last executing test programs: 5.064309805s ago: executing program 1 (id=2): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xd) io_setup(0x81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x24, &(0x7f0000000080)={0x0, 0x2, 0x87f9, 0xfffffffffffffff6}) mq_getsetattr(r4, &(0x7f0000000180)={0xe5d, 0x0, 0x1, 0xff}, 0x0) write$FUSE_STATFS(r4, &(0x7f0000000240)={0x60, 0x0, 0x0, {{0xfffffffffffffff7, 0x101, 0x8, 0x58b, 0x2, 0xfffffeff, 0x3, 0x6}}}, 0x60) syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = syz_open_procfs(0x0, 0x0) writev(r5, &(0x7f0000000200)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r6, 0x0}]) r7 = socket$kcm(0x10, 0x2, 0x0) socket$inet(0x2, 0x4, 0x9) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000480)="$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") r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r8, &(0x7f00000061c0)={0x2020}, 0x2020) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 4.138465725s ago: executing program 1 (id=6): openat$rfkill(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000000240), 0xd, 0xe5, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0xd0, 0x720d, 0x148, 0xd0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'veth1_virt_wifi\x00', 'pim6reg1\x00', {}, {}, 0x2, 0x3, 0x49}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x0, 0x1, 0x3], 0x2}, {0xffffffffffffffff, [0x1, 0xb2cc575b459b5b33, 0x3, 0x0, 0x2]}}}}, {{@ip={@broadcast, @broadcast, 0xffffffff, 0x0, 'wlan0\x00', 'geneve0\x00', {}, {}, 0x0, 0x3, 0x50}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010900, 'pim6reg0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r6, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20005810) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x7004c041) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000140)='./file0\x00') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r7 = socket$inet_smc(0x2b, 0x1, 0x0) accept$unix(r2, 0x0, &(0x7f0000000040)) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, 0xc) r8 = socket$pppl2tp(0x18, 0x1, 0x1) socket(0x2c, 0x4, 0x8000cab) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000000)={'lo\x00'}) 3.300454948s ago: executing program 4 (id=5): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001", @ANYRESHEX=r0], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x2}}}}}}, 0x0) 3.291117952s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(&(0x7f00000008c0)=ANY=[@ANYBLOB="2361f97a313ab92aaa72d05daf5b37d78a4538431ead435c7f07"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 3.24424572s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000000c0)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080), 0x1, 0x4c810, 0x0, 0xff98) shutdown(r3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getrlimit(0x2, 0x0) getsockopt$inet_int(r4, 0x0, 0x34, 0x0, &(0x7f00000001c0)=0x2) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000001000)=ANY=[], 0x1, 0x1c6, &(0x7f00000001c0)="$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") 3.186343002s ago: executing program 1 (id=7): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6(0xa, 0x3, 0x2f) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 3.178194646s ago: executing program 4 (id=8): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000180)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x4, 0xa00, &(0x7f00000003c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) close(r3) 2.100631084s ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="0500000000000000080000000200000000000000b8f75ddfd30d7d7cf529b6138172c65b96994047cc24153203bffe1fdfde1e7eb0a3b13e25ed1ee25f173e57609ccf08dceb05da8424c383fcad851eccc7beae0518152347f3fd7502b505a650d890dc1ea960043dd4339a193f3ff53e12432388aff98cdbef52281b387de783c2be00ed556a30b65c5e8a31c3f8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r0}, &(0x7f0000000980), &(0x7f00000024c0)=r1}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000280)=""/142, 0x8e}, {&(0x7f00000003c0)=""/109, 0x6d}, {&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f00000004c0)=""/92, 0x5c}, {&(0x7f0000000540)=""/196, 0xc4}, {&(0x7f0000000200)=""/42, 0x2a}, {&(0x7f0000000640)=""/217, 0xd9}, {&(0x7f0000000740)=""/222, 0xde}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0xa}, 0x8}, {{&(0x7f0000000840)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000002780)=[{&(0x7f0000002540)=""/240, 0xf0}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f0000002640)=""/76, 0x4c}, {&(0x7f00000026c0)=""/189, 0xbd}], 0x4, &(0x7f0000001b00)=""/151, 0x97}, 0x2}, {{&(0x7f0000001bc0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001c40)=""/123, 0x7b}], 0x1, &(0x7f0000001d00)=""/6, 0x6}, 0x130e}, {{&(0x7f0000001d40)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001dc0)=""/100, 0x64}, {&(0x7f0000001e40)=""/33, 0x21}], 0x2}, 0x7}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001ec0)=""/40, 0x28}, {&(0x7f0000001f00)=""/212, 0xd4}, {&(0x7f0000002000)=""/117, 0x75}, {&(0x7f0000002080)=""/161, 0xa1}, {&(0x7f0000002140)=""/237, 0xed}, {&(0x7f0000002240)=""/65, 0x41}], 0x6}, 0xc7}], 0x5, 0x12003, &(0x7f0000002480)={0x77359400}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x80000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xffffff27, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r6 = getegid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='nobarrier,decompose,gid=', @ANYRESHEX=0x0, @ANYBLOB=',barrier,gid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=r6, @ANYBLOB=',uid=', @ANYRESHEX=r8, @ANYBLOB="2c6e6c733d64656661756c742c001bb4a4447bd69aa8532125707aa318f1e60d28086a88ef2208cc30839fc1be7ad88539fad2c027aca664454d7bf988a9fa9f5f0cab42326f5c70febc7902ce02b8ec0adb23bef1c917d0bd"], 