ 1279.087626][T15703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1279.126854][T15703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1279.208805][T15703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1279.265982][T15703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1279.299368][T15703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1279.400488][T15703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1279.730466][T15703] hsr_slave_0: entered promiscuous mode [ 1280.389701][T15703] hsr_slave_1: entered promiscuous mode [ 1280.429635][T15703] debugfs: 'hsr0' already exists in 'hsr' [ 1280.436109][T15703] Cannot create hsr debugfs directory [ 1280.746595][T16146] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2757'. [ 1280.796433][T16144] tipc: Enabling of bearer rejected, failed to enable media [ 1282.285353][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1282.285377][ T30] audit: type=1326 audit(1755213908.426:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16162 comm="syz.8.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1282.448817][ T30] audit: type=1326 audit(1755213908.456:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16162 comm="syz.8.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1282.528678][ T30] audit: type=1326 audit(1755213908.456:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16162 comm="syz.8.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1282.601721][T16172] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2768'. [ 1283.842364][ T30] audit: type=1326 audit(1755213909.976:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16180 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6a78ebe9 code=0x7ffc0000 [ 1283.983089][ T30] audit: type=1326 audit(1755213909.976:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16180 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6a78ebe9 code=0x7ffc0000 [ 1284.005994][ T30] audit: type=1326 audit(1755213909.976:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16180 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad6a78ebe9 code=0x7ffc0000 [ 1284.029522][T16185] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2770'. [ 1284.058472][ T30] audit: type=1326 audit(1755213909.976:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16180 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6a78ebe9 code=0x7ffc0000 [ 1284.109253][ T30] audit: type=1326 audit(1755213909.976:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16180 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6a78ebe9 code=0x7ffc0000 [ 1284.177458][ T30] audit: type=1326 audit(1755213910.016:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16180 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad6a78ebe9 code=0x7ffc0000 [ 1284.235593][ T30] audit: type=1326 audit(1755213910.016:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16180 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6a78ebe9 code=0x7ffc0000 [ 1284.348240][T16185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1284.389261][T16185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1284.456445][T16185] bond0 (unregistering): Released all slaves [ 1284.680616][T16193] tipc: Enabling of bearer rejected, failed to enable media [ 1284.770804][T15703] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1284.810659][T15703] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1284.830443][T16206] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2780'. [ 1284.895388][T15703] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1285.024013][T15703] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1286.347135][T15703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1286.370503][T15703] 8021q: adding VLAN 0 to HW filter on device team0 [ 1286.461956][T11421] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.469199][T11421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1286.508342][T11421] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.515578][T11421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1286.533782][T16230] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2785'. [ 1287.617003][T15703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1290.403256][T16274] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1290.959934][T16276] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2801'. [ 1291.409890][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1291.409915][ T30] audit: type=1326 audit(1755213917.546:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.8.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1291.472408][T13234] Bluetooth: hci0: command 0x0406 tx timeout [ 1291.495244][ T30] audit: type=1326 audit(1755213917.546:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.8.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1291.518582][ T30] audit: type=1326 audit(1755213917.596:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.8.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1291.548107][ T30] audit: type=1326 audit(1755213917.596:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.8.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1291.575549][ T30] audit: type=1326 audit(1755213917.596:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.8.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1291.597974][ T30] audit: type=1326 audit(1755213917.636:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.8.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1291.620376][ T30] audit: type=1326 audit(1755213917.636:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.8.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1291.662304][ T30] audit: type=1326 audit(1755213917.636:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.8.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1291.792380][ T30] audit: type=1326 audit(1755213917.636:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.8.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1291.891913][ T30] audit: type=1326 audit(1755213917.636:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.8.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1292.091914][T15703] veth0_vlan: entered promiscuous mode [ 1292.164817][T15703] veth1_vlan: entered promiscuous mode [ 1292.279585][T15703] veth0_macvtap: entered promiscuous mode [ 1292.326411][T15703] veth1_macvtap: entered promiscuous mode [ 1292.445575][T16307] netlink: 'syz.4.2812': attribute type 10 has an invalid length. [ 1292.850972][T16307] team0: Device hsr_slave_0 failed to register rx_handler [ 1292.957846][T16310] veth0_to_team: entered promiscuous mode [ 1293.098519][T15703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1293.214553][T15703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1293.460258][ T6124] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.506696][ T6124] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.717098][ T6124] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.766734][ T6124] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.672986][T12744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1294.702514][T12744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.736214][T13160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.762377][T13160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1297.388876][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1297.388901][ T30] audit: type=1326 audit(1755213923.526:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.4.2830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ce18ebe9 code=0x7ffc0000 [ 1297.567418][ T30] audit: type=1326 audit(1755213923.576:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.4.2830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ce18ebe9 code=0x7ffc0000 [ 1297.678879][ T30] audit: type=1326 audit(1755213923.576:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.4.2830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42ce18ebe9 code=0x7ffc0000 [ 1298.708196][ T30] audit: type=1326 audit(1755213923.576:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.4.2830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ce18ebe9 code=0x7ffc0000 [ 1298.768930][ T30] audit: type=1326 audit(1755213923.576:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.4.2830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ce18ebe9 code=0x7ffc0000 [ 1298.993816][T16373] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2834'. [ 1299.054600][ T30] audit: type=1326 audit(1755213923.576:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.4.2830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f42ce18ebe9 code=0x7ffc0000 [ 1299.142805][T16375] vlan2: entered allmulticast mode [ 1299.167534][T16375] batadv0: entered allmulticast mode [ 1299.192335][ T30] audit: type=1326 audit(1755213923.576:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.4.2830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ce18ebe9 code=0x7ffc0000 [ 1299.288065][ T30] audit: type=1326 audit(1755213923.576:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.4.2830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ce18ebe9 code=0x7ffc0000 [ 1299.380186][T16379] fuse: Bad value for 'rootmode' [ 1299.404355][ T30] audit: type=1326 audit(1755213923.586:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.4.2830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42ce18ebe9 code=0x7ffc0000 [ 1299.566609][ T30] audit: type=1326 audit(1755213923.586:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.4.2830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ce18ebe9 code=0x7ffc0000 [ 1300.536780][T13234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1300.547940][T13234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1300.561191][T13234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1300.583014][T13234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1300.602870][T13234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1300.625018][T16395] overlayfs: failed to clone upperpath [ 1301.734550][T13160] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.337279][T16417] fuse: Bad value for 'rootmode' [ 1302.489324][T13160] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.678610][T13234] Bluetooth: hci1: command tx timeout [ 1302.699027][T13160] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.186361][T13160] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.438956][T16442] overlayfs: failed to clone upperpath [ 1303.669833][T16446] tipc: Enabling of bearer rejected, failed to enable media [ 1303.793344][T16394] chnl_net:caif_netlink_parms(): no params data found [ 1303.888830][T16448] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2861'. [ 1304.630648][T16463] fuse: Bad value for 'rootmode' [ 1304.752300][T13234] Bluetooth: hci1: command tx timeout [ 1306.832539][T13234] Bluetooth: hci1: command tx timeout [ 1307.145831][T13160] dvmrp17 (unregistering): left allmulticast mode [ 1307.430291][T16521] fuse: Unknown parameter 'use00000000000000000000' [ 1307.454716][T16520] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2876'. [ 1307.482337][T16520] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2876'. [ 1307.534066][T16520] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2876'. [ 