last executing test programs: 19.157539537s ago: executing program 1 (id=67): socket$kcm(0x11, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x2, &(0x7f00000001c0)={0x0, 0x5, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_delete(0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880), 0x0, 0x20000085) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000e207000700e00000020800020005000000080008"], 0x34}}, 0x0) 16.525747256s ago: executing program 4 (id=71): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 14.779130184s ago: executing program 4 (id=77): syz_open_dev$loop(&(0x7f0000000140), 0x760, 0x200) sysinfo(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$getown(r0, 0x9) 14.729524643s ago: executing program 1 (id=78): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) iopl(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) timer_create(0x0, 0x0, &(0x7f0000000100)) 13.529018767s ago: executing program 2 (id=80): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x86, 0x6, 0x0, 0x7fff0006}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair(0x1e, 0x1, 0x200, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsmount(0xffffffffffffffff, 0x1, 0x70) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000140)=0x11) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000180)=0xd0) r4 = memfd_create(0x0, 0x0) pwritev(r4, &(0x7f00000003c0)=[{&(0x7f0000000480)}, {&(0x7f0000000280)}], 0x2, 0x4000001, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8240, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) 11.660731884s ago: executing program 4 (id=84): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f024}) memfd_create(0x0, 0x3) 11.121618921s ago: executing program 3 (id=87): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x1}}, 0x20) 9.811987868s ago: executing program 0 (id=88): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 9.710872932s ago: executing program 1 (id=89): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380), &(0x7f0000000200)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 9.545750453s ago: executing program 3 (id=90): creat(0x0, 0x182) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r4 = syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)={0x4}) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) 9.421708181s ago: executing program 2 (id=91): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setreuid(0xee01, 0xee01) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x3, 0x5) r2 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r2, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000000280)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x25}, 0x8000000, 0x1}, 0xdb, 0x0}, 0x5b4}], 0x1, 0x850) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r3, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) fcntl$setstatus(r4, 0x4, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) mount$binderfs(0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="58c1788847e80ebac5c86f6dcdf549893d303030303030303030303031303030303030473030"]) socket$nl_route(0x10, 0x3, 0x0) 8.493289834s ago: executing program 3 (id=92): syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='syscall\x00') recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_triestat\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x109) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)=[0x6], 0x0, 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000480)={0x5, 0x20, 0x6, 0x20, 0x7}, 0x48) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) r2 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x4, 0x0) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0xfffffffc) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x100000000a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.705145979s ago: executing program 0 (id=93): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x1ad2, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mknod$loop(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 7.703193232s ago: executing program 2 (id=94): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x2000, 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x2, &(0x7f00000005c0)) 5.536998195s ago: executing program 1 (id=95): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) 5.351075468s ago: executing program 0 (id=96): socket$igmp(0x2, 0x3, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000002600)=ANY=[], 0x10) sendto$inet6(r0, &(0x7f0000000700)='\x00', 0x1, 0x4090, 0x0, 0x0) 5.349228463s ago: executing program 3 (id=97): openat(0xffffffffffffffff, 0x0, 0x2c41, 0x40) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, 0x0, 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f00000004c0)='\x7f\xb7\xc1\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01aA$\xf6j\x89\xd9_\xa0\x84\xeaT\x94\xaexuTW\xa7\x93\x8d\xbd\xe6~\xa8\x82\xe7LSw\x8b\x0f<\xe6\xbdh\x97\xd4\xb8\x97\xc0\xd2\x8e\x83#`yx\x96\x10M\xef\xab\xcaR*\xf8a\xdb?\xe0\xd5\xa8\xf1\x9f\\\x17I\x1b\xda$\n\x97\x1d\x8e\xad\xdc\x11\xce\x1e\xe4\xa9\xdb\xfc\xfa\xb5\xcb\xec=\xb2\xb7x\xf6\xa7H\r\xaf\xf4|\x9e\x96?%\x9a\xb0\x00V\xca\xf7b\xc1 \x7f\xb5\x87\x16\xe1?9\xb5\xb8sn\xc8\xa8\xbf7{\x80\x12\xfd\a\x00\xef}\x0484\nU\x14\xfc\xb0mV~\x9d\xa6\x01\f\xef\x8f(.[8\xbd\xdf\x1a\xa6\x80\xa2\x8b,\x11/\x02\"\x10\xf7\xd0l\xbd\xfa\xcd$?I\x82K\v\xcc\x19\xdc\xdb\x87\xbd\xe4\xac\xe2\xac\x06\xc5\x88_\x84K\x8dm\xac\x9b\xe7#\xcb\xa9}\x8f\xe0\x9dYb\x88Z\x9c\xb5\xcbj\n\x1b\xee\x1ev\x01\xaf']}) 5.269936997s ago: executing program 4 (id=98): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) recvmmsg$unix(r3, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) 5.11420107s ago: executing program 2 (id=99): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c80c}, 0x8010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x23a, &(0x7f00000004c0)={0x0, 0x1c2a, 0x10100, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r10, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) 5.035450372s ago: executing program 0 (id=100): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x1}}, 0x20) 4.926712354s ago: executing program 3 (id=101): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x86, 0x6, 0x0, 0x7fff0006}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair(0x1e, 0x1, 0x200, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsmount(0xffffffffffffffff, 0x1, 