last executing test programs: 2m28.703309092s ago: executing program 5 (id=6): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x9) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x1f00, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x80) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000050) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4800) sendmmsg(r6, &(0x7f00000002c0), 0x0, 0x400c800) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0xfffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 2m27.23564205s ago: executing program 5 (id=15): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x9) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x1f00, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000050) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4800) sendmmsg(r6, 0x0, 0x0, 0x400c800) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0xfffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 2m24.987265118s ago: executing program 5 (id=18): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x24, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 2m23.650360295s ago: executing program 5 (id=20): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x6, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r6 = getpgrp(0x0) r7 = gettid() rt_tgsigqueueinfo(r6, r7, 0x1d, &(0x7f00000000c0)={0x24, 0x8000006, 0x1}) syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7e, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600)) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x2007, @fd=r2, 0xc000000, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r3, 0x32dc, 0x0, 0xe, 0x0, 0x0) 2m8.195123199s ago: executing program 32 (id=20): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x6, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r6 = getpgrp(0x0) r7 = gettid() rt_tgsigqueueinfo(r6, r7, 0x1d, &(0x7f00000000c0)={0x24, 0x8000006, 0x1}) syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7e, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600)) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x2007, @fd=r2, 0xc000000, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r3, 0x32dc, 0x0, 0xe, 0x0, 0x0) 26.075739418s ago: executing program 4 (id=225): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socket$kcm(0x29, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0xb, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000722000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x80000000}, {0xa, 0x4e22, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x1000, 0x0, 0x0, 0xc9, 0xfffffff8]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 23.473606882s ago: executing program 1 (id=230): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x6, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) getpgrp(0x0) gettid() r6 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7e, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600)) io_uring_enter(r6, 0x4, 0xe876, 0x3, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x2007, @fd=r2, 0xc000000, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r3, 0x32dc, 0x0, 0xe, 0x0, 0x0) 21.400431895s ago: executing program 1 (id=232): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 21.106281831s ago: executing program 1 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r3, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000200)='./file0\x00', 0x400) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 20.697867386s ago: executing program 2 (id=234): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) 19.397947502s ago: executing program 1 (id=235): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000016c0)={0x1, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}]}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040), 0xc) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r3, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19.39661405s ago: executing program 6 (id=236): socket$inet6(0xa, 0x800000000000002, 0xe092) r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="320a070023080000280012800e0001006970366772657400000800590abb5604000800ddffffffffffffff00000000000000000050e4fb873d1de7d4a89974ac565aac3b203f8f9c3e3047dad92810efc8d69730d6c452e2d1e6a86e44359c36bddfd435c3e586f57ab88693562739c35d1aeb5c5c4d3ff905595d28fe60ca266422ea2bbd2b0b7c57267fb5983abadb011ff83d4b38b1659515848f1d6d944fd9dba6a3c06e80deea"], 0x48}, 0x1, 0x0, 0x0, 0x20002805}, 0x40000) memfd_create(0x0, 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x1, @mcast2, 0x8}}, 0x3d) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 18.980017242s ago: executing program 2 (id=237): socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x83b, &(0x7f00000000c0)={0x0, 0x11e, 0x80, 0x3, 0x319}, &(0x7f0000000140)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456, {0x0, r5}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 17.646798354s ago: executing program 2 (id=238): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socket$kcm(0x29, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0xb, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000722000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0xfffe}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x80000000}, {0xa, 0x4e22, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x1000, 0x0, 0x0, 0xc9, 0xfffffff8]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 17.596714415s ago: executing program 4 (id=239): r0 = socket$inet6(0xa, 0x800000000000002, 0xe092) r1 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="320a070023080000280012800e0001006970366772657400000800590abb5604000800ddffffffffffffff00000000000000000050e4fb873d1de7d4a89974ac565aac3b203f8f9c3e3047dad92810efc8d69730d6c452e2d1e6a86e44359c36bddfd435c3e586f57ab88693562739c35d1aeb5c5c4d3ff905595d28fe60ca266422ea2bbd2b0b7c57267fb5983abadb011ff83d4b38b1659515848f1d6d944fd9dba6a3c06e80deea"], 0x48}, 0x1, 0x0, 0x0, 0x20002805}, 0x40000) memfd_create(0x0, 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x1, @mcast2, 0x8}}, 0x3d) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) 17.428698298s ago: executing program 0 (id=240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(r0, 0xd, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012008f35"], 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x4040800) recvmmsg(r4, &(0x7f0000005840), 0x4000000000000ef, 0x20dc, 0x0) 16.282564537s ago: executing program 0 (id=241): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x41) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d61637674617000140002800800", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x60000, 0x0, {0x0, 0x0, 0x74, r3, {0x5}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 15.58795566s ago: executing program 3 (id=242): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r5 = getpgrp(0x0) r6 = gettid() rt_tgsigqueueinfo(r5, r6, 0x1d, &(0x7f00000000c0)={0x24, 0x8000006, 0x1}) syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7e, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600)) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x2007, @fd=r1, 0xc000000, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r2, 0x32dc, 0x0, 0xe, 0x0, 0x0) 15.396521225s ago: executing program 6 (id=243): capset(&(0x7f0000000040)={0x19980330}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x3e, 0x0, &(0x7f0000000a00)="b44c806748f06309624431ed3373010001000000008c6390009c4ebd873094563683b7ee0fae7a6a53200386ce51def6a4effb9de8b4645c2b9c0614907d", 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 15.088278378s ago: executing program 0 (id=244): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r3, &(0x7f0000000780)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x800) 13.759551296s ago: executing program 6 (id=245): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) 13.406530831s ago: executing program 2 (id=246): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x22000810) 13.193178606s ago: executing program 4 (id=247): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d00)={0x2c, &(0x7f00000007c0)=ANY=[@ANYBLOB="4011af000000b7"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 12.789074933s ago: executing program 6 (id=248): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r3, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000200)='./file0\x00', 0x400) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 11.360230764s ago: executing program 2 (id=249): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r5 = getpgrp(0x0) r6 = gettid() rt_tgsigqueueinfo(r5, r6, 0x1d, &(0x7f00000000c0)={0x24, 0x8000006, 0x1}) syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7e, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600)) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x2007, @fd=r1, 0xc000000, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r2, 0x32dc, 0x0, 0xe, 0x0, 0x0) 11.359083588s ago: executing program 6 (id=250): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$kcm(0xa, 0x922000000003, 0x11) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback={0x2000000}, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x800) 10.063167466s ago: executing program 0 (id=251): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x4080, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r3) write$cgroup_pid(r4, &(0x7f0000000240), 0xfdef) read$FUSE(r4, &(0x7f0000002540)={0x2020}, 0xfdef) r5 = syz_io_uring_setup(0xb05, &(0x7f0000000480)={0x0, 0xa795, 0x0, 0x0, 0x83, 0x0, r4}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80441, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0}) io_uring_enter(r5, 0x47be, 0x1, 0x0, 0x0, 0x0) 9.699918959s ago: executing program 4 (id=252): bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334d, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0) 8.852197297s ago: executing program 3 (id=253): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 7.929307332s ago: executing program 1 (id=254): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040), 0xc) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r2, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) 7.841098008s ago: executing program 3 (id=255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(r0, 0xd, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012008f35"], 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x4040800) recvmmsg(r4, &(0x7f0000005840), 0x4000000000000ef, 0x20dc, 0x0) 6.768424183s ago: executing program 3 (id=256): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x41) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d61637674617000140002800800", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x60000, 0x0, {0x0, 0x0, 0x74, r3, {0x5}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 6.215136962s ago: executing program 2 (id=257): gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) write$binfmt_aout(r2, 0x0, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @private2, 0x3}]}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000040)={r4, 0x7}, 0x8) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000301000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=@newtfilter={0x8b4, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0x8, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x6f}, @filter_kind_options=@f_basic={{0xa}, {0x864, 0x2, [@TCA_BASIC_POLICE={0x850, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xfffffffc, 0x4, 0x8, 0x5, 0x0, 0x629, 0x4, 0x10, 0x8, 0x8, 0x9, 0x5, 0x4, 0x0, 0xae, 0x319, 0x0, 0x2, 0x9, 0x7, 