1307.559518][T16526] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2878'. [ 1307.581042][T16520] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2876'. [ 1307.669013][T16530] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2881'. [ 1308.779080][T13160] bond0 (unregistering): Released all slaves [ 1308.975031][T13234] Bluetooth: hci1: command tx timeout [ 1309.524254][T16394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.596154][T16394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.677868][T16394] bridge_slave_0: entered allmulticast mode [ 1309.800440][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1309.807057][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.005648][T16394] bridge_slave_0: entered promiscuous mode [ 1310.023259][T16522] netlink: 'syz.4.2878': attribute type 29 has an invalid length. [ 1310.040014][T16540] vlan2: entered allmulticast mode [ 1310.184879][T16540] dummy0: entered allmulticast mode [ 1310.726804][T16394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.749596][T16394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.784060][T16394] bridge_slave_1: entered allmulticast mode [ 1310.822130][T16394] bridge_slave_1: entered promiscuous mode [ 1311.151710][T16588] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2896'. [ 1311.200619][T16589] overlayfs: failed to clone upperpath [ 1311.445722][T16394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.477249][T16597] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2898'. [ 1312.115221][T16590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.122880][T16590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.233409][T16590] tipc: Resetting bearer [ 1312.647157][T16590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1312.699586][T16590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1314.511213][T16656] overlayfs: upper fs does not support tmpfile. [ 1315.148316][T16394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1315.332294][ T36] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.989869][ T36] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.028109][ T36] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.109662][T16394] team0: Port device team_slave_0 added [ 1316.136909][ T36] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.612338][T13160] hsr_slave_0: left promiscuous mode [ 1316.632270][T13160] hsr_slave_1: left promiscuous mode [ 1316.778349][T13160] veth1_macvtap: left promiscuous mode [ 1317.503173][T16707] misc userio: No port type given on /dev/userio [ 1318.107451][T13160] veth0_macvtap: left promiscuous mode [ 1318.133810][T13160] veth1_vlan: left promiscuous mode [ 1318.253561][T13160] veth0_vlan: left promiscuous mode [ 1318.606797][T16721] netlink: 'syz.8.2932': attribute type 4 has an invalid length. [ 1320.812381][T16761] No control pipe specified [ 1321.627059][T16394] team0: Port device team_slave_1 added [ 1321.679318][T16744] tipc: Enabling of bearer rejected, failed to enable media [ 1322.097368][T16394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1322.122970][T16394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1322.181435][T16394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1322.214791][T16394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1322.221741][T16394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1322.298386][T16394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1322.330279][T16784] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1322.358638][T16784] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1323.306254][T16394] hsr_slave_0: entered promiscuous mode [ 1323.313100][T16394] hsr_slave_1: entered promiscuous mode [ 1323.354478][T16807] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2968'. [ 1323.558767][T16803] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2966'. [ 1323.863222][T16803] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1324.123274][T16816] netlink: 2 bytes leftover after parsing attributes in process `syz.9.2971'. [ 1325.036647][T16828] overlayfs: failed to clone upperpath [ 1325.060298][T16830] tipc: Enabling of bearer rejected, failed to enable media [ 1325.668419][T16394] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1325.756606][T16394] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1325.861994][T16394] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1325.971468][T16394] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1327.251315][T16394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1327.420284][T16394] 8021q: adding VLAN 0 to HW filter on device team0 [ 1327.511298][T13160] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.518485][T13160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1327.663765][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.670945][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1327.686071][T16868] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2989'. [ 1328.833285][T16880] autofs: Unknown parameter '0x0000000000000000' [ 1329.509339][T16394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1329.654044][T16889] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2995'. [ 1331.093909][T16910] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3003'. [ 1331.095040][T16394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1331.166944][T16912] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3002'. [ 1331.300810][T16394] veth0_vlan: entered promiscuous mode [ 1331.347936][T16394] veth1_vlan: entered promiscuous mode [ 1331.524953][T16394] veth0_macvtap: entered promiscuous mode [ 1331.588994][T16394] veth1_macvtap: entered promiscuous mode [ 1331.910351][T16925] autofs: Unknown parameter '0x0000000000000000' [ 1332.769386][T16394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1332.903811][T16394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1332.978717][ T6541] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.007623][ T6541] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.097381][ T6541] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.169344][ T6541] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.103295][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1334.111154][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1334.233346][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1334.253220][T16956] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3019'. [ 1334.287855][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1334.819441][T16967] autofs: Unknown parameter '0x0000000000000000' [ 1335.793241][T16972] overlayfs: upper fs does not support tmpfile. [ 1336.290532][T16980] tipc: Started in network mode [ 1336.327571][T16980] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1336.342962][T16980] tipc: Enabled bearer , priority 0 [ 1336.377268][T16985] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3030'. [ 1337.310576][T16994] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3035'. [ 1337.396285][T16997] netlink: 'syz.8.3034': attribute type 1 has an invalid length. [ 1337.412385][T16997] netlink: 16150 bytes leftover after parsing attributes in process `syz.8.3034'. [ 1337.464045][ T24] tipc: Node number set to 11578026 [ 1338.005151][T17011] autofs: Unknown parameter '0x0000000000000000' [ 1338.856061][T17016] overlayfs: failed to clone upperpath [ 1338.981291][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1338.981315][ T30] audit: type=1326 audit(1755214221.106:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17019 comm="syz.4.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ce18ebe9 code=0x7ffc0000 [ 1339.112258][ T30] audit: type=1326 audit(1755214221.116:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17019 comm="syz.4.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f42ce18ebe9 code=0x7ffc0000 [ 1339.116740][T17029] tipc: Enabling of bearer rejected, already enabled [ 1339.754664][ T30] audit: type=1326 audit(1755214221.116:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17019 comm="syz.4.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ce18ebe9 code=0x7ffc0000 [ 1339.809970][ T30] audit: type=1326 audit(1755214221.116:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17019 comm="syz.4.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ce18ebe9 code=0x7ffc0000 [ 1340.130047][T17038] loop5: detected capacity change from 0 to 1024 [ 1340.163407][T17038] EXT4-fs: Ignoring removed orlov option [ 1340.229574][T17038] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1340.530435][T17052] autofs: Unknown parameter '0x0000000000000000' [ 1341.284727][T17038] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1341.437638][T17061] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3059'. [ 1341.575273][T15703] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1341.666214][T17069] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3061'. [ 1343.636635][T17118] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3083'. [ 1347.068104][T17154] fuse: Unknown parameter '00000000000000000003' [ 1347.124204][T17157] tipc: Enabling of bearer rejected, failed to enable media [ 1347.181466][T17160] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3100'. [ 1347.222431][T17163] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3103'. [ 1347.485395][T17168] overlayfs: failed to clone upperpath [ 1347.593802][T17171] autofs: Unknown parameter 'fd0x0000000000000000' [ 1349.208398][T17197] fuse: Unknown parameter '00000000000000000003' [ 1349.498188][T17203] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.3117'. [ 1349.844434][T17208] autofs: Unknown parameter 'fd0x0000000000000000' [ 1350.594397][T17207] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3119'. [ 1351.562703][T17235] netlink: 2 bytes leftover after parsing attributes in process `syz.9.3133'. [ 1351.604153][T17240] tipc: Started in network mode [ 1351.630396][T17241] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3135'. [ 1351.640353][T17240] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1351.660699][T17240] tipc: Enabled bearer , priority 0 [ 1352.001694][T17245] autofs: Unknown parameter 'fd0x0000000000000000' [ 1352.772293][ T2150] tipc: Node number set to 11578026 [ 1355.619442][T17272] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3146'. [ 1356.579198][T17272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1356.596870][T17272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1356.610242][T17272] bond0 (unregistering): Released all slaves [ 1356.656812][T17278] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1356.770996][T17278] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1356.808655][T17278] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1356.842227][ T30] audit: type=1800 audit(1755215262.799:543): pid=17278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3149" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1356.957422][T17293] tipc: Enabling of bearer rejected, failed to enable media [ 1357.266342][T17300] loop5: detected capacity change from 0 to 1024 [ 1357.294792][T17300] EXT4-fs: Ignoring removed orlov option [ 1357.315270][T17300] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1357.596617][T17300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1357.802467][T15703] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1358.329072][T17320] netlink: 'syz.5.3161': attribute type 10 has an invalid length. [ 1358.451874][T17323] veth0_to_team: entered promiscuous mode [ 1358.602465][T17320] team0: Device hsr_slave_0 failed to register rx_handler [ 1359.628633][ T30] audit: type=1326 audit(1755215521.765:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17319 comm="syz.7.