0x1, 0x6e8, &(0x7f00000010c0)="$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") r10 = openat$cgroup_ro(r4, &(0x7f00000027c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_SET_DIRECT_IO(r10, 0x4c08, 0x7) fcntl$setstatus(r10, 0x4, 0x10800) pwritev2(r10, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x8800000}], 0x1, 0x20, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.986039337s ago: executing program 0 (id=9): move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c1bbdbe3160578f5aa421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e6405c0cf5329cb7f1821ec7ecca1d3ffb2d7144f29af11fe6557f8a74d923d12c43bc"], 0xb4}}, 0x0) 1.942616029s ago: executing program 2 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000040000004100", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) 666.221339ms ago: executing program 1 (id=11): r0 = socket$inet6(0xa, 0x6, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 665.969467ms ago: executing program 4 (id=12): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="0a000000010001", 0x7) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000028c0)={0x14, 0x2, 0x2, 0x801}, 0x14}}, 0x0) 0s ago: executing program 3 (id=13): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000840)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdc\xc0*rw[\r\x98\xf6\xd3\xbf\xa1\xcf\x8e\xc2\x8c\f\xee}g\xfe\xae\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\x01\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x1f\x88Z0\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdf\x00\x10\x00\x00\x00\x00\x00\x00\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.141' (ED25519) to the list of known hosts. [ 35.322843][ T6406] cgroup: Unknown subsys name 'net' [ 35.562951][ T6406] cgroup: Unknown subsys name 'cpuset' [ 35.566480][ T6406] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.882308][ T6406] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 37.318433][ T6422] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.335757][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.346809][ T6431] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.348399][ T6431] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.352581][ T6431] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.354442][ T6431] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.356026][ T6431] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 37.357992][ T6431] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.360958][ T6433] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.362953][ T6433] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.364832][ T6433] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.365624][ T6432] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.367500][ T6433] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 37.368730][ T6432] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.370562][ T6433] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.370817][ T6433] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.373041][ T6432] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.374295][ T6433] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.375548][ T6432] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.377400][ T6433] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 37.379590][ T5985] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 37.380479][ T6433] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 37.383195][ T6433] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.389523][ T5985] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.390486][ T6433] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.394605][ T6419] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 37.396790][ T6419] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.400057][ T6422] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 37.405364][ T6422] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 37.408934][ T6419] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 37.613479][ T6418] chnl_net:caif_netlink_parms(): no params data found [ 37.665431][ T6424] chnl_net:caif_netlink_parms(): no params data found [ 37.746913][ T6418] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.748475][ T6418] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.750606][ T6418] bridge_slave_0: entered allmulticast mode [ 37.752539][ T6418] bridge_slave_0: entered promiscuous mode [ 37.770926][ T6423] chnl_net:caif_netlink_parms(): no params data found [ 37.790219][ T6418] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.791709][ T6418] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.793146][ T6418] bridge_slave_1: entered allmulticast mode [ 37.795227][ T6418] bridge_slave_1: entered promiscuous mode [ 37.808850][ T6417] chnl_net:caif_netlink_parms(): no params data found [ 37.821441][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.823025][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.824512][ T6424] bridge_slave_0: entered allmulticast mode [ 37.827250][ T6424] bridge_slave_0: entered promiscuous mode [ 37.835333][ T6418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.859445][ T6427] chnl_net:caif_netlink_parms(): no params data found [ 37.862524][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.863917][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.865470][ T6424] bridge_slave_1: entered allmulticast mode [ 37.867382][ T6424] bridge_slave_1: entered promiscuous mode [ 37.870585][ T6418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.907838][ T6423] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.909388][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.911192][ T6423] bridge_slave_0: entered allmulticast mode [ 37.913001][ T6423] bridge_slave_0: entered promiscuous mode [ 37.933284][ T6418] team0: Port device team_slave_0 added [ 37.935997][ T6424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.939163][ T6418] team0: Port device team_slave_1 added [ 37.945635][ T6423] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.947124][ T6423] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.948563][ T6423] bridge_slave_1: entered allmulticast mode [ 37.953921][ T6423] bridge_slave_1: entered promiscuous mode [ 37.955628][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.957151][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.958665][ T6417] bridge_slave_0: entered allmulticast mode [ 37.962012][ T6417] bridge_slave_0: entered promiscuous mode [ 37.982449][ T6424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.991272][ T6418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.992726][ T6418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.998180][ T6418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.006033][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.007544][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.009171][ T6417] bridge_slave_1: entered allmulticast mode [ 38.011075][ T6417] bridge_slave_1: entered promiscuous mode [ 38.019479][ T6418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.021188][ T6418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.026369][ T6418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.055540][ T6423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.058684][ T6417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.062136][ T6424] team0: Port device team_slave_0 added [ 38.064844][ T6417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.075868][ T6427] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.077349][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.078863][ T6427] bridge_slave_0: entered allmulticast mode [ 38.080944][ T6427] bridge_slave_0: entered promiscuous mode [ 38.083825][ T6423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.085717][ T6427] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.087224][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.088773][ T6427] bridge_slave_1: entered allmulticast mode [ 38.091022][ T6427] bridge_slave_1: entered promiscuous mode [ 38.097355][ T6424] team0: Port device team_slave_1 added [ 38.126384][ T6417] team0: Port device team_slave_0 added [ 38.144973][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.146459][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.156136][ T6424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.159641][ T6417] team0: Port device team_slave_1 added [ 38.202009][ T6418] hsr_slave_0: entered promiscuous mode [ 38.270579][ T6418] hsr_slave_1: entered promiscuous mode [ 38.313364][ T6423] team0: Port device team_slave_0 added [ 38.316140][ T6427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.318685][ T6423] team0: Port device team_slave_1 added [ 38.321128][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.322577][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.327731][ T6424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.347707][ T6427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.377151][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.378663][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.384981][ T6423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.421789][ T6424] hsr_slave_0: entered promiscuous mode [ 38.460442][ T6424] hsr_slave_1: entered promiscuous mode [ 38.500323][ T6424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.502126][ T6424] Cannot create hsr debugfs directory [ 38.503818][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.505236][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.510934][ T6417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.514392][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.515777][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.521010][ T6417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.534832][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.536349][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.542579][ T6423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.557745][ T6427] team0: Port device team_slave_0 added [ 38.577048][ T6427] team0: Port device team_slave_1 added [ 38.671700][ T6423] hsr_slave_0: entered promiscuous mode [ 38.700398][ T6423] hsr_slave_1: entered promiscuous mode [ 38.740292][ T6423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.741876][ T6423] Cannot create hsr debugfs directory [ 38.791763][ T6417] hsr_slave_0: entered promiscuous mode [ 38.830540][ T6417] hsr_slave_1: entered promiscuous mode [ 38.870458][ T6417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.872025][ T6417] Cannot create hsr debugfs directory [ 38.893308][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.894727][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.899927][ T6427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.905161][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.906573][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.912170][ T6427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.002053][ T6427] hsr_slave_0: entered promiscuous mode [ 39.051250][ T6427] hsr_slave_1: entered promiscuous mode [ 39.100452][ T6427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.102090][ T6427] Cannot create hsr debugfs directory [ 39.132767][ T6418] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.149532][ T6418] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.154278][ T6418] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.176804][ T6418] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.235048][ T6424] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.238175][ T6424] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.253471][ T6424] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.256648][ T6424] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.307454][ T6423] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.324976][ T6423] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.328341][ T6423] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.342454][ T6423] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.351533][ T6417] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.362792][ T6417] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.368351][ T6417] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.372994][ T6417] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.399271][ T6418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.414427][ T6418] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.423494][ T6427] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.426536][ T6427] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.442301][ T53] Bluetooth: hci2: command tx timeout [ 39.447685][ T6419] Bluetooth: hci1: command tx timeout [ 39.447720][ T5985] Bluetooth: hci0: command tx timeout [ 39.449234][ T6422] Bluetooth: hci3: command tx timeout [ 39.450941][ T6426] Bluetooth: hci4: command tx timeout [ 39.464618][ T6418] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.466707][ T6418] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.484334][ T6427] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.487660][ T6427] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.495795][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.497444][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.501793][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.503407][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.539012][ T6423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.555300][ T6424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.573467][ T6417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.584302][ T6423] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.594717][ T6418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.603530][ T6424] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.617052][ T6418] veth0_vlan: entered promiscuous mode [ 39.621925][ T6418] veth1_vlan: entered promiscuous mode [ 39.639537][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.641146][ T750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.644567][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.646160][ T750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.648584][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.650054][ T750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.652547][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.654020][ T750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.663477][ T6417] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.667776][ T3613] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.669266][ T3613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.687788][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.689371][ T3613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.723742][ T6418] veth0_macvtap: entered promiscuous mode [ 39.728381][ T6427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.766209][ T6418] veth1_macvtap: entered promiscuous mode [ 39.777014][ T6427] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.818341][ T1912] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.819802][ T1912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.823680][ T1912] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.825260][ T1912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.828992][ T6418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.842842][ T6418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.845696][ T6418] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.847580][ T6418] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.856821][ T6418] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.858742][ T6418] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.883509][ T6427] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.885696][ T6427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.929118][ T6423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.993788][ T6424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.005109][ T6417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.042845][ T6423] veth0_vlan: entered promiscuous mode [ 40.046608][ T6424] veth0_vlan: entered promiscuous mode [ 40.068010][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.069666][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.078129][ T6423] veth1_vlan: entered promiscuous mode [ 40.088414][ T6424] veth1_vlan: entered promiscuous mode [ 40.108698][ T6427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.125377][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.127244][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.159501][ T6427] veth0_vlan: entered promiscuous mode [ 40.170620][ T6423] veth0_macvtap: entered promiscuous mode [ 40.176496][ T6423] veth1_macvtap: entered promiscuous