last executing test programs: 21.739353811s ago: executing program 2 (id=264): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x4, 0x18}]}, 0x18}], 0x1}, 0x0) 19.5332731s ago: executing program 2 (id=267): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000280)=@v2={0x2000000, [{0xdb16, 0xb9f}, {0x7, 0x709f8334}]}, 0x14, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 17.327382933s ago: executing program 2 (id=274): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x270}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="286d81866e6b77fbbd308e16", 0xc}], 0x1, &(0x7f00000002c0), 0x0, 0x24008000}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000340)=""/181, 0xb5}], 0x1, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000014c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@broadcast, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x500, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}}}}}}, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0xb9, 0xd, 0x4, 0x0, 0x4}) openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x20200, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x151, 0x100) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x13, r6, 0x58341000) 16.899436734s ago: executing program 5 (id=279): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x270}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x2, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="286d81866e6b77fbbd308e16", 0xc}], 0x1, &(0x7f00000002c0), 0x0, 0x24008000}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000340)=""/181, 0xb5}], 0x1, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000014c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@broadcast, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x500, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}}}}}}, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0xb9, 0xd, 0x4, 0x0, 0x4}) openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x20200, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x151, 0x100) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x13, r6, 0x58341000) 15.120314308s ago: executing program 4 (id=282): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) 13.836390441s ago: executing program 0 (id=284): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x3000b14, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_on}]}) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r0, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000040)='./file1\x00', 0x2) 13.26394465s ago: executing program 2 (id=289): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a0102e9ff000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f27d3e08f90a3ffe32f53baa749fe0790a0d0e1f76d056d656332eca6d822a42983bf3e45b0c80e2d273f6cbc7cb4f77cb7abd3779c86449b0ee849149b77c5d6ab2114c0f"], 0xfc}}, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000020601080000000080080011400000000005001500020000000500010006000000050005000a000000050004001e0000000900020073797a310000000015000300686173683a69702c706f72742c6e657400000000"], 0x64}}, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x8) listen(r0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x1a5a, 0x4) setsockopt$inet_buf(r4, 0x0, 0x20, &(0x7f00000003c0)="170000000000020000ffbe8c", 0xc) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 12.685410384s ago: executing program 4 (id=292): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&\x00', @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r1) 12.684979929s ago: executing program 0 (id=293): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4050) 12.521997593s ago: executing program 1 (id=294): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'macvlan0\x00', 'syzkaller0\x00'}, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @dev, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "306720a65ecadd8f8d4096edd3a616a0c3491e3bea200200", "8e6dbc6bc4b02931a149e80581e14a2c", {"a65651e8000000000000007f96141e51", "dac60bebefc50000000000000200"}}}}}}}, 0x0) 12.369179658s ago: executing program 0 (id=295): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x4004008}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000015000100000000000000000002000000", @ANYRES32, @ANYBLOB="080001"], 0x28}}, 0x0) 12.296668785s ago: executing program 3 (id=296): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x28}], 0x2) 12.126061617s ago: executing program 1 (id=297): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x1}, {0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x1}}], 0x10) bind$can_raw(r0, &(0x7f0000000480)={0x1d, r2}, 0x10) 12.107560992s ago: executing program 5 (id=298): syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000000)) 11.984481637s ago: executing program 5 (id=299): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) syz_genetlink_get_family_id$SEG6(&(0x7f0000009040), 0xffffffffffffffff) 11.850579451s ago: executing program 3 (id=300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) 11.738147183s ago: executing program 0 (id=301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 11.691568539s ago: executing program 1 (id=302): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x2, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) symlink(0x0, &(0x7f0000002140)='./file0\x00') lremovexattr(&(0x7f00000043c0)='./file0\x00', &(0x7f0000004400)=@known='system.posix_acl_default\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 11.310286711s ago: executing program 4 (id=303): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 10.908521915s ago: executing program 3 (id=304): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 10.62916665s ago: executing program 5 (id=305): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.413560388s ago: executing program 0 (id=306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 8.462593758s ago: executing program 3 (id=307): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4050) 8.46225267s ago: executing program 5 (id=308): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x4, 0x18}]}, 0x18}], 0x1}, 0x0) 8.375888119s ago: executing program 2 (id=309): socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0'}, 0xb) close(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 8.21340013s ago: executing program 1 (id=310): socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x0) 8.212577943s ago: executing program 4 (id=311): syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), 0x0, 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000000)) 8.136955395s ago: executing program 4 (id=312): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'macvlan0\x00', 'syzkaller0\x00'}, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @dev, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "306720a65ecadd8f8d4096edd3a616a0c3491e3bea200200", "8e6dbc6bc4b02931a149e80581e14a2c", {"a65651e8000000000000007f96141e51", "dac60bebefc50000000000000200"}}}}}}}, 0x0) 8.05352448s ago: executing program 3 (id=313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x28}], 0x2) 7.753028415s ago: executing program 4 (id=314): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x4004008}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000015000100000000000000000002000000", @ANYRES32, @ANYBLOB="080001"], 0x28}}, 0x0) 7.653804876s ago: executing program 0 (id=315): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x5, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}]}}]}, 0xac}}, 0x0) 7.645153213s ago: executing program 1 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) epoll_create1(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000ff0f0000070000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000000014e6e2de"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x4000}, 0x0) recvmmsg(r5, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000021c0)=""/4104, 0x1008}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8}], 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) creat(&(0x7f0000000240)='./bus\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff00"/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d2, &(0x7f0000000100)) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) 7.516833028s ago: executing program 2 (id=317): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000300)='./file0\x00', 0x4) 311.803393ms ago: executing program 3 (id=318): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000100039042abd7000eaffffff000003e4", @ANYRES32=r3, @ANYBLOB="1006"], 0x20}, 0x1, 0x0, 0x0, 0x48044}, 0x4008040) 310.243544ms ago: executing program 5 (id=319): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a0102e9ff000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f27d3e08f90a3ffe32f53baa749fe0790a0d0e1f76d056d656332eca6d822a42983bf3e45b0c80e2d273f6cbc7cb4f77cb7abd3779c86449b0ee849149b77c5d6ab2114c0f"], 0xfc}}, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000020601080000000080080011400000000005001500020000000500010006000000050005000a000000050004001e0000000900020073797a310000000015000300686173683a69702c706f72742c6e657400000000"], 0x64}}, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x8) listen(r0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x1a5a, 0x4) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000003c0)="170000000000020000ffbe8c", 0xc) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 0s ago: executing program 1 (id=320): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$hiddev(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.25' (ED25519) to the list of known hosts. [ 68.286642][ T5832] cgroup: Unknown subsys name 'net' [ 68.424762][ T5832] cgroup: Unknown subsys name 'cpuset' [ 68.433196][ T5832] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.879930][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.853909][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.860365][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.726724][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.751384][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.759021][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.766537][ T5863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.774526][ T5863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 74.783280][ T5863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.789347][ T5866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.790835][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.798559][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.805550][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.819422][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.827323][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.834866][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.842168][ T5863] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.843602][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.849436][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.864809][ T5863] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 74.865317][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.874143][ T5863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.880210][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.886012][ T5863] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 74.894511][ T5867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.902181][ T5863] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 74.907603][ T5864] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.921415][ T5867] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.928914][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.936606][ T5867] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 74.944353][ T5864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 74.947027][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.952896][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.959784][ T5852] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.978581][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.985741][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.004195][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.011838][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.019111][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.413990][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 75.572109][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 75.614260][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 75.728618][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 75.764874][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.772528][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.780128][ T5845] bridge_slave_0: entered allmulticast mode [ 75.787812][ T5845] bridge_slave_0: entered promiscuous mode [ 75.811811][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 75.826134][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.833596][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.840777][ T5845] bridge_slave_1: entered allmulticast mode [ 75.847548][ T5845] bridge_slave_1: entered promiscuous mode [ 75.928933][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 75.983230][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.990449][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.997587][ T5844] bridge_slave_0: entered allmulticast mode [ 76.004832][ T5844] bridge_slave_0: entered promiscuous mode [ 76.048856][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.072993][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.080158][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.087731][ T5844] bridge_slave_1: entered allmulticast mode [ 76.095144][ T5844] bridge_slave_1: entered promiscuous mode [ 76.124767][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.132329][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.139531][ T5846] bridge_slave_0: entered allmulticast mode [ 76.146744][ T5846] bridge_slave_0: entered promiscuous mode [ 76.155709][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.203475][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.210779][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.217993][ T5843] bridge_slave_0: entered allmulticast mode [ 76.225880][ T5843] bridge_slave_0: entered promiscuous mode [ 76.234365][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.242685][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.250178][ T5843] bridge_slave_1: entered allmulticast mode [ 76.257213][ T5843] bridge_slave_1: entered promiscuous mode [ 76.264052][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.271335][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.278494][ T5846] bridge_slave_1: entered allmulticast mode [ 76.285426][ T5846] bridge_slave_1: entered promiscuous mode [ 76.311541][ T5845] team0: Port device team_slave_0 added [ 76.329916][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.387105][ T5845] team0: Port device team_slave_1 added [ 76.402300][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.409507][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.417480][ T5847] bridge_slave_0: entered allmulticast mode [ 76.424644][ T5847] bridge_slave_0: entered promiscuous mode [ 76.432925][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.440025][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.447329][ T5847] bridge_slave_1: entered allmulticast mode [ 76.459074][ T5847] bridge_slave_1: entered promiscuous mode [ 76.467249][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.496740][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.509164][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.521165][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.568219][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.597498][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.604596][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.635920][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.649032][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.656284][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.682657][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.707018][ T5844] team0: Port device team_slave_0 added [ 76.744279][ T5846] team0: Port device team_slave_0 added [ 76.758080][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.768975][ T5844] team0: Port device team_slave_1 added [ 76.775341][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.782802][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.789945][ T5856] bridge_slave_0: entered allmulticast mode [ 76.797009][ T5856] bridge_slave_0: entered promiscuous mode [ 76.805137][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.812357][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.819493][ T5856] bridge_slave_1: entered allmulticast mode [ 76.826925][ T5856] bridge_slave_1: entered promiscuous mode [ 76.835741][ T5843] team0: Port device team_slave_0 added [ 76.844389][ T5843] team0: Port device team_slave_1 added [ 76.854235][ T5846] team0: Port device team_slave_1 added [ 76.881488][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.957186][ T5845] hsr_slave_0: entered promiscuous mode [ 76.963936][ T5845] hsr_slave_1: entered promiscuous mode [ 76.989063][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.996084][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.022383][ T5158] Bluetooth: hci0: command tx timeout [ 77.027672][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.027900][ T53] Bluetooth: hci2: command tx timeout [ 77.040491][ T5852] Bluetooth: hci5: command tx timeout [ 77.044602][ T5158] Bluetooth: hci3: command tx timeout [ 77.049566][ T5852] Bluetooth: hci4: command tx timeout [ 77.065463][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.086578][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.093703][ T5852] Bluetooth: hci1: command tx timeout [ 77.093743][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.125572][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.137418][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.144595][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.171538][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.184133][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.191357][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.217376][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.241463][ T5847] team0: Port device team_slave_0 added [ 77.247935][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.255040][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.281127][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.300803][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.310691][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.317638][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.343715][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.369487][ T5847] team0: Port device team_slave_1 added [ 77.453588][ T5844] hsr_slave_0: entered promiscuous mode [ 77.460060][ T5844] hsr_slave_1: entered promiscuous mode [ 77.466660][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.475041][ T5844] Cannot create hsr debugfs directory [ 77.486116][ T5856] team0: Port device team_slave_0 added [ 77.494507][ T5856] team0: Port device team_slave_1 added [ 77.511717][ T5843] hsr_slave_0: entered promiscuous mode [ 77.518085][ T5843] hsr_slave_1: entered promiscuous mode [ 77.524914][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.533098][ T5843] Cannot create hsr debugfs directory [ 77.543575][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.550657][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.576810][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.625818][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.633000][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.667527][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.705569][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.713014][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.739463][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.762892][ T5846] hsr_slave_0: entered promiscuous mode [ 77.769604][ T5846] hsr_slave_1: entered promiscuous mode [ 77.776963][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.784905][ T5846] Cannot create hsr debugfs directory [ 77.808955][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.816163][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.842411][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.003002][ T5847] hsr_slave_0: entered promiscuous mode [ 78.009378][ T5847] hsr_slave_1: entered promiscuous mode [ 78.015827][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.023837][ T5847] Cannot create hsr debugfs directory [ 78.090493][ T5856] hsr_slave_0: entered promiscuous mode [ 78.096867][ T5856] hsr_slave_1: entered promiscuous mode [ 78.104030][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.111659][ T5856] Cannot create hsr debugfs directory [ 78.236947][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.248020][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.289692][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.299105][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.415711][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.449752][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.459298][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.496109][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.534454][ T5844] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 78.548584][ T5844] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 78.567842][ T5844] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 78.578650][ T5844] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 78.673596][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.689449][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.707818][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.738888][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.831814][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.859195][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.869141][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.880032][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.889910][ T5856] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.914314][ T5856] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.927638][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.942490][ T5856] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.955117][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.975681][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.984591][ T5856] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.044015][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.051333][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.062210][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.069606][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.090764][ T5852] Bluetooth: hci2: command tx timeout [ 79.090928][ T5861] Bluetooth: hci3: command tx timeout [ 79.096205][ T5852] Bluetooth: hci5: command tx timeout [ 79.101801][ T53] Bluetooth: hci0: command tx timeout [ 79.110650][ T5852] Bluetooth: hci4: command tx timeout [ 79.118599][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.174968][ T53] Bluetooth: hci1: command tx timeout [ 79.197518][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.204698][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.232880][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.242845][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.249944][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.268809][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.324264][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.349051][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.376020][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.383153][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.392989][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.400118][ T3492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.488431][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.499056][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.547752][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.554933][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.598471][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.620713][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.627820][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.661036][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.668139][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.697602][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.704871][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.789047][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.873550][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.886059][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.900156][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.940288][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.947664][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.033782][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.041001][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.079431][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.159324][ T5845] veth0_vlan: entered promiscuous mode [ 80.228094][ T5843] veth0_vlan: entered promiscuous mode [ 80.245087][ T5845] veth1_vlan: entered promiscuous mode [ 80.304296][ T5843] veth1_vlan: entered promiscuous mode [ 80.348867][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.383683][ T5845] veth0_macvtap: entered promiscuous mode [ 80.399897][ T5843] veth0_macvtap: entered promiscuous mode [ 80.424321][ T5845] veth1_macvtap: entered promiscuous mode [ 80.433338][ T5843] veth1_macvtap: entered promiscuous mode [ 80.447938][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.497599][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.516864][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.532732][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.551530][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.574090][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.599565][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.611602][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.623693][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.649573][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.660802][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.669514][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.678632][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.713387][ T5845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.723022][ T5845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.733314][ T5845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.743518][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.787929][ T5847] veth0_vlan: entered promiscuous mode [ 80.826995][ T5847] veth1_vlan: entered promiscuous mode [ 80.863419][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.873125][ T5844] veth0_vlan: entered promiscuous mode [ 80.921230][ T5846] veth0_vlan: entered promiscuous mode [ 80.966749][ T5846] veth1_vlan: entered promiscuous mode [ 80.969674][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.975617][ T5844] veth1_vlan: entered promiscuous mode [ 80.990579][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.088865][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.110729][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.111189][ T5847] veth0_macvtap: entered promiscuous mode [ 81.147240][ T5847] veth1_macvtap: entered promiscuous mode [ 81.170617][ T53] Bluetooth: hci4: command tx timeout [ 81.171014][ T5852] Bluetooth: hci2: command tx timeout [ 81.176091][ T5861] Bluetooth: hci3: command tx timeout [ 81.181636][ T5850] Bluetooth: hci5: command tx timeout [ 81.186822][ T5158] Bluetooth: hci0: command tx timeout [ 81.234545][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.235713][ T5846] veth0_macvtap: entered promiscuous mode [ 81.249923][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.261550][ T5158] Bluetooth: hci1: command tx timeout [ 81.282354][ T5844] veth0_macvtap: entered promiscuous mode [ 81.303114][ T5844] veth1_macvtap: entered promiscuous mode [ 81.314979][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.321388][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.333879][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.360327][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.360543][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.389581][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.411892][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.477564][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.499896][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.515752][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.526115][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.543296][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.557490][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.566095][ T5846] veth1_macvtap: entered promiscuous mode [ 81.600071][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.624123][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.661282][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.690528][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.706346][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.719418][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.740896][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.748934][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.774375][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.870835][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.898120][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.930446][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.971547][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.990441][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.018589][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.052674][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.125552][ T5844] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.170972][ T5844] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.179725][ T5844] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.222856][ T5844] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.245995][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.275748][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.287722][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.309252][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.320734][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.332733][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.369413][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.469648][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.550351][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.580370][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.591432][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.601698][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.612836][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.623084][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.634671][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.646411][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.664248][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.821132][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.830342][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.839643][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.911876][ T5856] veth0_vlan: entered promiscuous mode [ 83.300779][ T5158] Bluetooth: hci0: command tx timeout [ 83.306962][ T5158] Bluetooth: hci3: command tx timeout [ 83.318896][ T5158] Bluetooth: hci2: command tx timeout [ 83.325029][ T5158] Bluetooth: hci5: command tx timeout [ 83.337573][ T5852] Bluetooth: hci1: command tx timeout [ 83.346277][ T5861] Bluetooth: hci4: command tx timeout [ 83.688282][ T5856] veth1_vlan: entered promiscuous mode [ 83.718666][ T5856] veth0_macvtap: entered promiscuous mode [ 83.743088][ T5856] veth1_macvtap: entered promiscuous mode [ 83.778621][ T5847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.788329][ T5847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.797219][ T5847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.806240][ T5847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.889726][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.901147][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.911852][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.922678][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.932681][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.943437][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.953438][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.964464][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.975497][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.986743][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.998924][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.060876][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.080417][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.091531][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.103517][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.116203][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.127098][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.139499][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.156025][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.320501][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.331554][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.342478][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.402539][ T5856] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.420465][ T5856] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.435682][ T5856] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.444511][ T5856] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.581975][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.584154][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.589811][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.677889][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.750849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.759514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.768152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.807562][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.890487][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.898416][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.922233][ T5964] Zero length message leads to an empty skb [ 84.930816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.970373][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.100643][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.125241][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.466326][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.474598][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.486441][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.504879][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.537690][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.545535][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.587946][ T5971] loop3: detected capacity change from 0 to 512 [ 85.735385][ T5974] process 'syz.5.6' launched './file0' with NULL argv: empty string added [ 86.293368][ T3678] cfg80211: failed to load regulatory.db [ 86.304840][ T5971] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.11: casefold flag without casefold feature [ 86.378970][ T5971] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.11: couldn't read orphan inode 15 (err -117) [ 86.653575][ T5971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.018022][ T5845] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.121123][ T6003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19'. [ 89.549564][ T6010] warning: `syz.1.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.952749][ T6017] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.646129][ T6032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27'. [ 91.677862][ T6031] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.678119][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 92.434263][ T6043] loop4: detected capacity change from 0 to 512 [ 92.589552][ T6043] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.30: casefold flag without casefold feature [ 92.628839][ T6043] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.30: couldn't read orphan inode 15 (err -117) [ 92.652198][ T6043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.685006][ T6052] netlink: 24 bytes leftover after parsing attributes in process `syz.3.35'. [ 92.741588][ T6043] overlayfs: failed to resolve './file0': -2 [ 92.775222][ T6056] loop0: detected capacity change from 0 to 512 [ 92.802143][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 92.930022][ T5856] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.992248][ T6056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 93.030815][ T6064] netlink: 'syz.1.40': attribute type 29 has an invalid length. [ 93.031848][ T6056] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.062101][ T6064] netlink: 'syz.1.40': attribute type 29 has an invalid length. [ 93.370637][ T6067] netlink: 'syz.1.40': attribute type 29 has an invalid length. [ 94.911711][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 96.154865][ T6112] loop2: detected capacity change from 0 to 512 [ 96.605015][ T5924] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.626514][ T6112] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.54: casefold flag without casefold feature [ 97.844664][ T6112] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.54: couldn't read orphan inode 15 (err -117) [ 97.966396][ T6112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.130462][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 98.146982][ T5924] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 98.176328][ T6139] bridge0: entered promiscuous mode [ 98.191418][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 98.210471][ T6139] bridge_slave_1: left allmulticast mode [ 98.216139][ T6139] bridge_slave_1: left promiscuous mode [ 98.226254][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.377651][ T6139] bridge_slave_0: left allmulticast mode [ 98.387071][ T6139] bridge_slave_0: left promiscuous mode [ 98.398103][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.529989][ T5924] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 98.537732][ T6139] bridge0 (unregistering): left promiscuous mode [ 98.551730][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.578381][ T5924] usb 5-1: config 0 descriptor?? [ 98.732643][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.021028][ T5924] usb 5-1: can't set config #0, error -71 [ 99.034954][ T5924] usb 5-1: USB disconnect, device number 2 [ 99.809216][ T6182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.74'. [ 101.157575][ T6190] syz.4.75: vmalloc error: size 35651584, failed to allocated page array size 69632, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 101.181216][ T6190] CPU: 1 UID: 0 PID: 6190 Comm: syz.4.75 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 101.191416][ T6190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.201492][ T6190] Call Trace: [ 101.204790][ T6190] [ 101.207753][ T6190] dump_stack_lvl+0x241/0x360 [ 101.212470][ T6190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.217683][ T6190] ? __pfx__printk+0x10/0x10 [ 101.222302][ T6190] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 101.228739][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.234389][ T6190] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 101.240916][ T6190] warn_alloc+0x278/0x410 [ 101.245260][ T6190] ? __pfx_warn_alloc+0x10/0x10 [ 101.250129][ T6190] ? hash_netiface_create+0x356/0x1040 [ 101.255596][ T6190] ? __get_vm_area_node+0x1c8/0x2d0 [ 101.260827][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.266481][ T6190] ? __get_vm_area_node+0x25c/0x2d0 [ 101.271710][ T6190] __vmalloc_node_range_noprof+0x62f/0x1380 [ 101.277614][ T6190] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 101.283541][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.289278][ T6190] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 101.295615][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.301266][ T6190] ? rcu_is_watching+0x15/0xb0 [ 101.306046][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.311695][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.317349][ T6190] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 101.322832][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.328482][ T6190] ? __kvmalloc_node_noprof+0x72/0x190 [ 101.333967][ T6190] __kvmalloc_node_noprof+0x142/0x190 [ 101.339365][ T6190] ? hash_netiface_create+0x356/0x1040 [ 101.344838][ T6190] hash_netiface_create+0x356/0x1040 [ 101.350140][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.355796][ T6190] ? __pfx_hash_netiface_create+0x10/0x10 [ 101.361531][ T6190] ip_set_create+0xa5e/0x1900 [ 101.366220][ T6190] ? ip_set_create+0x45e/0x1900 [ 101.371083][ T6190] ? srso_alias_safe_ret+0x6/0x7 [ 101.376053][ T6190] ? __pfx_ip_set_create+0x10/0x10 [ 101.381206][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.386859][ T6190] ? nfnetlink_rcv_msg+0x225/0x1180 [ 101.392074][ T6190] nfnetlink_rcv_msg+0xbee/0x1180 [ 101.397119][ T6190] ? nfnetlink_rcv_msg+0x225/0x1180 [ 101.402352][ T6190] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 101.407825][ T6190] ? stack_trace_save+0x118/0x1d0 [ 101.412894][ T6190] ? dev_hard_start_xmit+0x27c/0x7d0 [ 101.418186][ T6190] ? __dev_queue_xmit+0x1b73/0x3f50 [ 101.423397][ T6190] ? __netlink_deliver_tap+0x56b/0x7f0 [ 101.428865][ T6190] ? netlink_deliver_tap+0x19d/0x1b0 [ 101.434155][ T6190] ? netlink_unicast+0x7c4/0x990 [ 101.439110][ T6190] ? netlink_sendmsg+0x8e4/0xcb0 [ 101.444058][ T6190] ? __sock_sendmsg+0x223/0x270 [ 101.448926][ T6190] ? ____sys_sendmsg+0x52a/0x7e0 [ 101.453873][ T6190] ? __sys_sendmsg+0x269/0x350 [ 101.458660][ T6190] netlink_rcv_skb+0x1e5/0x430 [ 101.463439][ T6190] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 101.469008][ T6190] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 101.474320][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.479971][ T6190] ? apparmor_capable+0x13b/0x1b0 [ 101.485021][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.490673][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.496356][ T6190] ? security_capable+0x7e/0x2d0 [ 101.501340][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.507014][ T6190] nfnetlink_rcv+0x297/0x2ab0 [ 101.511720][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.517374][ T6190] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 101.523118][ T6190] ? __dev_queue_xmit+0x2f4/0x3f50 [ 101.528242][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.533890][ T6190] ? __dev_queue_xmit+0x1775/0x3f50 [ 101.539100][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.544750][ T6190] ? kasan_save_track+0x51/0x80 [ 101.549623][ T6190] ? ____sys_sendmsg+0x52a/0x7e0 [ 101.554577][ T6190] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 101.559698][ T6190] ? __dev_queue_xmit+0x2f4/0x3f50 [ 101.564832][ T6190] ? __pfx___dev_queue_xmit+0x10/0x10 [ 101.570234][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.575898][ T6190] ? ref_tracker_free+0x643/0x7e0 [ 101.580949][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.586604][ T6190] ? __asan_memcpy+0x40/0x70 [ 101.591203][ T6190] ? __pfx_ref_tracker_free+0x10/0x10 [ 101.596581][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.602234][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.607888][ T6190] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.613092][ T6190] ? skb_clone+0x240/0x390 [ 101.617522][ T6190] ? __pfx_lock_release+0x10/0x10 [ 101.622557][ T6190] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 101.628036][ T6190] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.633280][ T6190] netlink_unicast+0x7f8/0x990 [ 101.638070][ T6190] ? __pfx_netlink_unicast+0x10/0x10 [ 101.643374][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.649021][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.654671][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.660405][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.666049][ T6190] ? __check_object_size+0x48e/0x900 [ 101.671355][ T6190] netlink_sendmsg+0x8e4/0xcb0 [ 101.676139][ T6190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.681441][ T6190] ? tomoyo_socket_sendmsg_permission+0x12e/0x420 [ 101.687873][ T6190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.693164][ T6190] __sock_sendmsg+0x223/0x270 [ 101.697862][ T6190] ____sys_sendmsg+0x52a/0x7e0 [ 101.702645][ T6190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.707940][ T6190] ? __fget_files+0x2a/0x410 [ 101.712551][ T6190] ? __fget_files+0x2a/0x410 [ 101.717165][ T6190] __sys_sendmsg+0x269/0x350 [ 101.721773][ T6190] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.726918][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.732578][ T6190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.738248][ T6190] do_syscall_64+0xf3/0x230 [ 101.742768][ T6190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.748677][ T6190] RIP: 0033:0x7f74cbb80809 [ 101.753126][ T6190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.772744][ T6190] RSP: 002b:00007f74cca2b058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.781176][ T6190] RAX: ffffffffffffffda RBX: 00007f74cbd45fa0 RCX: 00007f74cbb80809 [ 101.789167][ T6190] RDX: 0000000000000084 RSI: 0000000020000040 RDI: 0000000000000003 [ 101.797144][ T6190] RBP: 00007f74cbbf393e R08: 0000000000000000 R09: 0000000000000000 [ 101.805119][ T6190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.813092][ T6190] R13: 0000000000000000 R14: 00007f74cbd45fa0 R15: 00007ffdfe8b8048 [ 101.821084][ T6190] [ 101.832890][ T6198] loop1: detected capacity change from 0 to 512 [ 101.851619][ T6190] Mem-Info: [ 101.854769][ T6190] active_anon:7913 inactive_anon:0 isolated_anon:0 [ 101.854769][ T6190] active_file:1526 inactive_file:38198 isolated_file:0 [ 101.854769][ T6190] unevictable:768 dirty:176 writeback:0 [ 101.854769][ T6190] slab_reclaimable:10050 slab_unreclaimable:102019 [ 101.854769][ T6190] mapped:38094 shmem:4355 pagetables:929 [ 101.854769][ T6190] sec_pagetables:0 bounce:0 [ 101.854769][ T6190] kernel_misc_reclaimable:0 [ 101.854769][ T6190] free:1311667 free_pcp:600 free_cma:0 [ 101.912799][ T6190] Node 0 active_anon:31660kB inactive_anon:0kB active_file:6104kB inactive_file:152712kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152428kB dirty:736kB writeback:0kB shmem:15884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11204kB pagetables:3660kB sec_pagetables:0kB all_unreclaimable? no [ 101.945388][ T6190] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 101.975835][ T6190] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 102.003914][ T6190] lowmem_reserve[]: 0 2463 2464 0 0 [ 102.009216][ T6190] Node 0 DMA32 free:1324196kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:31624kB inactive_anon:0kB active_file:6104kB inactive_file:152128kB unevictable:1536kB writepending:736kB present:3129332kB managed:2550480kB mlocked:0kB bounce:0kB free_pcp:1424kB local_pcp:796kB free_cma:0kB [ 102.041005][ T6190] lowmem_reserve[]: 0 0 0 0 0 [ 102.045799][ T6190] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:584kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 102.072939][ T6190] lowmem_reserve[]: 0 0 0 0 0 [ 102.077727][ T6190] Node 1 Normal free:3907932kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:624kB local_pcp:376kB free_cma:0kB [ 102.107801][ T6190] lowmem_reserve[]: 0 0 0 0 0 [ 102.113608][ T6190] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 102.126551][ T6190] Node 0 DMA32: 8*4kB (M) 48*8kB (ME) 77*16kB (UME) 87*32kB (UME) 50*64kB (UME) 45*128kB (UM) 4*256kB (UM) 1*512kB (U) 8*1024kB (UME) 7*2048kB (UME) 314*4096kB (M) = 1323600kB [ 102.144636][ T6190] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 102.156471][ T6190] Node 1 Normal: 97*4kB (UE) 58*8kB (UME) 48*16kB (UME) 195*32kB (UME) 113*64kB (UME) 34*128kB (UME) 15*256kB (UME) 9*512kB (UME) 5*1024kB (UME) 4*2048kB (UE) 944*4096kB (M) = 3907828kB [ 102.175460][ T6190] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 102.185480][ T6190] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 102.195849][ T6190] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 102.206454][ T6190] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 102.218295][ T6190] 41229 total pagecache pages [ 102.224489][ T6190] 0 pages in swap cache [ 102.231003][ T6190] Free swap = 124996kB [ 102.235863][ T6190] Total swap = 124996kB [ 102.240130][ T6190] 2097051 pages RAM [ 102.244003][ T6190] 0 pages HighMem/MovableOnly [ 102.248691][ T6190] 427645 pages reserved [ 102.252994][ T6190] 0 pages cma reserved [ 102.476955][ T6198] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.79: casefold flag without casefold feature [ 102.491410][ T6198] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.79: couldn't read orphan inode 15 (err -117) [ 102.512348][ T6198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.654952][ T6198] overlayfs: failed to resolve './file1': -2 [ 102.793645][ T6221] overlayfs: missing 'lowerdir' [ 102.812329][ T6219] netlink: 'syz.3.85': attribute type 1 has an invalid length. [ 104.218052][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.336434][ T6244] bridge0: port 3(erspan0) entered blocking state [ 104.343855][ T6244] bridge0: port 3(erspan0) entered disabled state [ 104.350522][ T6244] erspan0: entered allmulticast mode [ 104.358344][ T6244] erspan0: entered promiscuous mode [ 104.364125][ T6244] bridge0: port 3(erspan0) entered blocking state [ 104.371637][ T6244] bridge0: port 3(erspan0) entered forwarding state [ 105.361835][ T6267] netlink: 'syz.3.98': attribute type 29 has an invalid length. [ 105.457188][ T6269] netlink: 'syz.3.98': attribute type 29 has an invalid length. [ 105.502341][ T6271] overlayfs: missing 'lowerdir' [ 108.081999][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.108'. [ 108.616020][ T6326] bridge0: entered promiscuous mode [ 108.639710][ T6323] overlayfs: missing 'lowerdir' [ 108.650155][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 108.714096][ T6326] bridge_slave_1: left allmulticast mode [ 108.776949][ T6326] bridge_slave_1: left promiscuous mode [ 108.783300][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.829815][ T6326] bridge_slave_0: left allmulticast mode [ 108.830571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.846883][ T6326] bridge_slave_0: left promiscuous mode [ 108.883435][ T6326] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.392302][ T6348] netlink: 80 bytes leftover after parsing attributes in process `syz.4.121'. [ 109.422414][ T6326] bridge0 (unregistering): left promiscuous mode [ 109.430722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.439014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.041466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.050068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.075224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.189104][ T6394] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 112.438857][ T6394] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 113.040536][ T3678] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 113.087690][ T6416] binder: 6379:6416 ioctl 4018620d 0 returned -22 [ 113.280677][ T3678] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 113.372022][ T3678] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.400413][ T3678] usb 5-1: config 0 has no interface number 0 [ 113.406633][ T3678] usb 5-1: config 0 interface 109 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 113.431483][ T3678] usb 5-1: config 0 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 113.461272][ T3678] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 113.470403][ T3678] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.480626][ T3678] usb 5-1: Product: syz [ 113.484810][ T3678] usb 5-1: Manufacturer: syz [ 113.529050][ T3678] usb 5-1: SerialNumber: syz [ 113.768097][ T3678] usb 5-1: config 0 descriptor?? [ 113.776073][ T6408] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 114.826957][ T3678] ath6kl: Failed to submit usb control message: -71 [ 114.950366][ T3678] ath6kl: unable to send the bmi data to the device: -71 [ 115.011520][ T3678] ath6kl: Unable to send get target info: -71 [ 115.215104][ T3678] ath6kl: Failed to init ath6kl core: -71 [ 115.221940][ T3678] ath6kl_usb 5-1:0.109: probe with driver ath6kl_usb failed with error -71 [ 115.249533][ T3678] usb 5-1: USB disconnect, device number 3 [ 118.096455][ T6468] ======================================================= [ 118.096455][ T6468] WARNING: The mand mount option has been deprecated and [ 118.096455][ T6468] and is ignored by this kernel. Remove the mand [ 118.096455][ T6468] option from the mount to silence this warning. [ 118.096455][ T6468] ======================================================= [ 118.954656][ T5908] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 120.115609][ T6478] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 120.258473][ T6478] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 120.370791][ T6482] netlink: 'syz.2.146': attribute type 4 has an invalid length. [ 120.378573][ T6482] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.146'. [ 120.442263][ T5908] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 120.818207][ T5908] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.840394][ T5908] usb 1-1: config 0 has no interface number 0 [ 120.846539][ T5908] usb 1-1: config 0 interface 109 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 120.864543][ T5908] usb 1-1: config 0 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 120.956568][ T5908] usb 1-1: string descriptor 0 read error: -71 [ 120.999989][ T5908] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 121.040160][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.113719][ T5908] usb 1-1: config 0 descriptor?? [ 121.119864][ T5908] usb 1-1: can't set config #0, error -71 [ 121.186826][ T5908] usb 1-1: USB disconnect, device number 2 [ 122.507256][ T6513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.154'. [ 122.656262][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 122.927802][ T6532] loop1: detected capacity change from 0 to 512 [ 123.340971][ T3678] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 123.374298][ T6532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 123.408147][ T6532] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.697201][ T3678] usb 4-1: Using ep0 maxpacket: 8 [ 123.727959][ T3678] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.739041][ T3678] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.748907][ T3678] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 123.757968][ T3678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.771579][ T3678] usb 4-1: config 0 descriptor?? [ 124.684796][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 125.865939][ T6560] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 125.875185][ T6560] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 126.227222][ T6572] loop2: detected capacity change from 0 to 512 [ 126.282211][ T6572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 126.516009][ T6572] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.425037][ T3678] usbhid 4-1:0.0: can't add hid device: -71 [ 127.432189][ T3678] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 127.527468][ T3678] usb 4-1: USB disconnect, device number 2 [ 127.543077][ T6584] netlink: 24 bytes leftover after parsing attributes in process `syz.3.170'. [ 128.601533][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 130.037979][ T6617] overlayfs: missing 'lowerdir' [ 131.681461][ T6629] netlink: 'syz.0.179': attribute type 4 has an invalid length. [ 131.689231][ T6629] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.179'. [ 132.556871][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.563245][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.509871][ T6648] netlink: 'syz.0.188': attribute type 4 has an invalid length. [ 133.517803][ T6648] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.188'. [ 135.087601][ T6654] netlink: 24 bytes leftover after parsing attributes in process `syz.0.190'. [ 136.722934][ T6661] bridge0: port 3(erspan0) entered blocking state [ 136.729681][ T6661] bridge0: port 3(erspan0) entered disabled state [ 136.738528][ T6661] erspan0: entered allmulticast mode [ 136.744976][ T6661] erspan0: entered promiscuous mode [ 136.750622][ T6661] bridge0: port 3(erspan0) entered blocking state [ 136.757114][ T6661] bridge0: port 3(erspan0) entered forwarding state [ 136.764860][ T6662] netlink: 'syz.5.192': attribute type 4 has an invalid length. [ 136.773255][ T6662] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.192'. [ 137.151275][ T6675] overlayfs: missing 'lowerdir' [ 137.223432][ T3678] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 137.411076][ T3678] usb 4-1: Using ep0 maxpacket: 16 [ 137.427802][ T3678] usb 4-1: too many configurations: 60, using maximum allowed: 8 [ 137.451967][ T3678] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.483388][ T3678] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 137.502113][ T35] Bluetooth: hci6: Frame reassembly failed (-84) [ 137.515723][ T3678] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.533678][ T3678] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 137.544697][ T3678] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.578616][ T3678] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 137.831476][ T3678] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.842660][ T3678] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 137.873892][ T3678] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.886477][ T3678] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 138.088393][ T3678] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.099093][ T3678] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 138.115009][ T3678] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.179782][ T3678] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 138.237992][ T3678] usb 4-1: unable to read config index 7 descriptor/start: -71 [ 138.309274][ T3678] usb 4-1: can't read configurations, error -71 [ 139.199414][ T6716] bridge0: port 3(erspan0) entered blocking state [ 139.206397][ T6716] bridge0: port 3(erspan0) entered disabled state [ 139.213315][ T6716] erspan0: entered allmulticast mode [ 139.220935][ T6716] erspan0: entered promiscuous mode [ 139.227012][ T6716] bridge0: port 3(erspan0) entered blocking state [ 139.233745][ T6716] bridge0: port 3(erspan0) entered forwarding state [ 139.724980][ T5861] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 142.465390][ T6742] overlayfs: missing 'lowerdir' [ 142.716131][ T6746] netlink: 'syz.1.213': attribute type 4 has an invalid length. [ 142.724077][ T6746] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.213'. [ 144.212990][ T6758] netlink: 'syz.2.218': attribute