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a838ebe9 code=0x7ffc0000 [ 1359.767970][ T30] audit: type=1326 audit(1755215521.765:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17319 comm="syz.7.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a838ebe9 code=0x7ffc0000 [ 1360.068161][ T30] audit: type=1326 audit(1755215521.825:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17319 comm="syz.7.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f69a838ebe9 code=0x7ffc0000 [ 1360.120339][ T30] audit: type=1326 audit(1755215521.825:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17319 comm="syz.7.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a838ebe9 code=0x7ffc0000 [ 1360.181077][ T30] audit: type=1326 audit(1755215521.825:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17319 comm="syz.7.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a838ebe9 code=0x7ffc0000 [ 1360.312872][ T30] audit: type=1326 audit(1755215521.825:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17319 comm="syz.7.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f69a838ebe9 code=0x7ffc0000 [ 1360.336103][ T30] audit: type=1326 audit(1755215521.825:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17319 comm="syz.7.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a838ebe9 code=0x7ffc0000 [ 1360.360665][ T30] audit: type=1326 audit(1755215521.825:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17319 comm="syz.7.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a838ebe9 code=0x7ffc0000 [ 1360.448334][ T30] audit: type=1326 audit(1755215521.855:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17319 comm="syz.7.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f69a838ebe9 code=0x7ffc0000 [ 1360.782437][T17341] syz.8.3168 (17341) used greatest stack depth: 17768 bytes left [ 1368.026058][T17423] netlink: 592 bytes leftover after parsing attributes in process `syz.0.3195'. [ 1368.089516][T17426] overlayfs: failed to clone upperpath [ 1368.122664][T17425] vlan2: entered allmulticast mode [ 1368.150503][T17425] batadv0: entered allmulticast mode [ 1371.333088][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.339485][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1373.407193][T17486] overlayfs: failed to clone upperpath [ 1373.528789][T17488] netlink: 592 bytes leftover after parsing attributes in process `syz.7.3215'. [ 1373.552375][T13234] Bluetooth: hci2: command 0x0406 tx timeout [ 1376.727700][T17515] kthread_run failed with err -4 [ 1377.137941][T17542] overlayfs: failed to clone upperpath [ 1377.303693][T17545] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3235'. [ 1382.527672][T17593] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3252'. [ 1382.761487][T17595] overlayfs: upper fs does not support tmpfile. [ 1382.783007][T17593] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3252'. [ 1382.864841][T17605] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3255'. [ 1383.133771][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1383.133805][ T30] audit: type=1326 audit(1755216313.209:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.0.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4881b8ebe9 code=0x7ffc0000 [ 1383.188697][T17593] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3252'. [ 1383.292067][T17613] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3258'. [ 1383.314025][ T30] audit: type=1326 audit(1755216313.209:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.0.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f4881b8ebe9 code=0x7ffc0000 [ 1383.350981][ T30] audit: type=1326 audit(1755216313.209:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.0.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4881b8ebe9 code=0x7ffc0000 [ 1386.276502][T17613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1386.313009][T17613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1386.336334][T17613] bond0 (unregistering): Released all slaves [ 1386.413484][T17620] kthread_run failed with err -4 [ 1386.738699][ T30] audit: type=1326 audit(1755216316.879:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17642 comm="syz.4.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ce18ebe9 code=0x7ffc0000 [ 1386.794846][T17645] netlink: 'syz.7.3268': attribute type 1 has an invalid length. [ 1386.857389][T17648] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3271'. [ 1386.876533][ T30] audit: type=1326 audit(1755216316.909:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17642 comm="syz.4.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ce18ebe9 code=0x7ffc0000 [ 1387.012381][ T30] audit: type=1326 audit(1755216316.929:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17642 comm="syz.4.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42ce18ebe9 code=0x7ffc0000 [ 1387.071193][ T30] audit: type=1326 audit(1755216316.929:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17642 comm="syz.4.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ce18ebe9 code=0x7ffc0000 [ 1387.105554][ T30] audit: type=1326 audit(1755216316.939:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17642 comm="syz.4.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42ce18ebe9 code=0x7ffc0000 [ 1387.167705][T17654] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3275'. [ 1388.682771][ T30] audit: type=1326 audit(1755216316.939:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17642 comm="syz.4.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ce18ebe9 code=0x7ffc0000 [ 1389.512267][ T30] audit: type=1326 audit(1755216316.939:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17642 comm="syz.4.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42ce18ebe9 code=0x7ffc0000 [ 1389.639822][ T30] audit: type=1326 audit(1755216316.939:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17642 comm="syz.4.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ce18ebe9 code=0x7ffc0000 [ 1389.890193][ T30] audit: type=1326 audit(1755216316.939:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17642 comm="syz.4.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f42ce18ebe9 code=0x7ffc0000 [ 1389.936031][ T30] audit: type=1326 audit(1755216316.939:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17642 comm="syz.4.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ce18ebe9 code=0x7ffc0000 [ 1391.460772][ T30] audit: type=1326 audit(1755216321.599:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17690 comm="syz.5.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0558ebe9 code=0x7ffc0000 [ 1391.550912][T17697] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3286'. [ 1391.562468][T17696] tipc: Enabling of bearer rejected, failed to enable media [ 1391.570809][ T30] audit: type=1326 audit(1755216321.599:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17690 comm="syz.5.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0558ebe9 code=0x7ffc0000 [ 1391.596238][ T30] audit: type=1326 audit(1755216321.599:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17690 comm="syz.5.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d0558ebe9 code=0x7ffc0000 [ 1391.662622][ T30] audit: type=1326 audit(1755216321.599:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17690 comm="syz.5.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0558ebe9 code=0x7ffc0000 [ 1391.901718][ T30] audit: type=1326 audit(1755216321.599:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17690 comm="syz.5.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0558ebe9 code=0x7ffc0000 [ 1393.872542][T17709] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3293'. [ 1395.471299][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1395.471323][ T30] audit: type=1326 audit(1755216325.609:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17734 comm="syz.7.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a838ebe9 code=0x7ffc0000 [ 1395.617868][ T30] audit: type=1326 audit(1755216325.609:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17734 comm="syz.7.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a838ebe9 code=0x7ffc0000 [ 1395.708285][ T30] audit: type=1326 audit(1755216325.669:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17734 comm="syz.7.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69a838ebe9 code=0x7ffc0000 [ 1395.795108][ T30] audit: type=1326 audit(1755216325.669:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17734 comm="syz.7.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a838ebe9 code=0x7ffc0000 [ 1395.848742][T17745] pim6reg: entered allmulticast mode [ 1395.911809][ T30] audit: type=1326 audit(1755216325.669:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17734 comm="syz.7.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a838ebe9 code=0x7ffc0000 [ 1396.092138][ T30] audit: type=1326 audit(1755216325.669:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17734 comm="syz.7.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69a838ebe9 code=0x7ffc0000 [ 1396.116405][ T30] audit: type=1326 audit(1755216325.669:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17734 comm="syz.7.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a838ebe9 code=0x7ffc0000 [ 1396.138826][ T30] audit: type=1326 audit(1755216325.679:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17734 comm="syz.7.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69a838ebe9 code=0x7ffc0000 [ 1397.132311][ T30] audit: type=1326 audit(1755216325.679:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17734 comm="syz.7.