0x70) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000140)=0x11) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000180)=0xd0) r4 = memfd_create(0x0, 0x0) pwritev(r4, &(0x7f00000003c0)=[{&(0x7f0000000480)}, {&(0x7f0000000280)}], 0x2, 0x4000001, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8240, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) 4.809460257s ago: executing program 0 (id=102): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$kvm(0xffffffffffffff9c, 0x0, 0x100480, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) removexattr(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2842, 0x0) close(0x3) write$uinput_user_dev(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) fcntl$setstatus(r4, 0x4, 0x2400) write$cgroup_subtree(r4, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x15) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f00000004c0), 0x0, 0x0) 3.717195323s ago: executing program 2 (id=103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c80c}, 0x8010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) r5 = syz_io_uring_setup(0x23a, &(0x7f00000004c0)={0x0, 0x1c2a, 0x10100, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 1.841036574s ago: executing program 2 (id=104): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 1.757624741s ago: executing program 4 (id=105): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0]) 1.673578468s ago: executing program 1 (id=106): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x13, 0x0, 0x24) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r2, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x7}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x1, @time={0x10, 0x3}, {0x4}, {}, @raw32={[0xfffffffd, 0x0, 0xfffffff1]}}, {0x3, 0x0, 0x0, 0x0, @tick=0x1, {}, {0x4}, @raw8={"272be5806cd46d7b9ff797a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0xfffffffd}, {}, {}, @connect={{0xc, 0x7}, {0xa, 0xe3}}}], 0x70) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r4, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @period={0x0, 0x1, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b00)={'syz0\x00', {0xfff, 0x7, 0x3, 0x7}, 0x3e, [0x2, 0x9, 0x0, 0x1, 0xc, 0xea45, 0xd, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x9, 0x0, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x4000005, 0x803, 0xfffffffa, 0x3ff, 0x2, 0x7, 0xffffffff, 0x3, 0x0, 0x4f, 0x100006, 0x9, 0x7, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x9, 0x4, 0xa, 0x8, 0x0, 0x8, 0x0, 0x2, 0xffff, 0x6, 0x939, 0x5, 0x9, 0x2, 0x4b, 0x40004, 0xfffffff7, 0x7fff, 0x4, 0x5, 0x2, 0x56f00ca9, 0x5, 0x2a, 0x1, 0x21], [0x1, 0x9, 0x9, 0x1, 0x5, 0x6, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x1, 0xe9, 0x5, 0x0, 0x24e, 0x1, 0x80000000, 0x2, 0x3, 0x5, 0x9, 0x82, 0xb6fe, 0x2, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x3, 0xa9, 0x101, 0x10, 0x2, 0x7, 0x7, 0x8, 0x7, 0x8000, 0x0, 0x5, 0xc5, 0x6, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24b, 0x1fd, 0x2a0, 0x5, 0x6, 0x5, 0x7, 0x80000007], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x7ffd, 0x10, 0x1, 0x2, 0x7fffffff, 0x8000, 0x0, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x1a2e, 0x5, 0x5, 0x4, 0x9, 0x1e, 0xffffff3c, 0x9b2, 0x7, 0x0, 0xff, 0x0, 0x2, 0x4, 0xb, 0xd, 0x6, 0x7, 0x7c13, 0x1, 0x1, 0x7, 0xff, 0xe, 0xf3, 0x4, 0x10, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0xfe83, 0x9, 0xc3, 0x7751c64, 0x2000000], [0xb, 0x3d3, 0xffff9a7f, 0x200, 0x3, 0x2, 0x2000003, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x7, 0x2, 0x66608000, 0x9, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0x1, 0xd, 0x0, 0xfff7ff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x1, 0x20000000, 0x8, 0x6, 0x4000b329, 0xec000000, 0x6, 0x1001904, 0x8, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) 1.632962377s ago: executing program 4 (id=107): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x1ad2, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mknod$loop(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1.520773219s ago: executing program 0 (id=108): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f024}) memfd_create(0x0, 0x3) 1.472242305s ago: executing program 3 (id=109): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x2000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x3, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000e700000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) dup(r4) recvmmsg(0xffffffffffffffff, &(0x7f0000000380), 0x29, 0x2120, 0x0) r6 = syz_io_uring_setup(0x998, &(0x7f0000000640)={0x0, 0x4078, 0x1000, 0x3, 0x140}, &(0x7f00000006c0)=0x0, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000000) socket$phonet_pipe(0x23, 0x5, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x847ba, 0x79c, 0xe, 0x0, 0x0) 0s ago: executing program 1 (id=110): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x2000, 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x2, &(0x7f00000005c0)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.201' (ED25519) to the list of known hosts. [ 85.732150][ T5791] cgroup: Unknown subsys name 'net' [ 85.963650][ T5791] cgroup: Unknown subsys name 'cpuset' [ 86.038923][ T5791] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.193017][ T10] cfg80211: failed to load regulatory.db [ 88.192089][ T5791] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.215345][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.221059][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.222070][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.246828][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.248520][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.267538][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.268280][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.269228][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.279805][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.281403][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.282253][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.287121][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.289918][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.290026][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.318812][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.322694][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.323489][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.326517][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.330771][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.334108][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.532023][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.534817][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.535572][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.541758][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.542636][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.562043][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 