last executing test programs: 14.462019997s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x34}}, 0x0) 14.329135462s ago: executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x23, 0x4, 0x0, 0x0, 0x8c, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x8}, @noop, @noop, @noop, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0xa, {"08c39ee52f329f1698b1c4865f8b540a5eee9f496a0809c3d20325867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76023256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0x1000}}, 0xffffff5c) 13.931012186s ago: executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r1, 0x0, &(0x7f00000004c0)='d', 0x1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x8, r2, 0x0, 0x8009, 0x0, 0x0, 0x0, 0x10005}) 13.736109775s ago: executing program 4: semtimedop(0x0, &(0x7f0000000180)=[{}], 0x1, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) semop(0x0, &(0x7f0000000000)=[{}, {0x0, 0x8000}, {0x0, 0x176, 0x1000}], 0x3) 13.60772044s ago: executing program 4: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x562, 0x0, 0x0, "30cae84df91232fc"}) socket$inet6(0xa, 0x2, 0x0) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c00080000000000000000000800010000000000440007800800", @ANYRES32, @ANYRES32], 0x90}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) syz_open_dev$admmidi(&(0x7f0000000040), 0x6, 0x22000) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b34, 0x0) r4 = fsopen(&(0x7f0000000340)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x8, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x3, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)=0x74000000) prlimit64(0x0, 0x0, 0x0, 0x0) write$dsp(r5, &(0x7f0000002000)='`', 0x88020) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r6, &(0x7f0000006fc0)=[{{&(0x7f0000003200)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000034c0)=ANY=[@ANYBLOB="180000000000000086"], 0x18}}], 0x1, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) 10.285857211s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f00003c3000/0x4000)=nil, 0x4000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000000), 0x4) syz_open_dev$vim2m(&(0x7f0000000080), 0x20007, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000000)={0xf7fffffc, 0x2, 0x0, "f5c9e766b27fdf20ec08f62b04725e451d86d1b8842a522fb127eafba615bd55"}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x2880008}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0xa, 0x0) epoll_create1(0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000680), 0xc, &(0x7f0000000800)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x48080}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) socketpair(0x15, 0xa, 0x3, &(0x7f00000001c0)) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000f00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) r4 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) 9.533533097s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x48d00, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000}) r3 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x1, 0x4, 0x3, 0x0, 0x0, {0x3}, [@NFULA_CFG_CMD={0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44004) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x6611, 0x0) setsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000500)="420faddd8c6330f11878ba56dc5c", 0xe) r6 = syz_open_procfs(0x0, 0x0) read$FUSE(r6, &(0x7f00000008c0)={0x2020}, 0x2020) 8.549065243s ago: executing program 2: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x562, 0x0, 0x0, "30cae84df91232fc"}) socket$inet6(0xa, 0x2, 0x0) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c00080000000000000000000800010000000000440007800800", @ANYRES32, @ANYRES32], 0x90}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) syz_open_dev$admmidi(&(0x7f0000000040), 0x6, 0x22000) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b34, 0x0) r4 = fsopen(&(0x7f0000000340)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x8, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x3, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)=0x74000000) prlimit64(0x0, 0x0, 0x0, 0x0) write$dsp(r5, &(0x7f0000002000)='`', 0x88020) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r6, &(0x7f0000006fc0)=[{{&(0x7f0000003200)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000034c0)=ANY=[@ANYBLOB="180000000000000086"], 0x18}}], 0x1, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) 7.913948297s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) dup(r2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000100)=0x21) write$binfmt_elf32(r3, &(0x7f0000001700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 5.653873253s ago: executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) syncfs(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000400)=[{0x0, 0x3, 0x0, 0x7613}, {0x6, 0x2, 0x8, 0x2b52}, {0x401, 0x9, 0x9, 0x3ff}, {0x825b, 0x81, 0x2, 0x634}, {0xc0e, 0x3f, 0x55, 0x1f}, {0x0, 0x0, 0x7, 0x2}]}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) io_uring_setup(0xfc2, &(0x7f0000000180)={0x0, 0x0, 0x1000, 0x0, 0x19}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[{0xfff, 0x2b, 0x0, 0x3}, {0x57a, 0x9, 0x20, 0x62e2}, {0x8, 0x3, 0x2c, 0x4012}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'virt_wifi0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x5, &(0x7f0000000080)=[{0x45, 0x0, 0x2, 0xffffffff}, {0x0, 0x0, 0x9, 0x2}, {0x81}, {0x20, 0x10, 0x0, 0x20}, {0x6}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = epoll_create(0x8002) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)) 5.382531307s ago: executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(0xffffffffffffffff, 0x7b3, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) r5 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1864, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000100), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x10, r0, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x8, &(0x7f0000003480), &(0x7f0000000080)=0x80) 