0x6, 0x6, 0x6, 0x8001, 0xcb, 0x9, 0xffff, 0x1, 0x8, 0xb2, 0x10001, 0x9, 0x6, 0x0, 0xc6af, 0x0, 0x401, 0x5fe, 0x7, 0x4, 0x1, 0x7, 0x5, 0xc3d, 0x81, 0x2, 0x32, 0x6, 0x6, 0x200, 0x1000, 0xfffffb71, 0x7, 0x2000004, 0x0, 0x88d, 0x8001, 0x9, 0x6, 0x0, 0x0, 0xe, 0x80, 0x8000, 0x5c20d649, 0x6, 0x2, 0x3800, 0x43, 0xfffffff7, 0x7fffffff, 0x101, 0xab25, 0xffffff7f, 0x1000, 0x5, 0x5, 0x8, 0x8, 0x0, 0x2, 0x1, 0x11, 0x2, 0x0, 0x8, 0x8, 0xfffff713, 0x8, 0x4, 0x8000, 0x3ff, 0x34, 0x7, 0x9, 0xc4c1, 0x6, 0x9, 0x6, 0xed, 0x2, 0xfffffff9, 0x2c0, 0x222000, 0xffff, 0x7, 0x2, 0xa, 0x2, 0x1, 0xfffffff8, 0x7, 0x3, 0x9e, 0x12000000, 0x6, 0x4, 0x4000000, 0x7, 0x3ff, 0x1, 0x8001, 0xfffffffe, 0x7, 0xa774, 0xffffffff, 0x1ff, 0x49, 0x4, 0xf, 0x1, 0xa, 0x4, 0x1, 0x7, 0x1, 0x1da, 0x5, 0xc, 0xaf7, 0x91eb, 0x8, 0x0, 0x51, 0x186, 0x9, 0x4, 0x2000007, 0x8, 0x9, 0xc7d2, 0xffffffff, 0xd9, 0x3, 0x6, 0x4, 0xfffffffb, 0x4c74, 0x80000001, 0x3, 0x29, 0x8, 0x5, 0x81, 0x9, 0xc, 0x7, 0x101, 0x81, 0x7, 0x3, 0x6, 0x200, 0x0, 0x80000001, 0x1, 0xf, 0x0, 0x4, 0x6e2b, 0x8, 0xffffffff, 0x4, 0xf, 0x101, 0xfff, 0xb7, 0x3ff, 0xff4, 0x0, 0xd, 0x6, 0x5, 0x10000, 0xffff, 0x5, 0x6, 0x5, 0x89, 0x5ebb5170, 0x2, 0x11b4, 0x1, 0x5, 0xffffffc0, 0x1e6b, 0x19, 0x4, 0x7, 0xb8ff, 0x7, 0xfffffffe, 0x7, 0x8, 0x5, 0x9, 0x3, 0x1, 0x7, 0x101, 0x6, 0x2, 0xdd8, 0x6, 0x1c, 0x0, 0xdb, 0xda, 0x2, 0x4, 0xff, 0x6, 0x0, 0x401, 0x1, 0x10000, 0x3, 0x79, 0x0, 0x9, 0x4, 0xffffffff, 0x4, 0x2, 0x5, 0x0, 0x68000000, 0x4, 0xc, 0x7, 0x80000001, 0x1c94, 0x5, 0x6, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x9, 0x1, 0x7fff, 0x1, 0x8, 0x7f, 0x5, 0x8c, 0x5, 0x7, 0x10000, 0x4, 0x1, 0xc, 0xbb1a, 0x40, 0xc, 0xa, 0x5, 0x4, 0x2c5, 0x4, 0x742, 0xffffffff, 0x200, 0x1, 0xffffffff, 0x7, 0x8, 0x1, 0x5, 0x2, 0xfffff200, 0x101, 0x7, 0x5, 0x10001, 0x2, 0xa, 0x1f, 0x3, 0x5a8b, 0x3, 0x6, 0x80, 0xac06, 0x6, 0xfff, 0xf, 0x1, 0xfffffffb, 0xfff, 0x9, 0x2, 0xeb, 0x2, 0xf166, 0x1000, 0xcb, 0x4, 0xffffffff, 0x0, 0x23, 0x5, 0x0, 0xe, 0x8, 0x81, 0xfffffe00, 0x1, 0x4a, 0x3, 0x316, 0x8, 0x6, 0x4, 0x85c, 0xeab, 0x200, 0x8, 0x10000, 0x2, 0x992, 0xfffffff9, 0x7, 0x8, 0x3, 0x4, 0x80000001, 0x7, 0x1, 0x8, 0x9b, 0x4, 0x6, 0x1, 0x4, 0x3, 0x3, 0x9, 0x3, 0xfffffdf7, 0x2, 0x4, 0x0, 0x9, 0x7, 0x8001, 0x100, 0x4, 0x80000000, 0x101, 0x2, 0x8, 0x2, 0x800, 0x800, 0x7fffffff, 0x4, 0x2, 0xc519, 0x2, 0x0, 0x101, 0x3, 0xfffffff9, 0x3, 0xe, 0x6, 0x180000, 0x2, 0xee, 0x3, 0x9, 0x1, 0x7441, 0x3, 0xd, 0x9, 0x7, 0x81, 0x3, 0x40, 0x4, 0x800, 0x5, 0x6, 0xffffffff, 0x8, 0x80000000, 0x3, 0x2, 0x8000, 0x2, 0x9edfca2, 0x8, 0x8684, 0x5, 0x10001, 0xffffffff, 0x1, 0x80000001, 0x5, 0x6, 0x6, 0x0, 0x6, 0xfffffff7, 0x5, 0x1ff, 0x80000000, 0x6, 0x5, 0x10001, 0x401, 0xfffffffe, 0x8, 0xa, 0x0, 0x4, 0x5, 0x7, 0x9, 0x8, 0x40000000, 0x55aa, 0x0, 0x5, 0x10, 0x3, 0x413, 0x6, 0x9, 0x6, 0x0, 0x60, 0x6, 0x9, 0x5, 0x2, 0x400, 0x0, 0x1ff, 0xac, 0x5, 0xf, 0x1, 0x1000, 0x57, 0x2, 0x2, 0xfffffffb, 0x6, 0x7ff, 0xfffff801, 0x9, 0x6ba, 0xffffffff, 0xffffffff, 0x5, 0x6, 0x7ff, 0x7, 0xd, 0x625, 0x1, 0x6, 0xfffffff8, 0x1f8e, 0x5, 0x9, 0x4, 0x0, 0x5, 0xb, 0x7, 0xffffffff, 0x7, 0x3, 0x6, 0x5, 0x2, 0xffffffff, 0x5, 0xfff, 0x5, 0x0, 0x44, 0x4, 0x100, 0x0, 0xef, 0xb, 0x5, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0x1, 0x3, 0x856, 0x2, {0x2, 0x1, 0x9, 0x7, 0xffcb, 0x9}, {0x9, 0x2, 0xbc, 0x3, 0x5737, 0x7}, 0x6, 0x7, 0x6}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0x8}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0xd}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x8b4}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 5.975619795s ago: executing program 3 (id=258): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 5.484113124s ago: executing program 4 (id=259): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'ip6tnl0\x00', @random="0200ac7f7f00"}) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd2b, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x10, 0xfff1}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "d89933c8221bed90b593a1f978374fb9"}]}}]}, 0x48}}, 0x24044094) 4.933454332s ago: executing program 0 (id=260): syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES32], 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) shutdown(r2, 0x1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)=@tipc=@id, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x220}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x11) r4 = socket(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r4}, 0x20) close(r4) capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001780)={{0x4, 0x7, 0xbb8b, 0x97e, 'syz1\x00', 0xcb26}, 0x0, 0x20000000, 0x10001, 0x0, 0x6, 0x80000000, 'syz0\x00', &(0x7f0000000340)=['\xaa\xaa\xaa\xaa\xaa', '\x00', '\x00', '\x00', '\'&\x00', '*#/%[\x00'], 0x11}) 3.251631912s ago: executing program 0 (id=261): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x63}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xd3, &(0x7f0000000280)=""/211, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x10}, 0x10}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000d80), 0xfffffffd, 0x62c200) ioctl$I2C_PEC(r2, 0x708, 0x11) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000300)={0x1, 0x0, 0x1, &(0x7f0000000100)={0x0, "fd6d44512b7e1b0420ec2a3ba53b31dd77e7ffffff0300000000000700"}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000002020104e0ffffff00000000010000020600074000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendfile(r3, r4, 0x0, 0x201f00) 2.238445556s ago: executing program 3 (id=262): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xd, 0x4) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) 2.177641061s ago: executing program 1 (id=263): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x63}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xd3, &(0x7f0000000280)=""/211, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x10}, 0x10}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000d80), 0xfffffffd, 0x62c200) ioctl$I2C_PEC(r2, 0x708, 0x11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000002020104e0ffffff00000000010000020600074000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendfile(r3, r4, 0x0, 0x201f00) 1.224481382s ago: executing program 6 (id=264): socket$inet6(0xa, 0x800000000000002, 0xe092) r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="320a070023080000280012800e0001006970366772657400000800590abb5604000800ddffffffffffffff00000000000000000050e4fb873d1de7d4a89974ac565aac3b203f8f9c3e3047dad92810efc8d69730d6c452e2d1e6a86e44359c36bddfd435c3e586f57ab88693562739c35d1aeb5c5c4d3ff905595d28fe60ca266422ea2bbd2b0b7c57267fb5983abadb011ff83d4b38b1659515848f1d6d944fd9dba6a3c06e80deea"], 0x48}, 0x1, 0x0, 0x0, 0x20002805}, 0x40000) memfd_create(0x0, 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x1, @mcast2, 0x8}}, 0x3d) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 0s ago: executing program 4 (id=265): syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES32], 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) shutdown(r2, 0x1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)=@tipc=@id, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x220}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x11) r4 = socket(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r4}, 0x20) close(r4) capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001780)={{0x4, 0x7, 0xbb8b, 0x97e, 'syz1\x00', 0xcb26}, 0x0, 0x20000000, 0x10001, 0x0, 0x7, 0x80000000, 'syz0\x00', &(0x7f0000000340)=['\xaa\xaa\xaa\xaa\xaa', '\x00', '\x00', '\x00', '\xaa\xaa\xaa\xaa\xaa', '\'&\x00', '*#/%[\x00'], 0x16}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts. [ 82.942412][ T5810] cgroup: Unknown subsys name 'net' [ 83.133952][ T5810] cgroup: Unknown subsys name 'cpuset' [ 83.143053][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.595906][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.118881][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.140603][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.162767][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.170120][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.171494][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.177626][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.192451][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.200782][ T5144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.206234][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.208892][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.214938][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.222441][ T5144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.229035][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.236822][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.242886][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.256662][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.258153][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.271608][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.271936][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.281290][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.287517][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.295828][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.300180][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.306998][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.320911][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.327886][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.328267][ T5144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.337039][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.350497][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.351317][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.045010][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 88.243794][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 88.316976][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 88.452106][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 88.504275][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.511885][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.519131][ T5830] bridge_slave_0: entered allmulticast mode [ 88.526948][ T5830] bridge_slave_0: entered promiscuous mode [ 88.575084][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.582368][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.589600][ T5830] bridge_slave_1: entered allmulticast mode [ 88.597881][ T5830] bridge_slave_1: entered promiscuous mode [ 88.605810][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 88.740962][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.748147][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.755347][ T5825] bridge_slave_0: entered allmulticast mode [ 88.763250][ T5825] bridge_slave_0: entered promiscuous mode [ 88.783948][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 88.797991][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.826168][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.833425][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.840604][ T5825] bridge_slave_1: entered allmulticast mode [ 88.847890][ T5825] bridge_slave_1: entered promiscuous mode [ 88.855163][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.862339][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.869443][ T5826] bridge_slave_0: entered allmulticast mode [ 88.876851][ T5826] bridge_slave_0: entered promiscuous mode [ 88.892509][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.933844][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.941072][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.948371][ T5826] bridge_slave_1: entered allmulticast mode [ 88.955978][ T5826] bridge_slave_1: entered promiscuous mode [ 89.074849][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.082448][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.089555][ T5827] bridge_slave_0: entered allmulticast mode [ 89.097914][ T5827] bridge_slave_0: entered promiscuous mode [ 89.108017][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.137642][ T5830] team0: Port device team_slave_0 added [ 89.156779][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.163975][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.171733][ T5827] bridge_slave_1: entered allmulticast mode [ 89.179024][ T5827] bridge_slave_1: entered promiscuous mode [ 89.188367][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.201177][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.218107][ T5830] team0: Port device team_slave_1 added [ 89.266391][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.293914][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.301254][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.308380][ T5829] bridge_slave_0: entered allmulticast mode [ 89.315816][ T5829] bridge_slave_0: entered promiscuous mode [ 89.392749][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.400484][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.407590][ T5829] bridge_slave_1: entered allmulticast mode [ 89.414341][ T5847] Bluetooth: hci2: command tx timeout [ 89.414484][ T5848] Bluetooth: hci4: command tx timeout [ 89.420105][ T5847] Bluetooth: hci3: command tx timeout [ 89.420188][ T5847] Bluetooth: hci1: command tx timeout [ 89.422402][ T5829] bridge_slave_1: entered promiscuous mode [ 89.427129][ T52] Bluetooth: hci0: command tx timeout [ 89.436040][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.436537][ T5831] Bluetooth: hci5: command tx timeout [ 89.445216][ T5825] team0: Port device team_slave_0 added [ 89.495371][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.502423][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.528667][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.557005][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.567998][ T5825] team0: Port device team_slave_1 added [ 89.575895][ T5826] team0: Port device team_slave_0 added [ 89.582139][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.589268][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.596548][ T5828] bridge_slave_0: entered allmulticast mode [ 89.603967][ T5828] bridge_slave_0: entered promiscuous mode [ 89.611882][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.618815][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.645219][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.698310][ T5826] team0: Port device team_slave_1 added [ 89.704626][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.712184][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.719314][ T5828] bridge_slave_1: entered allmulticast mode [ 89.726747][ T5828] bridge_slave_1: entered promiscuous mode [ 89.744286][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.811507][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.822569][ T5827] team0: Port device team_slave_0 added [ 89.828914][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.836464][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.863029][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.904173][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.928892][ T5827] team0: Port device team_slave_1 added [ 89.935892][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.943297][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.969351][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.981208][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.988148][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.014081][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.041454][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.093426][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.100484][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.126939][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.165185][ T5829] team0: Port device team_slave_0 added [ 90.185808][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.192827][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.219175][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.243105][ T5830] hsr_slave_0: entered promiscuous mode [ 90.249512][ T5830] hsr_slave_1: entered promiscuous mode [ 90.271609][ T5829] team0: Port device team_slave_1 added [ 90.278680][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.285978][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.312606][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.335616][ T5828] team0: Port device team_slave_0 added [ 90.401488][ T5828] team0: Port device team_slave_1 added [ 90.426047][ T5825] hsr_slave_0: entered promiscuous mode [ 90.432739][ T5825] hsr_slave_1: entered promiscuous mode [ 90.438916][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 90.444773][ T5825] Cannot create hsr debugfs directory [ 90.498228][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.505626][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.532219][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.575462][ T5826] hsr_slave_0: entered promiscuous mode [ 90.601792][ T5826] hsr_slave_1: entered promiscuous mode [ 90.608087][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 90.622271][ T5826] Cannot create hsr debugfs directory [ 90.646066][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.655840][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.681879][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.720323][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.727258][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.753627][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.789739][ T5827] hsr_slave_0: entered promiscuous mode [ 90.796131][ T5827] hsr_slave_1: entered promiscuous mode [ 90.803686][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 90.809406][ T5827] Cannot create hsr debugfs directory [ 90.822952][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.830072][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.856413][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.062158][ T5829] hsr_slave_0: entered promiscuous mode [ 91.068601][ T5829] hsr_slave_1: entered promiscuous mode [ 91.075251][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 91.081386][ T5829] Cannot create hsr debugfs directory [ 91.092980][ T10] cfg80211: failed to load regulatory.db [ 91.150848][ T5828] hsr_slave_0: entered promiscuous mode [ 91.157234][ T5828] hsr_slave_1: entered promiscuous mode [ 91.163905][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 91.169615][ T5828] Cannot create hsr debugfs directory [ 91.490160][ T5836] Bluetooth: hci5: command tx timeout [ 91.490191][ T5144] Bluetooth: hci4: command tx timeout [ 91.495623][ T5848] Bluetooth: hci2: command tx timeout [ 91.500968][ T5847] Bluetooth: hci0: command tx timeout [ 91.506422][ T52] Bluetooth: hci3: command tx timeout [ 91.517492][ T5831] Bluetooth: hci1: command tx timeout [ 91.647330][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.668491][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.686810][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.712645][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.784527][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.803629][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.832662][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.844408][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.922733][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.935475][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.946810][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.959105][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.026003][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.079394][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.093120][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.117930][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.140694][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.155304][ T3421] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.162472][ T3421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.172845][ T3421] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.179948][ T3421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.200039][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.312937][ T5827] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.350688][ T5827] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.362666][ T5827] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 92.378585][ T5827] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.410582][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.463780][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.502871][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.518220][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.525347][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.543485][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.556564][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.581336][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.605824][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.612974][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.687741][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.777419][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.823578][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.830710][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.866300][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.873439][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.887408][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.954485][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.046447][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.083626][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.136728][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.159558][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.195752][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.239388][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.246562][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.291921][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.313569][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.320724][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.336815][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.343961][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.354478][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.361625][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.386812][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.393945][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.454186][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.461320][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.572778][ T5848] Bluetooth: hci2: command tx timeout [ 93.572952][ T5847] Bluetooth: hci4: command tx timeout [ 93.578185][ T5836] Bluetooth: hci0: command tx timeout [ 93.586523][ T5144] Bluetooth: hci5: command tx timeout [ 93.589387][ T52] Bluetooth: hci3: command tx timeout [ 93.600480][ T5831] Bluetooth: hci1: command tx timeout [ 93.617350][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.713334][ T5830] veth0_vlan: entered promiscuous mode [ 93.775012][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.813528][ T5830] veth1_vlan: entered promiscuous mode [ 93.907884][ T5826] veth0_vlan: entered promiscuous mode [ 94.007817][ T5830] veth0_macvtap: entered promiscuous mode [ 94.026832][ T5826] veth1_vlan: entered promiscuous mode [ 94.046213][ T5825] veth0_vlan: entered promiscuous mode [ 94.071604][ T5830] veth1_macvtap: entered promiscuous mode [ 94.102774][ T5825] veth1_vlan: entered promiscuous mode [ 94.175097][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.208500][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.218560][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.227455][ T5826] veth0_macvtap: entered promiscuous mode [ 94.247522][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.257639][ T5826] veth1_macvtap: entered promiscuous mode [ 94.284487][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.295012][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.308214][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.331154][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.342544][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.376889][ T5825] veth0_macvtap: entered promiscuous mode [ 94.416054][ T5825] veth1_macvtap: entered promiscuous mode [ 94.454721][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.485596][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.577933][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.594170][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.633042][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.647882][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.662019][ T5829] veth0_vlan: entered promiscuous mode [ 94.669515][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.681324][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.694433][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.703360][ T5828] veth0_vlan: entered promiscuous mode [ 94.719120][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.747062][ T3506] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.776711][ T3506] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.793774][ T5829] veth1_vlan: entered promiscuous mode [ 94.801098][ T3506] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.811067][ T3506] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.836592][ T5828] veth1_vlan: entered promiscuous mode [ 94.847982][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.859616][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.925549][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.034869][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.045471][ T5829] veth0_macvtap: entered promiscuous mode [ 95.055905][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.065372][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 95.076665][ T5973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 95.112283][ T5973] Zero length message leads to an empty skb [ 95.118561][ T5829] veth1_macvtap: entered promiscuous mode [ 95.148881][ T37] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.167917][ T37] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.193082][ T37] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.216871][ T5827] veth0_vlan: entered promiscuous mode [ 95.228537][ T5828] veth0_macvtap: entered promiscuous mode [ 95.259818][ T37] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.285633][ T2988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.310441][ T2988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.327497][ T5828] veth1_macvtap: entered promiscuous mode [ 95.342866][ T5827] veth1_vlan: entered promiscuous mode [ 95.379039][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.415956][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.447443][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.471576][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.496968][ T72] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.506390][ T72] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.660098][ T5847] Bluetooth: hci1: command tx timeout [ 95.665673][ T5144] Bluetooth: hci0: command tx timeout [ 95.671321][ T5847] Bluetooth: hci2: command tx timeout [ 95.677022][ T5831] Bluetooth: hci3: command tx timeout [ 95.682589][ T5836] Bluetooth: hci4: command tx timeout [ 95.688659][ T52] Bluetooth: hci5: command tx timeout [ 96.088354][ T72] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.122299][ T5977] slcan: can't register candev [ 96.237668][ T5979] loop2: detected capacity change from 0 to 256 [ 96.262540][ T72] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.286915][ T5979] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf5596061, utbl_chksum : 0xe619d30d) [ 96.304927][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.348581][ T2988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.399727][ T2988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.441512][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.480321][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.485897][ T5827] veth0_macvtap: entered promiscuous mode [ 96.509112][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.518556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 96.655875][ T5827] veth1_macvtap: entered promiscuous mode [ 96.686433][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.708573][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.030819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.107063][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.126249][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.194638][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.374556][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.435947][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.125553][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.154359][ T5990] slcan: can't register candev [ 98.216584][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.264629][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.334183][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.424679][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.500072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.510039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.976380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.181257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.190122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 99.283728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.736178][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.808218][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.811706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 100.010035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.028541][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.048072][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.290144][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.314727][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.413541][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.438891][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.233305][ T6018] program syz.0.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.689151][ T6029] slcan: can't register candev [ 104.880145][ T6042] capability: warning: `syz.4.16' uses 32-bit capabilities (legacy support in use) [ 105.842279][ T6042] program syz.4.16 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.355591][ T6056] loop5: detected capacity change from 0 to 64 [ 106.789134][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.990660][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 107.013976][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 107.052253][ T6066] fuse: Bad value for 'fd' [ 107.068533][ T9] usb 5-1: config 0 has no interface number 0 [ 107.126729][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 107.215372][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 107.245982][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.279705][ T9] usb 5-1: Product: syz [ 107.298154][ T9] usb 5-1: Manufacturer: syz [ 108.094510][ T6069] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 108.862993][ T9] usb 5-1: SerialNumber: syz [ 108.881628][ T9] usb 5-1: config 0 descriptor?? [ 109.139138][ T9] smsc75xx v1.0.0 [ 109.380674][ T6077] can0: slcan on ttyS3. [ 110.339779][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 110.362660][ T6081] loop1: detected capacity change from 0 to 64 [ 110.386665][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 110.420031][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 110.428710][ T6083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28'. [ 110.481027][ T9] usb 5-1: USB disconnect, device number 2 [ 110.585062][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.478501][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.731562][ T72] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.815327][ T72] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.804106][ T6102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.30'. [ 113.826395][ T6054] can0 (unregistered): slcan off ttyS3. [ 113.865512][ T6110] loop4: detected capacity change from 0 to 64 [ 115.859285][ T6128] fuse: Bad value for 'fd' [ 116.879038][ T6145] loop3: detected capacity change from 0 to 256 [ 117.135316][ T6145] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf5596061, utbl_chksum : 0xe619d30d) [ 118.029775][ T6003] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.477692][ T6164] netlink: 48 bytes leftover after parsing attributes in process `syz.3.42'. [ 119.035830][ T6003] usb 1-1: Using ep0 maxpacket: 32 [ 119.294279][ T6003] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 119.551222][ T6003] usb 1-1: config 0 has no interface number 0 [ 119.626892][ T6171] netlink: 48 bytes leftover after parsing attributes in process `syz.3.43'. [ 120.399332][ T6003] usb 1-1: config 0 interface 184 has no altsetting 0 [ 120.505212][ T6175] loop3: detected capacity change from 0 to 64 [ 120.545672][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'. [ 120.592002][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.44'. [ 120.649317][ T1308] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.692778][ T6003] usb 1-1: string descriptor 0 read error: -71 [ 120.699455][ T6003] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 120.733312][ T1308] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.760767][ T1308] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.778767][ T1308] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.899834][ T6003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.022818][ T6003] usb 1-1: config 0 descriptor?? [ 121.081012][ T6003] usb 1-1: can't set config #0, error -71 [ 121.120161][ T6003] usb 1-1: USB disconnect, device number 2 [ 122.432437][ T6202] netlink: 'syz.0.49': attribute type 1 has an invalid length. [ 123.174733][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 123.183589][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 123.191461][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 123.199411][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 123.210171][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 123.315200][ T6208] fuse: Bad value for 'fd' [ 123.346515][ T6206] loop0: detected capacity change from 0 to 64 [ 123.937962][ T6218] fuse: Bad value for 'fd' [ 124.855326][ T6228] loop1: detected capacity change from 0 to 64 [ 125.276004][ T5836] Bluetooth: hci6: command tx timeout [ 126.093519][ T6003] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 126.219571][ T6041] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.312222][ T6003] usb 1-1: Using ep0 maxpacket: 8 [ 126.350824][ T6003] usb 1-1: unable to get BOS descriptor or descriptor too short [ 126.405446][ T6003] usb 1-1: config 4 has an invalid interface number: 146 but max is 0 [ 126.438469][ T6003] usb 1-1: config 4 has no interface number 0 [ 126.446976][ T6041] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.520976][ T6003] usb 1-1: config 4 interface 146 has no altsetting 0 [ 126.565923][ T6003] usb 1-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=af.79 [ 126.589370][ T6041] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.636982][ T6003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.671660][ T6003] usb 1-1: Product: syz [ 126.675996][ T6003] usb 1-1: Manufacturer: syz [ 126.752581][ T6003] usb 1-1: SerialNumber: syz [ 126.784817][ T6041] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.864865][ T6200] chnl_net:caif_netlink_parms(): no params data found [ 127.062286][ T6236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.171060][ T6236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.349874][ T6003] comedi comedi5: could not set alternate setting 3 in high speed [ 127.357737][ T6003] usbduxsigma 1-1:4.146: driver 'usbduxsigma' failed to auto-configure device. [ 127.409985][ T5836] Bluetooth: hci6: command tx timeout [ 127.593029][ T6003] usbduxsigma 1-1:4.146: probe with driver usbduxsigma failed with error -71 [ 127.657410][ T6200] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.677330][ T6200] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.696091][ T6200] bridge_slave_0: entered allmulticast mode [ 127.704327][ T6003] usb 1-1: USB disconnect, device number 3 [ 127.706358][ T6200] bridge_slave_0: entered promiscuous mode [ 127.728242][ T6041] bridge_slave_1: left allmulticast mode [ 127.738941][ T6041] bridge_slave_1: left promiscuous mode [ 127.745394][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.787455][ T6041] bridge_slave_0: left allmulticast mode [ 127.803179][ T6041] bridge_slave_0: left promiscuous mode [ 127.823697][ T6041] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.991044][ T6033] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 128.149695][ T6033] usb 5-1: Using ep0 maxpacket: 32 [ 128.184077][ T6033] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 128.260718][ T6033] usb 5-1: config 0 has no interface number 0 [ 128.270784][ T6033] usb 5-1: config 0 interface 184 has no altsetting 0 [ 128.307137][ T6033] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 128.316298][ T6033] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.324454][ T6033] usb 5-1: Product: syz [ 128.328748][ T6033] usb 5-1: Manufacturer: syz [ 128.333487][ T6033] usb 5-1: SerialNumber: syz [ 128.561858][ T6033] usb 5-1: config 0 descriptor?? [ 128.601222][ T6033] smsc75xx v1.0.0 [ 128.985876][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 129.041528][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'. [ 129.056884][ T6041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.251444][ T6033] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 129.265162][ T6033] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 129.276368][ T6041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.291450][ T6041] bond0 (unregistering): Released all slaves [ 129.390354][ T6200] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.437799][ T6200] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.483873][ T6200] bridge_slave_1: entered allmulticast mode [ 129.492536][ T5836] Bluetooth: hci6: command tx timeout [ 129.516380][ T6200] bridge_slave_1: entered promiscuous mode [ 129.583173][ T6257] hsr_slave_1: entered allmulticast mode [ 129.984796][ T6033] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 130.034449][ T6033] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 130.064610][ T6266] loop3: detected capacity change from 0 to 16 [ 130.074467][ T6033] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 130.102160][ T6266] erofs (device loop3): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 130.102306][ T6033] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 130.181014][ T6266] erofs (device loop3): mounted with root inode @ nid 36. [ 130.220537][ T6200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.412316][ T6200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.650412][ T6270] syz.3.63: attempt to access beyond end of device [ 130.650412][ T6270] loop3: rw=0, sector=301990144, nr_sectors = 257 limit=16 [ 130.665311][ T6270] syz.3.63: attempt to access beyond end of device [ 130.665311][ T6270] loop3: rw=0, sector=301990400, nr_sectors = 1 limit=16 [ 130.681093][ T6270] erofs (device loop3): read error -5 @ 0 of nid 36 [ 130.737375][ T6270] syz.3.63: attempt to access beyond end of device [ 130.737375][ T6270] loop3: rw=0, sector=301990144, nr_sectors = 257 limit=16 [ 130.752280][ T6270] syz.3.63: attempt to access beyond end of device [ 130.752280][ T6270] loop3: rw=0, sector=301990400, nr_sectors = 1 limit=16 [ 130.768755][ T6270] erofs (device loop3): read error -5 @ 0 of nid 36 [ 131.359232][ T24] usb 5-1: USB disconnect, device number 3 [ 131.375071][ T6200] team0: Port device team_slave_0 added [ 131.570021][ T5836] Bluetooth: hci6: command tx timeout [ 131.645579][ T6200] team0: Port device team_slave_1 added [ 131.671670][ T6272] fuse: Invalid rootmode [ 132.041400][ T6200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.066265][ T6200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.097604][ T6200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.114174][ T6200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.329692][ T6200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.079812][ T6200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.967464][ T6041] hsr_slave_0: left promiscuous mode [ 134.991088][ T6041] hsr_slave_1: left promiscuous mode [ 135.043021][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.069758][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.100222][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.107598][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.245962][ T6041] veth1_macvtap: left promiscuous mode [ 135.288910][ T6041] veth0_macvtap: left promiscuous mode [ 135.310580][ T6041] veth1_vlan: left promiscuous mode [ 135.335529][ T6041] veth0_vlan: left promiscuous mode [ 137.283846][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.290300][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.773090][ T6310] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 138.463028][ T6315] loop0: detected capacity change from 0 to 64 [ 138.659798][ T6289] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 139.429684][ T6289] usb 3-1: Using ep0 maxpacket: 8 [ 139.499293][ T6289] usb 3-1: unable to get BOS descriptor or descriptor too short [ 139.520616][ T6289] usb 3-1: config 4 has an invalid interface number: 146 but max is 0 [ 139.562237][ T6289] usb 3-1: config 4 has no interface number 0 [ 139.580497][ T6289] usb 3-1: config 4 interface 146 has no altsetting 0 [ 139.627557][ T6289] usb 3-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=af.79 [ 139.650399][ T30] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 139.657926][ T6289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.674832][ T6289] usb 3-1: Product: syz [ 139.688851][ T6289] usb 3-1: Manufacturer: syz [ 139.698957][ T6289] usb 3-1: SerialNumber: syz [ 139.839760][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 139.845328][ T6324] fuse: Invalid rootmode [ 139.851440][ T30] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 139.869665][ T30] usb 4-1: config 0 has no interface number 0 [ 139.875799][ T30] usb 4-1: config 0 interface 184 has no altsetting 0 [ 139.933386][ T30] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 139.975287][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.994145][ T6313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.014112][ T6313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.033758][ T30] usb 4-1: Product: syz [ 140.037952][ T30] usb 4-1: Manufacturer: syz [ 140.057341][ T30] usb 4-1: SerialNumber: syz [ 140.107444][ T30] usb 4-1: config 0 descriptor?? [ 140.117056][ T6289] comedi comedi5: could not set alternate setting 3 in high speed [ 140.140461][ T6289] usbduxsigma 3-1:4.146: driver 'usbduxsigma' failed to auto-configure device. [ 140.162796][ T30] smsc75xx v1.0.0 [ 140.180246][ T6289] usbduxsigma 3-1:4.146: probe with driver usbduxsigma failed with error -71 [ 140.254644][ T6289] usb 3-1: USB disconnect, device number 2 [ 140.303654][ T6331] netlink: 64 bytes leftover after parsing attributes in process `syz.0.78'. [ 140.468900][ T6041] team0 (unregistering): Port device team_slave_1 removed [ 140.578914][ T6041] team0 (unregistering): Port device team_slave_0 removed [ 140.749298][ T30] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 140.789099][ T30] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 141.708655][ T30] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 141.770056][ T30] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 141.799695][ T30] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 141.844120][ T30] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 143.260828][ T30] usb 4-1: USB disconnect, device number 2 [ 143.478935][ T6359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.84'. [ 143.548086][ T6362] netlink: 2188 bytes leftover after parsing attributes in process `syz.3.84'. [ 143.636754][ T6200] hsr_slave_0: entered promiscuous mode [ 143.692816][ T6200] hsr_slave_1: entered promiscuous mode [ 143.745192][ T6200] debugfs: 'hsr0' already exists in 'hsr' [ 143.765134][ T6200] Cannot create hsr debugfs directory [ 143.857975][ T6367] loop4: detected capacity change from 0 to 64 [ 144.027941][ T6362] team0 (unregistering): Port device team_slave_0 removed [ 144.153827][ T6362] team0 (unregistering): Port device team_slave_1 removed [ 144.887691][ T6378] netlink: 48 bytes leftover after parsing attributes in process `syz.2.86'. [ 145.300612][ T6384] loop1: detected capacity change from 0 to 32768 [ 145.320515][ T6384] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.87 (6384) [ 145.358970][ T6384] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 145.369958][ T6384] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 145.490227][ T6384] BTRFS info (device loop1): turning off barriers [ 145.496692][ T6384] BTRFS info (device loop1): enabling free space tree [ 145.503509][ T6384] BTRFS info (device loop1): use zstd compression, level 3 [ 146.685683][ T6416] loop2: detected capacity change from 0 to 64 [ 146.743093][ T6200] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 146.890003][ T6200] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 147.161383][ T6200] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 147.224125][ T5829] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.315345][ T6200] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 148.490602][ T6445] loop0: detected capacity change from 0 to 64 [ 148.678925][ T6200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.776575][ T6200] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.791399][ T6041] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.798527][ T6041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.881344][ T6041] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.888447][ T6041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.315595][ T6200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.398524][ T6458] netlink: 64 bytes leftover after parsing attributes in process `syz.4.96'. [ 151.012013][ T6468] netlink: 64 bytes leftover after parsing attributes in process `syz.0.97'. [ 151.811974][ T6200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.425728][ T6482] loop2: detected capacity change from 0 to 64 [ 152.636509][ T6487] loop1: detected capacity change from 0 to 64 [ 154.400209][ T6200] veth0_vlan: entered promiscuous mode [ 154.675700][ T6200] veth1_vlan: entered promiscuous mode [ 154.839171][ T6200] veth0_macvtap: entered promiscuous mode [ 154.870873][ T6200] veth1_macvtap: entered promiscuous mode [ 154.971112][ T6200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.014595][ T6200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.153752][ T6225] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.222873][ T6225] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.333446][ T6225] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.356659][ T6225] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.978020][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.005834][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.299809][ T5980] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 156.503967][ T5980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.521243][ T6011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.576535][ T6011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.637407][ T5980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.708036][ T5980] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.803332][ T5980] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.869714][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.920107][ T5980] usb 5-1: config 0 descriptor?? [ 157.534847][ T5980] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 157.680607][ T6538] can0: slcan on ttyS3. [ 158.371317][ T6535] can0 (unregistered): slcan off ttyS3. [ 158.609036][ T6521] usb 5-1: string descriptor 0 read error: -71 [ 158.651868][ T5980] usb 5-1: USB disconnect, device number 4 [ 158.681023][ T6540] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -19 [ 158.734468][ T6541] fido_id[6541]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 159.766547][ T6546] can0: slcan on ttyS3. [ 160.923033][ T6546] can0 (unregistered): slcan off ttyS3. [ 162.651898][ T6570] netlink: 64 bytes leftover after parsing attributes in process `syz.1.112'. [ 162.920053][ T6574] snd_dummy snd_dummy.0: control 0:0:0:syz0:65534 is already present [ 163.411363][ T772] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 163.599967][ T772] usb 4-1: Using ep0 maxpacket: 32 [ 163.661354][ T772] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 163.684953][ T772] usb 4-1: config 0 has no interface number 0 [ 163.701251][ T772] usb 4-1: config 0 interface 184 has no altsetting 0 [ 163.741935][ T772] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 163.769667][ T772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.799737][ T772] usb 4-1: Product: syz [ 163.803982][ T772] usb 4-1: Manufacturer: syz [ 163.855016][ T772] usb 4-1: SerialNumber: syz [ 163.927810][ T772] usb 4-1: config 0 descriptor?? [ 164.022830][ T772] smsc75xx v1.0.0 [ 164.633386][ T772] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 164.696607][ T772] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 164.985369][ T772] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 165.099696][ T772] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 165.167599][ T6595] loop0: detected capacity change from 0 to 1024 [ 165.209763][ T772] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 165.272674][ T772] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 165.680583][ T6230] hfsplus: b-tree write err: -5, ino 4 [ 166.639782][ T6072] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 166.824302][ T6073] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 166.872748][ T6072] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.887757][ T6072] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 166.898067][ T6072] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 166.906373][ T6072] usb 5-1: Product: syz [ 166.919000][ T6072] usb 5-1: Manufacturer: syz [ 166.926653][ T6072] usb 5-1: SerialNumber: syz [ 166.965783][ T772] usb 4-1: USB disconnect, device number 3 [ 166.999704][ T6073] usb 3-1: Using ep0 maxpacket: 32 [ 167.006904][ T6073] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 167.031607][ T6073] usb 3-1: config 0 has no interface number 0 [ 167.063062][ T6073] usb 3-1: config 0 interface 184 has no altsetting 0 [ 167.116224][ T6073] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 167.145124][ T6073] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.175559][ T6073] usb 3-1: Product: syz [ 167.194583][ T6073] usb 3-1: Manufacturer: syz [ 167.209587][ T6073] usb 3-1: SerialNumber: syz [ 167.240347][ T6073] usb 3-1: config 0 descriptor?? [ 167.273747][ T6072] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 167.288248][ T6073] smsc75xx v1.0.0 [ 167.926643][ T6073] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 167.966932][ T6073] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 168.672262][ T6073] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 168.708503][ T6073] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 168.759723][ T6073] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 168.803399][ T6073] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 169.607409][ T6639] can0: slcan on ttyS3. [ 170.423194][ T6634] can0 (unregistered): slcan off ttyS3. [ 170.551157][ T6073] usb 3-1: USB disconnect, device number 3 [ 174.203449][ T6675] random: crng reseeded on system resumption [ 174.261276][ T5834] usb 5-1: USB disconnect, device number 5 [ 174.366465][ T5834] usblp0: removed [ 174.477565][ T6681] netlink: 2188 bytes leftover after parsing attributes in process `syz.4.133'. [ 175.726399][ T6681] team0 (unregistering): Port device team_slave_0 removed [ 175.756779][ T6681] team0 (unregistering): Port device team_slave_1 removed [ 176.601300][ T6003] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 176.759695][ T6003] usb 3-1: Using ep0 maxpacket: 32 [ 177.031201][ T6003] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 177.039431][ T6003] usb 3-1: config 0 has no interface number 0 [ 177.049741][ T6003] usb 3-1: config 0 interface 184 has no altsetting 0 [ 177.071351][ T6003] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 177.758930][ T6003] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.768884][ T6003] usb 3-1: Product: syz [ 177.773338][ T6003] usb 3-1: Manufacturer: syz [ 177.777924][ T6003] usb 3-1: SerialNumber: syz [ 177.793983][ T6003] usb 3-1: config 0 descriptor?? [ 177.863876][ T6003] smsc75xx v1.0.0 [ 179.116767][ T6003] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 179.151532][ T6003] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 179.782570][ T6003] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 179.813694][ T6003] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 179.859871][ T6003] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 179.932731][ T6003] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 180.573305][ T6744] can0: slcan on ttyS3. [ 181.211811][ T5926] usb 3-1: USB disconnect, device number 4 [ 181.270558][ T6751] random: crng reseeded on system resumption [ 181.433715][ T6740] can0 (unregistered): slcan off ttyS3. [ 182.152945][ T6778] netlink: 2188 bytes leftover after parsing attributes in process `syz.6.147'. [ 182.163994][ T6763] bridge_slave_0: left allmulticast mode [ 182.171054][ T6763] bridge_slave_0: left promiscuous mode [ 182.177481][ T6763] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.482639][ T6763] bridge_slave_1: left allmulticast mode [ 182.488855][ T6763] bridge_slave_1: left promiscuous mode [ 182.536644][ T6763] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.690103][ T6763] bond0: (slave bond_slave_0): Releasing backup interface [ 182.935752][ T6763] bond0: (slave bond_slave_1): Releasing backup interface [ 183.183373][ T6763] team0: Port device team_slave_0 removed [ 183.462511][ T6763] team0: Port device team_slave_1 removed [ 183.469306][ T6763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.604780][ T6763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.816609][ T6797] netlink: 64 bytes leftover after parsing attributes in process `syz.4.152'. [ 186.092410][ T6806] slcan: can't register candev [ 186.272734][ T6763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.849694][ T6763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.921618][ T6763] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 187.077500][ T6818] syz.1.156 uses obsolete (PF_INET,SOCK_PACKET) [ 188.445953][ T6839] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 189.010886][ T5834] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 189.165603][ T6854] bridge_slave_0: left allmulticast mode [ 189.171384][ T6854] bridge_slave_0: left promiscuous mode [ 189.177242][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.199763][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 189.209432][ T5834] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 189.272488][ T6854] bridge_slave_1: left allmulticast mode [ 189.279422][ T6854] bridge_slave_1: left promiscuous mode [ 189.287204][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.303880][ T5834] usb 2-1: config 0 has no interface number 0 [ 189.327524][ T5834] usb 2-1: config 0 interface 184 has no altsetting 0 [ 189.343982][ T6858] netlink: 2188 bytes leftover after parsing attributes in process `syz.4.161'. [ 189.379483][ T5834] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 189.471817][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.482142][ T6854] bond0: (slave bond_slave_0): Releasing backup interface [ 189.505537][ T5834] usb 2-1: Product: syz [ 189.517065][ T6854] bond0: (slave bond_slave_1): Releasing backup interface [ 189.534035][ T5834] usb 2-1: Manufacturer: syz [ 189.551100][ T6854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.560042][ T6854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.579758][ T5834] usb 2-1: SerialNumber: syz [ 189.594795][ T6854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.605000][ T6854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.626944][ T6854] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 189.758141][ T5834] usb 2-1: config 0 descriptor?? [ 189.902552][ T5834] smsc75xx v1.0.0 [ 190.519847][ T5834] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 190.542898][ T5834] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 191.202266][ T5834] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 191.240014][ T5834] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 191.291367][ T5834] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 191.345827][ T5834] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 191.497315][ T6870] random: crng reseeded on system resumption [ 192.482754][ T6890] loop0: detected capacity change from 0 to 1024 [ 192.889681][ T972] usb 2-1: USB disconnect, device number 2 [ 193.007467][ T6899] netlink: 64 bytes leftover after parsing attributes in process `syz.6.168'. [ 194.073144][ T3506] hfsplus: b-tree write err: -5, ino 4 [ 194.259874][ T6916] can0: slcan on