93.633602][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 93.648505][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 93.820427][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 94.036463][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 94.390027][ T5121] Bluetooth: hci3: command tx timeout [ 94.548182][ T5812] Bluetooth: hci2: command tx timeout [ 94.548188][ T60] Bluetooth: hci0: command tx timeout [ 94.548531][ T5121] Bluetooth: hci1: command tx timeout [ 94.629379][ T5121] Bluetooth: hci4: command tx timeout [ 94.669700][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.671267][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.671667][ T5817] bridge_slave_0: entered allmulticast mode [ 94.673837][ T5817] bridge_slave_0: entered promiscuous mode [ 94.895258][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.895950][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.896108][ T5817] bridge_slave_1: entered allmulticast mode [ 94.898782][ T5817] bridge_slave_1: entered promiscuous mode [ 94.989145][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.989242][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.989365][ T5805] bridge_slave_0: entered allmulticast mode [ 94.991089][ T5805] bridge_slave_0: entered promiscuous mode [ 94.993980][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.994154][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.994347][ T5802] bridge_slave_0: entered allmulticast mode [ 94.996359][ T5802] bridge_slave_0: entered promiscuous mode [ 95.180818][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.180936][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.181108][ T5805] bridge_slave_1: entered allmulticast mode [ 95.182917][ T5805] bridge_slave_1: entered promiscuous mode [ 95.184727][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.184857][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.184995][ T5802] bridge_slave_1: entered allmulticast mode [ 95.187314][ T5802] bridge_slave_1: entered promiscuous mode [ 95.320499][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.320615][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.320756][ T5803] bridge_slave_0: entered allmulticast mode [ 95.322519][ T5803] bridge_slave_0: entered promiscuous mode [ 95.593766][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.594165][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.594302][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.594536][ T5803] bridge_slave_1: entered allmulticast mode [ 95.597654][ T5803] bridge_slave_1: entered promiscuous mode [ 95.770055][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.770217][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.770401][ T5815] bridge_slave_0: entered allmulticast mode [ 95.772983][ T5815] bridge_slave_0: entered promiscuous mode [ 95.810289][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.883606][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.887312][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.898561][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.898849][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.899075][ T5815] bridge_slave_1: entered allmulticast mode [ 95.902613][ T5815] bridge_slave_1: entered promiscuous mode [ 96.072079][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.074854][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.252716][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.468202][ T5121] Bluetooth: hci3: command tx timeout [ 96.503396][ T5817] team0: Port device team_slave_0 added [ 96.506668][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.628340][ T5121] Bluetooth: hci0: command tx timeout [ 96.639119][ T60] Bluetooth: hci2: command tx timeout [ 96.639244][ T5121] Bluetooth: hci1: command tx timeout [ 96.646342][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.651268][ T5817] team0: Port device team_slave_1 added [ 96.709134][ T5121] Bluetooth: hci4: command tx timeout [ 96.790734][ T5805] team0: Port device team_slave_0 added [ 97.111810][ T5802] team0: Port device team_slave_0 added [ 97.115765][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.322344][ T5805] team0: Port device team_slave_1 added [ 97.324300][ T5802] team0: Port device team_slave_1 added [ 97.482548][ T5803] team0: Port device team_slave_0 added [ 97.720859][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.720875][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.720889][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.724633][ T5803] team0: Port device team_slave_1 added [ 97.882033][ T5815] team0: Port device team_slave_0 added [ 97.883349][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.883364][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.883391][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.979806][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.979824][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.979841][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.100174][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.100193][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.100218][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.102560][ T5815] team0: Port device team_slave_1 added [ 98.190205][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.190223][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.190250][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.191799][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.191813][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.191827][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.312163][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.312180][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.312195][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.431907][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.431926][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.431943][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.436414][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.436428][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.436442][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.548135][ T5121] Bluetooth: hci3: command tx timeout [ 98.621898][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.621920][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.621938][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.718778][ T5121] Bluetooth: hci1: command tx timeout [ 98.718801][ T60] Bluetooth: hci2: command tx timeout [ 98.718830][ T60] Bluetooth: hci0: command tx timeout [ 98.789849][ T5121] Bluetooth: hci4: command tx timeout [ 98.923400][ T5817] hsr_slave_0: entered promiscuous mode [ 98.924538][ T5817] hsr_slave_1: entered promiscuous mode [ 99.127775][ T5805] hsr_slave_0: entered promiscuous mode [ 99.137205][ T5805] hsr_slave_1: entered promiscuous mode [ 99.147555][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 99.147670][ T5805] Cannot create hsr debugfs directory [ 99.204456][ T5802] hsr_slave_0: entered promiscuous mode [ 99.205469][ T5802] hsr_slave_1: entered promiscuous mode [ 99.206139][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 99.206161][ T5802] Cannot create hsr debugfs directory [ 99.405644][ T5803] hsr_slave_0: entered promiscuous mode [ 99.406549][ T5803] hsr_slave_1: entered promiscuous mode [ 99.407134][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 99.407161][ T5803] Cannot create hsr debugfs directory [ 99.654812][ T5815] hsr_slave_0: entered promiscuous mode [ 99.655751][ T5815] hsr_slave_1: entered promiscuous mode [ 99.656420][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 99.656437][ T5815] Cannot create hsr debugfs directory [ 100.628307][ T5121] Bluetooth: hci3: command tx timeout [ 100.789231][ T5812] Bluetooth: hci0: command tx timeout [ 100.789266][ T60] Bluetooth: hci2: command tx timeout [ 100.789783][ T5121] Bluetooth: hci1: command tx timeout [ 100.868114][ T5121] Bluetooth: hci4: command tx timeout [ 101.135687][ T5817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.178542][ T5817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.215351][ T5817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.277171][ T5817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.392480][ T5805] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.434611][ T5805] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.458718][ T5805] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.515026][ T5805] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.671929][ T5802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.706220][ T5802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.731186][ T5802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.794475][ T5802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.976831][ T5803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.011156][ T5803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.047523][ T5803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.100547][ T5803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.212098][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.266741][ T5815] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.320240][ T5815] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.366730][ T5815] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.411129][ T5815] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.482433][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.526208][ T3881] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.526667][ T3881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.552795][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.584273][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.584571][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.663931][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.727109][ T3881] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.727446][ T3881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.740003][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.774742][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.774893][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.850532][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.860226][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.897880][ T3881] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.899477][ T3881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.964533][ T3881] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.964694][ T3881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.021971][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.072230][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.072385][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.096121][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.153484][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.153671][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.244528][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.303165][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.303419][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.347191][ T3881] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.347622][ T3881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.407468][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.643859][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.793534][ T5817] veth0_vlan: entered promiscuous mode [ 103.844983][ T5817] veth1_vlan: entered promiscuous mode [ 104.034204][ T5805] veth0_vlan: entered promiscuous mode [ 104.050071][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.102726][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.112307][ T5805] veth1_vlan: entered promiscuous mode [ 104.132810][ T5817] veth0_macvtap: entered promiscuous mode [ 104.172005][ T5817] veth1_macvtap: entered promiscuous mode [ 104.285125][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.305843][ T5805] veth0_macvtap: entered promiscuous mode [ 104.327139][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.345981][ T5802] veth0_vlan: entered promiscuous mode [ 104.355708][ T5805] veth1_macvtap: entered promiscuous mode [ 104.378221][ T3881] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.382818][ T5803] veth0_vlan: entered promiscuous mode [ 104.383281][ T3881] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.386230][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.409543][ T3881] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.447399][ T3881] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.464459][ T5802] veth1_vlan: entered promiscuous mode [ 104.565157][ T5803] veth1_vlan: entered promiscuous mode [ 104.581645][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.656431][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.775777][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.796550][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.806095][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.822660][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.924596][ T3881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.924621][ T3881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.967704][ T5802] veth0_macvtap: entered promiscuous mode [ 105.043417][ T5802] veth1_macvtap: entered promiscuous mode [ 105.052888][ T5803] veth0_macvtap: entered promiscuous mode [ 105.084942][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.084965][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.146641][ T5803] veth1_macvtap: entered promiscuous mode [ 105.231553][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.231751][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.231767][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.284650][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.332984][ T5815] veth0_vlan: entered promiscuous mode [ 105.336579][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.370233][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.376838][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.383552][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.384564][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.388576][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.388594][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.410714][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.411434][ T5815] veth1_vlan: entered promiscuous mode [ 105.464831][ T1216] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.481853][ T1216] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.485239][ T1216] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.486691][ T1216] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.948137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.061808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.061880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.061941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.062003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.062064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.062125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.062186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.062252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.062315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.007757][ T5929] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 107.211035][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.211054][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.251725][ T5815] veth0_macvtap: entered promiscuous mode [ 108.001324][ T5815] veth1_macvtap: entered promiscuous mode [ 108.064330][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.064354][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.184910][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.184933][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.271001][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.289644][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.289667][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.324506][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.377031][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.395995][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.408529][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.433963][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.535250][ T5930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.535266][ T5930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.781525][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.781547][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.806334][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.978903][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 112.995205][ T9] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 112.995234][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.995253][ T9] usb 4-1: config 0 has no interfaces? [ 113.040764][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 113.040796][ T9] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 113.040817][ T9] usb 4-1: Product: syz [ 113.040831][ T9] usb 4-1: Manufacturer: syz [ 113.040845][ T9] usb 4-1: SerialNumber: syz [ 113.067086][ T5972] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.13'. [ 113.397253][ T9] usb 4-1: config 0 descriptor?? [ 114.929400][ T31] usb 4-1: USB disconnect, device number 2 [ 115.720433][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 116.051809][ T5996] binder: BINDER_SET_CONTEXT_MGR already set [ 116.051821][ T5996] binder: 5994:5996 ioctl 4018620d 200000000040 returned -16 [ 116.232102][ T5999] fuse: Unknown parameter 'user_i00000000000000000000' [ 119.153049][ T6015] netlink: 'syz.0.28': attribute type 4 has an invalid length. [ 119.219776][ T6016] syz.0.28 (6016) used greatest stack depth: 17376 bytes left [ 119.233067][ T5996] syz.4.21 (5996): drop_caches: 2 [ 119.579149][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 119.658611][ T5133] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.298044][ T5133] usb 2-1: Using ep0 maxpacket: 32 [ 120.300859][ T5133] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 120.300878][ T5133] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.300888][ T5133] usb 2-1: config 0 has no interfaces? [ 120.303772][ T5133] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 120.303792][ T5133] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 120.303804][ T5133] usb 2-1: Product: syz [ 120.303812][ T5133] usb 2-1: Manufacturer: syz [ 120.303820][ T5133] usb 2-1: SerialNumber: syz [ 120.311523][ T5133] usb 2-1: config 0 descriptor?? [ 121.578147][ T5873] usb 2-1: USB disconnect, device number 2 [ 121.727629][ T6040] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.36'. [ 123.279719][ T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.948081][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 123.977772][ T43] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 123.977825][ T43] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 123.977867][ T43] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 124.018003][ T43] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 124.018039][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.066323][ T43] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 124.066355][ T43] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 124.066388][ T43] usb 2-1: Product: syz [ 124.066401][ T43] usb 2-1: Manufacturer: syz [ 124.066414][ T43] usb 2-1: SerialNumber: syz [ 124.157621][ T43] usb 2-1: config 0 descriptor?? [ 124.207265][ T43] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 124.261569][ T43] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 124.462618][ T5873] usb 2-1: USB disconnect, device number 3 [ 124.524287][ T5873] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 125.774236][ T6064] netlink: 'syz.2.44': attribute type 4 has an invalid length. [ 126.049547][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 129.767507][ T6058] syz.0.42 (6058): drop_caches: 2 [ 129.871694][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 129.898940][ T6106] fuse: Unknown parameter 'user_id00000000000000000000' [ 130.018073][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 130.020761][ T43] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 130.020788][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.020808][ T43] usb 5-1: config 0 has no interfaces? [ 130.027510][ T43] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 130.027542][ T43] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 130.027563][ T43] usb 5-1: Product: syz [ 130.027577][ T43] usb 5-1: Manufacturer: syz [ 130.027591][ T43] usb 5-1: SerialNumber: syz [ 130.126533][ T43] usb 5-1: config 0 descriptor?? [ 130.753259][ T5873] usb 5-1: USB disconnect, device number 2 [ 131.848043][ T43] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 131.907116][ T6119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.59'. [ 131.998534][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 132.010443][ T43] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 132.010493][ T43] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 132.010538][ T43] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 132.010563][ T43] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 132.010590][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 132.087739][ T43] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 132.087761][ T43] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 132.087773][ T43] usb 2-1: Product: syz [ 132.087781][ T43] usb 2-1: Manufacturer: syz [ 132.087789][ T43] usb 2-1: SerialNumber: syz [ 132.129712][ T43] usb 2-1: config 0 descriptor?? [ 132.153985][ T43] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 132.179245][ T43] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 132.997616][ T6124] netlink: 'syz.4.61': attribute type 4 has an invalid length. [ 133.055380][ T5873] usb 2-1: USB disconnect, device number 4 [ 133.215738][ T5873] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 133.298660][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.298739][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.410657][ T6129] process 'syz.4.62' launched './file0' with NULL argv: empty string added [ 135.232947][ T6143] binder: BINDER_SET_CONTEXT_MGR already set [ 135.232959][ T6143] binder: 6142:6143 ioctl 4018620d 200000000040 returned -16 [ 135.986342][ T5873] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 136.158061][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 136.160248][ T5873] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 136.160266][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.160287][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 136.162596][ T5873] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 136.162612][ T5873] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 136.162624][ T5873] usb 5-1: Product: syz [ 136.162632][ T5873] usb 5-1: Manufacturer: syz [ 136.162640][ T5873] usb 5-1: SerialNumber: syz [ 136.167618][ T5873] usb 5-1: config 0 descriptor?? [ 136.451489][ T5873] ldusb 5-1:0.0: Interrupt in endpoint not found [ 136.638425][ T5873] usb 5-1: USB disconnect, device number 3 [ 137.826058][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'. [ 138.418092][ T43] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 138.618359][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 138.626282][ T43] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 138.626309][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.626333][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 138.661152][ T43] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 138.661171][ T43] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 138.661183][ T43] usb 5-1: Product: syz [ 138.661191][ T43] usb 5-1: Manufacturer: syz [ 138.661199][ T43] usb 5-1: SerialNumber: syz [ 138.667720][ T43] usb 5-1: config 0 descriptor?? [ 138.715662][ T43] ldusb 5-1:0.0: Interrupt in endpoint not found [ 138.801079][ T6143] syz.2.66 (6143): drop_caches: 2 [ 138.921743][ T5886] usb 5-1: USB disconnect, device number 4 [ 139.099898][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 139.248047][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 139.256498][ T43] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 139.256529][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.256548][ T43] usb 1-1: config 0 has no interfaces? [ 139.290637][ T43] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 139.290669][ T43] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 139.290690][ T43] usb 1-1: Product: syz [ 139.290704][ T43] usb 1-1: Manufacturer: syz [ 139.290718][ T43] usb 1-1: SerialNumber: syz [ 139.333314][ T43] usb 1-1: config 0 descriptor?? [ 139.418094][ T5886] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 139.568996][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 139.572297][ T5886] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 139.572344][ T5886] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 139.572386][ T5886] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 139.572411][ T5886] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 139.572436][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 139.575628][ T5886] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 139.575658][ T5886] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 139.575679][ T5886] usb 3-1: Product: syz [ 139.575694][ T5886] usb 3-1: Manufacturer: syz [ 139.575708][ T5886] usb 3-1: SerialNumber: syz [ 139.686913][ T5133] usb 1-1: USB disconnect, device number 2 [ 139.705941][ T5886] usb 3-1: config 0 descriptor?? [ 139.725922][ T5886] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 139.743835][ T5886] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 140.076092][ T5133] usb 3-1: USB disconnect, device number 2 [ 140.076190][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 140.082498][ T5133] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 141.548090][ T5873] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 141.698123][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 141.700354][ T5873] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 141.700372][ T5873] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.700404][ T5873] usb 1-1: config 0 interface 0 has no altsetting 0 [ 141.703855][ T5873] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 141.703874][ T5873] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 141.703885][ T5873] usb 1-1: Product: syz [ 141.703893][ T5873] usb 1-1: Manufacturer: syz [ 141.703901][ T5873] usb 1-1: SerialNumber: syz [ 141.707589][ T5873] usb 1-1: config 0 descriptor?? [ 141.715508][ T5873] ldusb 1-1:0.0: Interrupt in endpoint not found [ 141.941834][ T5873] usb 1-1: USB disconnect, device number 3 [ 144.738095][ T5133] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 144.919245][ T5133] usb 1-1: Using ep0 maxpacket: 32 [ 144.921113][ T5133] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 144.921130][ T5133] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.921150][ T5133] usb 1-1: config 0 interface 0 has no altsetting 0 [ 144.923037][ T5133] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 144.923053][ T5133] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 144.923064][ T5133] usb 1-1: Product: syz [ 144.923071][ T5133] usb 1-1: Manufacturer: syz [ 144.923079][ T5133] usb 1-1: SerialNumber: syz [ 144.926731][ T5133] usb 1-1: config 0 descriptor?? [ 144.934858][ T5133] ldusb 1-1:0.0: Interrupt in endpoint not found [ 145.758388][ T5873] usb 1-1: USB disconnect, device number 4 [ 145.788464][ T5133] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 145.938329][ T5133] usb 2-1: Using ep0 maxpacket: 32 [ 145.940726][ T5133] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 145.940744][ T5133] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.940755][ T5133] usb 2-1: config 0 has no interfaces? [ 145.942763][ T5133] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 145.942780][ T5133] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 145.942791][ T5133] usb 2-1: Product: syz [ 145.942799][ T5133] usb 2-1: Manufacturer: syz [ 145.942806][ T5133] usb 2-1: SerialNumber: syz [ 145.946872][ T5133] usb 2-1: config 0 descriptor?? [ 146.562257][ T5133] usb 2-1: USB disconnect, device number 5 [ 147.673222][ T6194] syz.4.84 (6194): drop_caches: 2 [ 149.143185][ T5886] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 149.578058][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 149.583732][ T5886] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 149.583761][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.583803][ T5886] usb 2-1: config 0 interface 0 has no altsetting 0 [ 149.586436][ T5886] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 149.586465][ T5886] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 149.586486][ T5886] usb 2-1: Product: syz [ 149.586500][ T5886] usb 2-1: Manufacturer: syz [ 149.586514][ T5886] usb 2-1: SerialNumber: syz [ 149.600150][ T5886] usb 2-1: config 0 descriptor?? [ 150.663961][ T5886] ldusb 2-1:0.0: Interrupt in endpoint not found [ 151.266237][ T5886] usb 2-1: USB disconnect, device number 6 [ 152.568109][ T6255] fuse: Bad value for 'fd' [ 152.791388][ T5133] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 153.049587][ T6261] dlm: no locking on control device [ 153.458041][ T5133] usb 3-1: Using ep0 maxpacket: 32 [ 153.460963][ T5133] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 153.460993][ T5133] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.461034][ T5133] usb 3-1: config 0 interface 0 has no altsetting 0 [ 153.465874][ T5133] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 153.465894][ T5133] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 153.465906][ T5133] usb 3-1: Product: syz [ 153.465914][ T5133] usb 3-1: Manufacturer: syz [ 153.465922][ T5133] usb 3-1: SerialNumber: syz [ 154.067796][ T6268] binder: BINDER_SET_CONTEXT_MGR already set [ 154.067808][ T6268] binder: 6267:6268 ioctl 4018620d 200000000040 returned -16 [ 154.070704][ T5133] usb 3-1: config 0 descriptor?? [ 154.095776][ T5133] ldusb 3-1:0.0: Interrupt in endpoint not found [ 154.308471][ T5133] usb 3-1: USB disconnect, device number 3 [ 154.371444][ T6272] ------------[ cut here ]------------ [ 154.371459][ T6272] DEBUG_LOCKS_WARN_ON(this_cpu_read(softirq_ctrl.cnt)) [ 154.371536][ T6272] WARNING: CPU: 0 PID: 6272 at kernel/softirq.c:176 __local_bh_disable_ip+0x3d9/0x540 [ 154.371582][ T6272] Modules linked in: [ 154.371601][ T6272] CPU: 0 UID: 0 PID: 6272 Comm: syz.3.109 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 154.371624][ T6272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 154.371635][ T6272] RIP: 0010:__local_bh_disable_ip+0x3d9/0x540 [ 154.371664][ T6272] Code: 0f b6 04 28 84 c0 0f 85 56 01 00 00 83 3d 52 e8 31 0d 00 75 19 90 48 c7 c7 c0 a7 c9 8a 48 c7 c6 00 a8 c9 8a e8 f8 5f fe ff 90 <0f> 0b 90 90 90 e9 7b ff ff ff 90 0f 0b 90 e9 71 fe ff ff e8 7f 63 [ 154.371682][ T6272] RSP: 0018:ffffc9000403f940 EFLAGS: 00010246 [ 154.371700][ T6272] RAX: e908125510cfd500 RBX: 1ffff92000807f30 RCX: 0000000000080000 [ 154.371716][ T6272] RDX: ffffc900122ac000 RSI: 0000000000000262 RDI: 0000000000000263 [ 154.371730][ T6272] RBP: ffffc9000403fa48 R08: 0000000000000000 R09: 0000000000000000 [ 154.371744][ T6272] R10: dffffc0000000000 R11: ffffed101710487b R12: ffff888024c20000 [ 154.371759][ T6272] R13: dffffc0000000000 R14: ffff888024c20b4c R15: 1ffff11004984169 [ 154.371775][ T6272] FS: 