4.372009447s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 4.230808965s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r4, 0x40384708, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3}, @call]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.212416628s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x48d00, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000}) r3 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x1, 0x4, 0x3, 0x0, 0x0, {0x3}, [@NFULA_CFG_CMD={0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44004) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x6611, 0x0) setsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000500)="420faddd8c6330f11878ba56dc5c", 0xe) syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020}, 0x2020) 3.791667838s ago: executing program 0: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000005c0)='veno\x00', 0x5) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) 3.388995978s ago: executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x2000}, 0x18) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, "0500fb0000ccc700"}) 3.308909232s ago: executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) read$alg(r0, &(0x7f00000010c0)=""/4120, 0x1018) write$binfmt_script(r0, &(0x7f0000004180), 0xff77) 3.154824937s ago: executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0}, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) writev(r1, &(0x7f0000001f00)=[{&(0x7f0000000d00)="b6", 0xa8}, {0x0}], 0x2) 3.075780442s ago: executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) 2.911616612s ago: executing program 0: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x562, 0x0, 0x0, "30cae84df91232fc"}) socket$inet6(0xa, 0x2, 0x0) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c00080000000000000000000800010000000000440007800800", @ANYRES32, @ANYRES32], 0x90}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) syz_open_dev$admmidi(&(0x7f0000000040), 0x6, 0x22000) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b34, 0x0) r4 = fsopen(&(0x7f0000000340)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x8, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x3, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)=0x74000000) prlimit64(0x0, 0x0, 0x0, 0x0) write$dsp(r5, &(0x7f0000002000)='`', 0x88020) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r6, &(0x7f0000006fc0)=[{{&(0x7f0000003200)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000034c0)=ANY=[@ANYBLOB="180000000000000086"], 0x18}}], 0x1, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) 2.20430642s ago: executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x1056c0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x47, 0x7ff, 0x55, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x10, 0x81, 0xfffffffd}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r3, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x40014) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000002c0)=""/90) write$cgroup_devices(r2, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) open_by_handle_at(r0, &(0x7f0000000080)=@isofs_parent={0x14, 0x2, {0x112}}, 0x0) 1.609774068s ago: executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x2, 0x69, 0x75, 0x8}, {0x7fff, 0x9, 0xe, 0x5}, {0x4f0b, 0x2, 0x7f, 0x401}, {0x7, 0x1e, 0x7f, 0xe59}, {0x40, 0xba, 0xac, 0x3}, {0x8, 0x7, 0x81, 0x9}, {0x6, 0x7, 0x6, 0x125}, {0x20, 0x0, 0x80, 0x9}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000180)={0x0, 0x2, 0x4, {0x9, @vbi}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={0x0}) setresgid(0xee00, 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = getgid() setgid(r6) setgroups(0x0, 0x0) setresuid(0x0, 0xee00, 0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000002780)={0x0}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r8, &(0x7f0000000880)=""/4096, 0x1000, 0x4000000040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r7, 0x3, r2, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r7, 0x1, r0, 0x400}) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev, 'lo\x00'}}, 0x1e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}}, 0x0) sendmmsg(r0, &(0x7f0000000080), 0x4000000000001f0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@link_local, @broadcast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33883", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @local, [@srh={0x29}], "c6214c554ba11913"}}}}}}}, 0x0) 1.519990437s ago: executing program 3: capset(&(0x7f0000000000), &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x0, 0x0) fchown(r0, 0xee01, 0x0) 1.433643855s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_es_lookup_extent_exit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_es_lookup_extent_exit\x00', r2}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)=@generic={&(0x7f0000000cc0)='./file0\x00'}, 0x18) 1.347039034s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) 1.218389088s ago: executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) 1.128695841s ago: executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/33, 0x21}}], 0x2, 0x12141, 0x0) 1.00703603s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x48d00, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000}) r3 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x1, 0x4, 0x3, 0x0, 0x0, {0x3}, [@NFULA_CFG_CMD={0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44004) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x6611, 0x0) setsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000500)="420faddd8c6330f11878ba56dc5c", 0xe) syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020}, 0x2020) 2.641671ms ago: executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000006a0083130000000000000000000000000000000008000e00000000"], 0x28}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x8, 0x0, 0x0, 