ttyS3. [ 195.012063][ T6904] can0 (unregistered): slcan off ttyS3. [ 196.742661][ T6930] syzkaller0: entered promiscuous mode [ 196.979809][ T6930] syzkaller0: entered allmulticast mode [ 197.689171][ T6935] slcan: can't register candev [ 198.259765][ T5926] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 198.459729][ T5926] usb 7-1: Using ep0 maxpacket: 32 [ 198.541063][ T5926] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 198.587304][ T5926] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 198.617118][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.623885][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.649674][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 198.657942][ T5926] usb 7-1: Product: syz [ 198.693922][ T5926] usb 7-1: Manufacturer: syz [ 198.698532][ T5926] usb 7-1: SerialNumber: syz [ 198.781484][ T5926] usb 7-1: config 0 descriptor?? [ 198.797337][ T6941] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 199.278068][ T5968] usb 7-1: USB disconnect, device number 2 [ 199.849728][ T5926] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 199.970031][ T5968] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 200.052378][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.111567][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.126849][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.146511][ T5926] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.169436][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.183943][ T5968] usb 4-1: Using ep0 maxpacket: 32 [ 200.198033][ T5926] usb 3-1: config 0 descriptor?? [ 200.236090][ T5968] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 200.284833][ T5968] usb 4-1: config 0 has no interface number 0 [ 200.335997][ T5968] usb 4-1: config 0 interface 184 has no altsetting 0 [ 200.361185][ T5968] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 200.397508][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.413338][ T6965] loop6: detected capacity change from 0 to 256 [ 200.435321][ T6965] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf5596061, utbl_chksum : 0xe619d30d) [ 200.469200][ T5968] usb 4-1: Product: syz [ 200.499716][ T5968] usb 4-1: Manufacturer: syz [ 200.588621][ T5968] usb 4-1: SerialNumber: syz [ 201.013260][ T5968] usb 4-1: config 0 descriptor?? [ 201.066347][ T5968] smsc75xx v1.0.0 [ 201.157101][ T5926] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 201.370598][ T6957] usb 3-1: string descriptor 0 read error: -71 [ 201.381013][ T5926] usb 3-1: USB disconnect, device number 5 [ 201.566825][ T6967] fido_id[6967]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 201.866157][ T5968] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 201.924119][ T5968] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 202.599407][ T5968] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 202.653228][ T5968] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 202.686941][ T5968] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 202.747476][ T5968] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 203.262941][ T6986] netlink: 16 bytes leftover after parsing attributes in process `syz.4.187'. [ 203.681920][ T6994] syzkaller0: entered promiscuous mode [ 203.707024][ T6994] syzkaller0: entered allmulticast mode [ 204.008918][ T772] usb 4-1: USB disconnect, device number 4 [ 210.539723][ T6073] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 210.699801][ T6072] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 210.710514][ T6073] usb 1-1: Using ep0 maxpacket: 8 [ 210.929918][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 210.929949][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 210.935959][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 210.949951][ T5850] Bluetooth: hci5: command 0x0406 tx timeout [ 210.959330][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 210.970827][ T6073] usb 1-1: unable to get BOS descriptor or descriptor too short [ 211.000156][ T6073] usb 1-1: config 4 has an invalid interface number: 146 but max is 0 [ 211.010122][ T6072] usb 4-1: Using ep0 maxpacket: 32 [ 211.017993][ T6072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.029818][ T6073] usb 1-1: config 4 has no interface number 0 [ 211.035907][ T6073] usb 1-1: config 4 interface 146 has no altsetting 0 [ 211.049731][ T6072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.059479][ T6072] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 211.082246][ T6073] usb 1-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=af.79 [ 211.099663][ T6073] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.296410][ T6072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.328227][ T6073] usb 1-1: Product: syz [ 211.489304][ T7050] can0: slcan on ttyS3. [ 212.046126][ T6073] usb 1-1: Manufacturer: syz [ 212.065644][ T6072] usb 4-1: config 0 descriptor?? [ 212.113640][ T6073] usb 1-1: SerialNumber: syz [ 212.147523][ T6072] hub 4-1:0.0: USB hub found [ 212.220594][ T7047] can0 (unregistered): slcan off ttyS3. [ 212.522134][ T7058] loop4: detected capacity change from 0 to 64 [ 212.654625][ T6072] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 212.679755][ T6073] comedi comedi5: could not set alternate setting 3 in high speed [ 212.710668][ T6072] usbhid 4-1:0.0: can't add hid device: -71 [ 212.736966][ T6073] usbduxsigma 1-1:4.146: driver 'usbduxsigma' failed to auto-configure device. [ 212.758424][ T6072] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 212.861006][ T6073] usbduxsigma 1-1:4.146: probe with driver usbduxsigma failed with error -71 [ 213.029436][ T6072] usb 4-1: USB disconnect, device number 5 [ 213.040421][ T6073] usb 1-1: USB disconnect, device number 4 [ 218.840304][ T7102] can0: slcan on ttyS3. [ 219.669825][ T7099] can0 (unregistered): slcan off ttyS3. [ 220.049260][ T7109] loop2: detected capacity change from 0 to 64 [ 221.081917][ T7127] bridge_slave_0: left allmulticast mode [ 221.087588][ T7127] bridge_slave_0: left promiscuous mode [ 221.116524][ T7127] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.216392][ T7127] bridge_slave_1: left allmulticast mode [ 221.310464][ T7127] bridge_slave_1: left promiscuous mode [ 221.316487][ T7127] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.324985][ T7128] netlink: 2188 bytes leftover after parsing attributes in process `syz.3.221'. [ 221.586956][ T7127] bond0: (slave bond_slave_0): Releasing backup interface [ 221.675970][ T7127] bond0: (slave bond_slave_1): Releasing backup interface [ 221.710638][ T7127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.811034][ T7127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.868023][ T7127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.877040][ T7127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.925828][ T7127] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 224.593409][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.227'. [ 225.533839][ T7156] can0: slcan on ttyS3. [ 226.662847][ T7163] loop1: detected capacity change from 0 to 64 [ 227.617282][ T7123] can0 (unregistered): slcan off ttyS3. [ 228.032838][ T31] audit: type=1326 audit(1767144788.397:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32038f749 code=0x7ffc0000 [ 228.279856][ T31] audit: type=1326 audit(1767144788.427:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32038f749 code=0x7ffc0000 [ 228.422504][ T31] audit: type=1326 audit(1767144788.427:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff32038f749 code=0x7ffc0000 [ 228.552820][ T31] audit: type=1326 audit(1767144788.427:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32038f749 code=0x7ffc0000 [ 228.674312][ T31] audit: type=1326 audit(1767144788.427:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32038f749 code=0x7ffc0000 [ 228.758593][ T31] audit: type=1326 audit(1767144788.427:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff32038df90 code=0x7ffc0000 [ 228.837579][ T31] audit: type=1326 audit(1767144788.437:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32038f749 code=0x7ffc0000 [ 228.949746][ T31] audit: type=1326 audit(1767144788.437:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7ff32038f749 code=0x7ffc0000 [ 229.059593][ T31] audit: type=1326 audit(1767144788.437:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32038f749 code=0x7ffc0000 [ 229.552768][ T7189] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 230.462652][ T31] audit: type=1326 audit(1767144788.437:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff32038f749 code=0x7ffc0000 [ 234.390145][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'. [ 234.531440][ T7230] loop3: detected capacity change from 0 to 64 [ 235.569898][ T7244] program syz.6.243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.182593][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.6.245'. [ 236.332465][ T7248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.527878][ T7250] macvlan2: entered promiscuous mode [ 236.548862][ T7250] macvlan2: entered allmulticast mode [ 236.572905][ T7250] bond1: entered promiscuous mode [ 236.621746][ T7250] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 236.688999][ T7250] bond1: left promiscuous mode [ 237.099596][ T5926] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 237.532054][ T7264] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 238.520034][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 238.565816][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.609697][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.663432][ T5926] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 238.693770][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.731140][ T5926] usb 5-1: config 0 descriptor?? [ 238.755261][ T5926] hub 5-1:0.0: USB hub found [ 238.797234][ T7271] loop2: detected capacity change from 0 to 64 [ 239.172501][ T5926] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 239.406008][ T5926] usbhid 5-1:0.0: can't add hid device: -71 [ 239.414612][ T5926] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 239.474714][ T5926] usb 5-1: USB disconnect, device number 6 [ 243.632698][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 244.119421][ T7314] netlink: 2188 bytes leftover after parsing attributes in process `syz.2.257'. [ 245.052623][ T7314] team0 (unregistering): Port device team_slave_0 removed [ 245.112227][ T7314] team0 (unregistering): Port device team_slave_1 removed [ 245.846545][ T7327] can0: slcan on ttyS3. [ 246.771088][ T5836] Bluetooth: hci6: command 0x0406 tx timeout [ 356.149636][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 356.156911][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7333/1:b..l [ 356.165153][ C1] rcu: (detected by 1, t=10503 jiffies, g=20801, q=1892 ncpus=2) [ 356.172967][ C1] task:syz.0.261 state:R running task stack:25504 pid:7333 tgid:7328 ppid:5828 task_flags:0x40044c flags:0x00080001 [ 356.186905][ C1] Call Trace: [ 356.190181][ C1] [ 356.193110][ C1] __schedule+0x149b/0x4fd0 [ 356.197660][ C1] ? __pfx___schedule+0x10/0x10 [ 356.202545][ C1] preempt_schedule_irq+0x4d/0xa0 [ 356.207573][ C1] irqentry_exit+0x5d8/0x660 [ 356.212166][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.217836][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 356.223819][ C1] RIP: 0010:unwind_next_frame+0x139e/0x23d0 [ 356.229717][ C1] Code: 85 09 0e 00 00 c6 03 00 4c 8b 64 24 48 4c 8b 7c 24 28 48 8b 44 24 40 0f b6 04 28 84 c0 0f 85 73 0b 00 00 41 0f b6 04 2f 84 c0 <0f> 85 8a 0b 00 00 0f b7 32 c1 ee 04 83 e6 0f 83 fe 04 0f 84 b4 04 [ 356.249324][ C1] RSP: 0018:ffffc90002ec6c18 EFLAGS: 00000246 [ 356.255396][ C1] RAX: 0000000000000000 RBX: ffffc90002ec6d20 RCX: 0000000000000000 [ 356.263369][ C1] RDX: ffffffff9016532a RSI: 0000000000000000 RDI: ffffc90002ec6d48 [ 356.271339][ C1] RBP: dffffc0000000000 R08: ffffc90002ec6d47 R09: ffffc90002ec6d38 [ 356.279306][ C1] R10: dffffc0000000000 R11: fffff520005d8da9 R12: ffffc90002ec6d38 [ 356.287272][ C1] R13: 1ffff920005d8d9f R14: ffffc90002ec6ce8 R15: 1ffffffff202ca65 [ 356.295260][ C1] ? unwind_next_frame+0xeae/0x23d0 [ 356.300474][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 356.305677][ C1] ? __mmput+0x118/0x430 [ 356.309923][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 356.316097][ C1] arch_stack_walk+0x11c/0x150 [ 356.320868][ C1] ? exit_mm+0x169/0x230 [ 356.325126][ C1] stack_trace_save+0x9c/0xe0 [ 356.329815][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 356.335201][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.340834][ C1] ? stack_depot_save_flags+0x33/0x810 [ 356.346309][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.351947][ C1] save_stack+0xf5/0x1f0 [ 356.356220][ C1] ? __pfx_save_stack+0x10/0x10 [ 356.361065][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.366700][ C1] ? free_unref_folios+0xdb3/0x14f0 [ 356.371903][ C1] ? folios_put_refs+0x584/0x670 [ 356.376864][ C1] ? free_pages_and_swap_cache+0x277/0x520 [ 356.382677][ C1] ? tlb_flush_mmu+0x3a0/0x680 [ 356.387442][ C1] ? unmap_page_range+0x3962/0x4170 [ 356.392637][ C1] ? unmap_vmas+0x399/0x580 [ 356.397138][ C1] ? exit_mmap+0x239/0xb10 [ 356.401632][ C1] ? __mmput+0x118/0x430 [ 356.405883][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.411519][ C1] ? page_ext_put+0x97/0xc0 [ 356.416025][ C1] __reset_page_owner+0x71/0x1f0 [ 356.420964][ C1] free_unref_folios+0xdb3/0x14f0 [ 356.426002][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.431640][ C1] folios_put_refs+0x584/0x670 [ 356.436420][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 356.441719][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.447352][ C1] ? free_swap_cache+0x109/0x300 [ 356.452297][ C1] free_pages_and_swap_cache+0x277/0x520 [ 356.457943][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 356.464220][ C1] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 356.469597][ C1] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 356.474975][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.480609][ C1] ? lruvec_stat_mod_folio+0x25b/0x2e0 [ 356.486086][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.491729][ C1] tlb_flush_mmu+0x3a0/0x680 [ 356.496319][ C1] ? unmap_page_range+0x393d/0x4170 [ 356.501522][ C1] unmap_page_range+0x3962/0x4170 [ 356.506584][ C1] ? mas_next_slot+0xc20/0xcf0 [ 356.511354][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 356.516734][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.522367][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.528000][ C1] ? unmap_vmas+0x144/0x580 [ 356.532508][ C1] unmap_vmas+0x399/0x580 [ 356.536848][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 356.541809][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.547447][ C1] exit_mmap+0x239/0xb10 [ 356.551685][ C1] ? uprobe_clear_state+0x20f/0x290 [ 356.556903][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 356.561659][ C1] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 356.567309][ C1] ? __pfx_exit_aio+0x10/0x10 [ 356.572005][ C1] ? uprobe_clear_state+0x27c/0x290 [ 356.577200][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.582838][ C1] __mmput+0x118/0x430 [ 356.586910][ C1] exit_mm+0x169/0x230 [ 356.590989][ C1] do_exit+0x627/0x22f0 [ 356.595157][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.600806][ C1] ? __pfx_do_exit+0x10/0x10 [ 356.605410][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.611050][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.616699][ C1] do_group_exit+0x21c/0x2d0 [ 356.621299][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 356.626511][ C1] get_signal+0x1285/0x1340 [ 356.631033][ C1] arch_do_signal_or_restart+0x9a/0x7a0 [ 356.636589][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 356.642757][ C1] ? __x64_sys_recvmmsg+0x190/0x240 [ 356.647970][ C1] exit_to_user_mode_loop+0x87/0x4e0 [ 356.653255][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.658887][ C1] ? rcu_is_watching+0x15/0xb0 [ 356.663656][ C1] do_syscall_64+0x2b7/0xf80 [ 356.668261][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.674322][ C1] ? trace_irq_disable+0x37/0x100 [ 356.679358][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.685246][ C1] RIP: 0033:0x7f1a63b8f749 [ 356.689655][ C1] RSP: 002b:00007f1a64abe038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 356.698072][ C1] RAX: 0000000000010106 RBX: 00007f1a63de6090 RCX: 00007f1a63b8f749 [ 356.706038][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 356.714016][ C1] RBP: 00007f1a63c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 356.721984][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 356.729959][ C1] R13: 00007f1a63de6128 R14: 00007f1a63de6090 R15: 00007ffe1311bcb8 [ 356.737956][ C1] [ 356.740970][ C1] rcu: rcu_preempt kthread starved for 10561 jiffies! g20801 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 356.752157][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 356.762201][ C1] rcu: RCU grace-period kthread stack dump: [ 356.768076][ C1] task:rcu_preempt state:R running task stack:27480 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 356.781583][ C1] Call Trace: [ 356.784850][ C1] [ 356.787775][ C1] __schedule+0x149b/0x4fd0 [ 356.792320][ C1] ? __pfx___schedule+0x10/0x10 [ 356.797186][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.802823][ C1] ? schedule+0x91/0x360 [ 356.807066][ C1] schedule+0x165/0x360 [ 356.811224][ C1] schedule_timeout+0x12b/0x270 [ 356.816080][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 356.821460][ C1] ? __pfx_process_timeout+0x10/0x10 [ 356.826795][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.832427][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 356.838241][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.843872][ C1] ? prepare_to_swait_event+0x341/0x380 [ 356.849428][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 356.854286][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.859917][ C1] ? rcu_gp_init+0x11dc/0x1650 [ 356.864716][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 356.869999][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 356.875212][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 356.881031][ C1] rcu_gp_kthread+0x99/0x390 [ 356.885623][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 356.890823][ C1] ? __kthread_parkme+0x7b/0x200 [ 356.895762][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.901393][ C1] ? __kthread_parkme+0x1a1/0x200 [ 356.906424][ C1] kthread+0x711/0x8a0 [ 356.910503][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 356.915705][ C1] ? __pfx_kthread+0x10/0x10 [ 356.920383][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.926020][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 356.931227][ C1] ? __pfx_kthread+0x10/0x10 [ 356.935824][ C1] ret_from_fork+0x510/0xa50 [ 356.940413][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 356.945776][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.951406][ C1] ? __switch_to+0xc9e/0x1480 [ 356.956097][ C1] ? __pfx_kthread+0x10/0x10 [ 356.960701][ C1] ret_from_fork_asm+0x1a/0x30 [ 356.965497][ C1] [ 356.968504][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 356.974985][ C1] Sending NMI from CPU 1 to CPUs 0: [ 356.980180][ C0] NMI backtrace for cpu 0 [ 356.980195][ C0] CPU: 0 UID: 0 PID: 7362 Comm: syz.4.265 Not tainted syzkaller #0 PREEMPT(full) [ 356.980219][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 356.980231][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 356.980262][ C0] Code: 8b 3d 54 fe d9 0b 48 89 de 5b e9 b3 fb 5a 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 10 80 92 65 8b 15 58 18 bf 10 81 e2 00 01 ff 00 [ 356.980279][ C0] RSP: 0018:ffffc9000c9776a0 EFLAGS: 00000246 [ 356.980298][ C0] RAX: ffffffff850fb747 RBX: ffff888079ef9000 RCX: 0000000000000002 [ 356.980314][ C0] RDX: ffff88802b5f0000 RSI: 0000000000000000 RDI: 0000000000000000 [ 356.980328][ C0] RBP: 0000000000000000 R08: ffffffff8f822277 R09: 1ffffffff1f0444e [ 356.980343][ C0] R10: dffffc0000000000 R11: fffffbfff1f0444f R12: ffff888079ef9000 [ 356.980359][ C0] R13: dffffc0000000000 R14: ffff88807f4d6fc0 R15: ffff88807f4d7018 [ 356.980378][ C0] FS: 00007f233aab86c0(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 356.980396][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.980411][ C0] CR2: 0000001b31019ff8 CR3: 0000000050626000 CR4: 0000000000350ef0 [ 356.980427][ C0] Call Trace: [ 356.980435][ C0] [ 356.980442][ C0] tty_lock_interruptible+0x87/0xc0 [ 356.980470][ C0] tty_open+0x526/0xd10 [ 356.980499][ C0] ? kobject_get_unless_zero+0x161/0x1f0 [ 356.980528][ C0] ? __pfx_tty_open+0x10/0x10 [ 356.980550][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.980577][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.980601][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 356.980635][ C0] chrdev_open+0x4cc/0x5e0 [ 356.980661][ C0] ? __pfx_chrdev_open+0x10/0x10 [ 356.980686][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.980711][ C0] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 356.980746][ C0] ? __pfx_chrdev_open+0x10/0x10 [ 356.980770][ C0] do_dentry_open+0x7ce/0x1420 [ 356.980807][ C0] vfs_open+0x3b/0x340 [ 356.980832][ C0] ? path_openat+0x33f3/0x3dd0 [ 356.980854][ C0] path_openat+0x340e/0x3dd0 [ 356.980882][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 356.980925][ C0] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 356.980963][ C0] ? getname_flags+0xb8/0x540 [ 356.980990][ C0] ? __pfx_path_openat+0x10/0x10 [ 356.981011][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.981035][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 356.981066][ C0] do_filp_open+0x1fa/0x410 [ 356.981087][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 356.981122][ C0] ? _raw_spin_unlock+0x28/0x50 [ 356.981152][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.981177][ C0] ? alloc_fd+0x64c/0x6c0 [ 356.981210][ C0] do_sys_openat2+0x121/0x200 [ 356.981238][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.981263][ C0] ? __se_sys_futex+0x36f/0x400 [ 356.981287][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 356.981317][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.981343][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.981368][ C0] ? rcu_is_watching+0x15/0xb0 [ 356.981397][ C0] __x64_sys_openat+0x138/0x170 [ 356.981430][ C0] do_syscall_64+0xec/0xf80 [ 356.981452][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.981472][ C0] ? trace_irq_disable+0x37/0x100 [ 356.981505][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.981526][ C0] RIP: 0033:0x7f2339b8f749 [ 356.981544][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.981561][ C0] RSP: 002b:00007f233aab8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 356.981581][ C0] RAX: ffffffffffffffda RBX: 00007f2339de6090 RCX: 00007f2339b8f749 [ 356.981597][ C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 356.981612][ C0] RBP: 00007f2339c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 356.981625][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.981637][ C0] R13: 00007f2339de6128 R14: 00007f2339de6090 R15: 00007ffd167d25a8 [ 356.981665][ C0]