00007f2eb31a16c0(0000) GS:ffff88812703b000(0000) knlGS:0000000000000000 [ 154.371793][ T6272] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.371807][ T6272] CR2: 000000110c30e434 CR3: 000000002617c000 CR4: 00000000003526f0 [ 154.371827][ T6272] Call Trace: [ 154.371834][ T6272] [ 154.371844][ T6272] ? ktime_get+0x3e/0x1f0 [ 154.371868][ T6272] ? __local_bh_disable_ip+0xa1/0x540 [ 154.371894][ T6272] ? sock_hash_delete_elem+0xb9/0x320 [ 154.371914][ T6272] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 154.371946][ T6272] ? sock_hash_bucket_hash+0x28c/0x750 [ 154.371966][ T6272] ? sock_hash_delete_elem+0xb9/0x320 [ 154.371985][ T6272] sock_hash_delete_elem+0xc6/0x320 [ 154.372003][ T6272] ? bpf_test_timer_enter+0x1e/0x2b0 [ 154.372034][ T6272] bpf_prog_0c6c60b8c4db3835+0x46/0x4e [ 154.372054][ T6272] bpf_flow_dissect+0x225/0x720 [ 154.372091][ T6272] bpf_prog_test_run_flow_dissector+0x37c/0x5c0 [ 154.372126][ T6272] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 154.372157][ T6272] ? __fget_files+0x2a/0x420 [ 154.372188][ T6272] ? __fget_files+0x2a/0x420 [ 154.372232][ T6272] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 154.372262][ T6272] bpf_prog_test_run+0x2cd/0x340 [ 154.372296][ T6272] __sys_bpf+0x562/0x860 [ 154.372322][ T6272] ? __pfx___sys_bpf+0x10/0x10 [ 154.372371][ T6272] ? rcu_is_watching+0x15/0xb0 [ 154.372396][ T6272] __x64_sys_bpf+0x7c/0x90 [ 154.372423][ T6272] do_syscall_64+0xfa/0x3b0 [ 154.372454][ T6272] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.372482][ T6272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.372502][ T6272] ? clear_bhb_loop+0x60/0xb0 [ 154.372526][ T6272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.372545][ T6272] RIP: 0033:0x7f2eb539eec9 [ 154.372561][ T6272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.372578][ T6272] RSP: 002b:00007f2eb31a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 154.372600][ T6272] RAX: ffffffffffffffda RBX: 00007f2eb55f6270 RCX: 00007f2eb539eec9 [ 154.372614][ T6272] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 154.372628][ T6272] RBP: 00007f2eb5421f91 R08: 0000000000000000 R09: 0000000000000000 [ 154.372641][ T6272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.372653][ T6272] R13: 00007f2eb55f6308 R14: 00007f2eb55f6270 R15: 00007ffeda16fa18 [ 154.372675][ T6272] [ 154.372685][ T6272] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 154.372700][ T6272] CPU: 0 UID: 0 PID: 6272 Comm: syz.3.109 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 154.372723][ T6272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 154.372734][ T6272] Call Trace: [ 154.372742][ T6272] [ 154.372749][ T6272] dump_stack_lvl+0x99/0x250 [ 154.372780][ T6272] ? __asan_memcpy+0x40/0x70 [ 154.372805][ T6272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.372834][ T6272] ? __pfx__printk+0x10/0x10 [ 154.372862][ T6272] vpanic+0x237/0x6d0 [ 154.372881][ T6272] ? __pfx_vpanic+0x10/0x10 [ 154.372903][ T6272] panic+0xb9/0xc0 [ 154.372921][ T6272] ? __pfx_panic+0x10/0x10 [ 154.372943][ T6272] __warn+0x31b/0x4b0 [ 154.372957][ T6272] ? __local_bh_disable_ip+0x3d9/0x540 [ 154.372977][ T6272] ? __local_bh_disable_ip+0x3d9/0x540 [ 154.372996][ T6272] report_bug+0x2be/0x4f0 [ 154.373018][ T6272] ? __local_bh_disable_ip+0x3d9/0x540 [ 154.373037][ T6272] ? __local_bh_disable_ip+0x3d9/0x540 [ 154.373056][ T6272] ? __local_bh_disable_ip+0x3db/0x540 [ 154.373075][ T6272] handle_bug+0x84/0x160 [ 154.373090][ T6272] exc_invalid_op+0x1a/0x50 [ 154.373104][ T6272] asm_exc_invalid_op+0x1a/0x20 [ 154.373118][ T6272] RIP: 0010:__local_bh_disable_ip+0x3d9/0x540 [ 154.373138][ T6272] Code: 0f b6 04 28 84 c0 0f 85 56 01 00 00 83 3d 52 e8 31 0d 00 75 19 90 48 c7 c7 c0 a7 c9 8a 48 c7 c6 00 a8 c9 8a e8 f8 5f fe ff 90 <0f> 0b 90 90 90 e9 7b ff ff ff 90 0f 0b 90 e9 71 fe ff ff e8 7f 63 [ 154.373151][ T6272] RSP: 0018:ffffc9000403f940 EFLAGS: 00010246 [ 154.373163][ T6272] RAX: e908125510cfd500 RBX: 1ffff92000807f30 RCX: 0000000000080000 [ 154.373174][ T6272] RDX: ffffc900122ac000 RSI: 0000000000000262 RDI: 0000000000000263 [ 154.373185][ T6272] RBP: ffffc9000403fa48 R08: 0000000000000000 R09: 0000000000000000 [ 154.373194][ T6272] R10: dffffc0000000000 R11: ffffed101710487b R12: ffff888024c20000 [ 154.373232][ T6272] R13: dffffc0000000000 R14: ffff888024c20b4c R15: 1ffff11004984169 [ 154.373251][ T6272] ? ktime_get+0x3e/0x1f0 [ 154.373270][ T6272] ? __local_bh_disable_ip+0xa1/0x540 [ 154.373288][ T6272] ? sock_hash_delete_elem+0xb9/0x320 [ 154.373303][ T6272] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 154.373327][ T6272] ? sock_hash_bucket_hash+0x28c/0x750 [ 154.373343][ T6272] ? sock_hash_delete_elem+0xb9/0x320 [ 154.373358][ T6272] sock_hash_delete_elem+0xc6/0x320 [ 154.373371][ T6272] ? bpf_test_timer_enter+0x1e/0x2b0 [ 154.373395][ T6272] bpf_prog_0c6c60b8c4db3835+0x46/0x4e [ 154.373408][ T6272] bpf_flow_dissect+0x225/0x720 [ 154.373435][ T6272] bpf_prog_test_run_flow_dissector+0x37c/0x5c0 [ 154.373461][ T6272] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 154.373484][ T6272] ? __fget_files+0x2a/0x420 [ 154.373507][ T6272] ? __fget_files+0x2a/0x420 [ 154.373529][ T6272] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 154.373551][ T6272] bpf_prog_test_run+0x2cd/0x340 [ 154.373574][ T6272] __sys_bpf+0x562/0x860 [ 154.373595][ T6272] ? __pfx___sys_bpf+0x10/0x10 [ 154.373623][ T6272] ? rcu_is_watching+0x15/0xb0 [ 154.373642][ T6272] __x64_sys_bpf+0x7c/0x90 [ 154.373661][ T6272] do_syscall_64+0xfa/0x3b0 [ 154.373682][ T6272] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.373702][ T6272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.373717][ T6272] ? clear_bhb_loop+0x60/0xb0 [ 154.373733][ T6272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.373747][ T6272] RIP: 0033:0x7f2eb539eec9 [ 154.373759][ T6272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.373771][ T6272] RSP: 002b:00007f2eb31a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 154.373785][ T6272] RAX: ffffffffffffffda RBX: 00007f2eb55f6270 RCX: 00007f2eb539eec9 [ 154.373796][ T6272] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 154.373806][ T6272] RBP: 00007f2eb5421f91 R08: 0000000000000000 R09: 0000000000000000 [ 154.373816][ T6272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.373825][ T6272] R13: 00007f2eb55f6308 R14: 00007f2eb55f6270 R15: 00007ffeda16fa18 [ 154.373841][ T6272] [ 154.374282][ T6272] Kernel Offset: disabled