type 4 has an invalid length. [ 144.220856][ T6758] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.218'. [ 146.992442][ T6766] netlink: 24 bytes leftover after parsing attributes in process `syz.4.220'. [ 147.369537][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'. [ 147.598300][ T6788] loop3: detected capacity change from 0 to 512 [ 147.670549][ T3678] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 147.684054][ T6788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 147.726998][ T6788] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.148422][ T3678] usb 6-1: config 0 has an invalid interface number: 109 but max is 0 [ 149.156703][ T3678] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.160507][ T6800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.228'. [ 149.166950][ T3678] usb 6-1: config 0 has no interface number 0 [ 149.182209][ T3678] usb 6-1: config 0 interface 109 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 149.193452][ T3678] usb 6-1: config 0 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 239, setting to 64 [ 149.204573][ T3678] usb 6-1: config 0 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 149.534824][ T3678] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 149.544453][ T3678] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.553649][ T3678] usb 6-1: Product: syz [ 149.560527][ T3678] usb 6-1: Manufacturer: syz [ 149.814152][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 149.983903][ T5845] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 150.509462][ T3678] usb 6-1: SerialNumber: syz [ 150.547236][ T3678] usb 6-1: config 0 descriptor?? [ 150.553169][ T3678] usb 6-1: can't set config #0, error -71 [ 150.626725][ T3678] usb 6-1: USB disconnect, device number 2 [ 151.108059][ T6833] netlink: 'syz.3.231': attribute type 4 has an invalid length. [ 151.115903][ T6833] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.231'. [ 152.206138][ T6841] netlink: 'syz.1.237': attribute type 4 has an invalid length. [ 152.213947][ T6841] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.237'. [ 153.160167][ T6846] netlink: 'syz.0.242': attribute type 29 has an invalid length. [ 153.230530][ T6846] netlink: 'syz.0.242': attribute type 29 has an invalid length. [ 154.850448][ T6869] binder: 6863:6869 ioctl 4018620d 0 returned -22 [ 155.906109][ T6870] sctp: failed to load transform for md5: -2 [ 156.011188][ T6855] sctp: failed to load transform for md5: -2 [ 156.076834][ T6866] netlink: 'syz.1.243': attribute type 4 has an invalid length. [ 156.084924][ T6866] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.243'. [ 156.258948][ T6859] sctp: failed to load transform for md5: -2 [ 156.267228][ T6856] sctp: failed to load transform for md5: -2 [ 156.563114][ T6899] netlink: 24 bytes leftover after parsing attributes in process `syz.4.250'. [ 156.709065][ T6900] evm: overlay not supported [ 156.899047][ T6911] netlink: 'syz.1.255': attribute type 1 has an invalid length. [ 156.925338][ T6911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.900426][ T6956] binder: 6944:6956 ioctl 4018620d 0 returned -22 [ 162.137727][ T6966] netlink: 'syz.5.266': attribute type 4 has an invalid length. [ 162.145739][ T6966] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.266'. [ 163.450633][ T6975] netlink: 24 bytes leftover after parsing attributes in process `syz.5.270'. [ 163.729911][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.270'. [ 164.082972][ T6999] syz.3.276 uses obsolete (PF_INET,SOCK_PACKET) [ 167.172931][ T7022] netlink: zone id is out of range [ 167.188584][ T7022] netlink: zone id is out of range [ 167.210343][ T7022] netlink: zone id is out of range [ 167.239721][ T7026] loop0: detected capacity change from 0 to 512 [ 167.250782][ T7022] netlink: zone id is out of range [ 167.350329][ T7022] netlink: zone id is out of range [ 167.360399][ T7022] netlink: zone id is out of range [ 167.372123][ T7022] netlink: zone id is out of range [ 167.377264][ T7022] netlink: zone id is out of range [ 167.392762][ T7022] netlink: zone id is out of range [ 167.399415][ T7022] netlink: zone id is out of range [ 167.507064][ T7026] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.284: casefold flag without casefold feature [ 167.642332][ T7026] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.284: couldn't read orphan inode 15 (err -117) [ 167.713521][ T7044] netlink: 80 bytes leftover after parsing attributes in process `syz.2.289'. [ 167.786924][ T7026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.843249][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 168.075828][ T7026] overlayfs: failed to resolve './file0': -2 [ 168.103667][ T7057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.290'. [ 168.393604][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.766869][ T7075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.295'. [ 168.950611][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 170.982138][ T7105] binder: BINDER_SET_CONTEXT_MGR already set [ 170.988459][ T7105] binder: 7094:7105 ioctl 4018620d 20004a80 returned -16 [ 173.578634][ T7145] loop2: detected capacity change from 0 to 512 [ 180.573833][ C0] hrtimer: interrupt took 7047141178 ns [ 180.591616][ T7146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.314'. [ 180.694909][ T7148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.318'. [ 285.630174][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 285.637162][ C1] rcu: 0-...!: (1 GPs behind) idle=d1ec/1/0x4000000000000000 softirq=16995/16999 fqs=1 [ 285.647688][ C1] rcu: (detected by 1, t=10505 jiffies, g=11493, q=777 ncpus=2) [ 285.655422][ C1] Sending NMI from CPU 1 to CPUs 0: [ 285.655454][ C0] NMI backtrace for cpu 0 [ 285.655466][ C0] CPU: 0 UID: 0 PID: 5844 Comm: syz-executor Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 285.655490][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 285.655504][ C0] RIP: 0010:__lock_acquire+0x12be/0x2100 [ 285.655535][ C0] Code: 10 8b 18 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 80 18 32 94 be 08 00 00 00 e8 2a 98 8f 00 48 0f a3 1d 92 e4 c0 12 <73> 1d 48 69 c3 c8 00 00 00 48 8d 98 40 97 c9 93 48 ba 00 00 00 00 [ 285.655553][ C0] RSP: 0018:ffffc90000007930 EFLAGS: 00000057 [ 285.655573][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff817133e6 [ 285.655589][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff94321880 [ 285.655603][ C0] RBP: 97064f26aa3bd169 R08: ffffffff94321887 R09: 1ffffffff2864310 [ 285.655621][ C0] R10: dffffc0000000000 R11: fffffbfff2864311 R12: ffff88802e931e00 [ 285.655638][ C0] R13: ffff88802e931e00 R14: 1ffff11005d26548 R15: 0000000000000000 [ 285.655658][ C0] FS: 000055555fb7a500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 285.655678][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.655694][ C0] CR2: 00007f6543a756c0 CR3: 000000005c3b2000 CR4: 0000000000350ef0 [ 285.655712][ C0] Call Trace: [ 285.655721][ C0] [ 285.655732][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 285.655760][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 285.655785][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 285.655821][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 285.655854][ C0] ? nmi_handle+0x151/0x5a0 [ 285.655880][ C0] ? nmi_handle+0x2a/0x5a0 [ 285.655906][ C0] ? __lock_acquire+0x12be/0x2100 [ 285.655929][ C0] ? default_do_nmi+0x63/0x160 [ 285.655958][ C0] ? exc_nmi+0x123/0x1f0 [ 285.655984][ C0] ? end_repeat_nmi+0xf/0x53 [ 285.656015][ C0] ? __lock_acquire+0x12b6/0x2100 [ 285.656040][ C0] ? __lock_acquire+0x12be/0x2100 [ 285.656070][ C0] ? __lock_acquire+0x12be/0x2100 [ 285.656095][ C0] ? __lock_acquire+0x12be/0x2100 [ 285.656119][ C0] [ 285.656126][ C0] [ 285.656143][ C0] lock_acquire+0x1ed/0x550 [ 285.656166][ C0] ? debug_object_deactivate+0x158/0x390 [ 285.656205][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 285.656232][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.656261][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 285.656298][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.656327][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 285.656366][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 285.656400][ C0] ? debug_object_deactivate+0x158/0x390 [ 285.656433][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 285.656475][ C0] debug_object_deactivate+0x158/0x390 [ 285.656510][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 285.656546][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.656576][ C0] ? timerqueue_add+0x260/0x290 [ 285.656604][ C0] debug_deactivate+0x1b/0x220 [ 285.656636][ C0] __hrtimer_run_queues+0x305/0xd30 [ 285.656675][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 285.656707][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.656736][ C0] ? rcu_is_watching+0x15/0xb0 [ 285.656769][ C0] hrtimer_interrupt+0x403/0xa40 [ 285.656810][ C0] __sysvec_apic_timer_interrupt+0x112/0x420 [ 285.656837][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 285.656871][ C0] [ 285.656878][ C0] [ 285.656887][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 285.656914][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 285.656938][ C0] Code: 8b 3d 84 f0 9d 0c 48 89 de 5b e9 d3 cd 5e 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 c0 d4 03 00 65 8b 15 e0 f2 6d 7e 81 e2 00 01 ff 00 [ 285.656955][ C0] RSP: 0018:ffffc900045ef2a0 EFLAGS: 00000246 [ 285.656975][ C0] RAX: ffffffff81e73cdf RBX: ffffea0001a84cc0 RCX: ffff88802e931e00 [ 285.656992][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 285.657006][ C0] RBP: ffffea0001a84cc8 R08: ffffffff81e73cb7 R09: 1ffffd400035099e [ 285.657023][ C0] R10: dffffc0000000000 R11: fffff9400035099f R12: ffffea0001a84cc0 [ 285.657040][ C0] R13: dffffc0000000000 R14: ffffea0001a84cc0 R15: 0000000000000001 [ 285.657063][ C0] ? __folio_rmap_sanity_checks+0xd7/0x3a0 [ 285.657088][ C0] ? __folio_rmap_sanity_checks+0xff/0x3a0 [ 285.657114][ C0] __folio_rmap_sanity_checks+0xff/0x3a0 [ 285.657140][ C0] copy_pmd_range+0xc23/0x7eb0 [ 285.657162][ C0] ? __pfx_validate_chain+0x10/0x10 [ 285.657193][ C0] ? preempt_count_add+0x93/0x190 [ 285.657237][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 285.657261][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.657290][ C0] ? look_up_lock_class+0x77/0x170 [ 285.657324][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.657353][ C0] ? register_lock_class+0x102/0x980 [ 285.657380][ C0] ? __pfx_mas_destroy+0x10/0x10 [ 285.657409][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.657438][ C0] ? mark_lock+0x9a/0x360 [ 285.657465][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.657494][ C0] ? __lock_acquire+0x1397/0x2100 [ 285.657533][ C0] copy_page_range+0x99f/0xe90 [ 285.657569][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 285.657598][ C0] ? __pfx_up_write+0x10/0x10 [ 285.657628][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.657658][ C0] ? __asan_memset+0x23/0x50 [ 285.657680][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 285.657711][ C0] ? vma_interval_tree_insert_after+0x259/0x2b0 [ 285.657743][ C0] copy_mm+0x11c7/0x1f90 [ 285.657786][ C0] ? __pfx_copy_mm+0x10/0x10 [ 285.657825][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.657855][ C0] ? __init_rwsem+0x122/0x160 [ 285.657884][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.657914][ C0] ? copy_signal+0x51c/0x640 [ 285.657948][ C0] copy_process+0x1845/0x3d50 [ 285.657989][ C0] ? copy_process+0x9fa/0x3d50 [ 285.658023][ C0] ? __lock_acquire+0x1397/0x2100 [ 285.658052][ C0] ? __pfx_copy_process+0x10/0x10 [ 285.658090][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.658123][ C0] kernel_clone+0x226/0x8e0 [ 285.658146][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 285.658177][ C0] __x64_sys_clone+0x258/0x2a0 [ 285.658201][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 285.658223][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 285.658252][ C0] ? exc_page_fault+0x590/0x8b0 [ 285.658283][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.658315][ C0] ? do_syscall_64+0xb6/0x230 [ 285.658338][ C0] do_syscall_64+0xf3/0x230 [ 285.658361][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.658387][ C0] RIP: 0033:0x7f6542d77053 [ 285.658406][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 285.658423][ C0] RSP: 002b:00007ffca0864d38 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 285.658445][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6542d77053 [ 285.658461][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 285.658476][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 285.658489][ C0] R10: 000055555fb7a7d0 R11: 0000000000000246 R12: 0000000000000000 [ 285.658504][ C0] R13: 000000000002a526 R14: 000000000002a38e R15: 00007ffca0864ec0 [ 285.658527][ C0] [ 285.659446][ C1] rcu: rcu_preempt kthread starved for 10490 jiffies! g11493 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 286.380539][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 286.390518][ C1] rcu: RCU grace-period kthread stack dump: [ 286.396407][ C1] task:rcu_preempt state:R running task stack:24152 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 286.408196][ C1] Call Trace: [ 286.411487][ C1] [ 286.414431][ C1] __schedule+0x1850/0x4c30 [ 286.418979][ C1] ? __pfx___schedule+0x10/0x10 [ 286.423844][ C1] ? __pfx_lock_release+0x10/0x10 [ 286.428895][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.435245][ C1] ? schedule+0x90/0x320 [ 286.439497][ C1] schedule+0x14b/0x320 [ 286.443671][ C1] schedule_timeout+0x15a/0x290 [ 286.448548][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 286.453947][ C1] ? __pfx_process_timeout+0x10/0x10 [ 286.459268][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.464924][ C1] ? prepare_to_swait_event+0x330/0x350 [ 286.470492][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 286.475363][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 286.480599][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 286.486511][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 286.491812][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 286.497738][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.503390][ C1] ? finish_swait+0xd4/0x1e0 [ 286.507998][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 286.512616][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 286.517828][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 286.523754][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.529509][ C1] ? __kthread_parkme+0x169/0x1d0 [ 286.534640][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 286.539855][ C1] kthread+0x2f2/0x390 [ 286.543941][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 286.549159][ C1] ? __pfx_kthread+0x10/0x10 [ 286.553770][ C1] ret_from_fork+0x4d/0x80 [ 286.558203][ C1] ? __pfx_kthread+0x10/0x10 [ 286.562814][ C1] ret_from_fork_asm+0x1a/0x30 [ 286.567619][ C1] [ 286.570641][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 286.576964][ C1] CPU: 1 UID: 0 PID: 51 Comm: kworker/u8:3 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 286.587304][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 286.597375][ C1] Workqueue: events_unbound toggle_allocation_gate [ 286.603913][ C1] RIP: 0010:smp_call_function_many_cond+0x19f8/0x2c60 [ 286.610712][ C1] Code: 89 e6 83 e6 01 31 ff e8 66 e9 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 11 e5 0b 00 eb 38 f3 90 42 0f b6 04 23 <84> c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 f5 e4 0b 00 eb e4 44 [ 286.630415][ C1] RSP: 0018:ffffc90000bb76e0 EFLAGS: 00000293 [ 286.636497][ C1] RAX: 0000000000000000 RBX: 1ffff110170c8c61 RCX: ffff8880226e1e00 [ 286.644485][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 286.652467][ C1] RBP: ffffc90000bb78e0 R08: ffffffff8189fcaa R09: 1ffffffff2864310 [ 286.660459][ C1] R10: dffffc0000000000 R11: fffffbfff2864311 R12: dffffc0000000000 [ 286.668447][ C1] R13: ffff8880b8646308 R14: ffff8880b873f980 R15: 0000000000000000 [ 286.676430][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 286.685368][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.691963][ C1] CR2: 00007efcb28756c0 CR3: 000000000e738000 CR4: 0000000000350ef0 [ 286.699948][ C1] Call Trace: [ 286.703237][ C1] [ 286.706090][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 286.712446][ C1] ? print_other_cpu_stall+0x1481/0x15c0 [ 286.718115][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 286.723947][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.729607][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.735260][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 286.741526][ C1] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 286.746927][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 286.752584][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.758244][ C1] ? update_process_times+0x242/0x2f0 [ 286.763633][ C1] ? tick_nohz_handler+0x37c/0x500 [ 286.768774][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 286.774256][ C1] ? __hrtimer_run_queues+0x553/0xd30 [ 286.779756][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 286.785495][ C1] ? sched_clock+0x4a/0x70 [ 286.789937][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.795589][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 286.801675][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 286.806831][ C1] ? __sysvec_apic_timer_interrupt+0x112/0x420 [ 286.813090][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 286.818918][ C1] [ 286.821854][ C1] [ 286.824790][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 286.830972][ C1] ? smp_call_function_many_cond+0x19da/0x2c60 [ 286.837328][ C1] ? smp_call_function_many_cond+0x19f8/0x2c60 [ 286.843518][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 286.848573][ C1] ? __pfx___text_poke+0x10/0x10 [ 286.853529][ C1] ? process_scheduled_works+0x976/0x1840 [ 286.859277][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.864933][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.870586][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 286.876937][ C1] ? __pfx___might_resched+0x10/0x10 [ 286.882255][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 286.888176][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 286.893224][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 286.898363][ C1] text_poke_bp_batch+0x352/0xb30 [ 286.903409][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 286.909409][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 286.915591][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 286.921158][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.926813][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.932462][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 286.938728][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.944381][ C1] ? process_scheduled_works+0x976/0x1840 [ 286.950129][ C1] text_poke_finish+0x30/0x50 [ 286.954824][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 286.960826][ C1] static_key_enable_cpuslocked+0x136/0x260 [ 286.966742][ C1] static_key_enable+0x1a/0x20 [ 286.971528][ C1] toggle_allocation_gate+0xbc/0x260 [ 286.976832][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 286.982831][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.989188][ C1] process_scheduled_works+0xa68/0x1840 [ 286.994789][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 287.000803][ C1] ? assign_work+0x364/0x3d0 [ 287.005420][ C1] worker_thread+0x870/0xd30 [ 287.010035][ C1] ? __kthread_parkme+0x169/0x1d0 [ 287.015081][ C1] ? __pfx_worker_thread+0x10/0x10 [ 287.020203][ C1] kthread+0x2f2/0x390 [ 287.024287][ C1] ? __pfx_worker_thread+0x10/0x10 [ 287.029409][ C1] ? __pfx_kthread+0x10/0x10 [ 287.034014][ C1] ret_from_fork+0x4d/0x80 [ 287.038442][ C1] ? __pfx_kthread+0x10/0x10 [ 287.043049][ C1] ret_from_fork_asm+0x1a/0x30 [ 287.047855][ C1]