0xdffffffe, "00207da000000000201ba30c54605cd284bef100001248daae0b4900"}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100001000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) timer_create(0x0, 0x0, &(0x7f00009b1ffc)=0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x5, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) timer_gettime(r8, &(0x7f0000000080)) madvise(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x15) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) 0s ago: executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) write(r0, &(0x7f0000000000)='#', 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "5f730000a9003f00"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts. 2024/06/15 17:41:03 fuzzer started 2024/06/15 17:41:04 dialing manager at 10.128.0.169:30008 [ 56.699418][ T5078] cgroup: Unknown subsys name 'net' [ 56.848460][ T5078] cgroup: Unknown subsys name 'rlimit' 2024/06/15 17:41:05 starting 5 executor processes [ 57.984849][ T5088] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.573922][ T5102] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.583390][ T5102] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.591262][ T5102] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.599751][ T5102] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.606933][ T5102] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.625654][ T5102] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.625837][ T5107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.642656][ T5102] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.650669][ T5102] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.658265][ T5106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.667107][ T5106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.677313][ T5106] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.680562][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.685474][ T5106] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.699412][ T5106] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.702571][ T5113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.719190][ T5113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.727448][ T5113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.735278][ T5113] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.742673][ T5113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.760072][ T5111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.785363][ T5106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.793124][ T5106] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.800673][ T5106] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.868407][ T5106] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.876610][ T5106] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.884355][ T5106] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.893155][ T5106] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.903202][ T5106] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 59.911375][ T5106] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.320307][ T5103] chnl_net:caif_netlink_parms(): no params data found [ 60.332511][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 60.451415][ T5100] chnl_net:caif_netlink_parms(): no params data found [ 60.503345][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 60.612779][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.620304][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.627822][ T5110] bridge_slave_0: entered allmulticast mode [ 60.635518][ T5110] bridge_slave_0: entered promiscuous mode [ 60.669129][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.677291][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.684469][ T5110] bridge_slave_1: entered allmulticast mode [ 60.691466][ T5110] bridge_slave_1: entered promiscuous mode [ 60.699208][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.706351][ T5103] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.713458][ T5103] bridge_slave_0: entered allmulticast mode [ 60.721135][ T5103] bridge_slave_0: entered promiscuous mode [ 60.728153][ T5118] chnl_net:caif_netlink_parms(): no params data found [ 60.761192][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.768459][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.776162][ T5108] bridge_slave_0: entered allmulticast mode [ 60.782842][ T5108] bridge_slave_0: entered promiscuous mode [ 60.801199][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.809562][ T5103] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.817253][ T5103] bridge_slave_1: entered allmulticast mode [ 60.824094][ T5103] bridge_slave_1: entered promiscuous mode [ 60.866213][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.873322][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.880632][ T5108] bridge_slave_1: entered allmulticast mode [ 60.888094][ T5108] bridge_slave_1: entered promiscuous mode [ 60.910631][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.950025][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.957752][ T5100] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.965581][ T5100] bridge_slave_0: entered allmulticast mode [ 60.972236][ T5100] bridge_slave_0: entered promiscuous mode [ 60.980520][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.987703][ T5100] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.994944][ T5100] bridge_slave_1: entered allmulticast mode [ 61.002100][ T5100] bridge_slave_1: entered promiscuous mode [ 61.022695][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.080709][ T5103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.118400][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.131029][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.152374][ T5103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.177583][ T5100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.190490][ T5100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.214028][ T5110] team0: Port device team_slave_0 added [ 