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a838ebe9 code=0x7ffc0000 [ 1397.175493][T17742] pim6reg: left allmulticast mode [ 1397.195621][T17739] syz.0.3304: vmalloc error: size 100663296, failed to allocated page array size 196608, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1397.271693][T17739] CPU: 0 UID: 0 PID: 17739 Comm: syz.0.3304 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1397.271748][T17739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1397.271770][T17739] Call Trace: [ 1397.271782][T17739] [ 1397.271795][T17739] dump_stack_lvl+0x16c/0x1f0 [ 1397.271854][T17739] warn_alloc+0x248/0x3a0 [ 1397.271914][T17739] ? __pfx_warn_alloc+0x10/0x10 [ 1397.271991][T17739] ? bpf_uprobe_multi_link_attach+0x4fd/0x12d0 [ 1397.272040][T17739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1397.272085][T17739] ? __vmalloc_node_noprof+0xad/0xf0 [ 1397.272142][T17739] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 1397.272189][T17739] ? __sys_bpf+0x3f3c/0x4de0 [ 1397.272228][T17739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1397.272284][T17739] ? bpf_uprobe_multi_link_attach+0x4fd/0x12d0 [ 1397.272344][T17739] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1397.272401][T17739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1397.272444][T17739] ? ___kmalloc_large_node+0xed/0x160 [ 1397.272488][T17739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1397.272540][T17739] __kvmalloc_node_noprof+0x30a/0x620 [ 1397.272595][T17739] ? bpf_uprobe_multi_link_attach+0x4fd/0x12d0 [ 1397.272654][T17739] ? bpf_uprobe_multi_link_attach+0x4fd/0x12d0 [ 1397.272712][T17739] ? bpf_uprobe_multi_link_attach+0x4fd/0x12d0 [ 1397.272759][T17739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1397.272802][T17739] bpf_uprobe_multi_link_attach+0x4fd/0x12d0 [ 1397.272853][T17739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1397.272913][T17739] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 1397.272960][T17739] ? __fget_files+0x20e/0x3c0 [ 1397.273001][T17739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1397.273045][T17739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1397.273090][T17739] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1397.273143][T17739] __sys_bpf+0x3f3c/0x4de0 [ 1397.273191][T17739] ? __pfx___sys_bpf+0x10/0x10 [ 1397.273234][T17739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1397.273277][T17739] ? kmem_cache_free+0x2d1/0x4d0 [ 1397.273328][T17739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1397.273373][T17739] ? putname+0x154/0x1a0 [ 1397.273418][T17739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1397.273461][T17739] ? do_futex+0x122/0x350 [ 1397.273520][T17739] ? __pfx_do_futex+0x10/0x10 [ 1397.273605][T17739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1397.273654][T17739] ? xfd_validate_state+0x61/0x180 [ 1397.273712][T17739] ? __pfx_ksys_write+0x10/0x10 [ 1397.273778][T17739] __x64_sys_bpf+0x78/0xc0 [ 1397.273820][T17739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1397.273861][T17739] ? lockdep_hardirqs_on+0x7c/0x110 [ 1397.273910][T17739] do_syscall_64+0xcd/0x4c0 [ 1397.273964][T17739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.274001][T17739] RIP: 0033:0x7f4881b8ebe9 [ 1397.274030][T17739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1397.274067][T17739] RSP: 002b:00007f4882a0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1397.274103][T17739] RAX: ffffffffffffffda RBX: 00007f4881db5fa0 RCX: 00007f4881b8ebe9 [ 1397.274128][T17739] RDX: 0000000000000040 RSI: 00002000000012c0 RDI: 000000000000001c [ 1397.274151][T17739] RBP: 00007f4881c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1397.274174][T17739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1397.274197][T17739] R13: 00007f4881db6038 R14: 00007f4881db5fa0 R15: 00007fff996570e8 [ 1397.274247][T17739] [ 1397.337595][ T30] audit: type=1326 audit(1755216325.679:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17734 comm="syz.7.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f69a838ebe9 code=0x7ffc0000 [ 1397.487366][T17739] Mem-Info: [ 1397.741221][T17739] active_anon:8052 inactive_anon:0 isolated_anon:0 [ 1397.741221][T17739] active_file:22918 inactive_file:40402 isolated_file:0 [ 1397.741221][T17739] unevictable:768 dirty:163 writeback:0 [ 1397.741221][T17739] slab_reclaimable:11622 slab_unreclaimable:102243 [ 1397.741221][T17739] mapped:34819 shmem:1386 pagetables:1497 [ 1397.741221][T17739] sec_pagetables:0 bounce:0 [ 1397.741221][T17739] kernel_misc_reclaimable:0 [ 1397.741221][T17739] free:1271485 free_pcp:21751 free_cma:0 [ 1397.811807][T17739] Node 0 active_anon:32408kB inactive_anon:0kB active_file:91672kB inactive_file:161408kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139276kB dirty:648kB writeback:0kB shmem:4008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13092kB pagetables:6016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1397.852913][T17739] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1397.895338][T17739] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1397.926367][T17739] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1397.951936][T17739] Node 0 DMA32 free:1194376kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32464kB inactive_anon:0kB active_file:91672kB inactive_file:160092kB unevictable:1536kB writepending:648kB present:3129332kB managed:2539528kB mlocked:0kB bounce:0kB free_pcp:48732kB local_pcp:26048kB free_cma:0kB [ 1398.064914][T17739] lowmem_reserve[]: 0 0 1 1 1 [ 1398.092090][T17739] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1398.217492][T17739] lowmem_reserve[]: 0 0 0 0 0 [ 1398.222450][T17739] Node 1 Normal free:3875688kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:38376kB local_pcp:10144kB free_cma:0kB [ 1398.256150][T17739] lowmem_reserve[]: 0 0 0 0 0 [ 1398.261454][T17739] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1398.277733][T17739] Node 0 DMA32: 3*4kB (ME) 273*8kB (ME) 228*16kB (ME) 749*32kB (UME) 470*64kB (UM) 236*128kB (ME) 191*256kB (UME) 145*512kB (UME) 87*1024kB (UME) 14*2048kB (UME) 210*4096kB (UM) = 1191156kB [ 1398.583819][T17739] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1398.985928][T17739] Node 1 Normal: 201*4kB (UE) 69*8kB (UME) 51*16kB (UME) 51*32kB (UME) 15*64kB (UME) 8*128kB (UME) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 4*2048kB (UE) 941*4096kB (UM) = 3875740kB [ 1399.266791][T17739] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1399.360994][T17739] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1399.376005][T17739] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1399.385768][T17739] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1399.492436][T17739] 67574 total pagecache pages [ 1399.498416][T17739] 0 pages in swap cache [ 1399.516603][T17739] Free swap = 124996kB [ 1400.122906][T17739] Total swap = 124996kB [ 1400.127127][T17739] 2097051 pages RAM [ 1400.131368][T17739] 0 pages HighMem/MovableOnly [ 1400.136670][T17739] 430207 pages reserved [ 1400.140934][T17739] 0 pages cma reserved [ 1400.218323][T17785] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3321'. [ 1400.284176][T17788] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3323'. [ 1402.169242][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1402.169268][ T30] audit: type=1326 audit(1755216332.309:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17809 comm="syz.8.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1402.512953][ T30] audit: type=1326 audit(1755216332.309:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17809 comm="syz.8.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1403.375612][ T30] audit: type=1326 audit(1755216332.319:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17809 comm="syz.8.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1403.837182][ T30] audit: type=1326 audit(1755216332.319:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17809 comm="syz.8.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1403.859720][ T30] audit: type=1326 audit(1755216332.319:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17809 comm="syz.8.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1403.904163][ T30] audit: type=1326 audit(1755216332.319:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17809 comm="syz.8.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1403.927095][ T30] audit: type=1326 audit(1755216332.319:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17809 comm="syz.8.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1403.950021][ T30] audit: type=1326 audit(1755216332.319:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17809 comm="syz.8.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1404.012308][ T30] audit: type=1326 audit(1755216332.319:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17809 comm="syz.8.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1404.053101][T17832] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3342'. [ 1404.113058][T17834] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3339'. [ 1404.113423][ T30] audit: type=1326 audit(1755216332.319:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17809 comm="syz.8.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1404.371485][T17842] overlayfs: failed to clone upperpath [ 1404.385107][T17845] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.3346'. [ 1407.159070][T17872] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3352'. [ 1407.178252][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1407.178286][ T30] audit: type=1326 audit(1755216337.309:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17868 comm="syz.9.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1407.289685][ T30] audit: type=1326 audit(1755216337.309:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17868 comm="syz.9.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1407.407211][ T30] audit: type=1326 audit(1755216337.309:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17868 comm="syz.9.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1407.493207][ T30] audit: type=1326 audit(1755216337.309:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17868 comm="syz.9.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1407.599802][ T30] audit: type=1326 audit(1755216337.309:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17868 comm="syz.9.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f4b8ebe9 code=0x7ffc0000 [ 1407.767416][T17884] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3360'. [ 1407.900964][T17887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3361'. [ 1408.249597][T17896] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.3366'. [ 1409.924780][ T30] audit: type=1326 audit(1755216340.069:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17906 comm="syz.7.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a838ebe9 code=0x7ffc0000 [ 1410.737497][ T30] audit: type=1326 audit(1755216340.069:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17906 comm="syz.7.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a838ebe9 code=0x7ffc0000 [ 1410.774230][ T30] audit: type=1326 audit(1755216340.869:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17906 comm="syz.7.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69a838ebe9 code=0x7ffc0000 [ 1410.805952][ T30] audit: type=1326 audit(1755216340.869:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17906 comm="syz.7.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a838ebe9 code=0x7ffc0000 [ 1410.845248][ T30] audit: type=1326 audit(1755216340.869:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17906 comm="syz.7.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a838ebe9 code=0x7ffc0000 [ 1410.892974][T17916] netlink: 2 bytes leftover after parsing attributes in process `syz.9.3373'. [ 1411.145914][T17918] overlayfs: upper fs does not support tmpfile. [ 1411.303058][T17926] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3377'. [ 1412.752834][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1412.752860][ T30] audit: type=1326 audit(1755216342.889:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17949 comm="syz.8.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1412.820738][ T30] audit: type=1326 audit(1755216342.889:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17949 comm="syz.8.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1412.845579][T17952] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3390'. [ 1412.851153][ T30] audit: type=1326 audit(1755216342.959:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17949 comm="syz.8.