mode [ 40.190919][ T6424] veth0_macvtap: entered promiscuous mode [ 40.198529][ T6424] veth1_macvtap: entered promiscuous mode [ 40.205857][ T6427] veth1_vlan: entered promiscuous mode [ 40.216722][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.218833][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.222779][ T6423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.231294][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.233488][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.236081][ T6423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.238830][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.242623][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.244643][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.246872][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.250015][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.256979][ T6418] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.258565][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.264405][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.266422][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.268452][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.271186][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.278699][ T6424] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.281465][ T6424] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.283156][ T6424] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.285117][ T6424] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.293017][ T6423] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.294836][ T6423] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.296592][ T6423] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.298266][ T6423] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.308733][ T6427] veth0_macvtap: entered promiscuous mode [ 40.335997][ T6417] veth0_vlan: entered promiscuous mode [ 40.340903][ T6417] veth1_vlan: entered promiscuous mode [ 40.350003][ T6417] veth0_macvtap: entered promiscuous mode [ 40.353630][ T6417] veth1_macvtap: entered promiscuous mode [ 40.360856][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.363025][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.365106][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.367354][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.369891][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.372512][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.375136][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.377792][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.380057][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.382177][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.384734][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.386865][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.389195][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.401673][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.441388][ T6417] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.443305][ T6417] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.445294][ T6417] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.447154][ T6417] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.462020][ T6427] veth1_macvtap: entered promiscuous mode [ 40.833273][ T6505] loop1: detected capacity change from 0 to 256 [ 40.968656][ T6505] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 41.131754][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.133913][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.136037][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.138388][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.143255][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.145438][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.148583][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.153985][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.179371][ T6427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.184141][ T6505] team0: Device ipvlan1 failed to register rx_handler [ 41.198745][ T750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.206529][ T750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.224479][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.226455][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.229267][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.235888][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.237865][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.240426][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.242466][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.244649][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.249017][ T6427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.252569][ T6427] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.254406][ T6427] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.256278][ T6427] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.258187][ T6427] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.265647][ T750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.267412][ T750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.331866][ T3613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.333557][ T3613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.522054][ T6426] Bluetooth: hci4: command tx timeout [ 41.523569][ T6426] Bluetooth: hci3: command tx timeout [ 41.525349][ T6426] Bluetooth: hci0: command tx timeout [ 41.526911][ T6426] Bluetooth: hci2: command tx timeout [ 41.528455][ T6426] Bluetooth: hci1: command tx timeout [ 