61.236714][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.243829][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.251379][ T5118] bridge_slave_0: entered allmulticast mode [ 61.259281][ T5118] bridge_slave_0: entered promiscuous mode [ 61.267406][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.274490][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.282113][ T5118] bridge_slave_1: entered allmulticast mode [ 61.289611][ T5118] bridge_slave_1: entered promiscuous mode [ 61.321330][ T5108] team0: Port device team_slave_0 added [ 61.329473][ T5110] team0: Port device team_slave_1 added [ 61.379446][ T5108] team0: Port device team_slave_1 added [ 61.408062][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.415907][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.442230][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.458678][ T5103] team0: Port device team_slave_0 added [ 61.467802][ T5103] team0: Port device team_slave_1 added [ 61.488122][ T5100] team0: Port device team_slave_0 added [ 61.505124][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.512191][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.538883][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.563399][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.574970][ T5100] team0: Port device team_slave_1 added [ 61.581450][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.588722][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.614934][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.644136][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.678926][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.685957][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.712930][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.725532][ T5106] Bluetooth: hci1: command tx timeout [ 61.751136][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.758166][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.784177][ T5103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.805077][ T5106] Bluetooth: hci3: command tx timeout [ 61.810570][ T5107] Bluetooth: hci0: command tx timeout [ 61.817816][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.825425][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.851402][ T5100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.865054][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.872187][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.898887][ T5106] Bluetooth: hci2: command tx timeout [ 61.904980][ T5100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.943128][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.950549][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.976743][ T5106] Bluetooth: hci4: command tx timeout [ 61.977179][ T5103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.028879][ T5108] hsr_slave_0: entered promiscuous mode [ 62.035644][ T5108] hsr_slave_1: entered promiscuous mode [ 62.047922][ T5110] hsr_slave_0: entered promiscuous mode [ 62.054252][ T5110] hsr_slave_1: entered promiscuous mode [ 62.061319][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.069166][ T5110] Cannot create hsr debugfs directory [ 62.091053][ T5118] team0: Port device team_slave_0 added [ 62.141169][ T5118] team0: Port device team_slave_1 added [ 62.161101][ T5100] hsr_slave_0: entered promiscuous mode [ 62.167832][ T5100] hsr_slave_1: entered promiscuous mode [ 62.175017][ T5100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.182595][ T5100] Cannot create hsr debugfs directory [ 62.225026][ T5103] hsr_slave_0: entered promiscuous mode [ 62.231385][ T5103] hsr_slave_1: entered promiscuous mode [ 62.238512][ T5103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.246193][ T5103] Cannot create hsr debugfs directory [ 62.262187][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.269264][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.295422][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.341982][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.349057][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.375162][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.514092][ T5118] hsr_slave_0: entered promiscuous mode [ 62.520483][ T5118] hsr_slave_1: entered promiscuous mode [ 62.528623][ T5118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.536491][ T5118] Cannot create hsr debugfs directory [ 62.813992][ T5108] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.826065][ T5108] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.855594][ T5108] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.865540][ T5108] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.936835][ T5110] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.953195][ T5110] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.970537][ T5110] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.985476][ T5110] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.076281][ T5100] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.086767][ T5100] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.099575][ T5100] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.119163][ T5100] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.206061][ T5103] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.255412][ T5103] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.285435][ T5103] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.298224][ T5103] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.368674][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.389502][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.398336][ T5118] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.410764][ T5118] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.435912][ T5118] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.448078][ T5118] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.490333][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.504039][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.540051][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.547510][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.584073][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.591269][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.638441][ T5100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.650759][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.657982][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.668423][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.675670][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.730428][ T5100] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.773964][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.781193][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.805028][ T5106] Bluetooth: hci1: command tx timeout [ 63.812474][ T5103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.854064][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.861360][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.887032][ T5106] Bluetooth: hci3: command tx timeout [ 63.887040][ T5107] Bluetooth: hci0: command tx timeout [ 63.902560][ T5103] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.964968][ T5106] Bluetooth: hci2: command tx timeout [ 64.004275][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.011472][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.044854][ T5106] Bluetooth: hci4: command tx timeout [ 64.079489][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.086676][ T5156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.263435][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.306193][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.418712][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.441976][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.488176][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.495368][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.507574][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.514743][ T5156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.531912][ T5108] veth0_vlan: entered promiscuous mode [ 64.624343][ T5100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.659875][ T5108] veth1_vlan: entered promiscuous mode [ 64.731171][ T5103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.853662][ T5108] veth0_macvtap: entered promiscuous mode [ 64.866891][ T5110] veth0_vlan: entered promiscuous mode [ 64.899757][ T5108] veth1_macvtap: entered promiscuous mode [ 64.924644][ T5110] veth1_vlan: entered promiscuous mode [ 64.957757][ T5103] veth0_vlan: entered promiscuous mode [ 64.972621][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.004223][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.024137][ T5108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.042494][ T5108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.053772][ T5108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.064057][ T5108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.143767][ T5100] veth0_vlan: entered promiscuous mode [ 65.151453][ T5103] veth1_vlan: entered promiscuous mode [ 65.162509][ T5110] veth0_macvtap: entered promiscuous mode [ 65.181006][ T5110] veth1_macvtap: entered promiscuous mode [ 65.201134][ T5100] veth1_vlan: entered promiscuous mode [ 65.237400][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.312366][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.325802][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.338536][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.353043][ T5103] veth0_macvtap: entered promiscuous mode [ 65.363833][ T5103] veth1_macvtap: entered promiscuous mode [ 65.383962][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.395260][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.409299][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.428964][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.448271][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.450463][ T5110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.465891][ T5110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.474991][ T5110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.483707][ T5110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.512581][ T5100] veth0_macvtap: entered promiscuous mode [ 65.542634][ T2851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.562921][ T2851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.571852][ T5100] veth1_macvtap: entered promiscuous mode [ 65.593795][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.605547][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.616425][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.628153][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.639792][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.653809][ T5118] veth0_vlan: entered promiscuous mode [ 65.663867][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.675678][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.685650][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.697273][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.708826][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.727572][ T5118] veth1_vlan: entered promiscuous mode [ 65.746811][ T5103] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.760393][ T5103] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.770036][ T5103] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.779939][ T5103] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.859307][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.872897][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.884342][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.895488][ T5106] Bluetooth: hci1: command tx timeout [ 65.901241][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.911666][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.924228][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.939104][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.950077][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.964924][ T5106] Bluetooth: hci3: command tx timeout [ 65.967075][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.980853][ T5106] Bluetooth: hci0: command tx timeout [ 65.989481][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.000561][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.011101][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.022452][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.040849][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.049824][ T5106] Bluetooth: hci2: command tx timeout [ 66.077185][ T5100] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.087638][ T5100] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.111610][ T5100] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.124835][ T5106] Bluetooth: hci4: command tx timeout [ 66.126470][ T29] audit: type=1804 audit(1718473273.738:2): pid=5190 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3378702475/syzkaller.oOeB0Y/1/bus" dev="sda1" ino=1944 res=1 errno=0 [ 66.156778][ T5100] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.240988][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.264647][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.273697][ T5118] veth0_macvtap: entered promiscuous mode [ 66.302356][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.317869][ T5118] veth1_macvtap: entered promiscuous mode [ 66.335824][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.436446][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.454695][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.482046][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.492897][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.542224][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.560572][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.572859][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.583654][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.595908][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.607704][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.619949][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.630750][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.643980][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.677215][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.689667][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.699714][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.712139][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.722112][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.744704][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.759236][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.770749][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.782501][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.806093][ T2851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.827021][ T2851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.849926][ T5118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.875574][ T5118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.884317][ T5118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.908265][ T5206] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.932930][ T5118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.033133][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.078452][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.296884][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.318585][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.387452][ T5209] kvm: emulating exchange as write [ 67.479441][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.517385][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.853465][ T29] audit: type=1804 audit(1718473275.468:3): pid=5231 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir920043509/syzkaller.MkYHWi/4/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 67.964866][ T5106] Bluetooth: hci1: command tx timeout [ 68.046654][ T5106] Bluetooth: hci0: command tx timeout [ 68.046739][ T5107] Bluetooth: hci3: command tx timeout [ 68.125779][ T5107] Bluetooth: hci2: command tx timeout [ 68.205841][ T5107] Bluetooth: hci4: command tx timeout [ 68.451590][ T29] audit: type=1800 audit(1718473276.068:4): pid=5250 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name=".log" dev="sda1" ino=1965 res=0 errno=0 [ 70.095693][ T5266] Zero length message leads to an empty skb [ 70.374279][ T5272] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 72.400913][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.407855][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.484846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.502120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.234885][ T5352] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use) [ 75.325657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.334153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.656913][ T29] audit: type=1804 audit(1718473284.268:5): pid=5396 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3333400000/syzkaller.dw2xco/12/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 76.867324][ T784] cfg80211: failed to load regulatory.db [ 78.143483][ T5416] loop2: detected capacity change from 0 to 8 [ 78.222472][ T5418] sctp: [Deprecated]: syz-executor.3 (pid 5418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 78.222472][ T5418] Use struct sctp_sack_info instead [ 80.178770][ T5410] syz-executor.1 (5410) used greatest stack depth: 18520 bytes left [ 80.514307][ T5460] loop1: detected capacity change from 0 to 8192 [ 80.522040][ T5460] ======================================================= [ 80.522040][ T5460] WARNING: The mand mount option has been deprecated and [ 80.522040][ T5460] and is ignored by this kernel. Remove the mand [ 80.522040][ T5460] option from the mount to silence this warning. [ 80.522040][ T5460] ======================================================= [ 80.583599][ T5460] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.537615][ T5475] loop3: detected capacity change from 0 to 8 [ 83.340183][ T5506] loop3: detected capacity change from 0 to 8192 [ 83.409058][ T5506] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.210750][ T5528] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 84.226486][ T5525] loop3: detected capacity change from 0 to 8 [ 85.873900][ T5541] kvm: kvm [5540]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x2500000000 [ 85.898934][ T5541] kvm: kvm [5540]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x2500000000 [ 85.924872][ T5541] kvm: kvm [5540]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x2500000800 [ 86.388222][ T5561] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 88.038684][ T5156] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.257925][ T5156] usb 1-1: Using ep0 maxpacket: 8 [ 88.285662][ T5156] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 88.294092][ T5156] usb 1-1: config 0 has no interface number 0 [ 88.301537][ T5156] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 88.311751][ T5156] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 88.341087][ T5156] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.399337][ T5156] usb 1-1: config 0 descriptor?? [ 88.426203][ T5156] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 89.183567][ T5623] net_ratelimit: 2 callbacks suppressed [ 89.183582][ T5623] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 90.762510][ T5152] usb 1-1: USB disconnect, device number 2 [ 91.320051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.880471][ T5696] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.775219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.824676][ T5152] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.956505][ T29] audit: type=1326 audit(1718473300.578:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5700 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f434047cea9 code=0x0 [ 93.054752][ T5152] usb 1-1: Using ep0 maxpacket: 8 [ 93.094689][ T5152] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 93.191580][ T5152] usb 1-1: config 0 has no interface number 0 [ 93.247882][ T5152] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 93.416639][ T5152] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 93.460470][ T5152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.484112][ T5152] usb 1-1: config 0 descriptor?? [ 93.501882][ T5152] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 94.605214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.244086][ T5171] usb 1-1: USB disconnect, device number 3 [ 95.313476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.645244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 98.072311][ T5106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.083629][ T5106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.091959][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.113352][ T5106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.134215][ T5106] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.141867][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.308237][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.296292][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.424815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.449505][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.538957][ T29] audit: type=1804 audit(1718473307.158:7): pid=5809 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3333400000/syzkaller.dw2xco/40/bus" dev="sda1" ino=1959 res=1 errno=0 [ 99.570280][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.824755][ T29] audit: type=1326 audit(1718473307.438:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5808 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9efbe7cea9 code=0x0 [ 100.017815][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 100.255588][ T5106] Bluetooth: hci0: command tx timeout [ 100.990292][ T61] bridge_slave_1: left allmulticast mode [ 101.038145][ T61] bridge_slave_1: left promiscuous mode [ 101.068311][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.485997][ T61] bridge_slave_0: left allmulticast mode [ 101.608297][ T61] bridge_slave_0: left promiscuous mode [ 101.717426][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.290347][ T5106] Bluetooth: hci0: command tx timeout [ 102.424636][ T5156] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.531197][ T29] audit: type=1804 audit(1718473310.148:9): pid=5868 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir920043509/syzkaller.MkYHWi/31/bus" dev="sda1" ino=1959 res=1 errno=0 [ 102.650014][ T29] audit: type=1326 audit(1718473310.268:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5867 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f101a67cea9 code=0x0 [ 102.675048][ T5156] usb 2-1: Using ep0 maxpacket: 8 [ 102.692817][ T5156] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.701986][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.714614][ T5156] usb 2-1: config 0 has no interface number 0 [ 102.731338][ T5156] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 102.741878][ T5156] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 102.742050][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.784136][ T5156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.802577][ T61] bond0 (unregistering): Released all slaves [ 102.803252][ T5156] usb 2-1: config 0 descriptor?? [ 102.840339][ T5156] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 103.002110][ T29] audit: type=1800 audit(1718473310.618:11): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name=".log" dev="sda1" ino=1962 res=0 errno=0 [ 103.311588][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.322098][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.364832][ T5785] bridge_slave_0: entered allmulticast mode [ 