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1412.877724][ T30] audit: type=1326 audit(1755216342.959:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17949 comm="syz.8.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1412.923647][ T30] audit: type=1326 audit(1755216342.959:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17949 comm="syz.8.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1412.973787][ T30] audit: type=1326 audit(1755216342.989:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17949 comm="syz.8.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1413.092392][ T30] audit: type=1326 audit(1755216342.989:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17949 comm="syz.8.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1413.142704][ T30] audit: type=1326 audit(1755216342.989:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17949 comm="syz.8.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1413.256717][ T30] audit: type=1326 audit(1755216342.999:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17949 comm="syz.8.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1413.338619][ T30] audit: type=1326 audit(1755216342.999:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17949 comm="syz.8.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1413.423218][T17970] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3397'. [ 1413.609789][T17980] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3401'. [ 1415.577567][T17980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1415.611013][T17980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1415.702546][T17980] bond0 (unregistering): Released all slaves [ 1415.874608][T17992] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1415.901403][T17992] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1415.911503][T17992] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1416.163733][T18002] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3410'. [ 1416.964959][T18031] loop5: detected capacity change from 0 to 512 [ 1417.946184][T18031] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1418.006929][T18031] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 1418.139170][T18043] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3426'. [ 1418.809212][T18053] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.3431'. [ 1419.457378][T18070] overlayfs: failed to clone upperpath [ 1419.604048][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1419.604072][ T30] audit: type=1326 audit(1755216349.749:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18071 comm="syz.8.3439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1419.744132][ T30] audit: type=1326 audit(1755216349.799:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18071 comm="syz.8.3439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1419.804597][T18076] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3443'. [ 1419.868350][ T30] audit: type=1326 audit(1755216349.799:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18071 comm="syz.8.3439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1420.157290][ T30] audit: type=1326 audit(1755216349.799:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18071 comm="syz.8.3439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1420.180949][ T30] audit: type=1326 audit(1755216349.799:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18071 comm="syz.8.3439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1420.203850][ T30] audit: type=1326 audit(1755216349.799:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18071 comm="syz.8.3439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1420.229262][ T30] audit: type=1326 audit(1755216349.799:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18071 comm="syz.8.3439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1420.253916][ T30] audit: type=1326 audit(1755216349.799:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18071 comm="syz.8.3439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1420.312252][ T30] audit: type=1326 audit(1755216349.799:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18071 comm="syz.8.3439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1420.411707][ T30] audit: type=1326 audit(1755216349.799:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18071 comm="syz.8.3439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b578ebe9 code=0x7ffc0000 [ 1423.661761][T18137] netlink: 2 bytes leftover after parsing attributes in process `syz.9.3456'. [ 1424.585950][T13234] Bluetooth: hci1: command 0x0406 tx timeout [ 1426.509819][T18166] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3468'. [ 1426.971853][T18177] overlayfs: failed to clone upperpath [ 1533.382187][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1533.389208][ C1] rcu: 0-...!: (0 ticks this GP) idle=c18c/1/0x4000000000000000 softirq=110490/110490 fqs=0 [ 1533.400842][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18193/3:b..l P18192/3:b..l P5523/1:b..l P18194/1:b..l [ 1533.412519][ C1] rcu: (detected by 1, t=10506 jiffies, g=100365, q=74 ncpus=2) [ 1533.420245][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1533.420285][ C0] NMI backtrace for cpu 0 [ 1533.420304][ C0] CPU: 0 UID: 0 PID: 669 Comm: kworker/u8:5 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1533.420344][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1533.420368][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1533.420422][ C0] RIP: 0010:__lock_acquire+0xac6/0x1ce0 [ 1533.420475][ C0] Code: a8 ff ff 8b 4c 24 08 48 83 78 40 00 0f 85 74 fb ff ff 90 0f 0b 90 e9 6b fb ff ff 31 d2 4c 89 e6 4c 89 ef e8 ac ec ff ff 85 c0 <0f> 85 cc fd ff ff e9 79 f9 ff ff ba 05 00 00 00 e9 d1 fd ff ff e8 [ 1533.420506][ C0] RSP: 0018:ffffc90000007bc0 EFLAGS: 00000002 [ 1533.420529][ C0] RAX: 0000000000000001 RBX: ffff8880253d28f0 RCX: 0000000000000000 [ 1533.420550][ C0] RDX: 0000000000000000 RSI: ffff8880253d29b8 RDI: ffff8880253d1e00 [ 1533.420570][ C0] RBP: 0000000000000000 R08: 0000000000080000 R09: 0000000000000001 [ 1533.420589][ C0] R10: 00000000000000c8 R11: 0000000000000001 R12: ffff8880253d29b8 [ 1533.420610][ C0] R13: ffff8880253d1e00 R14: 0000000000000005 R15: 0000000000000002 [ 1533.420638][ C0] FS: 0000000000000000(0000) GS:ffff8881246bf000(0000) knlGS:0000000000000000 [ 1533.420666][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1533.420687][ C0] CR2: 00002000000ee030 CR3: 000000007679d000 CR4: 0000000000350ef0 [ 1533.420708][ C0] Call Trace: [ 1533.420718][ C0] [ 1533.420733][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1533.420773][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 1533.420829][ C0] lock_acquire+0x179/0x350 [ 1533.420879][ C0] ? debug_object_activate+0x14c/0x4c0 [ 1533.420916][ C0] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 1533.420957][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 1533.420993][ C0] ? debug_object_activate+0x14c/0x4c0 [ 1533.421027][ C0] debug_object_activate+0x14c/0x4c0 [ 1533.421063][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 1533.421102][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1533.421140][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1533.421174][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1533.421213][ C0] enqueue_hrtimer+0x23/0x3b0 [ 1533.421252][ C0] __hrtimer_run_queues+0x8ff/0xad0 [ 1533.421297][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1533.421335][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1533.421381][ C0] hrtimer_interrupt+0x397/0x8e0 [ 1533.421431][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 1533.421468][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1533.421509][ C0] [ 1533.421518][ C0] [ 1533.421530][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1533.421566][ C0] RIP: 0010:kasan_poison+0x32/0x50 [ 1533.421610][ C0] Code: c7 07 75 2e 40 f6 c6 07 75 31 48 8d 14 37 48 89 f9 48 be 00 00 00 00 00 fc ff df 48 c1 e9 03 48 c1 ea 03 48 8d 3c 31 48 29 ca <0f> b6 f0 e9 56 a2 70 09 90 0f 0b 90 e9 28 44 ef fe 90 0f 0b 90 e9 [ 1533.421646][ C0] RSP: 0018:ffffc900030f7ad0 EFLAGS: 00000216 [ 1533.421670][ C0] RAX: 00000000000000fb RBX: ffff88802e3d1640 RCX: 1ffff11005c7a2c8 [ 1533.421691][ C0] RDX: 000000000000001e RSI: dffffc0000000000 RDI: ffffed1005c7a2c8 [ 1533.421712][ C0] RBP: ffff88801f6b88c0 R08: 0000000000000140 R09: 0000000000000000 [ 1533.421733][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88801f6b88c0 [ 1533.421753][ C0] R13: 0000000000212110 R14: ffffea0000b8f440 R15: 0000000000000000 [ 1533.421786][ C0] __kasan_slab_free+0x55/0x70 [ 1533.421837][ C0] kmem_cache_free+0x2d1/0x4d0 [ 1533.421885][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 1533.421938][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1533.421980][ C0] kfree_skbmem+0x1a4/0x1f0 [ 1533.422032][ C0] consume_skb+0xcc/0x100 [ 1533.422077][ C0] nsim_dev_trap_report_work+0x8bd/0xcf0 [ 1533.422140][ C0] process_one_work+0x9cf/0x1b70 [ 1533.422184][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1533.422220][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1533.422264][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1533.422303][ C0] ? assign_work+0x1a0/0x250 [ 1533.422336][ C0] worker_thread+0x6c8/0xf10 [ 1533.422381][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1533.422416][ C0] kthread+0x3c5/0x780 [ 1533.422447][ C0] ? __pfx_kthread+0x10/0x10 [ 1533.422479][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1533.422517][ C0] ? rcu_is_watching+0x12/0xc0 [ 1533.422558][ C0] ? __pfx_kthread+0x10/0x10 [ 1533.422590][ C0] ret_from_fork+0x5d7/0x6f0 [ 1533.422641][ C0] ? __pfx_kthread+0x10/0x10 [ 1533.422672][ C0] ret_from_fork_asm+0x1a/0x30 [ 1533.422724][ C0] [ 1533.423277][ C1] task:syz.7.3480 state:R running task stack:28216 pid:18194 tgid:18194 ppid:10348 task_flags:0x40004c flags:0x00004000 [ 1533.869219][ C1] Call Trace: [ 1533.872494][ C1] [ 1533.875429][ C1] __schedule+0x1190/0x5de0 [ 1533.879960][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 1533.884953][ C1] ? __pfx___schedule+0x10/0x10 [ 1533.889823][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1533.895487][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1533.901140][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1533.906183][ C1] ? find_held_lock+0x2b/0x80 [ 1533.910885][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1533.916286][ C1] preempt_schedule_common+0x44/0xc0 [ 1533.921594][ C1] preempt_schedule_thunk+0x16/0x30 [ 1533.926830][ C1] _raw_spin_unlock+0x3e/0x50 [ 1533.931524][ C1] unmap_page_range+0xf77/0x42c0 [ 1533.936520][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1533.941907][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1533.947556][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 1533.952530][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1533.958179][ C1] ? uprobe_munmap+0x20/0x5c0 [ 1533.962878][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 1533.968797][ C1] unmap_vmas+0x218/0x470 [ 1533.973146][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1533.978014][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1533.983701][ C1] exit_mmap+0x1b9/0xb90 [ 1533.987963][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1533.993619][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1533.998409][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.004057][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 1534.009060][ C1] __mmput+0x12a/0x410 [ 1534.013153][ C1] mmput+0x62/0x70 [ 1534.016901][ C1] do_exit+0x7c7/0x2bf0 [ 1534.021094][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.026747][ C1] ? __pfx_do_exit+0x10/0x10 [ 1534.031365][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.037014][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1534.042423][ C1] do_group_exit+0xd3/0x2a0 [ 1534.046961][ C1] __x64_sys_exit_group+0x3e/0x50 [ 1534.052017][ C1] x64_sys_call+0x14fa/0x1720 [ 1534.056715][ C1] do_syscall_64+0xcd/0x4c0 [ 1534.061246][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.067152][ C1] RIP: 0033:0x7f69a838ebe9 [ 1534.071569][ C1] RSP: 002b:00007fff4879c468 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1534.079992][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f69a838ebe9 [ 1534.087967][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1534.095939][ C1] RBP: 00007fff4879c4cc R08: 000000024879c55f R09: 00000000000927c0 [ 1534.103939][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000001be [ 1534.111912][ C1] R13: 00000000000927c0 R14: 000000000015c974 R15: 00007fff4879c520 [ 1534.119914][ C1] [ 1534.122929][ C1] task:dhcpcd state:R running task stack:21576 pid:5523 tgid:5523 ppid:5522 task_flags:0x400140 flags:0x00004002 [ 1534.136472][ C1] Call Trace: [ 1534.139747][ C1] [ 1534.142682][ C1] __schedule+0x1190/0x5de0 [ 1534.147217][ C1] ? find_held_lock+0x11/0x80 [ 1534.151915][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.157567][ C1] ? bpf_ksym_find+0x124/0x1c0 [ 1534.162362][ C1] ? __pfx___schedule+0x10/0x10 [ 1534.167246][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.172897][ C1] ? mark_held_locks+0x49/0x80 [ 1534.177699][ C1] preempt_schedule_irq+0x51/0x90 [ 1534.182744][ C1] irqentry_exit+0x36/0x90 [ 1534.187182][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1534.193177][ C1] RIP: 0010:lock_release+0x45/0x2f0 [ 1534.198407][ C1] Code: b9 4d 3e 12 48 89 44 24 10 31 c0 0f 1f 44 00 00 65 8b 05 d2 4d 3e 12 83 f8 07 0f 87 38 02 00 00 89 c0 48 0f a3 05 1b ac 13 0f <0f> 82 b1 01 00 00 8b 3d c3 dd 13 0f 85 ff 0f 84 25 01 00 00 65 8b [ 1534.218024][ C1] RSP: 0018:ffffc900031e7460 EFLAGS: 00000297 [ 1534.224099][ C1] RAX: 0000000000000000 RBX: ffffffff8e5c11e0 RCX: ffffc900031e8001 [ 1534.232075][ C1] RDX: 0000000000000000 RSI: ffffffff816ae8a4 RDI: ffffffff8e5c11e0 [ 1534.240050][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1534.248023][ C1] R10: 0000000000000003 R11: 00000000000061ee R12: ffffffff816ae8a4 [ 1534.255997][ C1] R13: ffffc900031e7568 R14: ffffc900031e7608 R15: ffffc900031e759c [ 1534.263976][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 1534.269200][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 1534.274429][ C1] unwind_next_frame+0x3f9/0x20a0 [ 1534.279468][ C1] ? arch_stack_walk+0x73/0x100 [ 1534.284343][ C1] __unwind_start+0x45f/0x7f0 [ 1534.289040][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1534.295221][ C1] arch_stack_walk+0x73/0x100 [ 1534.299924][ C1] ? stack_trace_save+0x8e/0xc0 [ 1534.304805][ C1] stack_trace_save+0x8e/0xc0 [ 1534.309510][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1534.314904][ C1] ? kasan_save_stack+0x42/0x60 [ 1534.319786][ C1] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1534.325448][ C1] ? anon_vma_clone+0xd8/0x5c0 [ 1534.330233][ C1] ? anon_vma_fork+0x7a/0x620 [ 1534.334932][ C1] ? dup_mmap+0x152e/0x21d0 [ 1534.339450][ C1] ? copy_process+0x4081/0x7690 [ 1534.344330][ C1] ? kernel_clone+0xfc/0x930 [ 1534.348944][ C1] ? __do_sys_clone+0xce/0x120 [ 1534.353731][ C1] ? do_syscall_64+0xcd/0x4c0 [ 1534.358443][ C1] kasan_save_stack+0x33/0x60 [ 1534.363241][ C1] kasan_save_track+0x14/0x30 [ 1534.367953][ C1] __kasan_slab_alloc+0x89/0x90 [ 1534.372841][ C1] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1534.378334][ C1] ? __entry_text_end+0x1020b6/0x1020b9 [ 1534.383903][ C1] ? anon_vma_fork+0xe6/0x620 [ 1534.388616][ C1] anon_vma_fork+0xe6/0x620 [ 1534.393163][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.398861][ C1] ? vm_area_dup+0x5a1/0x8d0 [ 1534.403527][ C1] dup_mmap+0x152e/0x21d0 [ 1534.407911][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1534.412626][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.418293][ C1] copy_process+0x4081/0x7690 [ 1534.423021][ C1] ? __pfx_copy_process+0x10/0x10 [ 1534.428070][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1534.433108][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.438779][ C1] kernel_clone+0xfc/0x930 [ 1534.443221][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.448869][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 1534.453841][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1534.458912][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.464564][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.470220][ C1] __do_sys_clone+0xce/0x120 [ 1534.474836][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 1534.480089][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.485738][ C1] ? __sys_setsockopt+0x1c0/0x230 [ 1534.490796][ C1] do_syscall_64+0xcd/0x4c0 [ 1534.495328][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.501231][ C1] RIP: 0033:0x7f25c64ec636 [ 1534.505649][ C1] RSP: 002b:00007ffeb2efd4c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1534.514070][ C1] RAX: ffffffffffffffda RBX: 00007ffeb2efd4c8 RCX: 00007f25c64ec636 [ 1534.522045][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1534.530015][ C1] RBP: 00007ffeb2f1da10 R08: 0000000000000000 R09: 0000000000000001 [ 1534.537983][ C1] R10: 00007f25c6418a10 R11: 0000000000000246 R12: 00007ffeb2efd600 [ 1534.545958][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000557b4106fac0 [ 1534.553957][ C1] [ 1534.556971][ C1] task:syz.8.3477 state:R running task stack:26600 pid:18192 tgid:18190 ppid:10696 task_flags:0x400140 flags:0x00004002 [ 1534.570525][ C1] Call Trace: [ 1534.573796][ C1] [ 1534.576730][ C1] __schedule+0x1190/0x5de0 [ 1534.581269][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.586932][ C1] ? __pfx___schedule+0x10/0x10 [ 1534.591798][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.597467][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1534.602870][ C1] preempt_schedule_common+0x44/0xc0 [ 1534.608184][ C1] preempt_schedule_thunk+0x16/0x30 [ 1534.613418][ C1] _raw_spin_unlock+0x3e/0x50 [ 1534.618108][ C1] filemap_map_pages+0xe15/0x1670 [ 1534.623163][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.628844][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1534.634351][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.640010][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1534.645496][ C1] do_pte_missing+0xe39/0x3ba0 [ 1534.650283][ C1] ? find_held_lock+0x2b/0x80 [ 1534.654979][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.660637][ C1] __handle_mm_fault+0x152a/0x2a50 [ 1534.665781][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.671431][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1534.676913][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.682560][ C1] ? __pte_offset_map_lock+0x174/0x310 [ 1534.688046][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.693697][ C1] ? find_held_lock+0x2b/0x80 [ 1534.698406][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.704054][ C1] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 1534.710152][ C1] handle_mm_fault+0x589/0xd10 [ 1534.714951][ C1] __get_user_pages+0x551/0x34a0 [ 1534.719928][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 1534.725318][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.730975][ C1] populate_vma_page_range+0x267/0x3f0 [ 1534.736454][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1534.742450][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 1534.748282][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.753936][ C1] ? do_mmap+0x69c/0x1210 [ 1534.758286][ C1] __mm_populate+0x1d8/0x380 [ 1534.762903][ C1] ? __pfx___mm_populate+0x10/0x10 [ 1534.768035][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.773687][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.779335][ C1] ? up_write+0x1b2/0x520 [ 1534.783680][ C1] vm_mmap_pgoff+0x37f/0x470 [ 1534.788295][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1534.793430][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.799078][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.804728][ C1] ? __x64_sys_futex+0x1e9/0x4c0 [ 1534.809705][ C1] ksys_mmap_pgoff+0x7d/0x5c0 [ 1534.814395][ C1] ? xfd_validate_state+0x61/0x180 [ 1534.819536][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.825193][ C1] __x64_sys_mmap+0x125/0x190 [ 1534.829894][ C1] do_syscall_64+0xcd/0x4c0 [ 1534.834422][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.840323][ C1] RIP: 0033:0x7fc1b578ebe9 [ 1534.844741][ C1] RSP: 002b:00007fc1b39f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1534.853166][ C1] RAX: ffffffffffffffda RBX: 00007fc1b59b5fa0 RCX: 00007fc1b578ebe9 [ 1534.861141][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 1534.869114][ C1] RBP: 00007fc1b5811e19 R08: ffffffffffffffff R09: 0000000000000000 [ 1534.877086][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1534.885056][ C1] R13: 00007fc1b59b6038 R14: 00007fc1b59b5fa0 R15: 00007ffd3677def8 [ 1534.893057][ C1] [ 1534.896075][ C1] task:syz.4.3478 state:R running task stack:26752 pid:18193 tgid:18191 ppid:14885 task_flags:0x400140 flags:0x00004000 [ 1534.909634][ C1] Call Trace: [ 1534.912907][ C1] [ 1534.915839][ C1] __schedule+0x1190/0x5de0 [ 1534.920384][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.926045][ C1] ? __pfx___schedule+0x10/0x10 [ 1534.930912][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.936582][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1534.941984][ C1] preempt_schedule_common+0x44/0xc0 [ 1534.947289][ C1] preempt_schedule_thunk+0x16/0x30 [ 1534.952524][ C1] _raw_spin_unlock+0x3e/0x50 [ 1534.957213][ C1] filemap_map_pages+0xe15/0x1670 [ 1534.962267][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.967948][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1534.973445][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.979104][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1534.984589][ C1] do_pte_missing+0xe39/0x3ba0 [ 1534.989376][ C1] ? find_held_lock+0x2b/0x80 [ 1534.994071][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.999729][ C1] __handle_mm_fault+0x152a/0x2a50 [ 1535.004871][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.010529][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1535.016012][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.021661][ C1] ? __pte_offset_map_lock+0x174/0x310 [ 1535.027128][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.032777][ C1] ? find_held_lock+0x2b/0x80 [ 1535.037484][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.043131][ C1] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 1535.049221][ C1] handle_mm_fault+0x589/0xd10 [ 1535.054017][ C1] __get_user_pages+0x551/0x34a0 [ 1535.058993][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 1535.064385][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.070040][ C1] populate_vma_page_range+0x267/0x3f0 [ 1535.075519][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1535.081516][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 1535.087339][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.092985][ C1] ? do_mmap+0x69c/0x1210 [ 1535.097330][ C1] __mm_populate+0x1d8/0x380 [ 1535.101940][ C1] ? __pfx___mm_populate+0x10/0x10 [ 1535.107066][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.112718][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.118365][ C1] ? up_write+0x1b2/0x520 [ 1535.122710][ C1] vm_mmap_pgoff+0x37f/0x470 [ 1535.127320][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1535.132451][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.138096][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.143742][ C1] ? __x64_sys_futex+0x1e9/0x4c0 [ 1535.148718][ C1] ksys_mmap_pgoff+0x7d/0x5c0 [ 1535.153403][ C1] ? xfd_validate_state+0x61/0x180 [ 1535.158546][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.164200][ C1] __x64_sys_mmap+0x125/0x190 [ 1535.168893][ C1] do_syscall_64+0xcd/0x4c0 [ 1535.173420][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.179356][ C1] RIP: 0033:0x7f42ce18ebe9 [ 1535.183774][ C1] RSP: 002b:00007f42cefa6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1535.192193][ C1] RAX: ffffffffffffffda RBX: 00007f42ce3b5fa0 RCX: 00007f42ce18ebe9 [ 1535.200169][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 1535.208141][ C1] RBP: 00007f42ce211e19 R08: ffffffffffffffff R09: 0000000000000000 [ 1535.216111][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1535.224083][ C1] R13: 00007f42ce3b6038 R14: 00007f42ce3b5fa0 R15: 00007ffc62b1dd88 [ 1535.232088][ C1] [ 1535.235100][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g100365 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1535.246387][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1535.256348][ C1] rcu: RCU grace-period kthread stack dump: [ 1535.262226][ C1] task:rcu_preempt state:R running task stack:27368 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1535.275786][ C1] Call Trace: [ 1535.279059][ C1] [ 1535.281990][ C1] __schedule+0x1190/0x5de0 [ 1535.286510][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.292178][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 1535.297160][ C1] ? __pfx___schedule+0x10/0x10 [ 1535.302036][ C1] ? find_held_lock+0x2b/0x80 [ 1535.306732][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.312401][ C1] schedule+0xe7/0x3a0 [ 1535.316495][ C1] schedule_timeout+0x123/0x290 [ 1535.321357][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1535.326740][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1535.332051][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.337702][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1535.343522][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.349170][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 1535.354667][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 1535.359438][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.365094][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1535.370394][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1535.375612][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1535.380553][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1535.385425][ C1] rcu_gp_kthread+0x270/0x380 [ 1535.390113][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1535.395315][ C1] ? rcu_is_watching+0x12/0xc0 [ 1535.400100][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1535.405316][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.410967][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.416612][ C1] ? __kthread_parkme+0x19e/0x250 [ 1535.421671][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1535.426933][ C1] kthread+0x3c5/0x780 [ 1535.431064][ C1] ? __pfx_kthread+0x10/0x10 [ 1535.435687][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.441354][ C1] ? rcu_is_watching+0x12/0xc0 [ 1535.446149][ C1] ? __pfx_kthread+0x10/0x10 [ 1535.450765][ C1] ret_from_fork+0x5d7/0x6f0 [ 1535.455376][ C1] ? __pfx_kthread+0x10/0x10 [ 1535.459990][ C1] ret_from_fork_asm+0x1a/0x30 [ 1535.464811][ C1] [ 1535.467833][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1535.474159][ C1] CPU: 1 UID: 0 PID: 18195 Comm: syz.0.3479 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1535.486241][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1535.496303][ C1] RIP: 0010:smp_call_function_many_cond+0xe02/0x1600 [ 1535.503032][ C1] Code: 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 65 05 0c 00 f3 90 41 0f b6 45 00 <40> 38 c5 7c 08 84 c0 0f 85 e0 05 00 00 8b 43 08 31 ff 83 e0 01 41 [ 1535.522667][ C1] RSP: 0018:ffffc90003d6f9a8 EFLAGS: 00000293 [ 1535.528745][ C1] RAX: 0000000000000000 RBX: ffff8880b8441ec0 RCX: ffffffff81af8d51 [ 1535.536719][ C1] RDX: ffff888034ad0000 RSI: ffffffff81af8d2b RDI: 0000000000000005 [ 1535.544694][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1535.552665][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 1535.560639][ C1] R13: ffffed10170883d9 R14: 0000000000000001 R15: 0000000000000000 [ 1535.568612][ C1] FS: 00005555645e9500(0000) GS:ffff8881247bf000(0000) knlGS:0000000000000000 [ 1535.577552][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1535.584139][ C1] CR2: 000000110c272205 CR3: 000000007679d000 CR4: 0000000000350ef0 [ 1535.592113][ C1] Call Trace: [ 1535.595388][ C1] [ 1535.598323][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1535.603382][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1535.609752][ C1] ? __pfx___text_poke+0x10/0x10 [ 1535.614712][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1535.619750][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1535.624887][ C1] ? syscall_trace_enter+0xe7/0x240 [ 1535.630094][ C1] smp_text_poke_batch_finish+0x27b/0xdb0 [ 1535.635837][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1535.640888][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1535.647162][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.652813][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1535.659078][ C1] ? find_held_lock+0x2b/0x80 [ 1535.663784][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1535.669790][ C1] jump_label_update+0x376/0x550 [ 1535.674755][ C1] static_key_disable_cpuslocked+0x158/0x1c0 [ 1535.680758][ C1] static_key_disable+0x1a/0x20 [ 1535.685629][ C1] tracepoint_probe_unregister+0x4fd/0xd70 [ 1535.691458][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.697108][ C1] ? __pfx_tracepoint_probe_unregister+0x10/0x10 [ 1535.703450][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.709106][ C1] ? bpf_link_free+0x95/0x390 [ 1535.713808][ C1] ? rcu_is_watching+0x12/0xc0 [ 1535.718589][ C1] ? __pfx_bpf_link_release+0x10/0x10 [ 1535.723991][ C1] bpf_raw_tp_link_release+0x35/0x70 [ 1535.729297][ C1] bpf_link_free+0xec/0x390 [ 1535.733827][ C1] bpf_link_release+0x5d/0x80 [ 1535.738528][ C1] __fput+0x402/0xb70 [ 1535.742525][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1535.747741][ C1] task_work_run+0x150/0x240 [ 1535.752348][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1535.757469][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1535.763135][ C1] exit_to_user_mode_loop+0xeb/0x110 [ 1535.768433][ C1] do_syscall_64+0x3f6/0x4c0 [ 1535.773047][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.778948][ C1] RIP: 0033:0x7f4881b8ebe9 [ 1535.783363][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1535.802979][ C1] RSP: 002b:00007fff99657248 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1535.811403][ C1] RAX: 0000000000000000 RBX: 000000000015cb0f RCX: 00007f4881b8ebe9 [ 1535.819371][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1535.827343][ C1] RBP: 00007f4881db7da0 R08: 0000000000000001 R09: 000000079965753f [ 1535.835314][ C1] R10: 0000001b32d20000 R11: 0000000000000246 R12: 00007f4881db5fac [ 1535.843284][ C1] R13: 00007f4881db5fa0 R14: ffffffffffffffff R15: 00007fff99657360 [ 1535.851279][ C1] [ 1673.818272][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 246s! [syz.0.3479:18195] [ 1673.818307][ C1] Modules linked in: [ 1673.818324][ C1] irq event stamp: 976086 [ 1673.818335][ C1] hardirqs last enabled at (976085): [] irqentry_exit+0x3b/0x90 [ 1673.818393][ C1] hardirqs last disabled at (976086): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 1673.818443][ C1] softirqs last enabled at (976084): [] handle_softirqs+0x5be/0x8e0 [ 1673.818495][ C1] softirqs last disabled at (975919): [] __irq_exit_rcu+0x109/0x170 [ 1673.818551][ C1] CPU: 1 UID: 0 PID: 18195 Comm: syz.0.3479 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1673.818596][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1673.818617][ C1] RIP: 0010:smp_call_function_many_cond+0xdfd/0x1600 [ 1673.818672][ C1] Code: 57 48 8b 54 24 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 65 05 0c 00 f3 90 <41> 0f b6 45 00 40 38 c5 7c 08 84 c0 0f 85 e0 05 00 00 8b 43 08 31 [ 1673.818706][ C1] RSP: 0018:ffffc90003d6f9a8 EFLAGS: 00000293 [ 1673.818732][ C1] RAX: 0000000000000000 RBX: ffff8880b8441ec0 RCX: ffffffff81af8d51 [ 1673.818756][ C1] RDX: ffff888034ad0000 RSI: ffffffff81af8d2b RDI: 0000000000000005 [ 1673.818778][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1673.818799][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 1673.818821][ C1] R13: ffffed10170883d9 R14: 0000000000000001 R15: 0000000000000000 [ 1673.818845][ C1] FS: 00005555645e9500(0000) GS:ffff8881247bf000(0000) knlGS:0000000000000000 [ 1673.818876][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1673.818900][ C1] CR2: 000000110c272205 CR3: 000000007679d000 CR4: 0000000000350ef0 [ 1673.818923][ C1] Call Trace: [ 1673.818934][ C1] [ 1673.818954][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1673.819008][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1673.819070][ C1] ? __pfx___text_poke+0x10/0x10 [ 1673.819114][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1673.819155][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1673.819204][ C1] ? syscall_trace_enter+0xe7/0x240 [ 1673.819242][ C1] smp_text_poke_batch_finish+0x27b/0xdb0 [ 1673.819292][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1673.819345][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1673.819401][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.819443][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1673.819494][ C1] ? find_held_lock+0x2b/0x80 [ 1673.819549][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1673.819600][ C1] jump_label_update+0x376/0x550 [ 1673.819658][ C1] static_key_disable_cpuslocked+0x158/0x1c0 [ 1673.819710][ C1] static_key_disable+0x1a/0x20 [ 1673.819758][ C1] tracepoint_probe_unregister+0x4fd/0xd70 [ 1673.819804][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.819852][ C1] ? __pfx_tracepoint_probe_unregister+0x10/0x10 [ 1673.819893][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.819940][ C1] ? bpf_link_free+0x95/0x390 [ 1673.819993][ C1] ? rcu_is_watching+0x12/0xc0 [ 1673.820041][ C1] ? __pfx_bpf_link_release+0x10/0x10 [ 1673.820095][ C1] bpf_raw_tp_link_release+0x35/0x70 [ 1673.820144][ C1] bpf_link_free+0xec/0x390 [ 1673.820200][ C1] bpf_link_release+0x5d/0x80 [ 1673.820254][ C1] __fput+0x402/0xb70 [ 1673.820298][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1673.820344][ C1] task_work_run+0x150/0x240 [ 1673.820385][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1673.820421][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1673.820481][ C1] exit_to_user_mode_loop+0xeb/0x110 [ 1673.820533][ C1] do_syscall_64+0x3f6/0x4c0 [ 1673.820590][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.820626][ C1] RIP: 0033:0x7f4881b8ebe9 [ 1673.820656][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1673.820690][ C1] RSP: 002b:00007fff99657248 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1673.820722][ C1] RAX: 0000000000000000 RBX: 000000000015cb0f RCX: 00007f4881b8ebe9 [ 1673.820744][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1673.820766][ C1] RBP: 00007f4881db7da0 R08: 0000000000000001 R09: 000000079965753f [ 1673.820789][ C1] R10: 0000001b32d20000 R11: 0000000000000246 R12: 00007f4881db5fac [ 1673.820812][ C1] R13: 00007f4881db5fa0 R14: ffffffffffffffff R15: 00007fff99657360 [ 1673.820860][ C1] [ 1673.820872][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1674.258849][ C0] NMI backtrace for cpu 0 [ 1674.258872][ C0] CPU: 0 UID: 0 PID: 669 Comm: kworker/u8:5 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1674.258919][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1674.258942][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1674.258996][ C0] RIP: 0010:__lock_acquire+0x668/0x1ce0 [ 1674.259050][ C0] Code: b7 44 24 10 8b 7c 24 28 44 8b 74 24 20 c1 e0 0d 66 0b 04 24 98 29 f8 8b 7c 24 18 31 f8 89 c2 41 29 c6 01 c8 c1 c2 06 41 31 d6 <44> 89 f2 44 29 f1 41 01 c6 c1 c2 08 31 d1 89 ca 29 c8 44 01 f1 c1 [ 1674.259082][ C0] RSP: 0018:ffffc90000007c38 EFLAGS: 00000086 [ 1674.259106][ C0] RAX: 00000000fffff3bf RBX: ffff8880253d28f0 RCX: 00000000fffffffe [ 1674.259127][ C0] RDX: 00000000fffcf07f RSI: ffff8880253d2990 RDI: 00000000ffffffff [ 1674.259148][ C0] RBP: 0000000000000000 R08: 0000000000080000 R09: 0000000000000001 [ 1674.259168][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffff8880253d2990 [ 1674.259189][ C0] R13: ffff8880253d1e00 R14: 00000000fffcfc41 R15: 0000000000000003 [ 1674.259212][ C0] FS: 0000000000000000(0000) GS:ffff8881246bf000(0000) knlGS:0000000000000000 [ 1674.259240][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1674.259262][ C0] CR2: 00002000000ee030 CR3: 000000007679d000 CR4: 0000000000350ef0 [ 1674.259282][ C0] Call Trace: [ 1674.259293][ C0] [ 1674.259312][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.259353][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1674.259390][ C0] lock_acquire+0x179/0x350 [ 1674.259440][ C0] ? advance_sched+0xd9/0xc80 [ 1674.259470][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 1674.259505][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.259543][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1674.259586][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1674.259614][ C0] _raw_spin_lock+0x2e/0x40 [ 1674.259646][ C0] ? advance_sched+0xd9/0xc80 [ 1674.259673][ C0] advance_sched+0xd9/0xc80 [ 1674.259701][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.259740][ C0] ? find_held_lock+0x2b/0x80 [ 1674.259782][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.259821][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 1674.259858][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1674.259886][ C0] __hrtimer_run_queues+0x202/0xad0 [ 1674.259937][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1674.259975][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.260021][ C0] hrtimer_interrupt+0x397/0x8e0 [ 1674.260072][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 1674.260110][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1674.260150][ C0] [ 1674.260160][ C0] [ 1674.260171][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1674.260207][ C0] RIP: 0010:kasan_poison+0x32/0x50 [ 1674.260252][ C0] Code: c7 07 75 2e 40 f6 c6 07 75 31 48 8d 14 37 48 89 f9 48 be 00 00 00 00 00 fc ff df 48 c1 e9 03 48 c1 ea 03 48 8d 3c 31 48 29 ca <0f> b6 f0 e9 56 a2 70 09 90 0f 0b 90 e9 28 44 ef fe 90 0f 0b 90 e9 [ 1674.260283][ C0] RSP: 0018:ffffc900030f7ad0 EFLAGS: 00000216 [ 1674.260307][ C0] RAX: 00000000000000fb RBX: ffff88802e3d1640 RCX: 1ffff11005c7a2c8 [ 1674.260328][ C0] RDX: 000000000000001e RSI: dffffc0000000000 RDI: ffffed1005c7a2c8 [ 1674.260349][ C0] RBP: ffff88801f6b88c0 R08: 0000000000000140 R09: 0000000000000000 [ 1674.260370][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88801f6b88c0 [ 1674.260390][ C0] R13: 0000000000212110 R14: ffffea0000b8f440 R15: 0000000000000000 [ 1674.260424][ C0] __kasan_slab_free+0x55/0x70 [ 1674.260476][ C0] kmem_cache_free+0x2d1/0x4d0 [ 1674.260522][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 1674.260576][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.260618][ C0] kfree_skbmem+0x1a4/0x1f0 [ 1674.260671][ C0] consume_skb+0xcc/0x100 [ 1674.260716][ C0] nsim_dev_trap_report_work+0x8bd/0xcf0 [ 1674.260779][ C0] process_one_work+0x9cf/0x1b70 [ 1674.260824][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1674.260859][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.260909][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.260948][ C0] ? assign_work+0x1a0/0x250 [ 1674.260981][ C0] worker_thread+0x6c8/0xf10 [ 1674.261026][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1674.261062][ C0] kthread+0x3c5/0x780 [ 1674.261093][ C0] ? __pfx_kthread+0x10/0x10 [ 1674.261125][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.261164][ C0] ? rcu_is_watching+0x12/0xc0 [ 1674.261204][ C0] ? __pfx_kthread+0x10/0x10 [ 1674.261236][ C0] ret_from_fork+0x5d7/0x6f0 [ 1674.261265][ C0] ? __pfx_kthread+0x10/0x10 [ 1674.261297][ C0] ret_from_fork_asm+0x1a/0x30 [ 1674.261348][ C0] [ 1674.261841][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 1674.708301][ C1] CPU: 1 UID: 0 PID: 18195 Comm: syz.0.3479 Tainted: G L 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1674.721959][ C1] Tainted: [L]=SOFTLOCKUP [ 1674.726280][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1674.736336][ C1] Call Trace: [ 1674.739617][ C1] [ 1674.742464][ C1] dump_stack_lvl+0x3d/0x1f0 [ 1674.747083][ C1] vpanic+0x6e8/0x7a0 [ 1674.751100][ C1] ? __pfx_vpanic+0x10/0x10 [ 1674.755643][ C1] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1674.761669][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.767331][ C1] panic+0xca/0xd0 [ 1674.771087][ C1] ? __pfx_panic+0x10/0x10 [ 1674.775534][ C1] ? nmi_backtrace_stall_check+0x6e/0x540 [ 1674.781270][ C1] ? irq_work_queue+0xce/0x100 [ 1674.786054][ C1] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1674.792076][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.797739][ C1] ? __wake_up_klogd.part.0+0x99/0xf0 [ 1674.803131][ C1] ? watchdog_timer_fn+0x5f9/0x7d0 [ 1674.808261][ C1] ? watchdog_timer_fn+0x5ec/0x7d0 [ 1674.813395][ C1] watchdog_timer_fn+0x60a/0x7d0 [ 1674.818359][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 1674.823840][ C1] __hrtimer_run_queues+0x5ed/0xad0 [ 1674.829074][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1674.834813][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1674.840481][ C1] hrtimer_interrupt+0x397/0x8e0 [ 1674.845465][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 1674.851466][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1674.857121][ C1] [ 1674.860052][ C1] [ 1674.862983][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1674.868982][ C1] RIP: 0010:smp_call_function_many_cond+0xdfd/0x1600 [ 1674.875685][ C1] Code: 57 48 8b 54 24 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 65 05 0c 00 f3 90 <41> 0f b6 45 00 40 38 c5 7c 08 84 c0 0f 85 e0 05 00 00 8b 43 08 31 [ 1674.895311][ C1] RSP: 0018:ffffc90003d6f9a8 EFLAGS: 00000293 [ 1674.901397][ C1] RAX: 0000000000000000 RBX: ffff8880b8441ec0 RCX: ffffffff81af8d51 [ 1674.909377][ C1] RDX: ffff888034ad0000 RSI: ffffffff81af8d2b RDI: 0000000000000005 [ 1674.917354][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1674.925328][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 1674.933302][ C1] R13: ffffed10170883d9 R14: 0000000000000001 R15: 0000000000000000 [ 1674.941292][ C1] ? smp_call_function_many_cond+0xe21/0x1600 [ 1674.947390][ C1] ? smp_call_function_many_cond+0xdfb/0x1600 [ 1674.953496][ C1] ? smp_call_function_many_cond+0xdfb/0x1600 [ 1674.959594][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1674.964657][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1674.971023][ C1] ? __pfx___text_poke+0x10/0x10 [ 1674.975980][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1674.981020][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1674.986158][ C1] ? syscall_trace_enter+0xe7/0x240 [ 1674.991371][ C1] smp_text_poke_batch_finish+0x27b/0xdb0 [ 1674.997117][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1675.002171][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1675.008441][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1675.014099][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1675.020373][ C1] ? find_held_lock+0x2b/0x80 [ 1675.025086][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1675.031094][ C1] jump_label_update+0x376/0x550 [ 1675.036063][ C1] static_key_disable_cpuslocked+0x158/0x1c0 [ 1675.042072][ C1] static_key_disable+0x1a/0x20 [ 1675.046950][ C1] tracepoint_probe_unregister+0x4fd/0xd70 [ 1675.052781][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1675.058439][ C1] ? __pfx_tracepoint_probe_unregister+0x10/0x10 [ 1675.064789][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1675.070457][ C1] ? bpf_link_free+0x95/0x390 [ 1675.075347][ C1] ? rcu_is_watching+0x12/0xc0 [ 1675.080139][ C1] ? __pfx_bpf_link_release+0x10/0x10 [ 1675.085544][ C1] bpf_raw_tp_link_release+0x35/0x70 [ 1675.090863][ C1] bpf_link_free+0xec/0x390 [ 1675.095403][ C1] bpf_link_release+0x5d/0x80 [ 1675.100114][ C1] __fput+0x402/0xb70 [ 1675.104120][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1675.109345][ C1] task_work_run+0x150/0x240 [ 1675.113957][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1675.119081][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1675.124756][ C1] exit_to_user_mode_loop+0xeb/0x110 [ 1675.130061][ C1] do_syscall_64+0x3f6/0x4c0 [ 1675.134682][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.140589][ C1] RIP: 0033:0x7f4881b8ebe9 [ 1675.145010][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1675.164632][ C1] RSP: 002b:00007fff99657248 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1675.173065][ C1] RAX: 0000000000000000 RBX: 000000000015cb0f RCX: 00007f4881b8ebe9 [ 1675.181040][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1675.189016][ C1] RBP: 00007f4881db7da0 R08: 0000000000000001 R09: 000000079965753f [ 1675.196992][ C1] R10: 0000001b32d20000 R11: 0000000000000246 R12: 00007f4881db5fac [ 1675.204975][ C1] R13: 00007f4881db5fa0 R14: ffffffffffffffff R15: 00007fff99657360 [ 1675.212979][ C1] [ 1676.378422][ C1] Shutting down cpus with NMI [ 1676.383392][ C1] Kernel Offset: disabled [ 1676.387722][ C1] Rebooting in 86400 seconds..