41.614719][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.616525][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.949413][ T1912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.951174][ T1912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.963191][ T2165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.964913][ T2165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.012827][ T2165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.015408][ T2165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.042054][ T3613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.043642][ T3613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.377482][ T6523] loop0: detected capacity change from 0 to 8 [ 42.751015][ T6523] SQUASHFS error: zlib decompression failed, data probably corrupt [ 42.753015][ T6523] SQUASHFS error: Failed to read block 0x9b: -5 [ 42.754438][ T6523] SQUASHFS error: Unable to read metadata cache entry [99] [ 42.756099][ T6523] SQUASHFS error: Unable to read inode 0x127 [ 43.254902][ T6528] loop4: detected capacity change from 0 to 1764 [ 43.461593][ T6531] binder: 6529:6531 tried to acquire reference to desc 0, got 1 instead [ 43.463446][ T6531] binder: 6529:6531 unknown command 0 [ 43.464528][ T6531] binder: 6529:6531 ioctl c0306201 200003c0 returned -22 [ 43.667964][ T6422] Bluetooth: hci1: command tx timeout [ 43.669404][ T6422] Bluetooth: hci2: command tx timeout [ 43.670815][ T6422] Bluetooth: hci0: command tx timeout [ 43.672126][ T6422] Bluetooth: hci3: command tx timeout [ 43.674817][ T6422] Bluetooth: hci4: command tx timeout [ 44.020531][ T6537] loop3: detected capacity change from 0 to 1024 [ 45.024216][ T6534] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9'. [ 45.385466][ T217] hfsplus: b-tree write err: -5, ino 4 [ 45.644770][ T6546] Bluetooth: MGMT ver 1.23 [ 45.680238][ C1] ------------[ cut here ]------------ [ 45.681582][ C1] WARNING: CPU: 1 PID: 6427 at kernel/workqueue.c:2257 __queue_work+0xe50/0x1308 [ 45.683553][ C1] Modules linked in: [ 45.684343][ C1] CPU: 1 UID: 0 PID: 6427 Comm: syz-executor Not tainted 6.13.0-rc3-syzkaller-g573067a5a685 #0 [ 45.686504][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 45.688440][ C1] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 45.689932][ C1] pc : __queue_work+0xe50/0x1308 [ 45.690957][ C1] lr : __queue_work+0xe50/0x1308 [ 45.691942][ C1] sp : ffff800080017b40 [ 45.692778][ C1] x29: ffff800080017b90 x28: dfff800000000000 x27: ffff700010002f88 [ 45.694440][ C1] x26: dfff800000000000 x25: ffff0000d8b74000 x24: 0000000000000008 [ 45.696098][ C1] x23: 1fffe00018dcfb59 x22: ffff0000d8b741c0 x21: 0000000000000100 [ 45.698037][ C1] x20: ffff0000c6e7dac0 x19: ffff0000de02c930 x18: 1fffe00036700a7e [ 45.699775][ C1] x17: ffff800123f1a000 x16: ffff800083275834 x15: 0000000000000002 [ 45.701396][ C1] x14: 1ffff00011f340ca x13: dfff800000000000 x12: 00000000f5f4fa2d [ 45.703129][ C1] x11: 00000000db66a0e2 x10: 0000000000ff0100 x9 : 0000000000000000 [ 45.704664][ C1] x8 : ffff0000c6e7dac0 x7 : ffff800080585750 x6 : 0000000000000000 [ 45.706330][ C1] x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008df83760 [ 45.708035][ C1] x2 : ffff0000de02c930 x1 : 0000000000000100 x0 : 0000000000000000 [ 45.709589][ C1] Call trace: [ 45.710274][ C1] __queue_work+0xe50/0x1308 (P) [ 45.711289][ C1] delayed_work_timer_fn+0x74/0x90 [ 45.712423][ C1] call_timer_fn+0x1b4/0x8b8 [ 45.713304][ C1] __run_timer_base+0x59c/0x7b4 [ 45.714308][ C1] run_timer_softirq+0xcc/0x194 [ 45.715516][ C1] handle_softirqs+0x320/0xd34 [ 45.716689][ C1] __do_softirq+0x14/0x20 [ 45.717663][ C1] ____do_softirq+0x14/0x20 [ 45.718741][ C1] call_on_irq_stack+0x24/0x4c [ 45.719703][ C1] do_softirq_own_stack+0x20/0x2c [ 45.720886][ C1] __irq_exit_rcu+0x1d8/0x544 [ 45.721908][ C1] irq_exit_rcu+0x14/0x84 [ 45.722930][ C1] el1_interrupt+0x38/0x68 [ 45.723860][ C1] el1h_64_irq_handler+0x18/0x24 [ 45.724872][ C1] el1h_64_irq+0x6c/0x70 [ 45.725681][ C1] percpu_ref_get_many+0xf0/0x24c (P) [ 45.726763][ C1] __memcg_slab_post_alloc_hook+0x3f0/0x6bc [ 45.728126][ C1] kmem_cache_alloc_noprof+0x320/0x410 [ 45.729234][ C1] anon_vma_clone+0x9c/0x468 [ 45.730166][ C1] anon_vma_fork+0x80/0x478 [ 45.731280][ C1] copy_mm+0xa54/0x1a80 [ 45.732074][ C1] copy_process+0x1568/0x3250 [ 45.733097][ C1] kernel_clone+0x1d8/0x82c [ 45.734109][ C1] __arm64_sys_clone+0x1f8/0x24c [ 45.735159][ C1] invoke_syscall+0x98/0x2b8 [ 45.736145][ C1] el0_svc_common+0x130/0x23c [ 45.737078][ C1] do_el0_svc+0x48/0x58 [ 45.737936][ C1] el0_svc+0x54/0x168 [ 45.738736][ C1] el0t_64_sync_handler+0x84/0x108 [ 45.739856][ C1] el0t_64_sync+0x198/0x19c [ 45.740876][ C1] irq event stamp: 146759 [ 45.741935][ C1] hardirqs last enabled at (146758): [] exit_to_kernel_mode+0xdc/0x10c [ 45.744241][ C1] hardirqs last disabled at (146759): [] _raw_spin_lock_irq+0x28/0x70 [ 45.746257][ C1] softirqs last enabled at (145098): [] handle_softirqs+0xb44/0xd34 [ 45.748192][ C1] softirqs last disabled at (146755): [] __do_softirq+0x14/0x20 [ 45.750038][ C1] ---[ end trace 0000000000000000 ]--- [ 45.872873][ T6429] binder: undelivered TRANSACTION_COMPLETE [ 45.874343][ T6429] binder: undelivered transaction 5, process died. [ 45.927777][ T6550] random: crng reseeded on system resumption [ 46.226929][ T6426] Bluetooth: hci4: command tx timeout [ 46.228170][ T6426] Bluetooth: hci3: command tx timeout [ 46.229291][ T6426] Bluetooth: hci2: command tx timeout [ 46.230609][ T6426] Bluetooth: hci1: command tx timeout [ 46.369505][ T6553] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 46.383895][ T6553] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98