103.377849][ T5785] bridge_slave_0: entered promiscuous mode [ 103.509113][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.533428][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.554872][ T5785] bridge_slave_1: entered allmulticast mode [ 103.578737][ T5785] bridge_slave_1: entered promiscuous mode [ 103.690097][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.763428][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.941553][ T61] hsr_slave_0: left promiscuous mode [ 103.961060][ T61] hsr_slave_1: left promiscuous mode [ 103.982778][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.008840][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.034152][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.051987][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.112080][ T61] veth1_macvtap: left promiscuous mode [ 104.137103][ T61] veth0_macvtap: left promiscuous mode [ 104.149365][ T61] veth1_vlan: left promiscuous mode [ 104.161666][ T61] veth0_vlan: left promiscuous mode [ 104.364998][ T5106] Bluetooth: hci0: command tx timeout [ 105.145815][ T5152] usb 2-1: USB disconnect, device number 2 [ 210.284561][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 210.291623][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5913/1:b..l [ 210.299823][ C0] rcu: (detected by 0, t=10502 jiffies, g=10961, q=503 ncpus=2) [ 210.307538][ C0] task:rm state:R running task stack:23680 pid:5913 tgid:5913 ppid:5890 flags:0x00000000 [ 210.320118][ C0] Call Trace: [ 210.323389][ C0] [ 210.326307][ C0] __schedule+0x1796/0x49d0 [ 210.330829][ C0] ? __pfx___schedule+0x10/0x10 [ 210.335668][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 210.341639][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 210.346912][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 210.352005][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 210.357712][ C0] irqentry_exit+0x5e/0x90 [ 210.362109][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 210.368079][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 210.373346][ C0] Code: 2b 00 74 08 4c 89 f7 e8 ba 3a 86 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 210.392949][ C0] RSP: 0018:ffffc900129b7ce0 EFLAGS: 00000206 [ 210.399013][ C0] RAX: 0000000000000001 RBX: 1ffff92002536fa8 RCX: 0000000000000001 [ 210.407158][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcacd00 RDI: ffffffff8c1f2480 [ 210.415124][ C0] RBP: ffffc900129b7e28 R08: ffffffff92f74587 R09: 1ffffffff25ee8b0 [ 210.423082][ C0] R10: dffffc0000000000 R11: fffffbfff25ee8b1 R12: 1ffff92002536fa4 [ 210.431041][ C0] R13: dffffc0000000000 R14: ffffc900129b7d40 R15: 0000000000000246 [ 210.439011][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 210.444116][ C0] ? vm_mmap_pgoff+0x2ca/0x3d0 [ 210.448868][ C0] __fget_files+0x49/0x470 [ 210.453266][ C0] ? __fget_files+0x29/0x470 [ 210.457833][ C0] ? __fget_files+0x29/0x470 [ 210.462404][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 210.468717][ C0] ksys_mmap_pgoff+0x23b/0x720 [ 210.473468][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 210.478229][ C0] do_syscall_64+0xf3/0x230 [ 210.482718][ C0] ? clear_bhb_loop+0x35/0x90 [ 210.487382][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.493274][ C0] RIP: 0033:0x7fe4d065eb74 [ 210.497682][ C0] RSP: 002b:00007ffd30e06838 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 210.506096][ C0] RAX: ffffffffffffffda RBX: 00007ffd30e068e8 RCX: 00007fe4d065eb74 [ 210.514145][ C0] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 00007fe4d03b3000 [ 210.522099][ C0] RBP: 00007ffd30e06c10 R08: 0000000000000003 R09: 0000000000022000 [ 210.530061][ C0] R10: 0000000000000812 R11: 0000000000000246 R12: 00007fe4d063bfc0 [ 210.538101][ C0] R13: 00007ffd30e06c98 R14: 0000000000021bd8 R15: 0000000000000000 [ 210.546064][ C0] [ 210.549085][ C0] rcu: rcu_preempt kthread starved for 10527 jiffies! g10961 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 210.560252][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 210.570200][ C0] rcu: RCU grace-period kthread stack dump: [ 210.576064][ C0] task:rcu_preempt state:R running task stack:25584 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 210.587775][ C0] Call Trace: [ 210.591035][ C0] [ 210.593952][ C0] __schedule+0x1796/0x49d0 [ 210.598451][ C0] ? __pfx___schedule+0x10/0x10 [ 210.603290][ C0] ? __pfx_lock_release+0x10/0x10 [ 210.608305][ C0] ? __asan_memset+0x23/0x50 [ 210.612883][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 210.618706][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 210.625035][ C0] ? schedule+0x90/0x320 [ 210.629281][ C0] schedule+0x14b/0x320 [ 210.633420][ C0] schedule_timeout+0x1be/0x310 [ 210.638254][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 210.643612][ C0] ? __pfx_process_timeout+0x10/0x10 [ 210.648971][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 210.654500][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 210.659336][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 210.664259][ C0] ? __pfx_dyntick_save_progress_counter+0x10/0x10 [ 210.670741][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 210.676011][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 210.680582][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 210.685758][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 210.691654][ C0] ? __kthread_parkme+0x169/0x1d0 [ 210.696679][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 210.701873][ C0] kthread+0x2f0/0x390 [ 210.705935][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 210.711125][ C0] ? __pfx_kthread+0x10/0x10 [ 210.715702][ C0] ret_from_fork+0x4b/0x80 [ 210.720195][ C0] ? __pfx_kthread+0x10/0x10 [ 210.724802][ C0] ret_from_fork_asm+0x1a/0x30 [ 210.729648][ C0] [ 210.732665][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 210.738978][ C0] Sending NMI from CPU 0 to CPUs 1: [ 210.744177][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 210.745485][ C0] sched: RT throttling activated